last executing test programs: 16.503371223s ago: executing program 0 (id=41): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 13.230157442s ago: executing program 2 (id=57): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3) 13.229928059s ago: executing program 0 (id=58): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 12.641428331s ago: executing program 2 (id=59): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000280), &(0x7f0000000500)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 11.417780925s ago: executing program 2 (id=60): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, 0x9}, 0x14}, 0x1, 0x0, 0x0, 0x20004051}, 0x0) 10.782214939s ago: executing program 2 (id=62): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) 9.302108114s ago: executing program 2 (id=66): r0 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x3) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r0, 0x1, 0x0, 0x4000}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.794160838s ago: executing program 0 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) shmctl$IPC_SET(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x2, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002ef0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 5.041497492s ago: executing program 3 (id=74): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc000) select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) 4.878495549s ago: executing program 1 (id=75): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 4.792733854s ago: executing program 4 (id=76): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a80)={r0, &(0x7f0000000740), 0x0}, 0x20) 4.742611141s ago: executing program 0 (id=77): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000540)=""/225, 0x0, 0xe1, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20) 4.41633403s ago: executing program 4 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.270160689s ago: executing program 0 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000070000000600000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000040000000400000009000a0000000000", @ANYRES32=r0], 0x50) 4.168418602s ago: executing program 1 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, 0x0) 4.068723931s ago: executing program 4 (id=81): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000280), &(0x7f0000000500)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 3.978713454s ago: executing program 3 (id=82): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001001000090000000500000041000000", @ANYRES32, @ANYBLOB="0000001076d01d"], 0x50) 3.894582898s ago: executing program 0 (id=83): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 3.856975421s ago: executing program 1 (id=84): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000002c0)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000500), 0x5, r2}, 0x38) 3.536147046s ago: executing program 1 (id=85): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0xa, 0x4, 0x1, 0x18000000}, 0x50) 3.462645807s ago: executing program 3 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r1, r0, 0x0, 0x40001) 3.324569263s ago: executing program 1 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) shmctl$IPC_SET(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x2, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002ef0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.995066654s ago: executing program 3 (id=88): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x24004000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) 2.928456575s ago: executing program 4 (id=89): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711829000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffd1, 0x0, 0x0, 0x0}, 0x94) 1.571937922s ago: executing program 1 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) 1.470786259s ago: executing program 4 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.253852134s ago: executing program 2 (id=92): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc000) select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) 1.252512144s ago: executing program 3 (id=93): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0xc, &(0x7f00000000c0)=r2, 0x18) 1.050558306s ago: executing program 4 (id=94): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 0s ago: executing program 3 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. [ 92.036046][ T10] cfg80211: failed to load regulatory.db [ 92.539806][ T5584] cgroup: Unknown subsys name 'net' [ 92.780687][ T5584] cgroup: Unknown subsys name 'cpuset' [ 92.835749][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.812368][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.540224][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.553734][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.582070][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.604550][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.611078][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.620564][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.626300][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.641360][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.656006][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.656215][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.657770][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.659980][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.673884][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.691180][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.693457][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.704220][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.717564][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.732469][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.737086][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.758165][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.758974][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.789232][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.793682][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.854280][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.896444][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.917395][ T5617] Bluetooth: hci0: command tx timeout [ 99.917406][ T4912] Bluetooth: hci4: command tx timeout [ 99.917655][ T5621] Bluetooth: hci2: command tx timeout [ 99.996793][ T5621] Bluetooth: hci1: command tx timeout [ 100.075756][ T5621] Bluetooth: hci3: command tx timeout [ 100.561424][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.562906][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.563131][ T5601] bridge_slave_0: entered allmulticast mode [ 100.568652][ T5601] bridge_slave_0: entered promiscuous mode [ 100.650891][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.651134][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.651553][ T5601] bridge_slave_1: entered allmulticast mode [ 100.653967][ T5601] bridge_slave_1: entered promiscuous mode [ 100.757922][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.758178][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.758637][ T5603] bridge_slave_0: entered allmulticast mode [ 100.761048][ T5603] bridge_slave_0: entered promiscuous mode [ 100.844037][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.844348][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.844636][ T5603] bridge_slave_1: entered allmulticast mode [ 100.858011][ T5603] bridge_slave_1: entered promiscuous mode [ 100.909786][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.910231][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.910537][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.910804][ T5604] bridge_slave_0: entered allmulticast mode [ 100.913300][ T5604] bridge_slave_0: entered promiscuous mode [ 100.968048][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.968283][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.968477][ T5605] bridge_slave_0: entered allmulticast mode [ 100.971029][ T5605] bridge_slave_0: entered promiscuous mode [ 101.019606][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.020014][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.020231][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.020420][ T5604] bridge_slave_1: entered allmulticast mode [ 101.022778][ T5604] bridge_slave_1: entered promiscuous mode [ 101.071147][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.071482][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.071761][ T5605] bridge_slave_1: entered allmulticast mode [ 101.074307][ T5605] bridge_slave_1: entered promiscuous mode [ 101.157669][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.183173][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.183462][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.183651][ T5602] bridge_slave_0: entered allmulticast mode [ 101.187803][ T5602] bridge_slave_0: entered promiscuous mode [ 101.256932][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.280697][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.281034][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.281304][ T5602] bridge_slave_1: entered allmulticast mode [ 101.283793][ T5602] bridge_slave_1: entered promiscuous mode [ 101.312796][ T5601] team0: Port device team_slave_0 added [ 101.324917][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.354406][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.399115][ T5601] team0: Port device team_slave_1 added [ 101.403247][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.439508][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.502300][ T5603] team0: Port device team_slave_0 added [ 101.531857][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.577759][ T5603] team0: Port device team_slave_1 added [ 101.602982][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.611992][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.612037][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.612124][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.638613][ T5604] team0: Port device team_slave_0 added [ 101.681421][ T5605] team0: Port device team_slave_0 added [ 101.703650][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.703663][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.703683][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.716088][ T5604] team0: Port device team_slave_1 added [ 101.769727][ T5605] team0: Port device team_slave_1 added [ 101.823146][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.823159][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.823180][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.881679][ T5602] team0: Port device team_slave_0 added [ 101.907685][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.907698][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.907718][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.970571][ T5602] team0: Port device team_slave_1 added [ 101.973684][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.973695][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.973715][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.996391][ T5617] Bluetooth: hci4: command tx timeout [ 101.996475][ T5617] Bluetooth: hci0: command tx timeout [ 101.997046][ T5621] Bluetooth: hci2: command tx timeout [ 102.075344][ T5621] Bluetooth: hci1: command tx timeout [ 102.155533][ T5621] Bluetooth: hci3: command tx timeout [ 102.438958][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.438978][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.438998][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.518440][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.518454][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.518474][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.523943][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.523955][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.523976][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.656724][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.656737][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.656757][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.672498][ T5601] hsr_slave_0: entered promiscuous mode [ 102.683328][ T5601] hsr_slave_1: entered promiscuous mode [ 102.740712][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.740725][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.740746][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.834250][ T5603] hsr_slave_0: entered promiscuous mode [ 102.843932][ T5603] hsr_slave_1: entered promiscuous mode [ 102.850029][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 102.850354][ T5603] Cannot create hsr debugfs directory [ 102.960216][ T5604] hsr_slave_0: entered promiscuous mode [ 102.961843][ T5604] hsr_slave_1: entered promiscuous mode [ 102.963636][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 102.963660][ T5604] Cannot