last executing test programs: 36m47.754588068s ago: executing program 2 (id=39): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0x10, 0x2, 0x4) r7 = dup(r2) write$UHID_INPUT(r7, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) name_to_handle_at(r7, &(0x7f0000002140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x600) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000078870470b900000100000000004ff5ca9063b74387d477a09023487413703326f48b84455172b07171f673"], 0x24, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000011, 0x10010, r0, 0x203c0000) syz_open_dev$ttys(0xc, 0x2, 0x1) 36m46.790608541s ago: executing program 2 (id=41): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b52, &(0x7f0000000000)={0x0, 0x3524, 0x20, 0x3, 0x201}, &(0x7f0000000080), &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x2218080, 0x0) 36m44.06396449s ago: executing program 2 (id=47): mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000340)=0xf4240) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="214d96df0429cbb103000000f7a59e97f9d3f072936d05a3c0ccfe00000c38230000c9569e2f87879a163ba27d141c7c66a88a25b982294737bb6160103a70b54be061f9cbe6fb75d958e9af0dc6f9969cd2ed537b8d44276ca91d7dde", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000406010800000000000000000200000ab13461273ff93f17600166cd72d0f068c36166fbd2ac75af31f96bf46b5bf739788aef661e91218a98328d2b771824f879604b00fc9ea9cf4232c93000c0b968a9fc39e867d6bb91"], 0x14}, 0x1, 0x0, 0x0, 0xc011}, 0x800) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r4 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xa8bf, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523, 0x6}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 36m43.635303332s ago: executing program 2 (id=49): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1}, &(0x7f0000000000)=0x40) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @empty, 'pimreg0\x00'}}, 0x1e) ftruncate(r6, 0x2007ffa) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r8) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 36m41.752708515s ago: executing program 2 (id=53): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1}, &(0x7f0000000000)=0x40) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @empty, 'pimreg0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000001f00)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 36m39.475879975s ago: executing program 2 (id=57): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x0, 0x31, 0x3, "facfa0"}, 0x0, 0x0, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0xa}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x4}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "b9d20d42e351fda0a1564e794443df9464c7085543339b4f4a33ef8052c5a84a6c483fbf7238e87d19d438d5abbc19"}}) 36m23.822345797s ago: executing program 32 (id=57): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x0, 0x31, 0x3, "facfa0"}, 0x0, 0x0, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0xa}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x4}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "b9d20d42e351fda0a1564e794443df9464c7085543339b4f4a33ef8052c5a84a6c483fbf7238e87d19d438d5abbc19"}}) 34m41.47606452s ago: executing program 5 (id=320): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1}, &(0x7f0000000000)=0x40) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @empty, 'pimreg0\x00'}}, 0x1e) ftruncate(0xffffffffffffffff, 0x2007ffa) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 34m40.227104499s ago: executing program 5 (id=324): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20881) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x700, 0x700, 0x4, 0x4, {{0x7, 0x4, 0x1, 0x2, 0x1c, 0x65, 0x0, 0x9, 0x2f, 0x0, @remote, @multicast2, {[@generic={0x94, 0x8, "e060c5a40161"}]}}}}}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000000000)={0x4, 0x2, 0x7}) 34m39.307044601s ago: executing program 5 (id=327): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs_stats\x00') preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000880)=""/209, 0xd1}], 0x1, 0xa3, 0xd) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x1000, 0xfffffffffffffffc, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000140)='./bus\x00', 0x280240, 0x0) mknodat$loop(r5, &(0x7f0000000600)='./file1\x00', 0x20, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x25, 0x301, 0x70bd25, 0x25dfdbfd, {0x1}}, 0x14}}, 0x400c000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32, @ANYBLOB="d506330080"], 0x6f4}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 34m38.725132436s ago: executing program 5 (id=329): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x87) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x18, r7}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000300)={@local, 0x18, r7}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000)) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x16f9, @local, 0x5}, @in6={0xa, 0x4e24, 0x9, @remote, 0x7ff}, @in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7a}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x5, @empty, 0x40}], 0xbc) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}}) 34m37.624485961s ago: executing program 5 (id=332): socketpair(0x26, 0x3, 0x4, &(0x7f0000001180)) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) pwritev(r0, &(0x7f0000001280)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f0000000000)="0af90e2292fd5b66debf5c", 0xb}, {&(0x7f00000011c0)="4d75223e997e7b59b05843b92476b09241b78290ec3d16313df93a6c8eba7ed168b77b95b05e6ca61535e6486d338f74278a3e0a9081e610a955e14a6ea62d43e42ea958eb38aa31ba8993595c2e690df8b0502aabbc380bbb06ee891e0c958a3fe3c8dd69377dc3daab37aa17173a45d51c3b70ba3ab9a97a15c7914fa8ab222c0777972e72ae4bb967ad921c341ec1539b1994a76cc83d01a699d7aa5019bb5973c30134bd0da0b4b3fc6dadc3d65607b3322a", 0xb4}], 0x3, 0x1, 0x6) ioctl$KVM_CHECK_EXTENSION(r0, 0x4018aee3, 0x110c2afffa) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001100)={&(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000001140)={"9bb1fcee214de28cbe80698af054950e2fa8ccf297813217ae6dcf06233304b2", r1}) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000012c0)=0x9) 34m37.052853442s ago: executing program 5 (id=333): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x3}, {0xbbf3}, 0x140, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="252bec088df325a22718334010a06586e2c924366fd70fe9e6a093ff92cd5dedb7647bb5f9e45676c42802a3e7b18eefeab1567284f81b1cb946dba7bb8b0ccd138e75b8c22fa710ea0bbed31eeb4e70f3bc17324d0f9671b8384a526fab15344c", 0x61, 0x0, &(0x7f0000000140)={0x2, 0xd4, {0x1, 0xc, 0x39, "2d1f5947139d6e910aa03c9387d490b57a6cb476717a3c9877a3db1d3369bcd5d3d3dd1eb780ea50e5fa083c6e48f20b22dd6651bb05219d06", 0x8e, "04751cb1684ddcd567b042d6386b584a019d968611c3354c13265e21797a2b6872ab28b8a45ff29000912f204bd40e91f4290c8165facab7c2048da6841e76dc702c4d46cbf8ede302933225a89a94e83ba4a0a15410e1331a4f5fb179d1914f112164feeb3da027864397437327cfded2230873dd1f749f58bdab22b16c1c18a934ac4aed0af82ee5b34b70cfe5"}, 0xea, "76a2cbd7aa64cc4630d854a2457475c8fa0182e4d4dbb06c89ed6227953bce926c772e9999fdda004f00e68269802b713ed8cd1d94413e4bd34b1f6b72401230c12edee1c93d1fb39178a4b7dc9964a93a63f3e809aa5a28dcfd2e05f805c63caef39eeffea1fdcf33cfcacf7db2da73ea7c6a79ac9f374f88f42ec15f0945b5a2ec15ad21e9e268d4286b56f391ca3d3d22421076b55056c34ee2feb2e8c716966aa76812d84a85ff8ad7e1182e645dd7aa4711a702ab989ceec223d43e2026737a6899f5bfe73711206c1885b18ba5e0649e3d625fba888f043936083de3e6057d96f99d306e4822a1"}, 0x1ca}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 34m21.926683433s ago: executing program 33 (id=333): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x3}, {0xbbf3}, 0x140, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="252bec088df325a22718334010a06586e2c924366fd70fe9e6a093ff92cd5dedb7647bb5f9e45676c42802a3e7b18eefeab1567284f81b1cb946dba7bb8b0ccd138e75b8c22fa710ea0bbed31eeb4e70f3bc17324d0f9671b8384a526fab15344c", 0x61, 0x0, &(0x7f0000000140)={0x2, 0xd4, {0x1, 0xc, 0x39, "2d1f5947139d6e910aa03c9387d490b57a6cb476717a3c9877a3db1d3369bcd5d3d3dd1eb780ea50e5fa083c6e48f20b22dd6651bb05219d06", 0x8e, "04751cb1684ddcd567b042d6386b584a019d968611c3354c13265e21797a2b6872ab28b8a45ff29000912f204bd40e91f4290c8165facab7c2048da6841e76dc702c4d46cbf8ede302933225a89a94e83ba4a0a15410e1331a4f5fb179d1914f112164feeb3da027864397437327cfded2230873dd1f749f58bdab22b16c1c18a934ac4aed0af82ee5b34b70cfe5"}, 0xea, "76a2cbd7aa64cc4630d854a2457475c8fa0182e4d4dbb06c89ed6227953bce926c772e9999fdda004f00e68269802b713ed8cd1d94413e4bd34b1f6b72401230c12edee1c93d1fb39178a4b7dc9964a93a63f3e809aa5a28dcfd2e05f805c63caef39eeffea1fdcf33cfcacf7db2da73ea7c6a79ac9f374f88f42ec15f0945b5a2ec15ad21e9e268d4286b56f391ca3d3d22421076b55056c34ee2feb2e8c716966aa76812d84a85ff8ad7e1182e645dd7aa4711a702ab989ceec223d43e2026737a6899f5bfe73711206c1885b18ba5e0649e3d625fba888f043936083de3e6057d96f99d306e4822a1"}, 0x1ca}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 1m53.307285654s ago: executing program 1 (id=6472): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) 1m53.078344037s ago: executing program 1 (id=6473): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1m53.012280979s ago: executing program 1 (id=6474): bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1m52.928445526s ago: executing program 1 (id=6475): unshare(0x20060400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000040000"], 0x48) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x40000080) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000180)=""/135) 1m47.659604238s ago: executing program 1 (id=6487): socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x18f500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)}, 0x94) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1m45.580053076s ago: executing program 1 (id=6490): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b00)=ANY=[@ANYBLOB="20100000180001000000000000000000020000000800000004000000040012"], 0x1020}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='veth0_vlan\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='veth0_vlan\x00', 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x65d8, 0xc000, 0x0, 0x20002f9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000240)=""/130, 0x82}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$inet(0x2, 0x80001, 0x84) (async) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x2c}, 0x4000845) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [], {0x14, 0x14}}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [], {0x14, 0x14}}, 0x28}}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m30.392856996s ago: executing program 34 (id=6490): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b00)=ANY=[@ANYBLOB="20100000180001000000000000000000020000000800000004000000040012"], 0x1020}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='veth0_vlan\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='veth0_vlan\x00', 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x65d8, 0xc000, 0x0, 0x20002f9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000240)=""/130, 0x82}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$inet(0x2, 0x80001, 0x84) (async) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x2c}, 0x4000845) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [], {0x14, 0x14}}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [], {0x14, 0x14}}, 0x28}}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.595820735s ago: executing program 6 (id=6778): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0xc081) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x8) recvmmsg(r1, 0x0, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 13.513107255s ago: executing program 6 (id=6779): r0 = timerfd_create(0x0, 0x80000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_settime(r0, 0x3, &(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xfffffff3, '\x00', r3, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYRES8=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f00000001c0)="61df712bc884fe68a02780b605a7", 0x0, 0x77ff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r6) r8 = dup(r7) close_range(r8, r7, 0x0) 13.074646204s ago: executing program 3 (id=6781): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x40000080) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) 11.264134524s ago: executing program 3 (id=6786): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x10000) syz_open_dev$usbfs(0x0, 0x77, 0x103341) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x26, 0x0, @thr={0x0, 0x0}}) 11.010927424s ago: executing program 4 (id=6787): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000060000000000000000001800000001000000000000000700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.825932608s ago: executing program 6 (id=6788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}]}, 0x38}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.452127244s ago: executing program 4 (id=6790): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0xc081) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x8) recvmmsg(r1, 0x0, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 10.327495415s ago: executing program 6 (id=6791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0x9, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.319118651s ago: executing program 4 (id=6792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)}, 0x4) 10.22794443s ago: executing program 3 (id=6794): socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0xaa142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x40086602, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000186a00000000000000000000030000009dfcb8097b24008becaff14940675532c548cc8c6ae5c2aa6110301b29f04a8b754a5c3b77436880f5d7dee4011b72dd24bdae2e890d1c98fa422c9b7889d27257b623b04028d9b154f0446c65a610ad9ed0e2c260"], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2a9bf, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000480)=0x9) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x11) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x0) 9.842657394s ago: executing program 3 (id=6795): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0xb30cd3a6838594b8, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, 0x1000, 0x621, 0x3fff}) r7 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r7, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee100", 0x1b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f0000006780)=[{{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f00000005c0)=""/216, 0xd8}, {&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f00000006c0)=""/190, 0xbe}], 0x5, &(0x7f0000000a40)=""/251, 0xfb}, 0xf46d}, {{&(0x7f0000000900)=@nl=@unspec, 0x80, &(0x7f0000003040)=[{&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/124, 0x7c}, {&(0x7f0000000800)=""/56, 0x38}, {&(0x7f0000000c40)=""/31, 0x1f}, {&(0x7f0000000c80)=""/54, 0x36}, {&(0x7f0000000cc0)=""/78, 0x4e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/159, 0x9f}, {&(0x7f0000002f40)=""/225, 0xe1}], 0xa, &(0x7f0000003100)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000004100)=@l2tp, 0x80, &(0x7f0000005340)=[{&(0x7f0000004180)=""/74, 0x4a}, {&(0x7f0000004200)=""/144, 0x90}, {&(0x7f0000000d40)=""/19, 0x13}, {&(0x7f00000042c0)=""/118, 0x76}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x5, &(0x7f00000053c0)=""/186, 0xba}, 0x7e28}, {{&(0x7f0000005480)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000005500)=""/242, 0xf2}, {&(0x7f0000005600)=""/66, 0x42}, {&(0x7f0000005680)=""/159, 0x9f}], 0x3, &(0x7f0000005780)=""/143, 0x8f}, 0x8}, {{&(0x7f0000005840)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000005a40)=[{&(0x7f00000058c0)=""/114, 0x72}, {&(0x7f0000005940)=""/241, 0xf1}], 0x2}, 0xffffa176}, {{&(0x7f0000005a80)=@x25, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005b00)=""/180, 0xb4}, {&(0x7f0000005bc0)=""/87, 0x57}], 0x2, &(0x7f0000005c80)=""/253, 0xfd}, 0x4}, {{&(0x7f0000005d80)=@pppoe, 0x80, &(0x7f0000006200)=[{&(0x7f0000005e00)=""/254, 0xfe}, {&(0x7f0000005f00)=""/110, 0x6e}, {&(0x7f0000005f80)=""/129, 0x81}, {&(0x7f0000006040)=""/167, 0xa7}, {&(0x7f0000006100)=""/224, 0xe0}], 0x5}, 0xd88b}, {{&(0x7f0000006280)=@nl=@proc, 0x80, &(0x7f0000006540)=[{&(0x7f0000006300)=""/25, 0x19}, {&(0x7f0000006340)=""/156, 0x9c}, {&(0x7f0000006400)=""/140, 0x8c}, {&(0x7f00000064c0)=""/102, 0x66}], 0x4}, 0x8}, {{0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006580)=""/36, 0x24}, {&(0x7f00000065c0)=""/222, 0xde}, {&(0x7f00000066c0)=""/67, 0x43}], 0x3}, 0x6}], 0x9, 0x2, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r10 = getpid() syz_pidfd_open(r10, 0x0) 9.829733692s ago: executing program 0 (id=6796): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@dev, @rand_addr, 0x0}, &(0x7f0000000780)=0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020207025"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r3}, 0x18) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 7.645582738s ago: executing program 3 (id=6798): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) syz_open_procfs(0xffffffffffffffff, 0x0) 7.638303445s ago: executing program 6 (id=6799): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x22, 0x6, 0x3) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0xa7b}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000800)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) r7 = fsopen(&(0x7f0000000000)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r5, 0xffffffffffffffff}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) close_range(r3, r8, 0x0) 7.584775181s ago: executing program 4 (id=6800): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000060000000000000000001800000001000000000000000700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.393040423s ago: executing program 7 (id=6801): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08009f0005000000080026006c090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000400000004000000"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000007c0)={0x90000001}) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x6a98047402e98331, 0x70bd2a, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4886) close(0x3) 6.329134648s ago: executing program 7 (id=6802): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08009f0005000000080026006c090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000400000004000000"], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000007c0)={0x90000001}) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r10, 0x6a98047402e98331, 0x70bd2a, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 6.295623159s ago: executing program 0 (id=6803): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0xc081) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x8) recvmmsg(r1, 0x0, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 6.102976674s ago: executing program 4 (id=6804): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000080000000109022400"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x4000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r4 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, 0x0) 4.936874895s ago: executing program 7 (id=6805): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.859648206s ago: executing program 0 (id=6806): socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0xaa142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x40086602, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000186a00000000000000000000030000009dfcb8097b24008becaff14940675532c548cc8c6ae5c2aa6110301b29f04a8b754a5c3b77436880f5d7dee4011b72dd24bdae2e890d1c98fa422c9b7889d27257b623b04028d9b154f0446c65a610ad9ed0e2c260"], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2a9bf, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000480)=0x9) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x11) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x0) 4.102577001s ago: executing program 0 (id=6807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000380)="c1858aec1d0a0675", 0x8, 0x24080000, &(0x7f0000000240)={0x11, 0x19, r6, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 4.046270482s ago: executing program 7 (id=6808): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @default]}, 0x40) 3.743806187s ago: executing program 6 (id=6809): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="065ed53de5000000a53c6f691f00ffffffecffff", @ANYRES32, @ANYRES16], 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='selinux_audited\x00', 0xffffffffffffffff, 0x0, 0x10000000006}, 0xfffffdf0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000f30b", @ANYRES16=r4, @ANYBLOB="010000000000000000001c0000001800018014000200626f6e645f736c6176655f3100000000"], 0x2c}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r6, 0x40045201, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.194183115s ago: executing program 7 (id=6810): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) stat(&(0x7f0000001740)='./file1/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000080), 0x10) listen(r4, 0x0) accept4$llc(r4, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000002340)=ANY=[@ANYBLOB="00000009000000000000aaaaaaaaaaaa81001000080049b7215300670000062f"], 0x2169) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00', @ANYBLOB="010029bd7000fcdbdf2512000000", @ANYRES32=r8, @ANYBLOB="0a00060028021100000100000800118004000600"], 0x30}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) 3.172699352s ago: executing program 3 (id=6811): unshare(0x20060400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000040000"], 0x48) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af0117030109021200"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x40000080) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000180)=""/135) 2.987946252s ago: executing program 0 (id=6812): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x3) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x4, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(r2, 0x5452, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair(0xb, 0xa, 0x4d, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) connect$can_j1939(r4, &(0x7f00000004c0)={0x1d, r5, 0x0, {0x2}}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000a80)="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", 0xfa}, {&(0x7f0000000080)="81395a71ac7d7ade41ff88854b9dfc9caff2e0fdff43970c8084c7d48aabb757f92d529505bc4dcee1f7", 0x2a}, {&(0x7f0000000bc0)="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", 0xfc0}, {&(0x7f0000000700)="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", 0xfa}, {&(0x7f0000000800)="68478a24b511243fe4d472f07294751f6f4edba1ef7d0231a2c820542a09e0ca9dbed5f70fce3831a963f3d5edc0643cfaf72a3e", 0x34}, {&(0x7f0000001bc0)="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", 0xfc0}, {&(0x7f0000000840)="213f3bddced785c46796925ac1f958db747e6f0be2545dcab459ad633326177861c8f52139e141add113f68b193710162a699b488f546fc10b88b5d009c6ee90bf022967143e5c3b767a56fdbeb7bdda8cc785d929ab7f6d8e3cf9", 0x5b}, {&(0x7f00000008c0)="e98d8502e13fd471f57b7039e7f82fa3b063c03372c82e0ee6d189de57c5c3e6b464ffb450f83d571d38205ef02b1bb81dfd7e07344dfbb04b037fd992bcc3ffbf976d7f3115b25741feeccbdb4c0625636c8f666db6532d79c121d99be320ed304dc61677ebca9138f7c27dbd15afd2e8845f50fbc32c9bf2ad997624c7c95255459e18a522ee338e5cf4734024c327ec67f8ab02e4590b5bc9a86da1a2ff", 0x9f}], 0x8) close(r0) 1.24235084s ago: executing program 4 (id=6813): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 722.486465ms ago: executing program 0 (id=6814): syz_usb_connect$cdc_ncm(0x2, 0xfe, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003020000202505a1a44000010203010902ec000201ee60060904000001020d00000624060001e1052400ff030d240f010500000001000b000206241a0000051a2413006a66d00e4be80f56d6a5247d8dba5ad886819a2c152e10240727ed00826a0100ffff0200060008241c0900020d005d2413003e5694c07dbab635cfff2e649bbcb8c645492ef9c56be5114cbc28180ab6192038c40987d8933e4c6fa38e3b7e98b6b4cf1f796f8c0f885b8d4ce20ca943325ae89bf596237c99056103cf82912de3eb3b85ee01deb7a97669090581034000050c040904010000020d00000904010102020d00000905820200002908020905"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x3278, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=6815): r0 = gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x8, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@gettfilter={0x4c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x6, 0x5}, {0xfff3, 0xa}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8e6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5000000010f000040400e5ad600079", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e", @ANYRESOCT, @ANYRESHEX, @ANYRES32=r0, @ANYBLOB="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"], 0x50}}, 0x20008844) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000050a01080000000000000000000000020900020073797a3200000000"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES8=0x0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x47) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x404080, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x6, 0x9, 0x202, 0x87, 0xfffffffe, 0x1}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBTYPE(r8, 0x4b33, &(0x7f0000002980)) kernel console output (not intermixed with test programs): mily 0 port 6081 - 0 [ 2052.109934][ T6166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.186742][T29151] syzkaller0: entered promiscuous mode [ 2052.192877][T29151] syzkaller0: entered allmulticast mode [ 2052.207376][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2052.224018][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2052.325978][ T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2052.339239][ T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2052.515089][T29157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5979'. [ 2052.735388][ T5987] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2052.859990][T28726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2052.895718][ T5987] usb 2-1: device descriptor read/64, error -71 [ 2052.905358][T28726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2052.943481][T28726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2052.952592][T28726] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2052.960294][T28726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2053.109901][T29165] lo speed is unknown, defaulting to 1000 [ 2053.217319][ T5987] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2053.384372][ T5987] usb 2-1: device descriptor read/64, error -71 [ 2053.515284][ T5987] usb usb2-port1: attempt power cycle [ 2053.620608][T29165] chnl_net:caif_netlink_parms(): no params data found [ 2053.664195][T20817] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2053.767689][T11861] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 2053.775810][T11861] usb 7-1: MIDIStreaming interface descriptor not found [ 2053.840314][T20817] usb 5-1: Using ep0 maxpacket: 32 [ 2053.844706][T11861] usb 7-1: USB disconnect, device number 4 [ 2053.848912][T20817] usb 5-1: config 0 has an invalid interface number: 76 but max is 0 [ 2053.874959][ T5987] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2053.885073][T20817] usb 5-1: config 0 has no interface number 0 [ 2053.910763][T20817] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 2053.920897][ T5987] usb 2-1: device descriptor read/8, error -71 [ 2053.930591][T20817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.949206][T20817] usb 5-1: Product: syz [ 2053.963650][T20817] usb 5-1: Manufacturer: syz [ 2053.970950][T20817] usb 5-1: SerialNumber: syz [ 2054.006255][T20817] usb 5-1: config 0 descriptor?? [ 2054.014286][T20817] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 2054.032531][T20817] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2054.048748][T20817] dvb-usb: bulk message failed: -22 (2/0) [ 2054.067474][T20817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2054.087534][T20817] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 2054.107301][T20817] usb 5-1: media controller created [ 2054.122821][T20817] dvb-usb: bulk message failed: -22 (6/0) [ 2054.139713][T20817] dw2102: i2c transfer failed. [ 2054.154062][T20817] dvb-usb: bulk message failed: -22 (6/0) [ 2054.164251][T20817] dw2102: i2c transfer failed. [ 2054.169061][T20817] dvb-usb: bulk message failed: -22 (6/0) [ 2054.186059][T20817] dw2102: i2c transfer failed. [ 2054.190871][T20817] dvb-usb: bulk message failed: -22 (6/0) [ 2054.197137][ T5987] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2054.230589][T20817] dw2102: i2c transfer failed. [ 2054.239929][T20817] dvb-usb: bulk message failed: -22 (6/0) [ 2054.246776][ T5987] usb 2-1: device descriptor read/8, error -71 [ 2054.261237][T20817] dw2102: i2c transfer failed. [ 2054.272899][T20817] dvb-usb: bulk message failed: -22 (6/0) [ 2054.285163][T20817] dw2102: i2c transfer failed. [ 2054.302907][T20817] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2054.339898][T20817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2054.369241][ T5987] usb usb2-port1: unable to enumerate USB device [ 2054.403074][T20817] dvb-usb: bulk message failed: -22 (3/0) [ 2054.416466][T20817] dw2102: command 0x0e transfer failed. [ 2054.429077][T20817] dvb-usb: bulk message failed: -22 (3/0) [ 2054.450736][T20817] dw2102: command 0x0e transfer failed. [ 2054.796328][T20817] dvb-usb: bulk message failed: -22 (3/0) [ 2054.825025][T20817] dw2102: command 0x0e transfer failed. [ 2054.830605][T20817] dvb-usb: bulk message failed: -22 (3/0) [ 2054.861797][T20817] dw2102: command 0x0e transfer failed. [ 2054.877826][T20817] dvb-usb: bulk message failed: -22 (1/0) [ 2054.883594][T20817] dw2102: command 0x51 transfer failed. [ 2055.058147][T20817] DVB: Unable to find symbol ds3000_attach() [ 2055.064532][T20817] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 2055.065328][ T5135] Bluetooth: hci5: command tx timeout [ 2055.444037][T20817] rc_core: IR keymap rc-su3000 not found [ 2055.449719][T20817] Registered IR keymap rc-empty [ 2055.478924][T20817] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 2055.515740][T20817] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input57 [ 2055.557649][T20817] dvb-usb: schedule remote query interval to 150 msecs. [ 2055.595052][T20817] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2055.601291][T20817] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 2055.637187][T20817] usb 5-1: USB disconnect, device number 22 [ 2055.742180][T20817] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 2056.651202][T29136] Set syz1 is full, maxelem 65536 reached [ 2056.876549][T29165] bridge0: port 1(bridge_slave_0) entered blocking state [ 2056.900324][T29165] bridge0: port 1(bridge_slave_0) entered disabled state [ 2056.912856][T29165] bridge_slave_0: entered allmulticast mode [ 2056.949177][T29165] bridge_slave_0: entered promiscuous mode [ 2056.973632][T29165] bridge0: port 2(bridge_slave_1) entered blocking state [ 2057.006967][T29165] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.017024][T29165] bridge_slave_1: entered allmulticast mode [ 2057.026238][T29165] bridge_slave_1: entered promiscuous mode [ 2057.046763][T29216] syzkaller0: entered promiscuous mode [ 2057.056466][T29216] syzkaller0: entered allmulticast mode [ 2057.122749][T29165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2057.164157][ T5135] Bluetooth: hci5: command tx timeout [ 2057.174319][T29165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2057.767616][T29165] team0: Port device team_slave_0 added [ 2057.796560][T29165] team0: Port device team_slave_1 added [ 2058.998702][T29165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2059.005793][T29165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2059.039045][T29165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2059.066568][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 2059.066584][ T30] audit: type=1326 audit(1767933538.065:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29240 comm="syz.6.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd278f749 code=0x7fc00000 [ 2059.120074][T29165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2059.133675][T29165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2059.192953][T29165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2059.245180][ T5135] Bluetooth: hci5: command tx timeout [ 2059.321272][T29165] hsr_slave_0: entered promiscuous mode [ 2059.405177][T29165] hsr_slave_1: entered promiscuous mode [ 2059.411518][T29165] debugfs: 'hsr0' already exists in 'hsr' [ 2059.433984][T29165] Cannot create hsr debugfs directory [ 2059.565314][ T30] audit: type=1326 audit(1767933538.565:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29240 comm="syz.6.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6bd278f749 code=0x7fc00000 [ 2059.594651][T29260] syzkaller0: entered promiscuous mode [ 2059.615695][T29260] syzkaller0: entered allmulticast mode [ 2059.714676][T29259] tipc: Enabled bearer , priority 0 [ 2059.756028][T29257] tipc: Resetting bearer [ 2059.831155][T29257] tipc: Disabling bearer [ 2060.039102][T29165] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2060.069799][T29165] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.381261][T29165] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2060.391513][T29165] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.404007][T20817] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2060.505965][T29282] syzkaller0: entered promiscuous mode [ 2060.514154][T29282] syzkaller0: entered allmulticast mode [ 2060.546642][T29165] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2060.584175][T20817] usb 5-1: Using ep0 maxpacket: 8 [ 2060.602182][T29165] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.604043][ T5987] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2060.629029][T20817] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2060.645510][T20817] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2060.693569][T20817] usb 5-1: can't read configurations, error -71 [ 2060.864076][ T5987] usb 1-1: Using ep0 maxpacket: 32 [ 2060.897602][ T5987] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2060.928472][ T5987] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2060.940621][ T5987] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2061.059657][ T5987] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2061.112338][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.120627][ T5987] usb 1-1: Product: syz [ 2061.124994][ T5987] usb 1-1: Manufacturer: syz [ 2061.129600][ T5987] usb 1-1: SerialNumber: syz [ 2061.329548][ T5135] Bluetooth: hci5: command tx timeout [ 2063.058303][ T5987] usb 1-1: 0:2 : does not exist [ 2063.100311][ T5987] usb 1-1: USB disconnect, device number 19 [ 2063.951074][T29165] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2063.961199][T29165] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.596892][T29165] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2064.616790][T29165] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2064.648050][T29165] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2065.672188][T29165] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2066.409448][T29165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2066.452710][T29165] 8021q: adding VLAN 0 to HW filter on device team0 [ 2066.477180][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 2066.484335][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2066.525705][T27416] bridge0: port 2(bridge_slave_1) entered blocking state [ 2066.533096][T27416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2066.986498][T29344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6066'. [ 2067.296066][T29165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2067.360431][T29165] veth0_vlan: entered promiscuous mode [ 2067.827570][T29165] veth1_vlan: entered promiscuous mode [ 2067.863175][T29165] veth0_macvtap: entered promiscuous mode [ 2067.886329][T29165] veth1_macvtap: entered promiscuous mode [ 2067.926209][T29165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2067.939178][T29165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2068.026885][T29363] syzkaller0: entered promiscuous mode [ 2068.032397][T29363] syzkaller0: entered allmulticast mode [ 2068.119199][ T986] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.140354][ T986] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.169290][ T986] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.181696][ T986] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.320298][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.950130][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2068.964305][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2069.060205][ T6166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2069.073046][T29389] syzkaller0: entered promiscuous mode [ 2069.079310][ T6166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2069.079365][T29389] syzkaller0: entered allmulticast mode [ 2069.121314][ T30] audit: type=1326 audit(1767933548.115:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.4.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3eb8f749 code=0x7fc00000 [ 2070.478405][T29397] syzkaller0: entered promiscuous mode [ 2070.508594][T29397] syzkaller0: entered allmulticast mode [ 2070.603490][ T30] audit: type=1326 audit(1767933549.595:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.4.