last executing test programs: 3m32.812176328s ago: executing program 1 (id=351): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="f0", 0x1}, {&(0x7f0000000e00)="cf6a053a5a", 0x5}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000900)="8a", 0x1}, {&(0x7f00000005c0)="f5", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000000bc0)="fed8", 0x2}, {&(0x7f0000000940)="f5a6", 0x2}, {&(0x7f00000002c0)='y', 0x1}, {&(0x7f0000000200)="8e", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)='%2', 0x2}, {&(0x7f0000000680)="c3", 0x1}], 0x2}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet(r0, &(0x7f00000004c0)="1e", 0x1, 0xc0, 0x0, 0x0) 3m32.708650599s ago: executing program 1 (id=352): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207}, {&(0x7f0000000540)=""/162}, {&(0x7f0000000600)=""/77}], 0x0, &(0x7f0000000680)=""/224}, 0x6}, {{&(0x7f0000000780)=@isdn, 0x0, &(0x7f0000000800)=[{&(0x7f0000001240)=""/4096}, {&(0x7f0000000240)=""/64}], 0x0, &(0x7f0000000ac0)=""/174}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)=""/224}, {&(0x7f0000000c00)=""/87}, {&(0x7f0000000dc0)=""/209}], 0x0, &(0x7f0000000ec0)=""/195}, 0x81}], 0x101f2043b8267e, 0x10120, 0x0) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x1, 0x5, 0x0, 0x6, "23ba4cb148e27a62778ab6e2ad47e2f096dbae5488d838161da26752700a993a9898b753acbbe03034a8e6487bac34f3e95e88aaaafc3788337701a4cd90bb", 0x21}, 0x60) 3m32.533552321s ago: executing program 1 (id=353): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000000000000080000000000000000000000000000fc0200000000", @ANYBLOB="0000000000000000cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffff"], 0x27c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="20800000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf2504000000090003007379"], 0x20}, 0x1, 0x0, 0x0, 0xc004058}, 0x48004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m32.099178263s ago: executing program 1 (id=354): socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x485b, 0x8000008, 0xc, 0x0, 0x0, 0xfffffffa, 0xfaa, 0x2}}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) socket$kcm(0xa, 0x5, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x6) 3m25.032160217s ago: executing program 1 (id=362): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="f0", 0x1}, {&(0x7f0000000e00)="cf6a053a5a", 0x5}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000900)="8a", 0x1}, {&(0x7f00000005c0)="f5", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000000bc0)="fed8", 0x2}, {&(0x7f0000000940)="f5a6", 0x2}, {&(0x7f00000002c0)='y', 0x1}, {&(0x7f0000000200)="8e", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)='%2', 0x2}, {&(0x7f0000000680)="c3", 0x1}], 0x2}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet(r0, &(0x7f00000004c0)="1e", 0x1, 0xc0, 0x0, 0x0) 3m24.840873397s ago: executing program 1 (id=363): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207}, {&(0x7f0000000540)=""/162}, {&(0x7f0000000600)=""/77}], 0x0, &(0x7f0000000680)=""/224}, 0x6}, {{&(0x7f0000000780)=@isdn, 0x0, &(0x7f0000000800)=[{&(0x7f0000001240)=""/4096}, {&(0x7f0000000240)=""/64}], 0x0, &(0x7f0000000ac0)=""/174}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)=""/224}, {&(0x7f0000000c00)=""/87}, {&(0x7f0000000dc0)=""/209}], 0x0, &(0x7f0000000ec0)=""/195}, 0x81}], 0x101f2043b8267e, 0x10120, 0x0) 3m7.176801702s ago: executing program 32 (id=363): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207}, {&(0x7f0000000540)=""/162}, {&(0x7f0000000600)=""/77}], 0x0, &(0x7f0000000680)=""/224}, 0x6}, {{&(0x7f0000000780)=@isdn, 0x0, &(0x7f0000000800)=[{&(0x7f0000001240)=""/4096}, {&(0x7f0000000240)=""/64}], 0x0, &(0x7f0000000ac0)=""/174}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)=""/224}, {&(0x7f0000000c00)=""/87}, {&(0x7f0000000dc0)=""/209}], 0x0, &(0x7f0000000ec0)=""/195}, 0x81}], 0x101f2043b8267e, 0x10120, 0x0) 30.403607127s ago: executing program 5 (id=792): timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_SYNTH_ID(r5, 0xc08c5114, &(0x7f00000007c0)={"736ef48c3a824d91f3ccdfbe20abf96d1a51a1ac257951b43bfd902f21b7", 0xfffffff7, 0x2, 0x401, 0x0, 0x0, 0x7fff, 0x55b4, 0x0, [0x200, 0x8, 0xfffffffe, 0x7, 0x200, 0x4, 0x4, 0xf24, 0x80000001, 0x7d6af4, 0x3, 0x87e5, 0x6, 0x2, 0x3, 0x0, 0x8, 0x80000000, 0x9]}) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) 30.403113112s ago: executing program 2 (id=793): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x46, &(0x7f0000004700)={@random="89b72ae666f6", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "8400c8", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x7, 0x1, 0x3}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) dup(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44420be08000010404131c050000000000000070", @ANYRES32=0x0, @ANYBLOB="000102000089000008000300", @ANYRES32=r10, @ANYBLOB="1c0012800e00010069703665727370616e0000000800028004001200"], 0x44}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, r10, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 27.92628129s ago: executing program 5 (id=796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 24.485020194s ago: executing program 3 (id=799): syz_emit_ethernet(0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60cedd00005a3aff00000000000000000000000000000000ff02000000000000000000000000000187009078fe80000000000000000000000000002e18085e98f8a9906fcf391a9af666c53a05fe082d64759b1dacc756c40cbdd7fd650eac7613e3155b8c5453928413677d7488bd647c5aa11665a028480e6e4d131461"], 0x0) 24.304068568s ago: executing program 3 (id=800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x100008c4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 20.678582234s ago: executing program 0 (id=803): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x444, &(0x7f0000000800)="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", 0xfe, 0x27, 0x8, 0x6, 0x4c6f, 0x2, 0x5, 'syz0\x00'}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 20.468365827s ago: executing program 3 (id=804): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 20.224542624s ago: executing program 2 (id=805): timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) syz_emit_ethernet(0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60cedd00005a3aff00000000000000000000000000000000ff02000000000000000000000000000187009078fe80000000000000000000000000002e18085e98f8a9906fcf391a9af666c53a05fe082d64759b1dacc756c40cbdd7fd650eac7613e3155b8c5453928413677d7488bd647c5aa11665a028480e6e4d131461"], 0x0) 20.094676106s ago: executing program 5 (id=806): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x8854) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='nfs\x00', 0x0) 20.086846323s ago: executing program 0 (id=807): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x46, &(0x7f0000004700)={@random="89b72ae666f6", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "8400c8", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x7, 0x1, 0x3}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) dup(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44420be08000010404131c050000000000000070", @ANYRES32=0x0, @ANYBLOB="000102000089000008000300", @ANYRES32=r10, @ANYBLOB="1c0012800e00010069703665727370616e0000000800028004001200"], 0x44}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, r10, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 18.142823568s ago: executing program 2 (id=808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001580)='w', 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000000bc0)="fed8", 0x2}, {&(0x7f0000000940)="f5a6", 0x2}, {&(0x7f00000002c0)='y', 0x1}, {&(0x7f0000000200)="8e", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)='%2', 0x2}, {&(0x7f0000000680)="c3", 0x1}], 0x2}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet(r0, &(0x7f00000004c0)="1e", 0x1, 0xc0, 0x0, 0x0) 16.241414365s ago: executing program 5 (id=809): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000001980)=0x1) read$FUSE(r4, &(0x7f0000006040)={0x2020}, 0x2020) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x20, r9, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$tcp_congestion(r10, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) munlockall() listen(r0, 0x0) 14.559980042s ago: executing program 3 (id=811): gettid() timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) socketpair(0x9, 0x5, 0x0, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_SYNTH_ID(r5, 0xc08c5114, &(0x7f00000007c0)={"736ef48c3a824d91f3ccdfbe20abf96d1a51a1ac257951b43bfd902f21b7", 0xfffffff7, 0x2, 0x401, 0x0, 0x0, 0x7fff, 0x55b4, 0x0, [0x200, 0x8, 0xfffffffe, 0x7, 0x200, 0x4, 0x4, 0xf24, 0x80000001, 0x7d6af4, 0x3, 0x87e5, 0x6, 0x2, 0x3, 0x0, 0x8, 0x80000000, 0x9]}) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0xfffdfeff, @mcast1, 0x1}, 0x1c) syz_emit_ethernet(0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60cedd00005a3aff00"/35], 0x0) 14.482015903s ago: executing program 4 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd07, &(0x7f0000000580)="040000000000000000000000380100000000000000000000000000000000000000d5c3760e747a") recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000040)={0x1}) ptrace$setregs(0xd, 0x0, 0x6, &(0x7f0000000180)="a16b07f6bd5b0f5b42631ef1181c1b2275e3f557b0e789bb5207") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40}, 0x48) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, &(0x7f00000000c0)=""/40, &(0x7f0000000140), &(0x7f0000000180), 0x4, r5}, 0x38) 11.233444387s ago: executing program 5 (id=813): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x46, &(0x7f0000004700)={@random="89b72ae666f6", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "8400c8", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x7, 