create hsr debugfs directory [ 102.992646][ T5605] hsr_slave_0: entered promiscuous mode [ 102.994255][ T5605] hsr_slave_1: entered promiscuous mode [ 102.998499][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 102.998565][ T5605] Cannot create hsr debugfs directory [ 103.275897][ T5602] hsr_slave_0: entered promiscuous mode [ 103.277601][ T5602] hsr_slave_1: entered promiscuous mode [ 103.278988][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 103.279011][ T5602] Cannot create hsr debugfs directory [ 104.075317][ T5621] Bluetooth: hci2: command tx timeout [ 104.075351][ T5621] Bluetooth: hci0: command tx timeout [ 104.075374][ T5621] Bluetooth: hci4: command tx timeout [ 104.156719][ T4912] Bluetooth: hci1: command tx timeout [ 104.190294][ T5601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.235299][ T4912] Bluetooth: hci3: command tx timeout [ 104.246089][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.263643][ T5601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.291632][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.302454][ T5601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.342467][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.373947][ T5601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.401294][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.538717][ T5603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.572786][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.581733][ T5603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.620607][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.643217][ T5603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.670299][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.699464][ T5603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.742915][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.880626][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.913891][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.937818][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.972277][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.986023][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.010487][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.041823][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.069818][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.293778][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.321744][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.336733][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.382382][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.400390][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.443964][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.500232][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.529689][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.670863][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.733417][ T5602] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.770872][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.793855][ T5602] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.832333][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.844908][ T5602] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.893132][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.911512][ T5602] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.949697][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.019414][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.093550][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.093980][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.135724][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.156026][ T5617] Bluetooth: hci2: command tx timeout [ 106.156077][ T5621] Bluetooth: hci0: command tx timeout [ 106.156119][ T4912] Bluetooth: hci4: command tx timeout [ 106.207942][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.208074][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.238478][ T4912] Bluetooth: hci1: command tx timeout [ 106.316254][ T4912] Bluetooth: hci3: command tx timeout [ 106.341504][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.413682][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.435838][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.436496][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.521338][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.521450][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.612718][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.662400][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.686109][ T3425] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.686263][ T3425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.834913][ T3425] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.844503][ T3425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.944106][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.009596][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.049166][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.050243][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.152175][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.153052][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.269882][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.402335][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.402534][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.510465][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.510682][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.978564][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.454015][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.500454][ T5601] veth0_vlan: entered promiscuous mode [ 108.650158][ T5601] veth1_vlan: entered promiscuous mode [ 108.971905][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.133781][ T5603] veth0_vlan: entered promiscuous mode [ 109.173804][ T5601] veth0_macvtap: entered promiscuous mode [ 109.237434][ T5601] veth1_macvtap: entered promiscuous mode [ 109.256375][ T5603] veth1_vlan: entered promiscuous mode [ 109.410060][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.453679][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.482271][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.555251][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.560750][ T5604] veth0_vlan: entered promiscuous mode [ 109.688487][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.722300][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.766297][ T5603] veth0_macvtap: entered promiscuous mode [ 109.776483][ T5604] veth1_vlan: entered promiscuous mode [ 109.780901][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.821089][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.909196][ T5603] veth1_macvtap: entered promiscuous mode [ 110.374698][ T5605] veth0_vlan: entered promiscuous mode [ 110.388825][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.504273][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.543417][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.543439][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.545062][ T5605] veth1_vlan: entered promiscuous mode [ 110.627529][ T5604] veth0_macvtap: entered promiscuous mode [ 110.659603][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.686145][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.711854][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.746130][ T5604] veth1_macvtap: entered promiscuous mode [ 110.759390][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.797923][ T5602] veth0_vlan: entered promiscuous mode [ 110.867233][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.867253][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.072531][ T5602] veth1_vlan: entered promiscuous mode [ 111.183145][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.364799][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.437651][ T5605] veth0_macvtap: entered promiscuous mode [ 111.469114][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.473359][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.516363][ T5605] veth1_macvtap: entered promiscuous mode [ 111.537686][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.563670][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.588383][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.588404][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.994341][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.007827][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.007847][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.120522][ T5602] veth0_macvtap: entered promiscuous mode [ 112.179601][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.268236][ T5602] veth1_macvtap: entered promiscuous mode [ 112.427367][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.460381][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.460494][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.460511][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.494598][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.525033][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.751766][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.763488][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.763509][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.936604][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.148339][ T3281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.158288][ T3281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.177089][ T3281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.177721][ T3281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.232229][ T5801] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.965193][ T5806] Zero length message leads to an empty skb [ 114.806171][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.806269][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.671068][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.671090][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.734860][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.859051][ T3425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.859073][ T3425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.906420][ T5758] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.928124][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 115.987123][ T32] usb 1-1: config 0 has no interfaces? [ 116.007392][ T32] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 116.007424][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.007446][ T32] usb 1-1: Product: syz [ 116.007461][ T32] usb 1-1: Manufacturer: syz [ 116.007476][ T32] usb 1-1: SerialNumber: syz [ 116.082542][ T5758] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.082576][ T5758] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.082615][ T5758] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 116.082639][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.333417][ T32] usb 1-1: config 0 descriptor?? [ 116.369347][ T5758] usb 3-1: config 0 descriptor?? [ 116.469392][ T3425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.469413][ T3425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.628058][ T5758] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 118.628102][ T5758] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 118.630982][ T5758] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 118.631016][ T5758] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 118.631064][ T5758] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 118.631110][ T5758] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 118.631185][ T5758] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 118.763958][ T5808] syz.0.12 (5808) used greatest stack depth: 19808 bytes left [ 119.107420][ T5758] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 119.345890][ T5758] cp2112 0003:10C4:EA90.0001: error requesting version [ 119.492363][ T5329] usb 1-1: USB disconnect, device number 2 [ 119.743316][ T5846] fuse: Bad value for 'fd' [ 120.006691][ T5758] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 120.214947][ T5758] usb 3-1: USB disconnect, device number 2 [ 120.747302][ T5329] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.916647][ T5329] usb 2-1: Using ep0 maxpacket: 32 [ 121.068178][ T5329] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 121.068225][ T5329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.068254][ T5329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 121.068298][ T5329] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 121.068323][ T5329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.467240][ T5329] usb 2-1: config 0 descriptor?? [ 121.574748][ T5881] binder: 5878:5881 ioctl c0306201 2000000002c0 returned -22 [ 122.032794][ T5329] pyra 0003:1E7D:2C24.0002: item fetching failed at offset 5/6 [ 122.036682][ T5329] pyra 0003:1E7D:2C24.0002: parse failed [ 122.036886][ T5329] pyra 0003:1E7D:2C24.0002: probe with