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc3eb8f749 code=0x7fc00000 [ 2070.735289][T28726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2070.748570][T28726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2070.766113][T28726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2070.775217][T28726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2070.782968][T28726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2070.851298][T29402] lo speed is unknown, defaulting to 1000 [ 2070.951306][T29408] syzkaller0: entered promiscuous mode [ 2070.957244][T29408] syzkaller0: entered allmulticast mode [ 2072.844771][ T5135] Bluetooth: hci1: command tx timeout [ 2075.197244][T28726] Bluetooth: hci1: command tx timeout [ 2075.219459][T29402] chnl_net:caif_netlink_parms(): no params data found [ 2075.317996][T29448] lo speed is unknown, defaulting to 1000 [ 2075.391965][ T30] audit: type=1326 audit(1767933554.385:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29449 comm="syz.4.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3eb8f749 code=0x7fc00000 [ 2075.525435][T29402] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.537559][T29402] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.550168][T29402] bridge_slave_0: entered allmulticast mode [ 2075.647780][T29402] bridge_slave_0: entered promiscuous mode [ 2075.659934][T29402] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.667969][T29402] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.675584][T29402] bridge_slave_1: entered allmulticast mode [ 2075.682999][T29402] bridge_slave_1: entered promiscuous mode [ 2075.777683][T29402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2075.822831][T29402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2075.917694][T29402] team0: Port device team_slave_0 added [ 2075.936453][T29402] team0: Port device team_slave_1 added [ 2076.030364][T29402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2076.049575][T29402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2076.127228][T29402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2076.167564][ T30] audit: type=1326 audit(1767933555.135:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29449 comm="syz.4.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc3eb8f749 code=0x7fc00000 [ 2076.392949][T29402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2076.529582][T29402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2076.629122][T29402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2076.696625][T29470] syzkaller0: entered promiscuous mode [ 2076.707446][T29470] syzkaller0: entered allmulticast mode [ 2076.731917][T29466] syzkaller0: entered promiscuous mode [ 2076.742020][T29466] syzkaller0: entered allmulticast mode [ 2076.838413][T29402] hsr_slave_0: entered promiscuous mode [ 2076.845904][T29402] hsr_slave_1: entered promiscuous mode [ 2076.852136][T29402] debugfs: 'hsr0' already exists in 'hsr' [ 2076.859034][T29402] Cannot create hsr debugfs directory [ 2076.966280][T29481] syzkaller0: entered promiscuous mode [ 2076.971829][T29481] syzkaller0: entered allmulticast mode [ 2077.175288][T29489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=29489 comm=syz.3.6104 [ 2077.244304][T28726] Bluetooth: hci1: command tx timeout [ 2077.544965][T29496] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 2077.904677][T12208] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2077.986004][T19200] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2078.065178][T12208] usb 7-1: Using ep0 maxpacket: 32 [ 2078.081672][T29494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2078.090671][T29494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2078.153983][T19200] usb 1-1: Using ep0 maxpacket: 8 [ 2078.161639][T19200] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2078.170717][T19200] usb 1-1: config 7 has an invalid interface number: 111 but max is 0 [ 2078.179130][T19200] usb 1-1: config 7 has no interface number 0 [ 2078.193496][T19200] usb 1-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice= 3.b8 [ 2078.202916][T19200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.211543][T19200] usb 1-1: Product: 吊脝䥦剨鲻ᐥ꼶ꡝ㎓껲ؾ﯊穬ⴵ뫟ᱣ浸㒈鎊䱸ᇌ돰ݾ鈼ᄁ쳧磽ᅴۅ㑍膾ﾸ剻氙䊙᩾掎鋬挰뎓흿ҡﶀ皅貳䓝昖붘焨䂿ㆢ졶떫侙瑇框⩀焑ᷙ貧鍫顛厌욋 [ 2078.234405][T19200] usb 1-1: Manufacturer: Ё [ 2078.238972][T19200] usb 1-1: SerialNumber: 붛忂ﴢ칅䨏癿晏ﰹ熙໔퀱榛ꅭ榔ᮥ튥鞬︚㮺監ᄠ盷酰甸寥査넂붅ɋᯂ끫卓⷏䏴懼㩨咬Ꮀ魌෿䟸鄤໅⁒讧஑웻뤿噙壿诉髐纶䙨닪캎ꊹꬾ৆⏂㺪똌≃ĶඕⴱᲜ琁莼틪⍧㫞ඟ憴⃯㊲鶚謦탤ꬴ䁛쓲⬓愷໎펇笥獃埚쌤ꤣ꯫꥙┻讲팅뵎痯嬩獳鳌ˢ좄橕簈 [ 2078.500932][T19200] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 2078.507758][T19200] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 2078.521681][T19200] pac7311 1-1:7.111: probe with driver pac7311 failed with error -71 [ 2078.533854][T19200] usb 1-1: USB disconnect, device number 20 [ 2079.335543][T28726] Bluetooth: hci1: command tx timeout [ 2079.758547][T29504] syzkaller0: entered promiscuous mode [ 2079.765446][T29504] syzkaller0: entered allmulticast mode [ 2079.943047][ T30] audit: type=1326 audit(1767933558.935:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29514 comm="syz.3.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ca38f749 code=0x7fc00000 [ 2079.983142][T29521] syzkaller0: entered promiscuous mode [ 2080.004174][T29521] syzkaller0: entered allmulticast mode [ 2080.644387][ T30] audit: type=1326 audit(1767933559.635:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29514 comm="syz.3.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9ca38f749 code=0x7fc00000 [ 2080.788583][T12208] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2080.801683][T29533] syzkaller0: entered promiscuous mode [ 2080.806703][T12208] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 2080.813229][T29533] syzkaller0: entered allmulticast mode [ 2080.826902][T12208] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2080.835598][T12208] usb 7-1: can't read configurations, error -71 [ 2081.037434][T29540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=29540 comm=syz.6.6118 [ 2082.432751][T29402] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2082.555168][T29402] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2082.722884][T29402] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2082.925087][T29402] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2083.165655][T29402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2083.216798][T29402] 8021q: adding VLAN 0 to HW filter on device team0 [ 2083.248078][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.255270][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2083.269634][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.276832][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.049851][T29402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2084.180151][T29402] veth0_vlan: entered promiscuous mode [ 2084.394724][T20817] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2084.423415][T29402] veth1_vlan: entered promiscuous mode [ 2084.467734][T29402] veth0_macvtap: entered promiscuous mode [ 2084.478581][T29402] veth1_macvtap: entered promiscuous mode [ 2084.511773][T29402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2084.526963][T29402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2084.546126][ T986] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.558720][ T986] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.569629][ T986] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.580203][ T986] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.599478][T20817] usb 4-1: Using ep0 maxpacket: 16 [ 2084.620009][T20817] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2084.631319][T20817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.648450][T20817] usb 4-1: config 0 descriptor?? [ 2084.681739][T20817] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2084.772442][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.886569][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2084.986184][ T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.998900][ T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2085.757354][T29600] syzkaller0: entered promiscuous mode [ 2085.788775][T29600] syzkaller0: entered allmulticast mode [ 2085.804616][T20817] gspca_sonixj: reg_r err -110 [ 2085.816025][T20817] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 2085.825775][T19200] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 2087.643370][T29621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=29621 comm=syz.0.6138 [ 2088.878330][ T6040] usb 4-1: USB disconnect, device number 21 [ 2089.799722][T29643] overlayfs: missing 'lowerdir' [ 2090.515360][T19200] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2090.539415][T19200] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2090.556976][T19200] usb 2-1: can't read configurations, error -71 [ 2091.503649][T29645] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6145'. [ 2091.566067][T29647] syzkaller0: entered promiscuous mode [ 2091.571569][T29647] syzkaller0: entered allmulticast mode [ 2091.663768][T29651] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6149'. [ 2091.687124][T29647] tipc: Started in network mode [ 2091.692059][T29647] tipc: Node identity 02f20f5988d8, cluster identity 4711 [ 2091.718714][T29647] tipc: Enabled bearer , priority 0 [ 2091.743566][T29646] tipc: Resetting bearer [ 2091.903298][T29646] tipc: Disabling bearer [ 2091.954152][T11861] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2092.207012][T11861] usb 4-1: Using ep0 maxpacket: 8 [ 2092.213479][T11861] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2092.222351][T11861] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2092.354017][ T6170] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2092.719286][T11861] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2092.846552][T11861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.574022][ T6170] usb 1-1: Using ep0 maxpacket: 32 [ 2093.632810][ T6170] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2093.640764][T29673] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6155'. [ 2093.689905][ T6170] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2093.703253][ T6170] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2093.811274][ T6170] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2093.820432][ T6170] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.829529][ T6170] usb 1-1: Product: syz [ 2093.833703][ T6170] usb 1-1: Manufacturer: syz [ 2093.846600][ T6170] usb 1-1: SerialNumber: syz [ 2094.123625][T29679] syzkaller0: entered promiscuous mode [ 2094.164914][T29679] syzkaller0: entered allmulticast mode [ 2094.265685][ T5987] usb 4-1: USB disconnect, device number 22 [ 2095.903065][T29690] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6160'. [ 2095.978389][ T6170] usb 1-1: 0:2 : does not exist [ 2096.007311][ T6170] usb 1-1: USB disconnect, device number 21 [ 2098.111371][T29714] sd 0:0:1:0: PR command failed: 1026 [ 2098.112934][ T30] audit: type=1400 audit(1767933577.105:1584): avc: denied { ioctl } for pid=29713 comm="syz.3.6168" path="/20/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2098.118103][T29714] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2098.149551][T29714] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2098.418467][T20817] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2098.447652][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.454769][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.586489][T20817] usb 4-1: Using ep0 maxpacket: 32 [ 2099.972800][T20817] usb 4-1: config 2 has an invalid interface number: 197 but max is 0 [ 2100.014578][T20817] usb 4-1: config 2 has no interface number 0 [ 2100.020745][T20817] usb 4-1: New USB device found, idVendor=0856, idProduct=bc02, bcdDevice=86.76 [ 2100.041547][T20817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.282178][T20817] usb 4-1: string descriptor 0 read error: -71 [ 2100.296679][T20817] mos7840 4-1:2.197: missing endpoints [ 2100.317134][T20817] usb 4-1: USB disconnect, device number 23 [ 2104.687545][T18169] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2104.917064][T18169] usb 1-1: Using ep0 maxpacket: 32 [ 2104.956035][T18169] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2105.007273][T18169] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2105.032262][T18169] usb 1-1: config 1 has an invalid descriptor of length 224, skipping remainder of the config [ 2105.068752][T18169] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2105.107115][T18169] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2105.131505][T18169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.158477][T18169] usb 1-1: Product: syz [ 2105.178398][T18169] usb 1-1: Manufacturer: syz [ 2105.187355][T18169] usb 1-1: SerialNumber: syz [ 2105.504552][T11861] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2105.594213][T20817] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2105.704840][T11861] usb 5-1: Using ep0 maxpacket: 32 [ 2105.830808][T11861] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2105.848831][T11861] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2105.861848][T11861] usb 5-1: config 1 has no interface number 1 [ 2106.047425][T20817] usb 2-1: Using ep0 maxpacket: 16 [ 2106.238815][T20817] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2106.262798][T20817] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2106.267254][T11861] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2106.277765][T20817] usb 2-1: Product: syz [ 2106.325786][T20817] usb 2-1: Manufacturer: syz [ 2106.335123][T11861] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2106.348120][T11861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.359028][T20817] usb 2-1: SerialNumber: syz [ 2106.376907][T11861] usb 5-1: Product: syz [ 2106.380498][T20817] usb 2-1: config 0 descriptor?? [ 2106.386610][T11861] usb 5-1: Manufacturer: syz [ 2106.395493][T11861] usb 5-1: SerialNumber: syz [ 2106.757400][T29778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2106.786652][T29778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2107.969412][T18169] usb 1-1: 0:2 : does not exist [ 2108.068389][T29797] syzkaller0: entered promiscuous mode [ 2108.081687][T29797] syzkaller0: entered allmulticast mode [ 2108.117946][T18169] usb 1-1: USB disconnect, device number 22 [ 2108.279140][T11861] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2108.317967][T11861] usb 5-1: USB disconnect, device number 25 [ 2108.503728][T20817] usb 2-1: USB disconnect, device number 3 [ 2112.732274][T11861] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2113.634670][T11861] usb 1-1: Using ep0 maxpacket: 16 [ 2113.656293][T11861] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2113.681080][T11861] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2113.704678][T11861] usb 1-1: Product: syz [ 2113.708851][T11861] usb 1-1: Manufacturer: syz [ 2113.717311][T11861] usb 1-1: SerialNumber: syz [ 2113.729766][T11861] usb 1-1: config 0 descriptor?? [ 2113.866255][T18619] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2113.987657][T29842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2114.023427][T29842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2114.344566][T18619] usb 7-1: Using ep0 maxpacket: 32 [ 2114.440357][T18619] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2114.469541][T18619] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2114.484313][T20817] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2114.498269][T29864] lo speed is unknown, defaulting to 1000 [ 2114.554434][T18619] usb 7-1: config 1 has no interface number 1 [ 2114.580805][T18619] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2114.670082][T18619] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2114.684228][T20817] usb 5-1: Using ep0 maxpacket: 32 [ 2114.692262][T20817] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2114.702792][T20817] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2114.711805][T20817] usb 5-1: config 1 has an invalid descriptor of length 224, skipping remainder of the config [ 2114.739314][T18619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.752869][T18619] usb 7-1: Product: syz [ 2114.757742][T18619] usb 7-1: Manufacturer: syz [ 2114.762546][T18619] usb 7-1: SerialNumber: syz [ 2114.876842][T20817] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2114.899163][T20817] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2114.909535][T20817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.917632][T20817] usb 5-1: Product: syz [ 2114.921825][T20817] usb 5-1: Manufacturer: syz [ 2114.928096][T20817] usb 5-1: SerialNumber: syz [ 2115.104912][T22195] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 2115.407468][T21843] usb 1-1: USB disconnect, device number 23 [ 2115.626185][T22195] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 2115.638325][T22195] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 2115.703619][T18619] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2115.741266][T22195] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2115.771060][T18619] usb 7-1: USB disconnect, device number 7 [ 2115.781770][T22195] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2115.797437][T22195] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2115.818895][T22195] usb 2-1: Product: syz [ 2115.825888][T22195] usb 2-1: Manufacturer: syz [ 2115.839401][T22195] usb 2-1: SerialNumber: syz [ 2115.852354][T22195] usb 2-1: config 0 descriptor?? [ 2115.868546][T22195] usb 2-1: selecting invalid altsetting 0 [ 2115.944066][T21843] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2116.075517][T21843] usb 1-1: device descriptor read/64, error -71 [ 2116.371636][T18619] usb 2-1: USB disconnect, device number 4 [ 2116.424587][T21843] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2116.575169][T21843] usb 1-1: device descriptor read/64, error -71 [ 2116.761324][T21843] usb usb1-port1: attempt power cycle [ 2117.424023][T21843] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2117.465456][T21843] usb 1-1: device descriptor read/8, error -71 [ 2117.698959][T20817] usb 5-1: 0:2 : does not exist [ 2117.714346][T21843] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2117.738227][T20817] usb 5-1: USB disconnect, device number 26 [ 2117.766637][T21843] usb 1-1: device descriptor read/8, error -71 [ 2118.122701][T21843] usb usb1-port1: unable to enumerate USB device [ 2118.394101][T21843] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2119.631675][T21843] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 2119.677098][T21843] usb 2-1: can't read configurations, error -22 [ 2120.174195][T21843] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2120.366279][T21843] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 2120.384048][T21843] usb 2-1: can't read configurations, error -22 [ 2120.394777][T21843] usb usb2-port1: attempt power cycle [ 2120.475814][ T30] audit: type=1400 audit(1767933599.475:1585): avc: denied { ioctl } for pid=29923 comm="syz.4.6234" path="socket:[107303]" dev="sockfs" ino=107303 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2120.717583][T29932] i2c i2c-0: Invalid block write size 255 [ 2120.758232][T29932] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 2120.814517][T21843] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2120.960554][T29936] syzkaller0: entered promiscuous mode [ 2120.986227][T29936] syzkaller0: entered allmulticast mode [ 2121.034188][T21843] usb 