0x1, 0x3}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) dup(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44420be08000010404131c050000000000000070", @ANYRES32=0x0, @ANYBLOB="000102000089000008000300", @ANYRES32=r10, @ANYBLOB="1c0012800e00010069703665727370616e0000000800028004001200"], 0x44}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, r10, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 9.167059086s ago: executing program 3 (id=814): unshare(0x200) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 8.474984865s ago: executing program 4 (id=815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x100008c4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.260929453s ago: executing program 0 (id=816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.832515412s ago: executing program 0 (id=817): unshare(0x200) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 6.750751344s ago: executing program 5 (id=818): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$nl_generic(0x11, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000001c0)="4ba72c5a5f00fd81080000000000", 0xe}], 0x1, 0x0, 0xffffffffffffff6f, 0x11000000}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, &(0x7f0000000000)={0x4dd49c4f, 0x1}, &(0x7f0000000400)) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) 5.496877526s ago: executing program 0 (id=819): r0 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313"], 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.566471677s ago: executing program 3 (id=820): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313"], 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.337208354s ago: executing program 2 (id=821): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x46, &(0x7f0000004700)={@random="89b72ae666f6", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "8400c8", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x7, 0x1, 0x3}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) dup(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44420be08000010404131c050000000000000070", @ANYRES32=0x0, @ANYBLOB="000102000089000008000300", @ANYRES32=r10, @ANYBLOB="1c0012800e00010069703665727370616e0000000800028004001200"], 0x44}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, r10, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 3.071292276s ago: executing program 4 (id=822): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e1b04130c"], 0x7) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), 0x0}, 0x20) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x27) write(r5, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 x00000000ffffff7f00', 0x35) 2.8427091s ago: executing program 4 (id=823): syz_emit_ethernet(0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60cedd00005a3aff00000000000000000000000000000000ff02000000000000000000000000000187009078fe80000000000000000000000000002e18085e98f8a9906fcf391a9af666c53a05fe082d64759b1dacc756c40cbdd7fd650eac7613e3155b8c5453928413677d7488bd647c5aa11665a028480e6e4d131461"], 0x0) 2.746854289s ago: executing program 2 (id=824): unshare(0x200) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 2.560819435s ago: executing program 4 (id=825): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x46, &(0x7f0000004700)={@random="89b72ae666f6", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "8400c8", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x7, 0x1, 0x3}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) dup(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r8, 0x0, 0x20000000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, r10, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.369075962s ago: executing program 2 (id=826): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './my_configfs/usb_gadget/g1/functions/uvc.usb0\x00'}) ioctl$VIDIOC_S_EDID(r1, 0xc0245629, &(0x7f0000000240)={0x0, 0x6, 0xc93, '\x00', &(0x7f00000001c0)=0xe}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x20048000) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000080000000102020000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x50) writev(0xffffffffffffffff, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(0x0) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r2, 0x6f44, 0xb5) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff) close(r2) 228.723471ms ago: executing program 0 (id=827): gettid() timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) socketpair(0x9, 0x5, 0x0, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_SYNTH_ID(r5, 0xc08c5114, &(0x7f00000007c0)={"736ef48c3a824d91f3ccdfbe20abf96d1a51a1ac257951b43bfd902f21b7", 0xfffffff7, 0x2, 0x401, 0x0, 0x0, 0x7fff, 0x55b4, 0x0, [0x200, 0x8, 0xfffffffe, 0x7, 0x200, 0x4, 0x4, 0xf24, 0x80000001, 0x7d6af4, 0x3, 0x87e5, 0x6, 0x2, 0x3, 0x0, 0x8, 0x80000000, 0x9]}) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0xfffdfeff, @mcast1, 0x1}, 0x1c) syz_emit_ethernet(0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60cedd00005a3aff00000000000000000000000000000000ff02000000000000000000000000000187009078fe8000"/70], 0x0) 0s ago: executing program 4 (id=828): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$nl_generic(0x11, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000001c0)="4ba72c5a5f00fd81080000000000", 0xe}], 0x1, 0x0, 0xffffffffffffff6f, 0x11000000}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, &(0x7f0000000000)={0x4dd49c4f, 0x1}, &(0x7f0000000400)) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 92.163733][ T1711] cfg80211: failed to load regulatory.db [ 94.121432][ T5572] cgroup: Unknown subsys name 'net' [ 94.373505][ T5572] cgroup: Unknown subsys name 'cpuset' [ 94.457030][ T5572] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.371061][ T5572] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.398612][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.410496][ T5594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.435301][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.440148][ T5594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.442555][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.455955][ T5594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.478101][ T5594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.484910][ T5594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.489986][ T5594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.495071][ T5594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.558010][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.623135][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.626808][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.645402][ T5594] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.663603][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.740387][ T5597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.751764][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.786745][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.792588][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.808801][ T5597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.811023][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.818728][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.835557][ T4900] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.857468][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.872060][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.588714][ T5594] Bluetooth: hci2: command tx timeout [ 101.667111][ T5594] Bluetooth: hci1: command tx timeout [ 101.746380][ T5594] Bluetooth: hci0: command tx timeout [ 101.906441][ T5594] Bluetooth: hci3: command tx timeout [ 101.987041][ T5594] Bluetooth: hci4: command tx timeout [ 102.463619][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.465152][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.473126][ T5590] bridge_slave_0: entered allmulticast mode [ 102.481909][ T5590] bridge_slave_0: entered promiscuous mode [ 102.538315][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.538684][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.554182][ T5590] bridge_slave_1: entered allmulticast mode [ 102.560704][ T5590] bridge_slave_1: entered promiscuous mode [ 102.740280][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.742329][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.742639][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.743074][ T5591] bridge_slave_0: entered allmulticast mode [ 102.754757][ T5591] bridge_slave_0: entered promiscuous mode [ 102.827740][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.828547][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.829080][ T5600] bridge_slave_0: entered allmulticast mode [ 102.837576][ T5600] bridge_slave_0: entered promiscuous mode [ 102.854167][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.854504][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.854956][ T5592] bridge_slave_0: entered allmulticast mode [ 102.862403][ T5592] bridge_slave_0: entered promiscuous mode [ 102.883814][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.885043][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.885659][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.890774][ T5591] bridge_slave_1: entered allmulticast mode [ 102.900398][ T5591] bridge_slave_1: entered promiscuous mode [ 102.930339][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.931976][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.932449][ T5600] bridge_slave_1: entered allmulticast mode [ 