driver pyra failed with error -22 [ 122.266809][ T823] usb 2-1: USB disconnect, device number 2 [ 125.407000][ T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.690985][ T44] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 125.691015][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.691034][ T44] usb 4-1: Product: syz [ 125.691047][ T44] usb 4-1: Manufacturer: syz [ 125.691062][ T44] usb 4-1: SerialNumber: syz [ 126.886054][ T32] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 127.873832][ T5710] usb 4-1: USB disconnect, device number 2 [ 128.045140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.085140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.235386][ T5950] syz.1.61 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.981188][ T32] usb 4-1: Service connection timeout for: 256 [ 128.981214][ T32] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 129.221890][ T32] ath9k_htc: Failed to initialize the device [ 129.227379][ T5710] usb 4-1: ath9k_htc: USB layer deinitialized [ 130.586934][ T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.646374][ T5729] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.747273][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 130.778701][ T32] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 130.778731][ T32] usb 5-1: config 0 has no interface number 0 [ 130.778780][ T32] usb 5-1: config 0 interface 184 has no altsetting 0 [ 130.818824][ T32] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 130.818854][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.818875][ T32] usb 5-1: Product: syz [ 130.818891][ T32] usb 5-1: Manufacturer: syz [ 130.818906][ T32] usb 5-1: SerialNumber: syz [ 130.935525][ T5729] usb 2-1: Using ep0 maxpacket: 32 [ 131.004622][ T5729] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 131.004656][ T5729] usb 2-1: config 0 has no interface number 0 [ 131.034414][ T32] usb 5-1: config 0 descriptor?? [ 131.057946][ T5729] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 131.057979][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.058000][ T5729] usb 2-1: Product: syz [ 131.058014][ T5729] usb 2-1: Manufacturer: syz [ 131.058027][ T5729] usb 2-1: SerialNumber: syz [ 131.163771][ T5729] usb 2-1: config 0 descriptor?? [ 131.714025][ T5729] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 131.714060][ T5729] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 131.983530][ T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 131.983563][ T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 133.543051][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.578609][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.840765][ T5729] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 133.841530][ T5729] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 133.842219][ T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 133.842248][ T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 133.842269][ T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 133.842812][ T32] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 134.055634][ T32] usb 5-1: USB disconnect, device number 2 [ 134.077715][ T5729] usb 2-1: USB disconnect, device number 3 [ 135.353771][ T6017] overlayfs: missing 'workdir' [ 137.531251][ T6030] tap0: tun_chr_ioctl cmd 2147767507 [ 138.838427][ T6042] [ 138.838441][ T6042] ============================= [ 138.838450][ T6042] WARNING: suspicious RCU usage [ 138.838469][ T6042] syzkaller #0 Not tainted [ 138.838483][ T6042] ----------------------------- [ 138.838491][ T6042] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 138.838508][ T6042] [ 138.838508][ T6042] other info that might help us debug this: [ 138.838508][ T6042] [ 138.838516][ T6042] [ 138.838516][ T6042] rcu_scheduler_active = 2, debug_locks = 1 [ 138.838532][ T6042] locks held by syz.4.94/6042: 1, last CPU#0: [ 138.838550][ T6042] #0: ffffffff8e1c3a38 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 138.838637][ T6042] [ 138.838637][ T6042] stack backtrace: [ 138.838662][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: syz.4.94 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.838690][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.838713][ T6042] Call Trace: [ 138.838723][ T6042] [ 138.838734][ T6042] dump_stack_lvl+0xe8/0x150 [ 138.838775][ T6042] lockdep_rcu_suspicious+0x13f/0x1d0 [ 138.838816][ T6042] get_callchain_entry+0x2b6/0x3c0 [ 138.838857][ T6042] get_perf_callchain+0xd5/0x880 [ 138.838901][ T6042] ? __pfx_get_perf_callchain+0x10/0x10 [ 138.838940][ T6042] ? __schedule+0x171f/0x5530 [ 138.838979][ T6042] __bpf_get_stack+0x3e9/0xa70 [ 138.839027][ T6042] ? __pfx___bpf_get_stack+0x10/0x10 [ 138.839064][ T6042] ? __lock_acquire+0x6df/0x2e40 [ 138.839108][ T6042] bpf_get_stack+0x33/0x50 [ 138.839141][ T6042] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 138.839177][ T6042] bpf_get_stack_raw_tp+0x1a4/0x210 [ 138.839213][ T6042] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 138.839239][ T6042] bpf_prog_run_pin_on_cpu+0x3b4/0x470 [ 138.839278][ T6042] bpf_prog_test_run_syscall+0x324/0x4c0 [ 138.839313][ T6042] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 138.839344][ T6042] ? __fget_files+0x2a/0x420 [ 138.839383][ T6042] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 138.839419][ T6042] bpf_prog_test_run+0x2cb/0x340 [ 138.839462][ T6042] __sys_bpf+0xa22/0xd90 [ 138.839506][ T6042] ? __pfx___sys_bpf+0x10/0x10 [ 138.839542][ T6042] ? do_futex+0x458/0x4e0 [ 138.839614][ T6042] ? rcu_is_watching+0x15/0xb0 [ 138.839658][ T6042] __x64_sys_bpf+0xba/0xd0 [ 138.839686][ T6042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.839714][ T6042] do_syscall_64+0x174/0x580 [ 138.839744][ T6042] ? trace_irq_disable+0x3b/0x140 [ 138.839775][ T6042] ? clear_bhb_loop+0x40/0x90 [ 138.839805][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.839830][ T6042] RIP: 0033:0x7fa5a6e4de59 [ 138.839853][ T6042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.839874][ T6042] RSP: 002b:00007fa5a50a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.839899][ T6042] RAX: ffffffffffffffda RBX: 00007fa5a70d5fa0 RCX: 00007fa5a6e4de59 [ 138.839916][ T6042] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 138.839931][ T6042] RBP: 00007fa5a6ee3e6f R08: 0000000000000000 R09: 0000000000000000 [ 138.839946][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.839959][ T6042] R13: 00007fa5a70d6038 R14: 00007fa5a70d5fa0 R15: 00007fff43bec168 [ 138.839994][ T6042]