2-1: device not accepting address 7, error -71 [ 2121.074111][ T5987] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2121.417701][ T5987] usb 7-1: Using ep0 maxpacket: 16 [ 2121.446810][ T5987] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2121.465537][ T5987] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2121.485697][ T5987] usb 7-1: can't read configurations, error -71 [ 2122.754654][T29846] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2122.833374][ T30] audit: type=1400 audit(1767933601.825:1586): avc: denied { setopt } for pid=29952 comm="syz.6.6242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2122.939793][T29846] usb 5-1: Using ep0 maxpacket: 32 [ 2122.995336][T29846] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 2123.013474][T29846] usb 5-1: can't read configurations, error -22 [ 2123.159575][T29846] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2123.354666][T29846] usb 5-1: Using ep0 maxpacket: 32 [ 2123.366517][T29846] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 2123.382319][T29846] usb 5-1: can't read configurations, error -22 [ 2123.389948][T29846] usb usb5-port1: attempt power cycle [ 2123.738387][T29846] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2123.776374][T29846] usb 5-1: Using ep0 maxpacket: 32 [ 2123.811917][T29846] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 2123.822529][T29846] usb 5-1: can't read configurations, error -22 [ 2123.964834][T29846] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2123.985126][T29846] usb 5-1: Using ep0 maxpacket: 32 [ 2123.992901][T29846] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 2124.001623][T29846] usb 5-1: can't read configurations, error -22 [ 2124.010969][T29846] usb usb5-port1: unable to enumerate USB device [ 2125.313976][ T5987] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2125.494522][ T5987] usb 4-1: Using ep0 maxpacket: 32 [ 2125.503585][ T5987] usb 4-1: config 2 has an invalid interface number: 193 but max is 0 [ 2125.516376][ T5987] usb 4-1: config 2 has no interface number 0 [ 2125.522574][ T5987] usb 4-1: config 2 interface 193 has no altsetting 0 [ 2125.533758][ T5987] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=86.a6 [ 2125.543564][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.557660][ T5987] usb 4-1: Product: syz [ 2125.566914][ T5987] usb 4-1: Manufacturer: syz [ 2125.576988][ T5987] usb 4-1: SerialNumber: syz [ 2126.024685][ T30] audit: type=1400 audit(1767933604.935:1587): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.76 dest=60782 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2126.050782][ T5987] usb 4-1: active config #2 != 1 ?? [ 2126.383637][T29978] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.6248'. [ 2126.419192][T29978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2126.444335][T29978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2126.524773][ T5987] usb 4-1: USB disconnect, device number 24 [ 2127.698856][T30016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6259'. [ 2127.722851][ T30] audit: type=1400 audit(1767933606.715:1588): avc: denied { setattr } for pid=30013 comm="syz.4.6259" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2128.518156][T30031] syzkaller0: entered promiscuous mode [ 2128.529803][T30031] syzkaller0: entered allmulticast mode [ 2129.527622][T18169] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2129.694605][T18169] usb 4-1: Using ep0 maxpacket: 16 [ 2129.703685][T18169] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2129.767435][T18169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.786276][T18169] usb 4-1: Product: syz [ 2129.800677][T18169] usb 4-1: Manufacturer: syz [ 2129.826748][T18169] usb 4-1: SerialNumber: syz [ 2129.850315][T18169] usb 4-1: config 0 descriptor?? [ 2129.935176][T30059] lo speed is unknown, defaulting to 1000 [ 2130.194609][T11861] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2130.275261][T18169] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2130.295859][T18169] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2130.327280][T18169] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2130.340478][T18169] usb 4-1: media controller created [ 2130.354337][T11861] usb 2-1: Using ep0 maxpacket: 8 [ 2130.360769][T11861] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 2130.370756][T11861] usb 2-1: config 0 has no interface number 0 [ 2130.382859][T18169] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2130.398144][T11861] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2130.410778][T11861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.443939][T11861] usb 2-1: Product: syz [ 2130.460713][T11861] usb 2-1: Manufacturer: syz [ 2130.480088][T11861] usb 2-1: SerialNumber: syz [ 2130.488779][T11861] usb 2-1: config 0 descriptor?? [ 2130.498628][T11861] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2130.508229][T11861] pctv452e: pctv452e_power_ctrl: 1 [ 2130.508229][T11861] [ 2130.520636][T11861] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2130.520636][T11861] [ 2130.537153][T11861] dvb-usb: bulk message failed: -22 (5/0) [ 2130.549829][T11861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2130.562311][T11861] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2130.572939][T11861] usb 2-1: media controller created [ 2130.590765][T11861] dvb-usb: bulk message failed: -22 (8/0) [ 2130.626373][T11861] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 2130.647240][T11861] dvb-usb: MAC address reading failed. [ 2130.742113][T11861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2130.873566][T11861] DVB: Unable to find symbol stb0899_attach() [ 2130.891890][T11861] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2130.925613][T30078] syzkaller0: entered promiscuous mode [ 2130.943785][T30078] syzkaller0: entered allmulticast mode [ 2130.986785][T30036] dtv5100: wlen = 0, aborting. [ 2131.030728][T18169] zl10353_read_register: readreg error (reg=127, ret==0) [ 2131.038928][T11861] rc_core: IR keymap rc-tt-1500 not found [ 2131.044893][T11861] Registered IR keymap rc-empty [ 2131.049822][T18169] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2131.060492][T11861] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 2131.070923][T18169] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2131.081848][T11861] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input58 [ 2131.101474][T11861] dvb-usb: schedule remote query interval to 100 msecs. [ 2131.109798][T11861] pctv452e: pctv452e_power_ctrl: 0 [ 2131.109798][T11861] [ 2131.118315][T11861] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2131.132240][T11861] usb 2-1: USB disconnect, device number 9 [ 2131.139514][T30078] tipc: Enabled bearer , priority 0 [ 2131.149989][T30077] tipc: Resetting bearer [ 2131.172313][T11861] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2131.201398][T30077] tipc: Disabling bearer [ 2131.235578][T18169] libceph: connect (1)[c::]:6789 error -101 [ 2131.241911][T18169] libceph: mon0 (1)[c::]:6789 connect error [ 2131.525867][T11861] libceph: connect (1)[c::]:6789 error -101 [ 2131.918826][T30081] ceph: No mds server is up or the cluster is laggy [ 2131.931843][T11861] libceph: mon0 (1)[c::]:6789 connect error [ 2132.132501][T18169] usb 4-1: USB disconnect, device number 25 [ 2132.686937][T18169] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2133.043243][T30112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30112 comm=syz.1.6285 [ 2133.210435][T30121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6289'. [ 2133.498773][T30126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6290'. [ 2133.847040][ T30] audit: type=1400 audit(1767933612.645:1589): avc: denied { egress } for pid=0 comm="swapper/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2133.957573][ T30] audit: type=1400 audit(1767933612.645:1590): avc: denied { sendto } for pid=0 comm="swapper/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2133.984090][T29820] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2133.991689][T18619] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2134.164403][T18619] usb 5-1: device descriptor read/64, error -71 [ 2134.176055][T29820] usb 7-1: Using ep0 maxpacket: 32 [ 2134.186636][T29820] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2134.202210][T29820] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2134.239227][T29820] usb 7-1: config 1 has no interface number 1 [ 2134.276692][T29820] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2134.331837][T29820] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2134.404793][T18619] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2134.446638][T29820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.508035][T29820] usb 7-1: Product: syz [ 2134.512206][T29820] usb 7-1: Manufacturer: syz [ 2134.544864][T18619] usb 5-1: device descriptor read/64, error -71 [ 2134.562661][T29820] usb 7-1: SerialNumber: syz [ 2134.655851][T18619] usb usb5-port1: attempt power cycle [ 2136.034626][T18619] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2136.085375][T18619] usb 5-1: device descriptor read/8, error -71 [ 2136.309270][T30160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6301'. [ 2136.312492][T30159] syzkaller0: entered promiscuous mode [ 2136.344166][T30159] syzkaller0: entered allmulticast mode [ 2137.078469][T29820] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc [ 2137.145838][T29820] usb 7-1: USB disconnect, device number 10 [ 2137.278196][T30173] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2137.324517][T30173] syzkaller0: entered promiscuous mode [ 2137.332442][T30173] syzkaller0: entered allmulticast mode [ 2137.340421][T30179] batman_adv: batadv0: Adding interface: dummy0 [ 2137.347814][T30179] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2137.377932][T30179] batman_adv: batadv0: Interface activated: dummy0 [ 2137.818266][T29728] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2137.994114][T29728] usb 1-1: Using ep0 maxpacket: 8 [ 2138.001126][T29728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 120, changing to 10 [ 2138.021518][T29728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8265, setting to 1024 [ 2138.044260][T29728] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2138.072056][T29728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.095855][T29728] usb 1-1: config 0 descriptor?? [ 2139.318503][T29728] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2140.194302][T30180] batadv0: mtu less than device minimum [ 2140.201637][T30180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.212666][T30180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.223549][T30180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.234870][T30180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.246155][T30180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.257466][T30180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.268324][T30180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.280855][T30180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.291755][T30180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.464518][T30199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6314'. [ 2140.514981][T30200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30200 comm=syz.1.6312 [ 2140.570941][T30202] syzkaller0: entered promiscuous mode [ 2140.584325][T30202] syzkaller0: entered allmulticast mode [ 2142.154026][T12208] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2142.156937][T29846] usb 1-1: USB disconnect, device number 28 [ 2142.503222][T12208] usb 5-1: Using ep0 maxpacket: 32 [ 2142.934218][T29728] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2144.074273][T29728] usb 1-1: Using ep0 maxpacket: 16 [ 2144.090255][T29728] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2144.465509][T29728] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2144.483467][T29728] usb 1-1: Product: syz [ 2144.494289][T29728] usb 1-1: Manufacturer: syz [ 2144.501012][T29728] usb 1-1: SerialNumber: syz [ 2144.510017][T29728] usb 1-1: config 0 descriptor?? [ 2144.756173][T30243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6326'. [ 2144.778525][T30223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2144.789397][T30223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2146.428864][T12208] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2146.565019][T12208] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2146.572578][T12208] usb 5-1: can't read configurations, error -71 [ 2147.631592][ T5882] usb 1-1: USB disconnect, device number 29 [ 2148.839810][T30267] netlink: 'syz.1.6332': attribute type 74 has an invalid length. [ 2149.165167][T30270] syzkaller0: entered promiscuous mode [ 2149.170775][T30270] syzkaller0: entered allmulticast mode [ 2150.554925][T30291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30291 comm=syz.0.6338 [ 2152.287428][ T5135] Bluetooth: hci3: command 0x0406 tx timeout [ 2153.952297][T30329] tipc: Enabling of bearer rejected, failed to enable media [ 2155.197753][T30341] binder: BINDER_SET_CONTEXT_MGR already set [ 2155.240898][T30341] binder: 30337:30341 ioctl 4018620d 200000004a80 returned -16 [ 2157.324441][ T5882] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2157.765532][ T5882] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2157.792843][ T5882] usb 7-1: config 1 has no interface number 1 [ 2157.815668][ T5882] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2157.869851][ T5882] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2157.892355][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.920878][ T5882] usb 7-1: Product: syz [ 2157.936248][ T5882] usb 7-1: Manufacturer: syz [ 2157.940870][ T5882] usb 7-1: SerialNumber: syz [ 2158.104444][T11861] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2158.176222][ T5882] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 2158.254788][T11861] usb 4-1: Using ep0 maxpacket: 8 [ 2158.396904][T22650] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2158.534868][T11861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2158.537473][ T5882] usb 7-1: USB disconnect, device number 11 [ 2159.034617][T11861] usb 4-1: config 0 has no interfaces? [ 2159.055187][T11861] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2159.085957][T22650] usb 5-1: Using ep0 maxpacket: 8 [ 2159.099337][T11861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.118143][T11861] usb 4-1: config 0 descriptor?? [ 2159.163858][T22650] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2159.180652][T22650] usb 5-1: config 0 has no interfaces? [ 2159.187020][T22650] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2159.196999][T22650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.220695][T22650] usb 5-1: config 0 descriptor?? [ 2159.887804][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2159.894380][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.498096][T30413] veth0: entered promiscuous mode [ 2160.505774][T30413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6377'. [ 2160.738339][T30413] veth0: left promiscuous mode [ 2161.000927][ T5882] usb 4-1: USB disconnect, device number 26 [ 2161.021531][ T30] audit: type=1400 audit(1767933639.985:1591): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=44892 daddr=10.128.1.76 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2161.259169][ T5936] usb 5-1: USB disconnect, device number 37 [ 2162.034699][ T5882] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2162.074837][T22650] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2162.097284][T30449] syzkaller0: entered promiscuous mode [ 2162.103326][T30449] syzkaller0: entered allmulticast mode [ 2162.117412][T30452] syzkaller0: entered promiscuous mode [ 2162.123052][T30452] syzkaller0: entered allmulticast mode [ 2162.163700][T30454] syzkaller0: entered promiscuous mode [ 2162.170729][T30454] syzkaller0: entered allmulticast mode [ 2162.199685][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 2162.220488][T30428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.229153][T30428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2162.239575][T22650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2162.259530][T22650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2162.277011][T22650] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 2162.288055][T22650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.299961][T22650] usb 2-1: config 0 descriptor?? [ 2162.664482][ T5936] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2162.940785][T22650] usbhid 2-1:0.0: can't add hid device: -71 [ 2162.949911][T22650] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2162.963443][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 2162.973828][ T5936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2162.986048][T22650] usb 2-1: USB disconnect, device number 10 [ 2163.000397][ T5936] usb 1-1: config 0 has no interfaces? [ 2163.006772][ T5936] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2163.016560][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.121245][ T5936] usb 1-1: config 0 descriptor?? [ 2164.127406][ T5882] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2164.139241][ T5882] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2164.156156][ T5882] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2164.180499][ T5882] usb 4-1: can't read configurations, error -71 [ 2165.409444][T30496] tipc: Enabling of bearer rejected, failed to enable media [ 2165.466724][T22650] usb 1-1: USB disconnect, device number 30 [ 2165.527796][T30499] syzkaller0: entered promiscuous mode [ 2165.538866][T30499] syzkaller0: entered allmulticast mode [ 2165.566383][T30497] syzkaller0: entered promiscuous mode [ 2165.588918][T30497] syzkaller0: entered allmulticast mode [ 2166.761843][T30526] syzkaller0: entered promiscuous mode [ 2166.798090][T30526] syzkaller0: entered allmulticast mode [ 2167.024509][T30245] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2167.084346][T28726] Bluetooth: hci4: command 0x0406 tx timeout [ 2167.094885][T30536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30536 comm=syz.6.6414 [ 2167.130211][T30535] syzkaller0: entered promiscuous mode [ 2167.135952][T30535] syzkaller0: entered allmulticast mode [ 2167.183950][T30245] usb 1-1: Using ep0 maxpacket: 8 [ 2167.194917][T30245] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2167.205418][T30245] usb 1-1: config 0 has no interfaces? [ 2167.210960][T30245] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2167.220688][T30245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2167.242498][T30245] usb 1-1: config 0 descriptor?? [ 2168.273959][T30560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30560 comm=syz.4.6413 [ 2169.399353][T30577] syzkaller0: entered promiscuous mode [ 2169.410603][T30577] syzkaller0: entered allmulticast mode [ 