102.942436][ T5600] bridge_slave_1: entered promiscuous mode [ 102.957801][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.958153][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.958610][ T5592] bridge_slave_1: entered allmulticast mode [ 102.965500][ T5592] bridge_slave_1: entered promiscuous mode [ 103.013845][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.014169][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.015426][ T5602] bridge_slave_0: entered allmulticast mode [ 103.026182][ T5602] bridge_slave_0: entered promiscuous mode [ 103.102529][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.104204][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.104378][ T5602] bridge_slave_1: entered allmulticast mode [ 103.110829][ T5602] bridge_slave_1: entered promiscuous mode [ 103.159042][ T5590] team0: Port device team_slave_0 added [ 103.169469][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.195938][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.209022][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.220539][ T5590] team0: Port device team_slave_1 added [ 103.230042][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.254694][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.294508][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.322466][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.392004][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.417203][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.417287][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.417315][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.472220][ T5591] team0: Port device team_slave_0 added [ 103.493479][ T5600] team0: Port device team_slave_0 added [ 103.502732][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.502798][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.502863][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.520637][ T5592] team0: Port device team_slave_0 added [ 103.539924][ T5591] team0: Port device team_slave_1 added [ 103.578679][ T5600] team0: Port device team_slave_1 added [ 103.610440][ T5592] team0: Port device team_slave_1 added [ 103.619648][ T5602] team0: Port device team_slave_0 added [ 103.668023][ T5594] Bluetooth: hci2: command tx timeout [ 103.679899][ T5602] team0: Port device team_slave_1 added [ 103.700380][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.700462][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.700528][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.746512][ T5594] Bluetooth: hci1: command tx timeout [ 103.785823][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.785903][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.786733][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.826564][ T5594] Bluetooth: hci0: command tx timeout [ 103.827677][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.827718][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.827786][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.834783][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.834826][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.834899][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.938836][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.939669][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.939752][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.988041][ T5594] Bluetooth: hci3: command tx timeout [ 104.066211][ T5594] Bluetooth: hci4: command tx timeout [ 104.335140][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.335219][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.335278][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.343601][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.343645][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.343718][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.415420][ T5590] hsr_slave_0: entered promiscuous mode [ 104.427058][ T5590] hsr_slave_1: entered promiscuous mode [ 104.458174][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.458257][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.458325][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.623924][ T5591] hsr_slave_0: entered promiscuous mode [ 104.627895][ T5591] hsr_slave_1: entered promiscuous mode [ 104.634896][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 104.635171][ T5591] Cannot create hsr debugfs directory [ 104.695846][ T5600] hsr_slave_0: entered promiscuous mode [ 104.701396][ T5600] hsr_slave_1: entered promiscuous mode [ 104.704487][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 104.704555][ T5600] Cannot create hsr debugfs directory [ 104.728909][ T5592] hsr_slave_0: entered promiscuous mode [ 104.732278][ T5592] hsr_slave_1: entered promiscuous mode [ 104.734419][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 104.734482][ T5592] Cannot create hsr debugfs directory [ 104.808691][ T5602] hsr_slave_0: entered promiscuous mode [ 104.812215][ T5602] hsr_slave_1: entered promiscuous mode [ 104.814340][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 104.814387][ T5602] Cannot create hsr debugfs directory [ 105.747303][ T5594] Bluetooth: hci2: command tx timeout [ 105.831050][ T5594] Bluetooth: hci1: command tx timeout [ 105.844869][ T5590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.908409][ T5594] Bluetooth: hci0: command tx timeout [ 105.919415][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.931230][ T5590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.971198][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.980403][ T5590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.009946][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.035807][ T5590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.066216][ T5594] Bluetooth: hci3: command tx timeout [ 106.077111][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.146723][ T5594] Bluetooth: hci4: command tx timeout [ 106.219757][ T5600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.260552][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.271806][ T5600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.303541][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.329249][ T5600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.361326][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.404571][ T5600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.439466][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.588392][ T5592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.634769][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.648261][ T5592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.680752][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.690528][ T5592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.730181][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.758892][ T5592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.789888][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.918336][ T5602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.940009][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.959512][ T5602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.004790][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.021217][ T5602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.060169][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.095682][ T5602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.121203][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.212655][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.261729][ T5591] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.294035][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.321868][ T5591] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.354700][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.370844][ T5591] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.410045][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.423987][ T5591] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.451227][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.498849][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.541575][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.598239][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.602770][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.652992][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.653875][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.714529][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.755722][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.768237][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.833805][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.840631][ T5594] Bluetooth: hci2: command tx timeout [ 107.863785][ T1516] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.864772][ T1516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.916584][ T5594] Bluetooth: hci1: command tx timeout [ 107.985858][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.986281][ T5594] Bluetooth: hci0: command tx timeout [ 108.023093][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.051574][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.060180][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.146363][ T5594] Bluetooth: hci3: command tx timeout [ 108.160597][ T1516] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.165172][ T1516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.227687][ T5594] Bluetooth: hci4: command tx timeout [ 108.250645][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.289558][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.334130][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.334661][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.431933][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.432946][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.541044][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.599014][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.599234][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.725559][ T1516] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.727758][ T1516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.302041][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.769700][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.790149][ T5590] veth0_vlan: entered promiscuous mode [ 109.928284][ T5590] veth1_vlan: entered promiscuous mode [ 110.061945][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.269849][ T5600] veth0_vlan: entered promiscuous mode [ 110.323992][ T5590] veth0_macvtap: entered promiscuous mode [ 110.382392][ T5590] veth1_macvtap: entered promiscuous mode [ 110.399395][ T5600] veth1_vlan: entered promiscuous mode [ 110.430061][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.527445][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.541148][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.582923][ T5592] veth0_vlan: entered promiscuous mode [ 110.605764][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.695467][ T5592] veth1_vlan: entered promiscuous mode [ 110.732774][ T5600] veth0_macvtap: entered promiscuous mode [ 110.850329][ T5600] veth1_macvtap: entered promiscuous mode [ 111.159481][ T5602] veth0_vlan: entered promiscuous mode [ 111.174398][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.210868][ T5592] veth0_macvtap: entered promiscuous mode [ 111.223896][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.282980][ T5592] veth1_macvtap: entered promiscuous mode [ 111.325347][ T5602] veth1_vlan: entered promiscuous mode [ 111.353382][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.361924][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.427989][ T5591] veth0_vlan: entered promiscuous mode [ 111.531644][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.597303][ T5591] veth1_vlan: entered promiscuous mode [ 111.606439][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.623378][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.656130][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.004485][ T5602] veth0_macvtap: entered promiscuous mode [ 112.099323][ T5602] veth1_macvtap: entered promiscuous mode [ 112.105752][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.113715][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.848285][ T5591] veth0_macvtap: entered promiscuous mode [ 112.880397][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.880535][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.922260][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.953583][ T5591] veth1_macvtap: entered promiscuous mode [ 113.054259][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.193717][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.193801][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.277741][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.464603][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.473893][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.481248][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.520099][ T5785] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.334899][ T3330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.334967][ T3330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.124459][ T5798] binder: 5793:5798 ioctl c0306201 0 returned -14 [ 117.048803][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.057829][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.187520][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.195510][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.219517][ T1171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.503300][ T5806] Bluetooth: MGMT ver 1.23 [ 119.493012][ T1161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.503352][ T1161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.503399][ T1161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.503441][ T1161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.503482][ T1161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.503523][ T1161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.503563][ T1161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.539020][ T1161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.546516][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.547042][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.547545][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.316727][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.318300][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.410346][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.452285][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.462068][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.486848][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.501660][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.513600][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.513885][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.449333][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.761900][ T5829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 124.980594][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.495346][ T5846] binder: 5837:5846 ioctl c0306201 0 returned -14 [ 133.201428][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.243852][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.316934][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.509979][ T5909] binder: 5898:5909 ioctl c0306201 0 returned -14 [ 141.887208][ T36] audit: type=1804 audit(1788321492.793:2): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.28" name="bus" dev="ramfs" ino=8116 res=1 errno=0 [ 149.459306][ T36] audit: type=1804 audit(1788321500.423:3): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.38" name="bus" dev="ramfs" ino=9011 res=1 errno=0 [ 155.601230][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 161.931686][ T6006] ======================================================= [ 161.931686][ T6006] WARNING: The mand mount option has been deprecated and [ 161.931686][ T6006] and is ignored by this kernel. Remove the mand [ 161.931686][ T6006] option from the mount to silence this warning. [ 161.931686][ T6006] ======================================================= [ 165.634007][ T6020] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 167.015786][ T6042] binder: 6035:6042 ioctl c0306201 0 returned -14 [ 171.103103][ T6056] netlink: 'syz.1.59': attribute type 1 has an invalid length. [ 171.386223][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 171.491808][ T6062] syz.0.62 uses obsolete (PF_INET,SOCK_PACKET) [ 172.429287][ T6080] syz.2.70 (6080) used greatest stack depth: 18656 bytes left [ 177.156410][ T6091] syzkaller1: entered promiscuous mode [ 177.156501][ T6091] syzkaller1: entered allmulticast mode [ 177.754184][ T36] audit: type=1804 audit(1788321528.713:4): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.74" name="bus" dev="ramfs" ino=10247 res=1 errno=0 [ 178.867997][ T6119] binder: 6112:6119 ioctl c0306201 0 returned -14 [ 181.086706][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 181.292396][ T36] audit: type=1804 audit(1788321532.243:5): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.87" name="/newroot/21/file0" dev="tmpfs" ino=127 res=1 errno=0 [ 181.376113][ T5703] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 186.280112][ T6166] tipc: Started in network mode [ 186.285181][ T6166] tipc: Node identity 1e708cd52633, cluster identity 4711 [ 186.309825][ T6166] tipc: Enabled bearer , priority 0 [ 186.345333][ T6166] tipc: Resetting bearer [ 186.346894][ T36] audit: type=1804 audit(1788321537.303:6): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.98" name="/newroot/15/file0" dev="tmpfs" ino=93 res=1 errno=0 [ 186.524554][ T6165] tipc: Disabling bearer [ 186.705474][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 188.465062][ T6198] syzkaller1: entered promiscuous mode [ 188.470927][ T6198] syzkaller1: entered allmulticast mode [ 188.922436][ T36] audit: type=1804 audit(1788321539.883:7): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.109" name="/newroot/22/file0" dev="tmpfs" ino=131 res=1 errno=0 [ 191.257015][ T6222] tipc: Enabled bearer , priority 0 [ 191.291801][ T6222] tipc: Resetting bearer [ 191.525511][ T6221] tipc: Disabling bearer [ 191.752511][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 191.883462][ T36] audit: type=1804 audit(1788321542.843:8): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.121" name="/newroot/25/file0" dev="tmpfs" ino=147 res=1 errno=0 [ 192.414254][ T6246] syzkaller1: entered promiscuous mode [ 192.414342][ T6246] syzkaller1: entered allmulticast mode [ 194.272090][ T6275] tipc: Started in network mode [ 194.272179][ T6275] tipc: Node identity 3626e4b428e4, cluster identity 4711 [ 194.273250][ T6275] tipc: Enabled bearer , priority 0 [ 194.303293][ T6275] tipc: Resetting bearer [ 194.565137][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.573742][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.600678][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'. [ 194.711810][ T6274] tipc: Disabling bearer [ 194.946266][ T1711] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 