2169.445373][T11861] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2169.491148][T30579] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6426'. [ 2170.675550][T30245] usb 1-1: USB disconnect, device number 31 [ 2170.699292][T30588] syzkaller0: entered promiscuous mode [ 2170.705311][T11861] usb 2-1: Using ep0 maxpacket: 32 [ 2170.718581][T11861] usb 2-1: config 4 has an invalid interface number: 121 but max is 0 [ 2170.738818][T11861] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2170.739076][T30588] syzkaller0: entered allmulticast mode [ 2170.749157][T11861] usb 2-1: config 4 has no interface number 0 [ 2170.763256][T11861] usb 2-1: config 4 interface 121 altsetting 2 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 2170.788128][T11861] usb 2-1: config 4 interface 121 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2170.864523][T11861] usb 2-1: config 4 interface 121 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2170.918177][T11861] usb 2-1: config 4 interface 121 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 2170.928287][T30595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30595 comm=syz.4.6430 [ 2170.937714][T11861] usb 2-1: config 4 interface 121 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 2170.981227][T11861] usb 2-1: config 4 interface 121 altsetting 2 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 2171.026711][T11861] usb 2-1: config 4 interface 121 has no altsetting 0 [ 2171.035549][T11861] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=87.a7 [ 2171.067952][T11861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.080786][T11861] usb 2-1: Product: Й [ 2171.087891][T11861] usb 2-1: Manufacturer: ␉ [ 2171.092503][T11861] usb 2-1: SerialNumber: ᠌ [ 2171.334584][ T30] audit: type=1400 audit(1767933650.335:1592): avc: denied { read write } for pid=30574 comm="syz.1.6424" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2171.369229][T11861] usb 2-1: USB disconnect, device number 11 [ 2171.577032][ T30] audit: type=1400 audit(1767933650.355:1593): avc: denied { open } for pid=30574 comm="syz.1.6424" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2171.634022][ T30] audit: type=1400 audit(1767933650.355:1594): avc: denied { read } for pid=30574 comm="syz.1.6424" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2171.777198][ T30] audit: type=1400 audit(1767933650.355:1595): avc: denied { open } for pid=30574 comm="syz.1.6424" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2171.804989][ T30] audit: type=1400 audit(1767933650.375:1596): avc: denied { prog_load } for pid=30601 comm="syz.3.6434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2172.777184][ T30] audit: type=1400 audit(1767933650.545:1597): avc: denied { prog_run } for pid=30601 comm="syz.3.6434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2172.796720][ T30] audit: type=1400 audit(1767933650.635:1598): avc: denied { map_create } for pid=30606 comm="syz.6.6431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2173.272916][T30616] FAULT_INJECTION: forcing a failure. [ 2173.272916][T30616] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.290465][T30616] CPU: 0 UID: 0 PID: 30616 Comm: syz.0.6437 Tainted: G L syzkaller #0 PREEMPT(full) [ 2173.290493][T30616] Tainted: [L]=SOFTLOCKUP [ 2173.290497][T30616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2173.290504][T30616] Call Trace: [ 2173.290508][T30616] [ 2173.290513][T30616] dump_stack_lvl+0x16c/0x1f0 [ 2173.290533][T30616] should_fail_ex+0x512/0x640 [ 2173.290550][T30616] ? __kmalloc_noprof+0xca/0x910 [ 2173.290569][T30616] should_failslab+0xc2/0x120 [ 2173.290585][T30616] __kmalloc_noprof+0xeb/0x910 [ 2173.290602][T30616] ? filemap_splice_read+0x962/0xd60 [ 2173.290615][T30616] ? iter_file_splice_write+0x1cc/0x12b0 [ 2173.290634][T30616] ? iter_file_splice_write+0x1cc/0x12b0 [ 2173.290651][T30616] iter_file_splice_write+0x1cc/0x12b0 [ 2173.290669][T30616] ? __pfx_filemap_splice_read+0x10/0x10 [ 2173.290688][T30616] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2173.290710][T30616] ? __lock_acquire+0x436/0x2890 [ 2173.290735][T30616] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2173.290753][T30616] direct_splice_actor+0x192/0x6c0 [ 2173.290771][T30616] splice_direct_to_actor+0x345/0xa30 [ 2173.290788][T30616] ? __pfx_direct_splice_actor+0x10/0x10 [ 2173.290808][T30616] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2173.290824][T30616] ? get_pid_task+0xfc/0x250 [ 2173.290840][T30616] do_splice_direct+0x174/0x240 [ 2173.290857][T30616] ? __pfx_do_splice_direct+0x10/0x10 [ 2173.290874][T30616] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2173.290892][T30616] ? rw_verify_area+0xcf/0x6c0 [ 2173.290907][T30616] do_sendfile+0xb06/0xe50 [ 2173.290923][T30616] ? __pfx_do_sendfile+0x10/0x10 [ 2173.290936][T30616] ? __fget_files+0x20e/0x3c0 [ 2173.290957][T30616] __x64_sys_sendfile64+0x1d8/0x220 [ 2173.290974][T30616] ? ksys_write+0x1ac/0x250 [ 2173.290987][T30616] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2173.291009][T30616] do_syscall_64+0xcd/0xf80 [ 2173.291025][T30616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2173.291037][T30616] RIP: 0033:0x7f27cf38f749 [ 2173.291046][T30616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2173.291058][T30616] RSP: 002b:00007f27cd5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2173.291069][T30616] RAX: ffffffffffffffda RBX: 00007f27cf5e6090 RCX: 00007f27cf38f749 [ 2173.291077][T30616] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 2173.291083][T30616] RBP: 00007f27cd5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2173.291090][T30616] R10: 0000000000040001 R11: 0000000000000246 R12: 0000000000000001 [ 2173.291096][T30616] R13: 00007f27cf5e6128 R14: 00007f27cf5e6090 R15: 00007ffef9b0a488 [ 2173.291112][T30616] [ 2173.404271][ T30] audit: type=1804 audit(1767933652.265:1599): pid=30616 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.6437" name="bus" dev="ramfs" ino=110116 res=1 errno=0 [ 2174.123054][T30626] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2174.154420][T11861] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2174.196563][T30626] syzkaller0: entered promiscuous mode [ 2174.205520][T30626] syzkaller0: entered allmulticast mode [ 2174.535578][T11861] usb 7-1: Using ep0 maxpacket: 8 [ 2174.541934][T11861] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2174.553780][T11861] usb 7-1: config 0 has no interfaces? [ 2174.576708][T11861] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2174.814558][T11861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.835708][T11861] usb 7-1: config 0 descriptor?? [ 2174.855029][ T30] audit: type=1400 audit(1767933653.855:1600): avc: denied { map_read map_write } for pid=30636 comm="syz.0.6443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2174.943615][T30641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30641 comm=syz.0.6443 [ 2175.847202][T30648] tmpfs: Bad value for 'mpol' [ 2177.225490][T12208] usb 7-1: USB disconnect, device number 12 [ 2177.404567][ T5135] Bluetooth: hci5: command 0x0406 tx timeout [ 2179.484657][T11861] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2179.704326][T11861] usb 5-1: Using ep0 maxpacket: 16 [ 2179.712718][T11861] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2179.722529][T11861] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2179.731476][T11861] usb 5-1: Product: syz [ 2179.736221][T11861] usb 5-1: Manufacturer: syz [ 2179.740861][T11861] usb 5-1: SerialNumber: syz [ 2179.748119][T11861] usb 5-1: config 0 descriptor?? [ 2179.978682][T30664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2179.987487][T30664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2180.310611][T30680] FAULT_INJECTION: forcing a failure. [ 2180.310611][T30680] name failslab, interval 1, probability 0, space 0, times 0 [ 2180.344668][T30680] CPU: 0 UID: 0 PID: 30680 Comm: syz.3.6454 Tainted: G L syzkaller #0 PREEMPT(full) [ 2180.344700][T30680] Tainted: [L]=SOFTLOCKUP [ 2180.344708][T30680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2180.344719][T30680] Call Trace: [ 2180.344726][T30680] [ 2180.344734][T30680] dump_stack_lvl+0x16c/0x1f0 [ 2180.344763][T30680] should_fail_ex+0x512/0x640 [ 2180.344790][T30680] ? __kmalloc_cache_noprof+0x5f/0x800 [ 2180.344823][T30680] should_failslab+0xc2/0x120 [ 2180.344849][T30680] __kmalloc_cache_noprof+0x80/0x800 [ 2180.344879][T30680] ? sctp_auth_set_key+0x1a0/0xb40 [ 2180.344909][T30680] ? sctp_auth_set_key+0x1a0/0xb40 [ 2180.344934][T30680] sctp_auth_set_key+0x1a0/0xb40 [ 2180.344959][T30680] ? __local_bh_enable_ip+0xa4/0x120 [ 2180.344991][T30680] sctp_setsockopt+0xb5db/0xb8c0 [ 2180.345020][T30680] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 2180.345050][T30680] ? __pfx_sctp_setsockopt+0x10/0x10 [ 2180.345078][T30680] ? find_held_lock+0x2b/0x80 [ 2180.345110][T30680] ? selinux_socket_setsockopt+0x6a/0x80 [ 2180.345131][T30680] ? sock_common_setsockopt+0x2e/0xf0 [ 2180.345154][T30680] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2180.345180][T30680] do_sock_setsockopt+0xf3/0x1d0 [ 2180.345205][T30680] __sys_setsockopt+0x1a0/0x230 [ 2180.345228][T30680] __x64_sys_setsockopt+0xbd/0x160 [ 2180.345244][T30680] ? do_syscall_64+0x91/0xf80 [ 2180.345267][T30680] ? lockdep_hardirqs_on+0x7c/0x110 [ 2180.345290][T30680] do_syscall_64+0xcd/0xf80 [ 2180.345315][T30680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2180.345334][T30680] RIP: 0033:0x7fb9ca38f749 [ 2180.345350][T30680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2180.345367][T30680] RSP: 002b:00007fb9cb2e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2180.345386][T30680] RAX: ffffffffffffffda RBX: 00007fb9ca5e5fa0 RCX: 00007fb9ca38f749 [ 2180.345398][T30680] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 2180.345409][T30680] RBP: 00007fb9cb2e3090 R08: 0000000000000009 R09: 0000000000000000 [ 2180.345420][T30680] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 2180.345431][T30680] R13: 00007fb9ca5e6038 R14: 00007fb9ca5e5fa0 R15: 00007ffed6fb5558 [ 2180.345459][T30680] [ 2181.125841][T11861] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 2181.127852][ T30] audit: type=1400 audit(1767933660.115:1601): avc: denied { read } for pid=30687 comm="syz.1.6457" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2181.180628][ T30] audit: type=1400 audit(1767933660.115:1602): avc: denied { open } for pid=30687 comm="syz.1.6457" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2181.268030][T30696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30696 comm=syz.3.6459 [ 2181.491498][T12208] usb 5-1: USB disconnect, device number 38 [ 2184.213146][T11861] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2184.242634][T11861] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2184.265726][T11861] usb 7-1: can't read configurations, error -71 [ 2184.382527][T30720] Invalid source name [ 2184.624045][T30728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30728 comm=syz.1.6470 [ 2185.454634][T11861] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2186.556270][T11861] usb 2-1: Using ep0 maxpacket: 16 [ 2186.580958][T11861] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2186.604605][T11861] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2186.612732][T11861] usb 2-1: Product: syz [ 2187.193772][T11861] usb 2-1: Manufacturer: syz [ 2187.199061][T11861] usb 2-1: SerialNumber: syz [ 2187.208351][T11861] usb 2-1: config 0 descriptor?? [ 2187.217737][T30741] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2187.248337][T30741] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2187.304043][T30741] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2188.376984][T30740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.409591][T30740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2190.132956][T30779] befs: (nullb0): invalid magic header [ 2190.282957][T12208] usb 2-1: USB disconnect, device number 12 [ 2190.333935][T30245] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 2192.778068][T30798] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.6490'. [ 2192.822023][T30245] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2192.840261][T30245] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2192.861565][T30245] usb 5-1: can't read configurations, error -71 [ 2196.138858][T30826] netlink: 'syz.3.6499': attribute type 4 has an invalid length. [ 2196.157803][T30245] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2197.854048][T28726] Bluetooth: hci1: command 0x0406 tx timeout [ 2197.914167][T30245] usb 5-1: Using ep0 maxpacket: 16 [ 2197.934314][T30245] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2197.992017][T30245] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2198.002445][T30835] syzkaller0: entered promiscuous mode [ 2198.008650][T30835] syzkaller0: entered allmulticast mode [ 2198.017346][T30245] usb 5-1: Product: syz [ 2198.021516][T30245] usb 5-1: Manufacturer: syz [ 2198.058841][T30245] usb 5-1: SerialNumber: syz [ 2198.085753][T30245] usb 5-1: config 0 descriptor?? [ 2198.134994][T30837] syzkaller0: entered promiscuous mode [ 2198.140495][T30837] syzkaller0: entered allmulticast mode [ 2198.361648][T30821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2198.397185][T30844] TCP: TCP_TX_DELAY enabled [ 2198.403061][T30821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2198.517716][T30848] tmpfs: Bad value for 'mpol' [ 2199.169189][T30245] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2199.525629][T30245] usb 4-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 2199.536088][T30245] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2199.545220][T30245] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2199.561168][T30245] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 2199.570924][T30245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.579216][T30245] usb 4-1: Product: syz [ 2199.583751][T30245] usb 4-1: Manufacturer: syz [ 2199.614622][T30245] usb 4-1: SerialNumber: syz [ 2200.674715][ T6170] usb 5-1: USB disconnect, device number 41 [ 2200.690110][T30245] usb 4-1: config 0 descriptor?? [ 2200.974109][T30245] uvcvideo 4-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 2200.981433][T30245] uvcvideo 4-1:0.0: No valid video chain found. [ 2201.551746][T30245] usb 4-1: USB disconnect, device number 29 [ 2201.603070][ T30] audit: type=1326 audit(1767933680.535:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30856 comm="syz.0.6507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27cf38f749 code=0x7fc00000 [ 2202.281794][T30869] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6510'. [ 2202.291290][ T30] audit: type=1400 audit(1767933681.275:1604): avc: denied { append } for pid=30868 comm="syz.4.6510" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2202.328871][T30869] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6510'. [ 2202.368853][T30869] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6510'. [ 2202.520375][T30869] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6510'. [ 2202.627830][T30869] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6510'. [ 2202.637178][T30869] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6510'. [ 2202.679020][T30876] syzkaller0: entered promiscuous mode [ 2202.804969][T30876] syzkaller0: entered allmulticast mode [ 2203.994625][T30886] tipc: Enabled bearer , priority 0 [ 2204.005088][T30875] tipc: Resetting bearer [ 2204.083994][T20817] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2204.495857][T30875] tipc: Disabling bearer [ 2204.548930][T20817] usb 4-1: Using ep0 maxpacket: 32 [ 2204.582088][T30883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2204.591167][T30883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2205.706921][ T30] audit: type=1400 audit(1767933684.695:1605): avc: denied { ioctl } for pid=30893 comm="syz.4.6516" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2206.135637][T20817] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2206.166207][T20817] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2206.194507][T20817] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2206.213623][T20817] usb 4-1: can't read configurations, error -71 [ 2207.458586][T30914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6522'. [ 2207.665755][T30921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=30921 comm=syz.3.6523 [ 2207.726423][T30921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=30921 comm=syz.3.6523 [ 2207.985967][T18695] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2208.002911][T18695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2208.014806][T18695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2208.028243][T18695] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2208.054920][T18695] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2208.670740][T30925] lo speed is unknown, defaulting to 1000 [ 2208.743268][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802e1d9800: rx timeout, send abort [ 2208.751878][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802e1d9c00: rx timeout, send abort [ 2208.763968][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802e1d9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2208.778454][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802e1d9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2209.932647][T30937] syzkaller0: entered promiscuous mode [ 2209.967961][T30937] syzkaller0: entered allmulticast mode [ 2210.000935][T30945] tipc: Started in network mode [ 2210.035085][T30945] tipc: Node identity 967f9e8cf599, cluster identity 4711 [ 2210.042366][T30945] tipc: Enabled bearer , priority 0 [ 2210.114021][T30933] tipc: Resetting bearer [ 2210.158018][T30954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6529'. [ 2210.184841][T18695] Bluetooth: hci2: command tx timeout [ 2210.306770][T30933] tipc: Disabling bearer [ 2210.664215][T30245] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2210.964176][T30245] usb 5-1: Using ep0 maxpacket: 32 [ 2210.978808][T30956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2210.988173][T30956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2211.008829][T30925] chnl_net:caif_netlink_parms(): no params data found [ 2212.188699][T30925] bridge0: port 1(bridge_slave_0) entered blocking state [ 2212.214333][T18695] Bluetooth: hci2: command tx timeout [ 2212.242148][ T30] audit: type=1400 audit(1767933690.525:1606): avc: denied { getopt } for pid=30974 comm="syz.6.6535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2212.262811][T30925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.270375][T30925] bridge_slave_0: entered allmulticast mode [ 2212.278233][T30925] bridge_slave_0: entered promiscuous mode [ 2212.300309][T30925] bridge0: port 2(bridge_slave_1) entered blocking state [ 2212.315039][T30925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.324375][T30925] bridge_slave_1: entered allmulticast mode [ 2212.332477][T30925] bridge_slave_1: entered promiscuous mode [ 2212.372908][T30980] syzkaller0: entered promiscuous mode [ 2212.395733][T30980] syzkaller0: entered allmulticast mode [ 2212.479130][T30925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2212.516027][T30925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2212.622950][T30925] team0: Port device team_slave_0 added [ 2212.663756][T30925] team0: Port device team_slave_1 added [ 2212.777820][T30925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2212.797525][T30925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2212.856214][T30925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2212.898110][T30925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2212.915192][T30925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2212.978129][T30925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2213.098194][T30245] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2213.140656][T30245] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 2213.168479][T30245] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2213.187148][T30245] usb 5-1: can't read configurations, error -71 [ 2213.558260][T30925] hsr_slave_0: entered promiscuous mode [ 2213.570900][T30925] hsr_slave_1: entered promiscuous mode [ 2213.577751][T30925] debugfs: 'hsr0' already exists in 'hsr' [ 2213.586189][T30925] Cannot create hsr debugfs directory [ 2213.680491][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6541'. [ 2213.778761][T30999] syzkaller0: entered promiscuous mode [ 2213.784724][T30999] syzkaller0: entered allmulticast mode [ 2213.891060][ T1332] net_ratelimit: 10 callbacks suppressed [ 2213.891080][ T1332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.917239][T31005] syzkaller0: entered promiscuous mode [ 2213.926599][T31005] syzkaller0: entered allmulticast mode [ 2214.099126][T31014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6548'. [ 2214.294388][ T5135] Bluetooth: hci2: command tx timeout [ 2214.570774][T31026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=31026 comm=syz.3.6552 [ 2214.760247][T30925] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2214.788454][T30925] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2214.898666][T30925] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2214.999985][T30925] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2215.080479][T31036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6555'. [ 2215.937108][T30925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2215.972713][T30925] 8021q: adding VLAN 0 to HW filter on device team0 [ 2216.012513][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state [ 2216.019634][ T6166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2216.089524][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state [ 2216.096671][ T6166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2216.450365][ T30] audit: type=1326 audit(1767933695.325:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31050 comm="syz.6.6558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bd278f749 code=0x0 [ 2216.516627][ T5135] Bluetooth: hci2: command tx timeout [ 2217.038404][T16213] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.523290][T16213] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.389150][T16213] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.466744][T30925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2218.505718][T31087] syzkaller0: entered promiscuous mode [ 2218.521566][T31087] syzkaller0: entered allmulticast mode [ 2218.967394][T16213] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2219.464085][T16213] bridge_slave_1: left allmulticast mode [ 2219.541388][T16213] bridge_slave_1: left promiscuous mode [ 2219.730198][T16213] bridge0: port 2(bridge_slave_1) entered disabled state [ 2219.797934][T16213] bridge_slave_0: left allmulticast mode [ 2219.821592][T16213] bridge_slave_0: left promiscuous mode [ 2219.842190][T16213] bridge0: port 1(bridge_slave_0) entered disabled state [ 2221.342286][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.349463][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.602184][T16213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2221.614776][T16213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2221.625353][T16213] bond0 (unregistering): Released all slaves [ 2221.651817][T31128] syzkaller0: entered promiscuous mode [ 2221.659385][T31128] syzkaller0: entered allmulticast mode [ 2221.791289][T16213] tipc: Left network mode [ 2221.943780][T31148] netlink: 'syz.6.6576': attribute type 3 has an invalid length. [ 2221.958552][T31148] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6576'. [ 2222.573151][T31153] netlink: 'syz.3.6574': attribute type 4 has an invalid length. [ 2222.582589][T31153] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6574'. [ 2223.080150][T30925] veth0_vlan: entered promiscuous mode [ 2223.159927][T30925] veth1_vlan: entered promiscuous mode [ 2223.217457][T31158] netlink: 'syz.6.6577': attribute type 3 has an invalid length. [ 2223.256844][T31158] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6577'. [ 2223.310050][T16213] hsr_slave_0: left promiscuous mode [ 2223.332070][T16213] hsr_slave_1: left promiscuous mode [ 2223.351875][T16213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2223.371369][T16213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2223.387128][T16213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2223.412216][T16213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2223.464762][T31166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=31166 comm=syz.4.6579 [ 2223.490497][T16213] veth1_macvtap: left promiscuous mode [ 2223.504129][T16213] veth0_macvtap: left promiscuous mode [ 2223.511563][T16213] veth1_vlan: left promiscuous mode [ 2223.534508][T16213] veth0_vlan: left promiscuous mode [ 2224.254451][T30892] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 2224.313158][T16213] team0 (unregistering): Port device team_slave_1 removed [ 2224.349119][T16213] team0 (unregistering): Port device team_slave_0 removed [ 2225.138447][T31189] syzkaller0: entered promiscuous mode [ 2225.154074][T31189] syzkaller0: entered allmulticast mode [ 2225.348077][T30925] veth0_macvtap: entered promiscuous mode [ 2225.372867][T30925] veth1_macvtap: entered promiscuous mode [ 2225.391801][T31205] syzkaller0: entered promiscuous mode [ 2225.404228][T31205] syzkaller0: entered allmulticast mode [ 2226.081219][T30925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2226.114948][T30925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2226.135525][T29328] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.151215][T29328] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.312338][T29328] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.760788][T29328] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2227.588976][T31221] netlink: 'syz.4.6588': attribute type 4 has an invalid length. [ 2227.598485][T31221] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6588'. [ 2228.536200][ T30] audit: type=1400 audit(1767933707.525:1608): avc: denied { setattr } for pid=31237 comm="syz.6.6590" path="/dev/mixer" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 2228.627103][T31240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6590'. [ 2229.490605][T30892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2229.506474][T30892] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 2229.524365][T30892] usb 4-1: chopping to 0 config(s) [ 2229.529500][T30892] usb 4-1: can't read configurations, error -32 [ 2229.694574][T30892] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 2229.772811][ T1332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2229.786729][ T1332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2229.816084][ T1332] bond0 (unregistering): Released all slaves [ 2230.100262][T31224] syzkaller0: entered promiscuous mode [ 2230.124296][T31224] syzkaller0: entered allmulticast mode [ 2232.133659][ T1332] tipc: Disabling bearer [ 2232.141002][ T1332] tipc: Left network mode [ 2232.306042][ T3732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2232.340478][ T3732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2232.661016][T31293] syzkaller0: entered promiscuous mode [ 2232.670216][T31293] syzkaller0: entered allmulticast mode [ 2232.769981][ T30] audit: type=1400 audit(1767933711.765:1609): avc: denied { ioctl } for pid=31290 comm="syz.3.6597" path="socket:[113188]" dev="sockfs" ino=113188 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2232.827339][T23511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2235.400168][T23511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2235.727401][T31309] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6600'. [ 2235.809230][ T1332] hsr_slave_0: left promiscuous mode [ 2235.824965][ T1332] hsr_slave_1: left promiscuous mode [ 2235.932776][T31321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=31321 comm=syz.7.6604 [ 2235.939423][ T1332] veth1_macvtap: left promiscuous mode [ 2235.974602][T31321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2592 sclass=netlink_route_socket pid=31321 comm=syz.7.6604 [ 2236.117348][T31327] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2236.224318][ T1332] veth0_macvtap: left promiscuous mode [ 2236.236657][ T1332] veth1_vlan: left promiscuous mode [ 2236.258148][ T1332] veth0_vlan: left promiscuous mode [ 2236.560918][T31334] ieee802154 phy0 wpan0: encryption failed: -126 [ 2236.575117][ T1332] pim6reg (unregistering): left allmulticast mode [ 2236.677997][T31336] input: syz1 as /devices/virtual/input/input59 [ 2236.678310][ T30] audit: type=1400 audit(1767933715.675:1610): avc: denied { ioctl } for pid=31335 comm="syz.4.6602" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2236.834025][ T6170] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2236.984256][ T6170] usb 1-1: Using ep0 maxpacket: 8 [ 2236.999618][ T1332] team0 (unregistering): Port device team_slave_1 removed [ 2237.006889][ T6170] usb 1-1: config 0 has an invalid interface descriptor of length 8, skipping [ 2237.006938][ T6170] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2237.006959][ T6170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.036709][T11861] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 2237.045334][ T6170] usb 1-1: config 0 descriptor?? [ 2237.059027][ T6170] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 2237.100257][ T1332] team0 (unregistering): Port device team_slave_0 removed [ 2237.203028][T11861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2237.214654][T11861] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2237.235102][T11861] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2237.250648][T11861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.272275][T11861] usb 5-1: config 0 descriptor?? [ 2237.287929][T11861] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2237.303023][T11861] dvb-usb: bulk message failed: -22 (3/0) [ 2237.319158][T11861] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2237.340003][T11861] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2237.354647][T11861] usb 5-1: media controller created [ 2237.375214][T11861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2237.398079][T11861] dvb-usb: bulk message failed: -22 (6/0) [ 2237.405742][T11861] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2237.415258][T11861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input60 [ 2237.429046][T11861] dvb-usb: schedule remote query interval to 150 msecs. [ 2237.439682][T11861] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2237.588536][T31336] dibusb: i2c wr: len=61 is too big! [ 2237.588536][T31336] [ 2237.597016][T11861] dvb-usb: bulk message failed: -22 (1/0) [ 2237.603368][T11861] dvb-usb: error while querying for an remote control event. [ 2237.618866][ T5882] usb 5-1: USB disconnect, device number 44 [ 2237.639345][ T5882] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2237.814453][ T6170] usb 1-1: USB disconnect, device number 32 [ 2238.761147][T18695] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2238.775611][T18695] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2238.785514][T18695] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2238.795068][T18695] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2238.809309][T18695] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2238.852101][T31349] lo speed is unknown, defaulting to 1000 [ 2239.314118][T20817] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2239.527476][T20817] usb 1-1: device descriptor read/64, error -71 [ 2239.604427][T31349] chnl_net:caif_netlink_parms(): no params data found [ 2239.694328][ T6170] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2239.812737][T20817] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2239.904017][ T6170] usb 4-1: Using ep0 maxpacket: 8 [ 2239.913092][ T6170] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2239.928956][ T6170] usb 4-1: config 0 has no interfaces? [ 2239.954969][ T6170] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2239.970092][T20817] usb 1-1: device descriptor read/64, error -71 [ 2239.994013][ T6170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.030111][ T6170] usb 4-1: config 0 descriptor?? [ 2240.094529][T20817] usb usb1-port1: attempt power cycle [ 2240.103351][T31371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=31371 comm=syz.7.6616 [ 2240.119865][T31371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2592 sclass=netlink_route_socket pid=31371 comm=syz.7.6616 [ 2240.474013][T20817] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2240.494559][T20817] usb 1-1: device descriptor read/8, error -71 [ 2240.590932][T31349] bridge0: port 1(bridge_slave_0) entered blocking state [ 2240.599246][T31349] bridge0: port 1(bridge_slave_0) entered disabled state [ 2240.607188][T31349] bridge_slave_0: entered allmulticast mode [ 2240.614926][T31349] bridge_slave_0: entered promiscuous mode [ 2240.679219][T31349] bridge0: port 2(bridge_slave_1) entered blocking state [ 2240.700484][T31349] bridge0: port 2(bridge_slave_1) entered disabled state [ 2240.708072][T31349] bridge_slave_1: entered allmulticast mode [ 2240.719553][T31349] bridge_slave_1: entered promiscuous mode [ 2240.744085][T20817] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2240.769999][T20817] usb 1-1: device descriptor read/8, error -71 [ 2240.796478][T31349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2240.811152][T31349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2240.844750][ T5135] Bluetooth: hci0: command tx timeout [ 2240.894286][T20817] usb usb1-port1: unable to enumerate USB device [ 2240.902093][T31349] team0: Port device team_slave_0 added [ 2240.912461][T31349] team0: Port device team_slave_1 added [ 2240.957565][ T1332] bridge_slave_1: left allmulticast mode [ 2240.983286][ T1332] bridge_slave_1: left promiscuous mode [ 2241.010109][ T1332] bridge0: port 2(bridge_slave_1) entered disabled state [ 2241.046899][ T1332] bridge_slave_0: left allmulticast mode [ 2241.052545][ T1332] bridge_slave_0: left promiscuous mode [ 2241.098910][ T1332] bridge0: port 1(bridge_slave_0) entered disabled state [ 2241.250751][T31383] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 2241.257301][T31383] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2241.269459][T31383] vhci_hcd vhci_hcd.0: Device attached [ 2241.434740][T31384] vhci_hcd: connection closed [ 2241.436282][T16213] vhci_hcd vhci_hcd.7: stop threads [ 2241.477665][T16213] vhci_hcd vhci_hcd.7: release socket [ 2241.483241][T16213] vhci_hcd vhci_hcd.7: disconnect device [ 2241.905749][ T1332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2241.920397][ T1332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2241.931670][ T1332] bond0 (unregistering): Released all slaves [ 2241.965012][T31349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2241.973128][T31349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2242.000996][T31349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2242.036030][ T1332] : left promiscuous mode [ 2242.051918][T31349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2242.083706][T31349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2242.111465][T31349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2242.170489][ T1332] tipc: Left network mode [ 2242.180116][ T1332] IPVS: stopping backup sync thread 21766 ... [ 2242.260898][T31349] hsr_slave_0: entered promiscuous mode [ 2242.271282][T31349] hsr_slave_1: entered promiscuous mode [ 2242.282449][T31349] debugfs: 'hsr0' already exists in 'hsr' [ 2242.290949][T31349] Cannot create hsr debugfs directory [ 2242.934486][ T5135] Bluetooth: hci0: command tx timeout [ 2243.115757][T17550] usb 4-1: USB disconnect, device number 34 [ 2243.270370][ T1332] hsr_slave_0: left promiscuous mode [ 2243.289871][ T1332] hsr_slave_1: left promiscuous mode [ 2243.310006][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2243.327094][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2243.349165][ T1332] batman_adv: batadv0: Removing interface: dummy0 [ 2244.185485][ T30] audit: type=1400 audit(1767933723.185:1611): avc: denied { write } for pid=31409 comm="syz.4.6626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2244.398293][T31394] tipc: Enabled bearer , priority 0 [ 2244.411944][T31395] syzkaller0: entered promiscuous mode [ 2244.426010][T31395] syzkaller0: entered allmulticast mode [ 2244.471475][T31393] tipc: Resetting bearer [ 2244.509228][T31393] tipc: Disabling bearer [ 2244.894106][T17550] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 2245.004456][ T5135] Bluetooth: hci0: command tx timeout [ 2245.117705][ T1332] IPVS: stop unused estimator thread 0... [ 2245.155268][T17550] usb 8-1: device descriptor read/64, error -71 [ 2245.394355][T17550] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 2245.409666][T31349] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2245.429137][T31349] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2245.451956][T31349] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2245.466135][T31349] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2245.524611][T17550] usb 8-1: device descriptor read/64, error -71 [ 2245.594679][ T5936] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2245.635767][T17550] usb usb8-port1: attempt power cycle [ 2245.659688][T31349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2245.698089][T31349] 8021q: adding VLAN 0 to HW filter on device team0 [ 2245.710320][T29030] bridge0: port 1(bridge_slave_0) entered blocking state [ 2245.717461][T29030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2245.740331][T27416] bridge0: port 2(bridge_slave_1) entered blocking state [ 2245.747548][T27416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2245.755273][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 2245.785984][ T5936] usb 5-1: config 4 has an invalid interface number: 177 but max is 0 [ 2245.795995][ T5936] usb 5-1: config 4 has no interface number 0 [ 2245.802183][ T5936] usb 5-1: config 4 interface 177 has no altsetting 0 [ 2245.837338][ T5936] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=d1.53 [ 2245.867665][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.985134][T17550] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 2246.056396][T17550] usb 8-1: device descriptor read/8, error -71 [ 2246.370286][ T5936] usb 5-1: Cannot retrieve CPort count: -71 [ 2246.383145][ T5936] usb 5-1: Cannot retrieve CPort count: -71 [ 2246.391979][ T5936] es2_ap_driver 5-1:4.177: probe with driver es2_ap_driver failed with error -71 [ 2246.415089][T17550] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 2246.430840][ T5936] usb 5-1: USB disconnect, device number 45 [ 2246.455121][T17550] usb 8-1: device descriptor read/8, error -71 [ 2246.468635][T31349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2246.565038][T17550] usb usb8-port1: unable to enumerate USB device [ 2246.653723][T31349] veth0_vlan: entered promiscuous mode [ 2246.671765][T31349] veth1_vlan: entered promiscuous mode [ 2246.725348][T31349] veth0_macvtap: entered promiscuous mode [ 2246.735758][T31349] veth1_macvtap: entered promiscuous mode [ 2246.755937][T31349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2246.779418][T31349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2246.796904][ T73] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.816936][ T73] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.842363][ T73] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.858278][ T73] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.922559][T30978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2246.937004][T30978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2246.957687][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2246.966069][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2247.068442][T31464] tipc: Started in network mode [ 2247.078075][T31464] tipc: Node identity 02c21492433b, cluster identity 4711 [ 2247.086192][ T5135] Bluetooth: hci0: command tx timeout [ 2247.092553][T31464] tipc: Enabled bearer , priority 0 [ 2247.105346][T31464] syzkaller0: entered promiscuous mode [ 2247.110869][T31464] syzkaller0: entered allmulticast mode [ 2247.140735][T31463] tipc: Resetting bearer [ 2247.158178][T31463] tipc: Disabling bearer [ 2247.177035][T31468] syzkaller0: entered promiscuous mode [ 2247.182561][T31468] syzkaller0: entered allmulticast mode [ 2247.303637][T31472] syzkaller0: entered promiscuous mode [ 2247.311288][T31472] syzkaller0: entered allmulticast mode [ 2247.548254][ T5936] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2248.369074][T31481] netlink: 'syz.0.6644': attribute type 4 has an invalid length. [ 2248.377032][T31481] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6644'. [ 2248.966737][T31474] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 2248.984490][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 2248.991406][ T5936] usb 5-1: config 127 has an invalid interface number: 133 but max is 2 [ 2249.008705][ T5936] usb 5-1: config 127 has an invalid descriptor of length 1, skipping remainder of the config [ 2249.094394][T31487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6646'. [ 2249.828978][ T5135] Bluetooth: hci0: command 0x0401 tx timeout [ 2249.914546][ T5936] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 3 [ 2249.923627][ T5936] usb 5-1: config 127 has no interface number 0 [ 2249.973354][ T5936] usb 5-1: config 127 interface 133 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2250.014520][ T5936] usb 5-1: config 127 interface 133 has no altsetting 0 [ 2250.037752][ T5936] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=fe.24 [ 2250.054544][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2250.073242][ T5936] usb 5-1: Product: syz [ 2250.125518][ T5936] usb 5-1: Manufacturer: 部犅䵶䙒ỗ㗽콢趾䝴씠⏧箌䦳ꄦﯕ톧ಡ壾턡ྼ덟▓뤊柰ኚ⚾妫潜鎝鷕㩎妳᯦ꥯ휔흳뮐砽歪迢禳㌞迳쵪ᩕߍ룎垗줩ଜ૰ꛧﲁ䷃塠쩚ffl꽯믌삃䛏뺲䣴ꬡ疿猖仹芕帇⁒荳췋묎鰭횂ꦀ揠਽됶 [ 2250.165073][T29820] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 2250.232993][ T5936] usb 5-1: SerialNumber: syz [ 2250.370579][ T5936] usb 5-1: can't set config #127, error -71 [ 2250.377319][T29820] usb 8-1: Using ep0 maxpacket: 32 [ 2250.385615][ T5936] usb 5-1: USB disconnect, device number 46 [ 2250.398039][T29820] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2250.408333][T29820] usb 8-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 2250.424133][T29820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.456341][T29820] usb 8-1: config 0 descriptor?? [ 2250.457972][T31498] tipc: Enabled bearer , priority 0 [ 2250.485117][T31498] syzkaller0: entered promiscuous mode [ 2250.497250][T31498] syzkaller0: entered allmulticast mode [ 2250.521964][T31498] tipc: Resetting bearer [ 2250.799074][T31497] tipc: Resetting bearer [ 2250.878713][T31497] tipc: Disabling bearer [ 2251.023441][T31504] syzkaller0: entered promiscuous mode [ 2251.144131][T31504] syzkaller0: entered allmulticast mode [ 2251.328023][T31514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6657'. [ 2251.427071][T31514] : entered promiscuous mode [ 2251.444667][T20817] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2251.644912][T20817] usb 5-1: device descriptor read/64, error -71 [ 2252.347892][T31518] netlink: 'syz.3.6658': attribute type 4 has an invalid length. [ 2252.357067][T31518] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6658'. [ 2253.019805][T29820] cdc_subset 8-1:0.0: probe with driver cdc_subset failed with error -71 [ 2253.031096][T29820] usb 8-1: USB disconnect, device number 6 [ 2253.106753][T20817] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2253.166515][T31524] syzkaller0: entered promiscuous mode [ 2253.175318][T31526] program syz.0.6659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2253.192687][T31524] syzkaller0: entered allmulticast mode [ 2253.254449][T20817] usb 5-1: device descriptor read/64, error -71 [ 2253.364354][T20817] usb usb5-port1: attempt power cycle [ 2253.703969][T20817] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2253.794926][T20817] usb 5-1: device descriptor read/8, error -71 [ 2254.064038][T20817] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2254.093129][T31539] syzkaller0: entered promiscuous mode [ 2254.099339][T31539] syzkaller0: entered allmulticast mode [ 2254.109668][T20817] usb 5-1: device descriptor read/8, error -71 [ 2254.247776][T20817] usb usb5-port1: unable to enumerate USB device [ 2254.467328][T31553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=31553 comm=syz.4.6668 [ 2254.486785][T31555] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 2254.496814][T31550] syzkaller0: entered promiscuous mode [ 2254.504482][T31550] syzkaller0: entered allmulticast mode [ 2254.638196][T31559] syzkaller0: entered promiscuous mode [ 2254.643728][T31559] syzkaller0: entered allmulticast mode [ 2254.836232][T31567] syzkaller0: entered promiscuous mode [ 2254.858453][T31567] syzkaller0: entered allmulticast mode [ 2255.609155][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2255.819046][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2255.958892][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2255.991488][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2256.001838][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2256.025714][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2256.036031][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2256.047390][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2256.058639][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2256.070955][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2256.082653][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2256.117819][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2256.145688][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2256.192769][T31584] 9pnet_fd: p9_fd_create_tcp (31584): problem connecting socket to 127.0.0.1 [ 2256.534034][ T6170] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 2256.660367][T31608] syzkaller0: entered promiscuous mode [ 2256.666764][T31608] syzkaller0: entered allmulticast mode [ 2256.983463][T31611] syzkaller0: entered promiscuous mode [ 2257.008369][T31611] syzkaller0: entered allmulticast mode [ 2257.579829][T31622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6693'. [ 2258.053949][T30245] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2258.566732][T31634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6696'. [ 2258.595418][T30245] usb 7-1: Using ep0 maxpacket: 32 [ 2258.618483][T31624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2258.627541][T31624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2259.055666][T22650] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2259.664926][T22650] usb 1-1: Using ep0 maxpacket: 8 [ 2259.849351][T22650] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2259.867560][T22650] usb 1-1: config 0 has no interfaces? [ 2259.877646][T22650] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2259.988784][T22650] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2260.010599][T22650] usb 1-1: config 0 descriptor?? [ 2260.012600][T31655] tipc: Started in network mode [ 2260.048521][T31655] tipc: Node identity c28b45c85d55, cluster identity 4711 [ 2260.069013][T31655] tipc: Enabled bearer , priority 0 [ 2260.094609][T31658] syzkaller0: entered promiscuous mode [ 2260.100107][T31658] syzkaller0: entered allmulticast mode [ 2260.174712][T31655] tipc: Resetting bearer [ 2260.199785][T31654] tipc: Resetting bearer [ 2260.676793][T30245] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2260.705449][T30245] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 2260.726559][T30245] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2260.743824][T30245] usb 7-1: can't read configurations, error -71 [ 2260.923366][T31654] tipc: Disabling bearer [ 2261.259099][T31673] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6709'. [ 2261.299017][T31671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6708'. [ 2262.002521][ T6170] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2262.071695][T12208] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 2262.082524][T20817] usb 1-1: USB disconnect, device number 37 [ 2262.092613][ T6170] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 2262.102678][ T6170] usb 5-1: chopping to 0 config(s) [ 2262.111258][ T6170] usb 5-1: can't read configurations, error -32 [ 2262.254130][ T6170] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 2262.494185][ T6170] usb 5-1: device descriptor read/64, error -32 [ 2262.742608][ T6170] usb usb5-port1: attempt power cycle [ 2264.104493][ T6170] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 2264.134678][ T6170] usb 5-1: device descriptor read/8, error -32 [ 2265.425991][ T6170] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 2265.467535][ T6170] usb 5-1: device descriptor read/8, error -32 [ 2265.574238][ T6170] usb usb5-port1: unable to enumerate USB device [ 2265.592422][T31705] tipc: Enabled bearer , priority 0 [ 2265.600895][T31705] syzkaller0: entered promiscuous mode [ 2265.608313][T31705] syzkaller0: entered allmulticast mode [ 2265.623620][T31705] tipc: Resetting bearer [ 2265.644353][T31704] tipc: Resetting bearer [ 2265.650174][T12208] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2265.670097][T12208] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 2265.715191][T12208] usb 8-1: can't read configurations, error -71 [ 2265.735591][T31704] tipc: Disabling bearer [ 2266.414833][T31716] syzkaller0: entered promiscuous mode [ 2266.420429][T31716] syzkaller0: entered allmulticast mode [ 2266.556160][T31713] syzkaller0: entered promiscuous mode [ 2266.594518][T31713] syzkaller0: entered allmulticast mode [ 2266.598864][T31740] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6722'. [ 2267.874579][T31746] netlink: 'syz.0.6726': attribute type 4 has an invalid length. [ 2267.882321][T31746] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6726'. [ 2268.153939][ T5951] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2268.325841][ T5951] usb 7-1: Using ep0 maxpacket: 16 [ 2268.346254][ T5951] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2268.366164][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2268.379377][ T5951] usb 7-1: Product: syz [ 2268.383575][ T5951] usb 7-1: Manufacturer: syz [ 2268.389493][ T5951] usb 7-1: SerialNumber: syz [ 2268.396542][ T5951] usb 7-1: config 0 descriptor?? [ 2268.638127][ T5951] usb 7-1: USB disconnect, device number 17 [ 2270.635085][T31757] syzkaller0: entered promiscuous mode [ 2270.640594][T31757] syzkaller0: entered allmulticast mode [ 2270.668717][T31774] tipc: Started in network mode [ 2270.673606][T31774] tipc: Node identity fa4948bba2b6, cluster identity 4711 [ 2270.684916][T31774] tipc: Enabled bearer , priority 0 [ 2270.706230][T31776] tipc: Resetting bearer [ 2270.773638][T31772] tipc: Disabling bearer [ 2271.262604][T31790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6734'. [ 2271.384630][T18619] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 2271.425297][T31798] syzkaller0: entered promiscuous mode [ 2271.433497][T31798] syzkaller0: entered allmulticast mode [ 2272.688242][T31812] syzkaller0: entered promiscuous mode [ 2273.172196][T31812] syzkaller0: entered allmulticast mode [ 2273.350496][T31817] netlink: 'syz.7.6742': attribute type 4 has an invalid length. [ 2273.358518][T31817] netlink: 17 bytes leftover after parsing attributes in process `syz.7.6742'. [ 2273.708841][T31819] syzkaller0: entered promiscuous mode [ 2273.714550][T31819] syzkaller0: entered allmulticast mode [ 2274.539719][T31833] tipc: Enabled bearer , priority 0 [ 2274.571470][T31833] syzkaller0: entered promiscuous mode [ 2274.594057][T31833] syzkaller0: entered allmulticast mode [ 2274.705019][T31832] tipc: Resetting bearer [ 2274.797668][T31832] tipc: Disabling bearer [ 2275.273968][T12208] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2275.418958][T31847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6753'. [ 2275.769362][T12208] usb 5-1: Using ep0 maxpacket: 8 [ 2275.812402][T31847] : entered promiscuous mode [ 2275.945977][T12208] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2275.988513][T12208] usb 5-1: config 0 has no interfaces? [ 2276.007496][T12208] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2276.032206][T12208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.063677][T12208] usb 5-1: config 0 descriptor?? [ 2276.933650][T31857] syzkaller0: entered promiscuous mode [ 2276.949901][T31857] syzkaller0: entered allmulticast mode [ 2278.524604][T31864] netlink: 'syz.0.6758': attribute type 4 has an invalid length. [ 2278.532350][T31864] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6758'. [ 2278.868455][ T6170] usb 5-1: USB disconnect, device number 55 [ 2278.903304][T18619] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2278.975828][T18619] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 2278.983434][T18619] usb 1-1: chopping to 0 config(s) [ 2278.989874][T18619] usb 1-1: can't read configurations, error -32 [ 2279.104536][T29820] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 2279.174613][T18619] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 2279.182952][T31873] tipc: Enabled bearer , priority 0 [ 2279.190988][T31873] syzkaller0: entered promiscuous mode [ 2279.198055][T31873] syzkaller0: entered allmulticast mode [ 2279.275405][T31872] tipc: Resetting bearer [ 2279.334141][T18619] usb 1-1: device descriptor read/64, error -32 [ 2279.468407][T18619] usb usb1-port1: attempt power cycle [ 2280.162354][T31872] tipc: Disabling bearer [ 2280.326974][T29820] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2280.340048][T29820] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2280.367317][T18619] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 2280.377736][T29820] usb 4-1: can't read configurations, error -71 [ 2280.425702][T18619] usb 1-1: device descriptor read/8, error -32 [ 2280.495397][T31883] syzkaller0: entered promiscuous mode [ 2280.500910][T31883] syzkaller0: entered allmulticast mode [ 2280.588632][ T5936] tipc: Node number set to 1106842770 [ 2280.704355][T18619] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 2280.734692][T18619] usb 1-1: device descriptor read/8, error -32 [ 2280.854662][T18619] usb usb1-port1: unable to enumerate USB device [ 2281.595139][T31895] syzkaller0: entered promiscuous mode [ 2281.600645][T31895] syzkaller0: entered allmulticast mode [ 2282.358787][T31908] syzkaller0: entered promiscuous mode [ 2282.374514][T31908] syzkaller0: entered allmulticast mode [ 2282.394603][T22195] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2282.555654][T22195] usb 5-1: Using ep0 maxpacket: 8 [ 2282.610987][T22195] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2282.622856][T22195] usb 5-1: config 0 has no interfaces? [ 2282.629344][T22195] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2282.643365][T22195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2282.691311][T22195] usb 5-1: config 0 descriptor?? [ 2282.770161][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2282.777342][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.675134][T31924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2283.732019][T31924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2284.052949][T31928] tipc: Enabled bearer , priority 0 [ 2284.207999][T31928] syzkaller0: entered promiscuous mode [ 2284.225276][T31928] syzkaller0: entered allmulticast mode [ 2284.298250][T31927] tipc: Resetting bearer [ 2284.340342][T31927] tipc: Disabling bearer [ 2284.727319][T31934] syzkaller0: entered promiscuous mode [ 2284.756075][T31934] syzkaller0: entered allmulticast mode [ 2285.255091][ T5936] usb 5-1: USB disconnect, device number 56 [ 2285.304480][T18619] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2285.339888][T31942] syzkaller0: entered promiscuous mode [ 2285.364838][T31942] syzkaller0: entered allmulticast mode [ 2285.464328][T18619] usb 4-1: Using ep0 maxpacket: 16 [ 2285.492379][T18619] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2285.505697][ T6170] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2285.522811][T18619] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2285.534572][T18619] usb 4-1: Product: syz [ 2285.538744][T18619] usb 4-1: Manufacturer: syz [ 2285.543330][T18619] usb 4-1: SerialNumber: syz [ 2285.575951][T18619] usb 4-1: config 0 descriptor?? [ 2285.697879][ T6170] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2285.944060][ T6170] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2285.957767][ T6170] usb 7-1: Product: syz [ 2285.961962][ T6170] usb 7-1: Manufacturer: syz [ 2285.970086][T12208] usb 4-1: USB disconnect, device number 37 [ 2285.991854][ T6170] usb 7-1: SerialNumber: syz [ 2286.004042][ T6170] usb 7-1: config 0 descriptor?? [ 2286.221984][ T6170] usb 7-1: USB disconnect, device