195.152415][ T1711] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice= 3.6a [ 195.182557][ T1711] usb 4-1: config 240 has an invalid interface number: 170 but max is 0 [ 195.191298][ T1711] usb 4-1: config 240 has no interface number 0 [ 195.191340][ T1711] usb 4-1: config 240 interface 170 has no altsetting 0 [ 195.222626][ T1711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.231002][ T1711] usb 4-1: Product: syz [ 195.231024][ T1711] usb 4-1: Manufacturer: syz [ 195.231039][ T1711] usb 4-1: SerialNumber: syz [ 196.265377][ T6312] syzkaller1: entered promiscuous mode [ 196.265408][ T6312] syzkaller1: entered allmulticast mode [ 196.943848][ T1711] usb_ehset_test 4-1:240.170: probe with driver usb_ehset_test failed with error -32 [ 197.212201][ T1711] usb 4-1: USB disconnect, device number 2 [ 197.546591][ T6332] tipc: Enabled bearer , priority 0 [ 197.609053][ T6332] tipc: Resetting bearer [ 197.743998][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 197.777498][ T6330] tipc: Disabling bearer [ 199.942903][ T6365] syzkaller1: entered promiscuous mode [ 199.948749][ T6365] syzkaller1: entered allmulticast mode [ 203.675114][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 204.771582][ T6423] syzkaller1: entered promiscuous mode [ 204.778067][ T6423] syzkaller1: entered allmulticast mode [ 205.156714][ T5603] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 205.366859][ T5603] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice= 3.6a [ 205.368614][ T5603] usb 5-1: config 240 has an invalid interface number: 170 but max is 0 [ 205.368645][ T5603] usb 5-1: config 240 has no interface number 0 [ 205.385879][ T5603] usb 5-1: config 240 interface 170 has no altsetting 0 [ 205.412735][ T5603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.414077][ T5603] usb 5-1: Product: syz [ 205.414098][ T5603] usb 5-1: Manufacturer: syz [ 205.414114][ T5603] usb 5-1: SerialNumber: syz [ 207.454136][ T5603] usb_ehset_test 5-1:240.170: probe with driver usb_ehset_test failed with error -32 [ 207.520575][ T5603] usb 5-1: USB disconnect, device number 3 [ 208.931064][ T6479] syzkaller1: entered promiscuous mode [ 208.932018][ T6479] syzkaller1: entered allmulticast mode [ 212.405994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 212.920856][ T36] audit: type=1804 audit(1788321563.863:9): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.206" name="/newroot/43/file0" dev="tmpfs" ino=236 res=1 errno=0 [ 213.681246][ T6528] Zero length message leads to an empty skb [ 213.843695][ T6520] syzkaller1: entered promiscuous mode [ 213.845337][ T6520] syzkaller1: entered allmulticast mode [ 215.355989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 216.935381][ T36] audit: type=1804 audit(1788321567.893:10): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.220" name="/newroot/43/file0" dev="tmpfs" ino=236 res=1 errno=0 [ 218.808161][ T6570] syzkaller1: entered promiscuous mode [ 218.808268][ T6570] syzkaller1: entered allmulticast mode [ 220.954951][ T36] audit: type=1804 audit(1788321571.913:11): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.231" name="/newroot/48/file0" dev="tmpfs" ino=262 res=1 errno=0 [ 222.199370][ T6617] syzkaller1: entered promiscuous mode [ 222.205175][ T6617] syzkaller1: entered allmulticast mode [ 222.217816][ T6618] netlink: 'syz.0.240': attribute type 4 has an invalid length. [ 222.217832][ T6618] netlink: 17 bytes leftover after parsing attributes in process `syz.0.240'. [ 222.306206][ T6582] Bluetooth: hci0: command 0x0406 tx timeout [ 222.351730][ T6582] Bluetooth: hci4: command 0x0406 tx timeout [ 222.353125][ T6582] Bluetooth: hci1: command 0x0406 tx timeout [ 222.353233][ T6582] Bluetooth: hci2: command 0x0406 tx timeout [ 222.353612][ T6582] Bluetooth: hci3: command 0x0406 tx timeout [ 225.570794][ T36] audit: type=1804 audit(1788321576.533:12): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.246" name="/newroot/47/file0" dev="tmpfs" ino=258 res=1 errno=0 [ 230.906220][ T6663] syzkaller1: entered promiscuous mode [ 230.911911][ T6663] syzkaller1: entered allmulticast mode [ 231.121207][ T36] audit: type=1804 audit(1788321582.083:13): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.257" name="/newroot/47/file0" dev="tmpfs" ino=265 res=1 errno=0 [ 235.550249][ T36] audit: type=1804 audit(1788321586.513:14): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.271" name="/newroot/58/file0" dev="tmpfs" ino=313 res=1 errno=0 [ 235.766093][ T199] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 235.819637][ T6720] syzkaller1: entered promiscuous mode [ 235.825637][ T6720] syzkaller1: entered allmulticast mode [ 236.046986][ T199] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice= 3.6a [ 236.048590][ T199] usb 3-1: config 240 has an invalid interface number: 170 but max is 0 [ 236.048620][ T199] usb 3-1: config 240 has no interface number 0 [ 236.048656][ T199] usb 3-1: config 240 interface 170 has no altsetting 0 [ 236.054356][ T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.054386][ T199] usb 3-1: Product: syz [ 236.054404][ T199] usb 3-1: Manufacturer: syz [ 236.054421][ T199] usb 3-1: SerialNumber: syz [ 237.308483][ T199] usb_ehset_test 3-1:240.170: probe with driver usb_ehset_test failed with error -32 [ 237.443704][ T199] usb 3-1: USB disconnect, device number 2 [ 238.520759][ T36] audit: type=1804 audit(1788321589.473:15): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.281" name="bus" dev="ramfs" ino=13042 res=1 errno=0 [ 239.881870][ T36] audit: type=1804 audit(1788321590.843:16): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.284" name="/newroot/61/file0" dev="tmpfs" ino=330 res=1 errno=0 [ 242.331588][ T6794] tipc: Enabling of bearer rejected, failed to enable media [ 242.710008][ T36] audit: type=1804 audit(1788321593.663:17): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.297" name="/newroot/63/file0" dev="tmpfs" ino=350 res=1 errno=0 [ 248.276702][ T36] audit: type=1804 audit(1788321599.233:18): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.308" name="/newroot/67/file0" dev="tmpfs" ino=371 res=1 errno=0 [ 248.440981][ T6846] tipc: Enabling of bearer rejected, failed to enable media [ 253.904872][ T6906] tipc: Enabling of bearer rejected, failed to enable media [ 257.921125][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.921223][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.679118][ T6970] syzkaller1: entered promiscuous mode [ 262.685827][ T6970] syzkaller1: entered allmulticast mode [ 263.229734][ T36] audit: type=1804 audit(1788321614.183:19): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.346" name="bus" dev="ramfs" ino=13810 res=1 errno=0 [ 264.566267][ T7002] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 271.906597][ T7027] syzkaller1: entered promiscuous mode [ 271.921461][ T7027] syzkaller1: entered allmulticast mode [ 272.388907][ T36] audit: type=1804 audit(1788321623.353:20): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.360" name="bus" dev="ramfs" ino=14517 res=1 errno=0 [ 278.746402][ T7083] syzkaller1: entered promiscuous mode [ 278.746492][ T7083] syzkaller1: entered allmulticast mode [ 285.840706][ T36] audit: type=1804 audit(1788321636.803:21): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.393" name="/newroot/78/file0" dev="tmpfs" ino=432 res=1 errno=0 [ 290.857759][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.671641][ T36] audit: type=1804 audit(1788321642.633:22): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.406" name="/newroot/70/file0" dev="tmpfs" ino=373 res=1 errno=0 [ 291.818274][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.918186][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.921112][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.921998][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.650049][ T7195] tipc: Enabling of bearer rejected, failed to enable media [ 293.986816][ T59] Bluetooth: hci5: command tx timeout [ 296.087864][ T59] Bluetooth: hci5: command tx timeout [ 296.541396][ T36] audit: type=1804 audit(1788321647.503:23): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.416" name="/newroot/82/file0" dev="tmpfs" ino=453 res=1 errno=0 [ 298.148776][ T59] Bluetooth: hci5: command tx timeout [ 298.329007][ T7169] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.336411][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.339687][ T7169] bridge_slave_0: entered allmulticast mode [ 298.370207][ T7169] bridge_slave_0: entered promiscuous mode [ 298.422933][ T7169] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.432310][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.432551][ T7169] bridge_slave_1: entered allmulticast mode [ 298.455029][ T7169] bridge_slave_1: entered promiscuous mode [ 298.540689][ T7257] tipc: Enabling of bearer rejected, failed to enable media [ 299.162249][ T7169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.221354][ T7169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.550158][ T7169] team0: Port device team_slave_0 added [ 299.638021][ T7169] team0: Port device team_slave_1 added [ 299.960894][ T7169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.968036][ T7169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.968077][ T7169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.024106][ T7169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.031256][ T7169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.031296][ T7169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.227608][ T59] Bluetooth: hci5: command tx timeout [ 301.982755][ T36] audit: type=1804 audit(1788321652.943:24): pid=7283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.427" name="/newroot/85/file0" dev="tmpfs" ino=469 res=1 errno=0 [ 302.192511][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.430'. [ 302.422293][ T146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.996681][ T7294] tipc: Enabling of bearer rejected, failed to enable media [ 303.331467][ T7169] hsr_slave_0: entered promiscuous mode [ 303.340032][ T7169] hsr_slave_1: entered promiscuous mode [ 303.342338][ T7169] debugfs: 'hsr0' already exists in 'hsr' [ 303.342368][ T7169] Cannot create hsr debugfs directory [ 304.232931][ T146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.376596][ T36] audit: type=1804 audit(1788321655.333:25): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.439" name="/newroot/105/file0" dev="tmpfs" ino=562 res=1 errno=0 [ 306.555705][ T146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.619061][ T7346] tipc: Enabling of bearer rejected, failed to enable media [ 307.960484][ T36] audit: type=1804 audit(1788321658.923:26): pid=7384 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.453" name="/newroot/92/file0" dev="tmpfs" ino=487 res=1 errno=0 [ 309.593739][ T146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.593388][ T7413] tipc: Enabling of bearer rejected, failed to enable media [ 310.976477][ T7169] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 311.195412][ T7169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.503548][ T7169] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 311.776202][ T7169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 312.594400][ T7169] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 312.883987][ T7169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 312.970519][ T36] audit: type=1804 audit(1788321663.933:27): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.465" name="/newroot/87/file0" dev="tmpfs" ino=459 res=1 errno=0 [ 314.128993][ T7169] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.202240][ T7169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.064769][ T146] bridge_slave_1: left allmulticast mode [ 315.103642][ T146] bridge_slave_1: left promiscuous mode [ 315.198888][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.885935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 315.895941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 315.905940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 315.915943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 315.925938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 315.935933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 315.945942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 315.955938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 318.797392][ T36] audit: type=1804 audit(1788321669.763:28): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.476" name="/newroot/97/file0" dev="tmpfs" ino=513 res=1 errno=0 [ 318.830181][ T146] bridge_slave_0: left allmulticast mode [ 318.830222][ T146] bridge_slave_0: left promiscuous mode [ 318.830417][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.737516][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.852132][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.061272][ T146] bond0 (unregistering): Released all slaves [ 321.088305][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 321.342558][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 321.393868][ T7510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.479941][ T7510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.662061][ T7169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.719947][ T7169] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.843331][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.845818][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.455496][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.496921][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.646771][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.646914][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.837970][ T146] tipc: Left network mode [ 322.933618][ T36] audit: type=1804 audit(1788321673.893:29): pid=7526 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.486" name="/newroot/95/file0" dev="tmpfs" ino=530 res=1 errno=0 [ 327.234681][ T36] audit: type=1804 audit(1788321678.193:30): pid=7582 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.498" name="/newroot/93/file0" dev="tmpfs" ino=490 res=1 errno=0 [ 329.436599][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 332.097550][ T36] audit: type=1804 audit(1788321683.063:31): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.508" name="/newroot/101/file0" dev="tmpfs" ino=561 res=1 errno=0 [ 332.572888][ T7169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.547663][ T146] hsr_slave_0: left promiscuous mode [ 334.570613][ T146] hsr_slave_1: left promiscuous mode [ 334.572117][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.572256][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.610456][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.610497][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.750843][ T146] veth1_macvtap: left promiscuous mode [ 334.751164][ T146] veth0_macvtap: left promiscuous mode [ 334.751393][ T146] veth1_vlan: left promiscuous mode [ 334.751733][ T146] veth0_vlan: left promiscuous mode [ 335.576796][ T146] team0 (unregistering): Port device team_slave_1 removed [ 335.649081][ T146] team0 (unregistering): Port device team_slave_0 removed [ 335.997152][ T7664] tipc: Started in network mode [ 336.004062][ T7664] tipc: Node identity b2f00439f557, cluster identity 4711 [ 336.004272][ T7664] tipc: Enabled bearer , priority 0 [ 336.070434][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 336.158598][ T7673] tipc: Resetting bearer [ 336.236457][ T36] audit: type=1804 audit(1788321687.203:32): pid=7684 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.519" name="/newroot/104/file0" dev="tmpfs" ino=577 res=1 errno=0 [ 336.250435][ T7657] tipc: Disabling bearer [ 337.293555][ T7169] veth0_vlan: entered promiscuous mode [ 337.393492][ T7169] veth1_vlan: entered promiscuous mode [ 339.919435][ T7169] veth0_macvtap: entered promiscuous mode [ 340.111014][ T7169] veth1_macvtap: entered promiscuous mode [ 340.225070][ T7169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.327402][ T7169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.511927][ T36] audit: type=1804 audit(1788321691.473:33): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.528" name="bus" dev="ramfs" ino=17675 res=1 errno=0 [ 341.022491][ T36] audit: type=1804 audit(1788321691.973:34): pid=7739 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.531" name="/newroot/111/file0" dev="tmpfs" ino=613 res=1 errno=0 [ 342.771892][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4 [ 343.363451][ T36] audit: type=1804 audit(1788321694.313:35): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.536" name="bus" dev="ramfs" ino=17747 res=1 errno=0 [ 343.413979][ T7760] tipc: Started in network mode [ 343.414107][ T7760] tipc: Node identity 766a4b6818d6, cluster identity 4711 [ 343.414678][ T7760] tipc: Enabled bearer , priority 0 [ 343.465063][ T7766] netlink: 'syz.4.538': attribute type 4 has an invalid length. [ 343.465093][ T7766] netlink: 17 bytes leftover after parsing attributes in process `syz.4.538'. [ 343.503240][ T7752] tipc: Resetting bearer [ 343.627701][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.635695][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.731798][ T7748] tipc: Disabling bearer [ 344.028836][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.111753][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.149892][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.249979][ T36] audit: type=1804 audit(1788321695.213:36): pid=7781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.541" name="/newroot/115/file0" dev="tmpfs" ino=634 res=1 errno=0 [ 344.417020][ T146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.578660][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.578735][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.775283][ T36] audit: type=1804 audit(1788321699.733:37): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.551" name="/newroot/133/file0" dev="tmpfs" ino=704 res=1 errno=0 [ 348.953215][ T7826] syzkaller0: entered promiscuous mode [ 348.953303][ T7826] syzkaller0: entered allmulticast mode [ 348.985228][ T7826] tipc: Started in network mode [ 348.990593][ T7826] tipc: Node identity 82e5ccb5c2db, cluster identity 4711 [ 348.990936][ T7826] tipc: Enabled bearer , priority 0 [ 349.022312][ T7826] tipc: Resetting bearer [ 349.076948][ T7825] tipc: Resetting bearer [ 349.247040][ T7825] tipc: Disabling bearer [ 351.586755][ T36] audit: type=1804 audit(1788321702.543:38): pid=7861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.564" name="/newroot/3/file0" dev="tmpfs" ino=33 res=1 errno=0 [ 351.910209][ T7869] netlink: 132 bytes leftover after parsing attributes in process `syz.4.563'. [ 353.543218][ T7889] syzkaller0: entered promiscuous mode [ 353.543546][ T7889] syzkaller0: entered allmulticast mode [ 353.949467][ T7897] netlink: 132 bytes leftover after parsing attributes in process `syz.3.575'. [ 354.547530][ T36] audit: type=1804 audit(1788321705.513:39): pid=7899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.577" name="/newroot/5/file0" dev="tmpfs" ino=44 res=1 errno=0 [ 356.655485][ T36] audit: type=1804 audit(1788321707.613:40): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.588" name="/newroot/141/file0" dev="tmpfs" ino=745 res=1 errno=0 [ 358.291923][ T7957] netlink: 'syz.3.592': attribute type 4 has an invalid length. [ 358.291957][ T7957] netlink: 17 bytes leftover after parsing attributes in process `syz.3.592'. [ 361.872253][ T36] audit: type=1804 audit(1788321712.833:41): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.599" name="/newroot/128/file0" dev="tmpfs" ino=701 res=1 errno=0 [ 363.835534][ T8029] netlink: 'syz.5.609': attribute type 4 has an invalid length. [ 363.843346][ T8029] netlink: 17 bytes leftover after parsing attributes in process `syz.5.609'. [ 366.123665][ T36] audit: type=1804 audit(1788321717.083:42): pid=8042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.613" name="/newroot/146/file0" dev="tmpfs" ino=772 res=1 errno=0 [ 370.603758][ T8093] netlink: 'syz.5.623': attribute type 4 has an invalid length. [ 370.603862][ T8093] netlink: 17 bytes leftover after parsing attributes in process `syz.5.623'. [ 370.860882][ T36] audit: type=1804 audit(1788321721.823:43): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.626" name="/newroot/150/file0" dev="tmpfs" ino=793 res=1 errno=0 [ 371.523895][ T8108] binder: 8104:8108 ioctl c0306201 0 returned -14 [ 374.520489][ T8120] syzkaller0: entered promiscuous mode [ 374.522112][ T8120] syzkaller0: entered allmulticast mode [ 374.551384][ T8120] tipc: Enabled bearer , priority 0 [ 374.571443][ T8120] tipc: Resetting bearer [ 374.650956][ T8118] tipc: Resetting bearer [ 374.808253][ T8118] tipc: Disabling bearer [ 374.829905][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 375.071204][ T36] audit: type=1804 audit(1788321726.023:44): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.637" name="/newroot/135/file0" dev="tmpfs" ino=737 res=1 errno=0 [ 378.503247][ T8177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.645'. [ 378.535279][ T8175] syzkaller0: entered promiscuous mode [ 378.537537][ T8175] syzkaller0: entered allmulticast mode [ 378.653985][ T36] audit: type=1804 audit(1788321729.613:45): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.648" name="/newroot/140/file0" dev="tmpfs" ino=763 res=1 errno=0 [ 378.742425][ T8175] tipc: Enabled bearer , priority 0 [ 378.800964][ T8189] tipc: Resetting bearer [ 378.901825][ T8172] tipc: Resetting bearer [ 381.216979][ T8172] tipc: Disabling bearer [ 381.349470][ T9] tipc: Node number set to 1077857461 [ 384.203643][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.210329][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.617040][ T36] audit: type=1804 audit(1788321735.573:46): pid=8227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.661" name="/newroot/137/file0" dev="tmpfs" ino=715 res=1 errno=0 [ 387.828404][ T8258] syzkaller0: entered promiscuous mode [ 387.835368][ T8258] syzkaller0: entered allmulticast mode [ 389.062334][ T36] audit: type=1804 audit(1788321740.023:47): pid=8268 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.674" name="/newroot/141/file0" dev="tmpfs" ino=736 res=1 errno=0 [ 393.400221][ T36] audit: type=1804 audit(1788321744.363:48): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.686" name="/newroot/149/file0" dev="tmpfs" ino=809 res=1 errno=0 [ 395.676071][ T8332] syzkaller0: entered promiscuous mode [ 395.676167][ T8332] syzkaller0: entered allmulticast mode [ 395.682101][ T8332] tipc: Enabled bearer , priority 0 [ 395.718260][ T8332] tipc: Resetting bearer [ 396.927764][ T8331] tipc: Resetting bearer [ 398.075542][ T8331] tipc: Disabling bearer [ 398.149419][ T36] audit: type=1804 audit(1788321749.113:49): pid=8349 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.698" name="/newroot/28/file0" dev="tmpfs" ino=162 res=1 errno=0 [ 399.405196][ T9] tipc: Node number set to 943951061 [ 401.886133][ T8384] netlink: 'syz.2.707': attribute type 4 has an invalid length. [ 401.886175][ T8384] netlink: 17 bytes leftover after parsing attributes in process `syz.2.707'. [ 405.360003][ T36] audit: type=1804 audit(1788321756.323:50): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.709" name="/newroot/152/file0" dev="tmpfs" ino=825 res=1 errno=0 [ 405.757427][ T5596] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 407.151069][ T8411] syzkaller0: entered promiscuous mode [ 407.151179][ T8411] syzkaller0: entered allmulticast mode [ 407.167645][ T5596] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 407.196201][ T5596] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.201207][ T5596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.308700][ T8411] tipc: Started in network mode [ 407.308811][ T8411] tipc: Node identity cab73d1cd993, cluster identity 4711 [ 407.308999][ T8411] tipc: Enabled bearer , priority 0 [ 407.397638][ T8411] tipc: Resetting bearer [ 407.462337][ T8405] tipc: Resetting bearer [ 409.453846][ T5596] usbhid 3-1:1.0: can't add hid device: -71 [ 409.460501][ T5596] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 409.598214][ T5596] usb 3-1: USB disconnect, device number 3 [ 410.141048][ T8405] tipc: Disabling bearer [ 410.827435][ T31] tipc: Node number set to 321142044 [ 411.748557][ T36] audit: type=1804 audit(1788321762.713:51): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.723" name="/newroot/173/file0" dev="tmpfs" ino=929 res=1 errno=0 [ 417.065623][ T8474] syzkaller0: entered promiscuous mode [ 417.065736][ T8474] syzkaller0: entered allmulticast mode [ 417.114372][ T8474] tipc: Enabled bearer , priority 0 [ 417.157912][ T8474] tipc: Resetting bearer [ 417.355724][ T36] audit: type=1804 audit(1788321768.223:52): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.738" name="/newroot/156/file0" dev="tmpfs" ino=846 res=1 errno=0 [ 417.388644][ T5597] Bluetooth: hci5: command 0x0406 tx timeout [ 417.420472][ T8472] tipc: Resetting bearer [ 418.947485][ T8472] tipc: Disabling bearer [ 419.127956][ T5703] tipc: Node number set to 1202127929 [ 423.458121][ T36] audit: type=1804 audit(1788321774.413:53): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.749" name="/newroot/157/file0" dev="tmpfs" ino=835 res=1 errno=0 [ 423.719901][ T5921] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 423.725578][ T5826] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 423.877549][ T5826] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 423.887443][ T5826] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.887612][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.897056][ T5921] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 423.899023][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.899059][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.899104][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.975422][ T5921] usb 3-1: config 0 descriptor?? [ 424.603045][ T5921] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 424.611015][ T5921] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 424.611056][ T5921] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 424.611088][ T5921] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 424.611118][ T5921] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 424.611157][ T5921] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 424.611187][ T5921] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 424.611217][ T5921] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 424.611247][ T5921] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 424.611277][ T5921] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 425.271037][ T5703] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 425.361846][ T5826] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 425.437077][ T5703] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 425.448905][ T5703] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.454080][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.756400][ T5921] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 425.868779][ T5826] wacom 0003:056A:033B.0002: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 426.410709][ T8551] syzkaller0: entered promiscuous mode [ 426.410803][ T8551] syzkaller0: entered allmulticast mode [ 426.450862][ T8549] tipc: Enabled bearer , priority 0 [ 426.494556][ T5826] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0002/input/input5 [ 426.518987][ T199] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 426.657085][ T8549] tipc: Resetting bearer [ 426.676134][ T5703] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 426.736564][ T199] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 426.762601][ T199] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.762737][ T199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.148903][ T8548] tipc: Resetting bearer [ 427.216108][ T5703] wacom 0003:056A:033B.0003: hidraw2: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 427.906314][ T5703] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.0003/input/input8 [ 428.303284][ T5826] usb 1-1: USB disconnect, device number 2 [ 428.348730][ T199] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 428.429829][ T8548] tipc: Disabling bearer [ 430.197366][ T5703] usb 6-1: USB disconnect, device number 2 [ 430.518014][ T199] wacom 0003:056A:033B.0004: hidraw3: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 430.761344][ T199] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.0004/input/input11 [ 430.838363][ T5921] usb 3-1: USB disconnect, device number 4 [ 431.678789][ T199] usb 5-1: USB disconnect, device number 4 [ 433.332747][ T36] audit: type=1804 audit(1788321784.293:54): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.765" name="/newroot/166/file0" dev="tmpfs" ino=897 