number 18 [ 2286.354543][T22195] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2287.027034][T22195] usb 1-1: Using ep0 maxpacket: 16 [ 2287.059320][T22195] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2287.095274][T22195] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2287.103384][T22195] usb 1-1: Product: syz [ 2287.128268][T22195] usb 1-1: Manufacturer: syz [ 2287.132890][T22195] usb 1-1: SerialNumber: syz [ 2287.163502][T22195] usb 1-1: config 0 descriptor?? [ 2287.322327][T31958] tipc: Enabled bearer , priority 0 [ 2287.333332][T31958] syzkaller0: entered promiscuous mode [ 2287.339956][T31958] syzkaller0: entered allmulticast mode [ 2287.379133][T31958] tipc: Resetting bearer [ 2287.480880][T31957] tipc: Resetting bearer [ 2287.506831][T22195] usb 1-1: USB disconnect, device number 42 [ 2287.614966][T31957] tipc: Disabling bearer [ 2287.802368][T31966] syzkaller0: entered promiscuous mode [ 2287.821804][T31966] syzkaller0: entered allmulticast mode [ 2287.865722][T31969] tipc: Enabled bearer , priority 0 [ 2287.940943][T31969] syzkaller0: entered promiscuous mode [ 2288.014559][T31969] syzkaller0: entered allmulticast mode [ 2288.180687][T31969] tipc: Resetting bearer [ 2288.206815][T31970] syzkaller0: entered promiscuous mode [ 2288.212431][T31970] syzkaller0: entered allmulticast mode [ 2289.323124][T31982] netlink: 'syz.3.6795': attribute type 4 has an invalid length. [ 2289.330897][T31982] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6795'. [ 2289.370891][T31968] tipc: Resetting bearer [ 2289.564032][T31968] tipc: Disabling bearer [ 2289.618997][T22195] tipc: Node number set to 1493125307 [ 2293.344015][ T5881] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2293.418742][T32017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6806'. [ 2293.495686][T32017] : entered promiscuous mode [ 2293.524172][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 2293.611212][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2293.702129][ T5881] usb 5-1: config 0 has no interfaces? [ 2293.739788][ T5881] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2293.802038][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2293.826252][ T5881] usb 5-1: config 0 descriptor?? [ 2294.227269][T32021] syzkaller0: entered promiscuous mode [ 2294.694308][T32021] syzkaller0: entered allmulticast mode [ 2294.730467][T32027] macvlan2: entered promiscuous mode [ 2294.757155][T32029] macvlan3: entered promiscuous mode [ 2294.857000][T32034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6809'. [ 2294.867813][T32034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6809'. [ 2295.354623][ T5881] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2295.587964][T32044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=32044 comm=syz.0.6812 [ 2295.621959][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 2295.651036][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2295.815420][ T5881] usb 4-1: config 0 has no interfaces? [ 2295.881634][ T5881] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2295.936119][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2295.998970][ T5881] usb 4-1: Product: syz [ 2296.035443][ T5881] usb 4-1: Manufacturer: syz [ 2296.077076][ T5881] usb 4-1: SerialNumber: syz [ 2297.023685][ T6170] usb 5-1: USB disconnect, device number 57 [ 2297.035775][ T5881] usb 4-1: config 0 descriptor?? [ 2297.248740][T32039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2297.257586][T32039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2298.126229][ C1] ================================================================== [ 2298.134315][ C1] BUG: KASAN: slab-use-after-free in timer_is_static_object+0x80/0x90 [ 2298.142455][ C1] Read of size 8 at addr ffff88807e5e8498 by task syz.4.6813/32052 [ 2298.150315][ C1] [ 2298.152617][ C1] CPU: 1 UID: 0 PID: 32052 Comm: syz.4.6813 Tainted: G L syzkaller #0 PREEMPT(full) [ 2298.152634][ C1] Tainted: [L]=SOFTLOCKUP [ 2298.152638][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2298.152645][ C1] Call Trace: [ 2298.152650][ C1] [ 2298.152655][ C1] dump_stack_lvl+0x116/0x1f0 [ 2298.152672][ C1] print_report+0xcd/0x630 [ 2298.152687][ C1] ? __virt_addr_valid+0x81/0x610 [ 2298.152698][ C1] ? __phys_addr+0xe8/0x180 [ 2298.152708][ C1] ? timer_is_static_object+0x80/0x90 [ 2298.152724][ C1] kasan_report+0xe0/0x110 [ 2298.152738][ C1] ? timer_is_static_object+0x80/0x90 [ 2298.152756][ C1] timer_is_static_object+0x80/0x90 [ 2298.152773][ C1] lookup_object_or_alloc.part.0+0x420/0x590 [ 2298.152789][ C1] debug_object_activate+0x326/0x4c0 [ 2298.152803][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 2298.152816][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2298.152830][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 2298.152842][ C1] ? lock_timer_base+0x127/0x1d0 [ 2298.152858][ C1] ? lock_timer_base+0x16c/0x1d0 [ 2298.152875][ C1] __mod_timer+0x814/0xd30 [ 2298.152889][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 2298.152905][ C1] ? __pfx___mod_timer+0x10/0x10 [ 2298.152919][ C1] ? __timer_delete+0xf5/0x1c0 [ 2298.152930][ C1] ? __pfx___timer_delete+0x10/0x10 [ 2298.152942][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 2298.152955][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2298.152971][ C1] add_timer+0x62/0x90 [ 2298.152985][ C1] call_timer_fn+0x19a/0x5a0 [ 2298.152997][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2298.153011][ C1] ? mark_held_locks+0x49/0x80 [ 2298.153023][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2298.153039][ C1] __run_timers+0x74a/0xae0 [ 2298.153053][ C1] ? __pfx___run_timers+0x10/0x10 [ 2298.153070][ C1] run_timer_base+0x114/0x190 [ 2298.153083][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2298.153097][ C1] run_timer_softirq+0x1a/0x40 [ 2298.153110][ C1] handle_softirqs+0x219/0x950 [ 2298.153127][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2298.153144][ C1] __irq_exit_rcu+0x109/0x170 [ 2298.153159][ C1] irq_exit_rcu+0x9/0x30 [ 2298.153179][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2298.153193][ C1] [ 2298.153196][ C1] [ 2298.153200][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2298.153214][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 2298.153227][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 fe 1e f6 48 89 df e8 ce 50 1f f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 53 0f f6 65 8b 05 2e b9 37 08 85 c0 74 16 5b [ 2298.153238][ C1] RSP: 0018:ffffc90005137760 EFLAGS: 00000246 [ 2298.153248][ C1] RAX: 0000000000000006 RBX: ffff88803400d880 RCX: 0000000000000006 [ 2298.153255][ C1] RDX: 0000000000000000 RSI: ffffffff8dace187 RDI: ffffffff8bf2b380 [ 2298.153263][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 [ 2298.153269][ C1] R10: ffffffff9088b8d7 R11: ffff888046ec54b0 R12: ffff888022b76000 [ 2298.153276][ C1] R13: 0000000000000246 R14: ffff88803400d868 R15: ffffc900051378e8 [ 2298.153288][ C1] __skb_try_recv_datagram+0x172/0x4f0 [ 2298.153305][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 2298.153320][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 2298.153338][ C1] __unix_dgram_recvmsg+0x1bc/0xc30 [ 2298.153358][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 2298.153376][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 2298.153391][ C1] ? iovec_from_user+0xbb/0x140 [ 2298.153408][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 2298.153427][ C1] ____sys_recvmsg+0x5f9/0x6b0 [ 2298.153443][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2298.153459][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 2298.153472][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2298.153486][ C1] ___sys_recvmsg+0x114/0x1a0 [ 2298.153497][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 2298.153512][ C1] ? __pfx___might_resched+0x10/0x10 [ 2298.153524][ C1] do_recvmmsg+0x2fe/0x750 [ 2298.153535][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 2298.153547][ C1] ? do_futex+0x122/0x350 [ 2298.153565][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 2298.153584][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 2298.153606][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2298.153630][ C1] do_syscall_64+0xcd/0xf80 [ 2298.153645][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2298.153656][ C1] RIP: 0033:0x7fdc3eb8f749 [ 2298.153665][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2298.153676][ C1] RSP: 002b:00007fdc3f959038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2298.153686][ C1] RAX: ffffffffffffffda RBX: 00007fdc3ede6090 RCX: 00007fdc3eb8f749 [ 2298.153693][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2298.153700][ C1] RBP: 00007fdc3ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2298.153706][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2298.153713][ C1] R13: 00007fdc3ede6128 R14: 00007fdc3ede6090 R15: 00007ffd6a8a5748 [ 2298.153723][ C1] [ 2298.153727][ C1] [ 2298.645568][ C1] Allocated by task 29852: [ 2298.649955][ C1] kasan_save_stack+0x33/0x60 [ 2298.654612][ C1] kasan_save_track+0x14/0x30 [ 2298.659263][ C1] __kasan_kmalloc+0xaa/0xb0 [ 2298.663826][ C1] rose_rt_ioctl+0x880/0x2580 [ 2298.668484][ C1] rose_ioctl+0x64d/0x7c0 [ 2298.672786][ C1] sock_do_ioctl+0x118/0x280 [ 2298.677352][ C1] sock_ioctl+0x227/0x6b0 [ 2298.681657][ C1] __x64_sys_ioctl+0x18e/0x210 [ 2298.686403][ C1] do_syscall_64+0xcd/0xf80 [ 2298.690891][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2298.696788][ C1] [ 2298.699105][ C1] Freed by task 32051: [ 2298.703148][ C1] kasan_save_stack+0x33/0x60 [ 2298.707801][ C1] kasan_save_track+0x14/0x30 [ 2298.712449][ C1] kasan_save_free_info+0x3b/0x60 [ 2298.717445][ C1] __kasan_slab_free+0x5f/0x80 [ 2298.722180][ C1] kfree+0x2f8/0x6e0 [ 2298.726047][ C1] rose_timer_expiry+0x53f/0x630 [ 2298.730954][ C1] call_timer_fn+0x19a/0x5a0 [ 2298.735517][ C1] __run_timers+0x74a/0xae0 [ 2298.739993][ C1] run_timer_base+0x114/0x190 [ 2298.744654][ C1] run_timer_softirq+0x1a/0x40 [ 2298.749402][ C1] handle_softirqs+0x219/0x950 [ 2298.754142][ C1] __irq_exit_rcu+0x109/0x170 [ 2298.758794][ C1] irq_exit_rcu+0x9/0x30 [ 2298.763013][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2298.768619][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2298.774569][ C1] [ 2298.776865][ C1] The buggy address belongs to the object at ffff88807e5e8400 [ 2298.776865][ C1] which belongs to the cache kmalloc-512 of size 512 [ 2298.790891][ C1] The buggy address is located 152 bytes inside of [ 2298.790891][ C1] freed 512-byte region [ffff88807e5e8400, ffff88807e5e8600) [ 2298.804658][ C1] [ 2298.806958][ C1] The buggy address belongs to the physical page: [ 2298.813346][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e5e8 [ 2298.822077][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2298.830558][ C1] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2298.838444][ C1] page_type: f5(slab) [ 2298.842398][ C1] raw: 00fff00000000040 ffff88813ff26c80 ffffea0000a54f00 dead000000000003 [ 2298.850952][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2298.859506][ C1] head: 00fff00000000040 ffff88813ff26c80 ffffea0000a54f00 dead000000000003 [ 2298.868157][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2298.876800][ C1] head: 00fff00000000002 ffffea0001f97a01 00000000ffffffff 00000000ffffffff [ 2298.885442][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 2298.894082][ C1] page dumped because: kasan: bad access detected [ 2298.900460][ C1] page_owner tracks the page as allocated [ 2298.906143][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 29165, tgid 29165 (syz-executor), ts 2066518998187, free_ts 1956315063990 [ 2298.927998][ C1] post_alloc_hook+0x1af/0x220 [ 2298.932754][ C1] get_page_from_freelist+0xd0b/0x31a0 [ 2298.938185][ C1] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 2298.944056][ C1] alloc_pages_mpol+0x1fb/0x550 [ 2298.948892][ C1] new_slab+0x2c3/0x430 [ 2298.953029][ C1] ___slab_alloc+0xe18/0x1c90 [ 2298.957690][ C1] __slab_alloc.constprop.0+0x63/0x110 [ 2298.963152][ C1] __kmalloc_noprof+0x4fc/0x910 [ 2298.968002][ C1] fib6_info_alloc+0x40/0x160 [ 2298.972673][ C1] ip6_route_info_create+0x14c/0xaa0 [ 2298.977948][ C1] ip6_route_add.part.0+0x22/0x1d0 [ 2298.983046][ C1] ip6_route_add+0x45/0x60 [ 2298.987436][ C1] addrconf_add_mroute+0x1dd/0x350 [ 2298.992534][ C1] addrconf_add_dev+0x14e/0x1a0 [ 2298.997361][ C1] inet6_addr_add+0xfe/0x9b0 [ 2299.001932][ C1] inet6_rtm_newaddr+0x1619/0x1c50 [ 2299.007020][ C1] page last free pid 27669 tgid 27669 stack trace: [ 2299.013495][ C1] __free_frozen_pages+0x7df/0x1170 [ 2299.018673][ C1] tlb_remove_table_rcu+0x2b2/0x390 [ 2299.023878][ C1] rcu_core+0x79c/0x15f0 [ 2299.028116][ C1] handle_softirqs+0x219/0x950 [ 2299.032853][ C1] __irq_exit_rcu+0x109/0x170 [ 2299.037506][ C1] irq_exit_rcu+0x9/0x30 [ 2299.041725][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2299.047332][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2299.053282][ C1] [ 2299.055580][ C1] Memory state around the buggy address: [ 2299.061178][ C1] ffff88807e5e8380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2299.069209][ C1] ffff88807e5e8400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2299.077242][ C1] >ffff88807e5e8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2299.085280][ C1] ^ [ 2299.090107][ C1] ffff88807e5e8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2299.098147][ C1] ffff88807e5e8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2299.106186][ C1] ================================================================== [ 2299.114236][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2299.121411][ C1] CPU: 1 UID: 0 PID: 32052 Comm: syz.4.6813 Tainted: G L syzkaller #0 PREEMPT(full) [ 2299.132334][ C1] Tainted: [L]=SOFTLOCKUP [ 2299.136639][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2299.146668][ C1] Call Trace: [ 2299.149920][ C1] [ 2299.152741][ C1] dump_stack_lvl+0x3d/0x1f0 [ 2299.157308][ C1] vpanic+0x640/0x6f0 [ 2299.161264][ C1] panic+0xca/0xd0 [ 2299.164957][ C1] ? __pfx_panic+0x10/0x10 [ 2299.169346][ C1] ? end_report+0x4c/0x160 [ 2299.173743][ C1] ? rcu_is_watching+0x12/0xc0 [ 2299.178477][ C1] ? lock_release+0x201/0x2d0 [ 2299.183126][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 2299.188212][ C1] check_panic_on_warn+0xab/0xb0 [ 2299.193126][ C1] end_report+0x107/0x160 [ 2299.197431][ C1] kasan_report+0xee/0x110 [ 2299.201821][ C1] ? timer_is_static_object+0x80/0x90 [ 2299.207172][ C1] timer_is_static_object+0x80/0x90 [ 2299.212358][ C1] lookup_object_or_alloc.part.0+0x420/0x590 [ 2299.218319][ C1] debug_object_activate+0x326/0x4c0 [ 2299.223586][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 2299.229388][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2299.235172][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 2299.240516][ C1] ? lock_timer_base+0x127/0x1d0 [ 2299.245431][ C1] ? lock_timer_base+0x16c/0x1d0 [ 2299.250348][ C1] __mod_timer+0x814/0xd30 [ 2299.254757][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 2299.259498][ C1] ? __pfx___mod_timer+0x10/0x10 [ 2299.264411][ C1] ? __timer_delete+0xf5/0x1c0 [ 2299.269146][ C1] ? __pfx___timer_delete+0x10/0x10 [ 2299.274315][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 2299.279498][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2299.285109][ C1] add_timer+0x62/0x90 [ 2299.289153][ C1] call_timer_fn+0x19a/0x5a0 [ 2299.293716][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2299.298800][ C1] ? mark_held_locks+0x49/0x80 [ 2299.303539][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2299.309166][ C1] __run_timers+0x74a/0xae0 [ 2299.313645][ C1] ? __pfx___run_timers+0x10/0x10 [ 2299.318655][ C1] run_timer_base+0x114/0x190 [ 2299.323307][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2299.328481][ C1] run_timer_softirq+0x1a/0x40 [ 2299.333229][ C1] handle_softirqs+0x219/0x950 [ 2299.337997][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2299.343260][ C1] __irq_exit_rcu+0x109/0x170 [ 2299.347912][ C1] irq_exit_rcu+0x9/0x30 [ 2299.352137][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2299.357747][ C1] [ 2299.360655][ C1] [ 2299.363573][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2299.369536][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 2299.375924][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 fe 1e f6 48 89 df e8 ce 50 1f f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 53 0f f6 65 8b 05 2e b9 37 08 85 c0 74 16 5b [ 2299.395525][ C1] RSP: 0018:ffffc90005137760 EFLAGS: 00000246 [ 2299.401574][ C1] RAX: 0000000000000006 RBX: ffff88803400d880 RCX: 0000000000000006 [ 2299.409530][ C1] RDX: 0000000000000000 RSI: ffffffff8dace187 RDI: ffffffff8bf2b380 [ 2299.417480][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 [ 2299.425437][ C1] R10: ffffffff9088b8d7 R11: ffff888046ec54b0 R12: ffff888022b76000 [ 2299.433383][ C1] R13: 0000000000000246 R14: ffff88803400d868 R15: ffffc900051378e8 [ 2299.441348][ C1] __skb_try_recv_datagram+0x172/0x4f0 [ 2299.446799][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 2299.452148][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 2299.458109][ C1] __unix_dgram_recvmsg+0x1bc/0xc30 [ 2299.463298][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 2299.468998][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 2299.473738][ C1] ? iovec_from_user+0xbb/0x140 [ 2299.478567][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 2299.483481][ C1] ____sys_recvmsg+0x5f9/0x6b0 [ 2299.488240][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2299.493507][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 2299.498245][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2299.503416][ C1] ___sys_recvmsg+0x114/0x1a0 [ 2299.508066][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 2299.513238][ C1] ? __pfx___might_resched+0x10/0x10 [ 2299.518494][ C1] do_recvmmsg+0x2fe/0x750 [ 2299.522883][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 2299.527819][ C1] ? do_futex+0x122/0x350 [ 2299.532128][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 2299.537057][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 2299.542059][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2299.547578][ C1] do_syscall_64+0xcd/0xf80 [ 2299.552057][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2299.557921][ C1] RIP: 0033:0x7fdc3eb8f749 [ 2299.562319][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2299.581905][ C1] RSP: 002b:00007fdc3f959038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2299.590290][ C1] RAX: ffffffffffffffda RBX: 00007fdc3ede6090 RCX: 00007fdc3eb8f749 [ 2299.598246][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2299.606188][ C1] RBP: 00007fdc3ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2299.614144][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2299.622088][ C1] R13: 00007fdc3ede6128 R14: 00007fdc3ede6090 R15: 00007ffd6a8a5748 [ 2299.630037][ C1] [ 2299.633352][ C1] Kernel Offset: disabled [ 2299.637658][ C1] Rebooting in 86400 seconds..