res=1 errno=0 [ 440.222396][ T8619] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 441.226291][ T8619] CIFS: Attempting to mount //::1/share [ 441.246873][ T8619] CIFS: VFS: Error connecting to socket. Aborting operation. [ 441.247008][ T8619] CIFS: VFS: cifs_mount failed w/return code = -111 [ 442.147153][ T8632] binder: 8627:8632 ioctl c0306201 0 returned -14 [ 443.480529][ T8640] syzkaller0: entered promiscuous mode [ 443.486332][ T8640] syzkaller0: entered allmulticast mode [ 443.490222][ T8640] tipc: Enabled bearer , priority 0 [ 443.511862][ T8640] tipc: Resetting bearer [ 443.874411][ T8639] tipc: Resetting bearer [ 444.284104][ T36] audit: type=1804 audit(1788321795.243:55): pid=8656 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.785" name="/newroot/51/file0" dev="tmpfs" ino=278 res=1 errno=0 [ 444.296763][ T8639] tipc: Disabling bearer [ 445.189093][ T8651] uprobe: syz.5.785:8651 failed to unregister, leaking uprobe [ 445.491582][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.491842][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.024971][ T8711] syzkaller0: entered promiscuous mode [ 453.036079][ T8711] syzkaller0: entered allmulticast mode [ 453.070072][ T8711] tipc: Enabled bearer , priority 0 [ 453.094312][ T8711] tipc: Resetting bearer [ 453.208946][ T8710] tipc: Resetting bearer [ 453.408287][ T8710] tipc: Disabling bearer [ 456.499199][ T5921] tipc: Node number set to 1857833832 [ 456.676143][ T36] audit: type=1804 audit(1788321807.643:56): pid=8718 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.803" name="/newroot/185/file0" dev="tmpfs" ino=991 res=1 errno=0 [ 463.636043][ T8753] binder: 8742:8753 ioctl c0306201 0 returned -14 [ 470.210816][ T8771] syzkaller0: entered promiscuous mode [ 470.217267][ T8771] syzkaller0: entered allmulticast mode [ 470.222320][ T8771] tipc: Enabled bearer , priority 0 [ 470.273332][ T8771] tipc: Resetting bearer [ 470.466348][ T8768] tipc: Resetting bearer [ 472.646092][ T5921] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 472.669325][ T8768] tipc: Disabling bearer [ 472.826887][ T5921] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 472.834655][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.834750][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.834839][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.953364][ T5921] usb 1-1: config 0 descriptor?? [ 474.049166][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 474.121056][ T59] Bluetooth: hci0: unexpected event for opcode 0x0c13 [ 474.380999][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 474.393809][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.404970][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.405084][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.470194][ T9] usb 4-1: config 0 descriptor?? [ 474.594353][ T5921] hid_parser_main: 21 callbacks suppressed [ 474.600463][ T5921] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 474.606682][ T5921] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 474.606716][ T5921] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 474.606743][ T5921] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 474.621234][ T5921] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 474.621269][ T5921] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 474.621298][ T5921] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 474.647333][ T5921] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 474.647369][ T5921] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 474.672339][ T5921] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 474.727531][ T5921] savu 0003:1E7D:2D5A.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 476.792056][ T9] savu 0003:1E7D:2D5A.0006: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 476.933859][ T5921] usb 1-1: USB disconnect, device number 3 [ 477.163990][ T9] usb 4-1: USB disconnect, device number 3 [ 478.809760][ T5921] ================================================================== [ 478.809780][ T5921] BUG: KASAN: slab-use-after-free in roccat_disconnect+0x246/0x250 [ 478.809826][ T5921] Read of size 4 at addr ffff88802ac10808 by task kworker/0:6/5921 [ 478.809846][ T5921] [ 478.809866][ T5921] CPU: 0 UID: 0 PID: 5921 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 478.809893][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.809908][ T5921] Workqueue: usb_hub_wq hub_event [ 478.809951][ T5921] Call Trace: [ 478.809961][ T5921] [ 478.809971][ T5921] dump_stack_lvl+0xe8/0x150 [ 478.810005][ T5921] print_address_description+0x55/0x1e0 [ 478.810038][ T5921] ? roccat_disconnect+0x246/0x250 [ 478.810062][ T5921] print_report+0x58/0x70 [ 478.810091][ T5921] kasan_report+0x117/0x150 [ 478.810122][ T5921] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 478.810155][ T5921] ? roccat_disconnect+0x246/0x250 [ 478.810185][ T5921] roccat_disconnect+0x246/0x250 [ 478.810215][ T5921] savu_remove+0xe9/0x160 [ 478.810249][ T5921] ? __pfx_savu_remove+0x10/0x10 [ 478.810280][ T5921] hid_device_remove+0xc8/0x1d0 [ 478.810313][ T5921] ? __pfx_hid_device_remove+0x10/0x10 [ 478.810343][ T5921] device_release_driver_internal+0x48b/0x880 [ 478.810378][ T5921] bus_remove_device+0x449/0x560 [ 478.810403][ T5921] ? __pfx_bus_remove_device+0x10/0x10 [ 478.810425][ T5921] ? up_read+0x34/0x180 [ 478.810447][ T5921] ? kernfs_remove_by_name_ns+0x101/0x140 [ 478.810480][ T5921] device_del+0x528/0x8f0 [ 478.810511][ T5921] ? __pfx_device_del+0x10/0x10 [ 478.810538][ T5921] ? rt_spin_unlock+0x159/0x200 [ 478.810580][ T5921] hid_destroy_device+0x6b/0x1b0 [ 478.810613][ T5921] usbhid_disconnect+0x9f/0xc0 [ 478.810646][ T5921] usb_unbind_interface+0x295/0x9f0 [ 478.810681][ T5921] ? kernfs_remove_by_name_ns+0x101/0x140 [ 478.810716][ T5921] ? __pfx_usb_unbind_interface+0x10/0x10 [ 478.810746][ T5921] device_release_driver_internal+0x4f5/0x880 [ 478.810779][ T5921] bus_remove_device+0x449/0x560 [ 478.810804][ T5921] ? __pfx_bus_remove_device+0x10/0x10 [ 478.810827][ T5921] ? up_read+0x34/0x180 [ 478.810846][ T5921] ? kernfs_remove_by_name_ns+0x101/0x140 [ 478.810877][ T5921] device_del+0x528/0x8f0 [ 478.810907][ T5921] ? __pfx_device_del+0x10/0x10 [ 478.810933][ T5921] ? kobject_put+0x516/0x550 [ 478.810965][ T5921] usb_disable_device+0x3d4/0x8d0 [ 478.810998][ T5921] usb_disconnect+0x32d/0x990 [ 478.811025][ T5921] hub_event+0x1bb7/0x4cf0 [ 478.811057][ T5921] ? __lock_acquire+0x6df/0x2e40 [ 478.811086][ T5921] ? register_lock_class+0x31/0x2e0 [ 478.811117][ T5921] ? perf_cgroup_switch+0xe6/0x920 [ 478.811152][ T5921] ? __pfx_hub_event+0x10/0x10 [ 478.811184][ T5921] ? rcu_is_watching+0x16/0xb0 [ 478.811217][ T5921] ? process_scheduled_works+0x97a/0x1630 [ 478.811246][ T5921] process_scheduled_works+0xc3d/0x1630 [ 478.811294][ T5921] ? __pfx_process_scheduled_works+0x10/0x10 [ 478.811328][ T5921] ? assign_work+0x3cf/0x5d0 [ 478.811359][ T5921] worker_thread+0xa47/0xfb0 [ 478.811397][ T5921] ? __kthread_parkme+0x71/0x1f0 [ 478.811435][ T5921] kthread+0x38b/0x470 [ 478.811457][ T5921] ? __pfx_worker_thread+0x10/0x10 [ 478.811485][ T5921] ? __pfx_kthread+0x10/0x10 [ 478.811507][ T5921] ret_from_fork+0x514/0xb70 [ 478.811530][ T5921] ? __pfx_ret_from_fork+0x10/0x10 [ 478.811551][ T5921] ? __switch_to+0xc89/0x1420 [ 478.811593][ T5921] ? __pfx_kthread+0x10/0x10 [ 478.811616][ T5921] ret_from_fork_asm+0x1a/0x30 [ 478.811647][ T5921] [ 478.811655][ T5921] [ 478.811668][ T5921] Allocated by task 5921: [ 478.811679][ T5921] kasan_save_track+0x3e/0x80 [ 478.811706][ T5921] __kasan_kmalloc+0x93/0xb0 [ 478.811734][ T5921] __kmalloc_cache_noprof+0x3d5/0x680 [ 478.811761][ T5921] roccat_connect+0x5d/0x4b0 [ 478.811783][ T5921] savu_probe+0x18e/0x340 [ 478.811811][ T5921] hid_device_probe+0x46a/0x870 [ 478.811839][ T5921] really_probe+0x254/0xae0 [ 478.811866][ T5921] __driver_probe_device+0x1e8/0x360 [ 478.811892][ T5921] driver_probe_device+0x4f/0x240 [ 478.811930][ T5921] __device_attach_driver+0x270/0x410 [ 478.811956][ T5921] bus_for_each_drv+0x25b/0x2f0 [ 478.811974][ T5921] __device_attach+0x2c7/0x450 [ 478.811997][ T5921] device_initial_probe+0xa1/0xd0 [ 478.812020][ T5921] bus_probe_device+0x12d/0x220 [ 478.812038][ T5921] device_add+0x7d7/0xb80 [ 478.812058][ T5921] hid_add_device+0x272/0x3e0 [ 478.812085][ T5921] usbhid_probe+0x9dc/0xde0 [ 478.812111][ T5921] usb_probe_interface+0x788/0xe50 [ 478.812138][ T5921] really_probe+0x254/0xae0 [ 478.812164][ T5921] __driver_probe_device+0x1e8/0x360 [ 478.812189][ T5921] driver_probe_device+0x4f/0x240 [ 478.812214][ T5921] __device_attach_driver+0x270/0x410 [ 478.812240][ T5921] bus_for_each_drv+0x25b/0x2f0 [ 478.812258][ T5921] __device_attach+0x2c7/0x450 [ 478.812281][ T5921] device_initial_probe+0xa1/0xd0 [ 478.812305][ T5921] bus_probe_device+0x12d/0x220 [ 478.812323][ T5921] device_add+0x7d7/0xb80 [ 478.812343][ T5921] usb_set_configuration+0x1ad8/0x2180 [ 478.812369][ T5921] usb_generic_driver_probe+0x8d/0x150 [ 478.812394][ T5921] usb_probe_device+0x1c3/0x3b0 [ 478.812420][ T5921] really_probe+0x254/0xae0 [ 478.812445][ T5921] __driver_probe_device+0x1e8/0x360 [ 478.812469][ T5921] driver_probe_device+0x4f/0x240 [ 478.812495][ T5921] __device_attach_driver+0x270/0x410 [ 478.812522][ T5921] bus_for_each_drv+0x25b/0x2f0 [ 478.812539][ T5921] __device_attach+0x2c7/0x450 [ 478.812569][ T5921] device_initial_probe+0xa1/0xd0 [ 478.812592][ T5921] bus_probe_device+0x12d/0x220 [ 478.812611][ T5921] device_add+0x7d7/0xb80 [ 478.812650][ T5921] usb_new_device+0x99a/0x1680 [ 478.812670][ T5921] hub_event+0x28cf/0x4cf0