last executing test programs: 4m19.180331671s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x2e, 0x101, 0x6}, 0x28) 4m18.797883648s ago: executing program 3 (id=8): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x8, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) 4m2.035457657s ago: executing program 32 (id=8): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x8, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) 3m33.611727873s ago: executing program 0 (id=121): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) 3m33.353001802s ago: executing program 0 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3m23.068899835s ago: executing program 0 (id=144): epoll_create1(0x0) epoll_create1(0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000140)}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1d3) chdir(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_init(0xf00, 0x1) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 3m13.716583512s ago: executing program 0 (id=161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000440)=""/220, 0xdc}, {0x0}, {&(0x7f0000000700)=""/69, 0x45}, {&(0x7f0000000880)=""/242, 0xf2}], 0x4) 3m12.610692834s ago: executing program 0 (id=166): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bridge_slave_0\x00'}) 3m9.164008422s ago: executing program 0 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',privpo', @ANYRESDEC=r7]) 2m53.760847919s ago: executing program 33 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',privpo', @ANYRESDEC=r7]) 9.538081716s ago: executing program 6 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) 9.441953818s ago: executing program 4 (id=681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 9.015725336s ago: executing program 4 (id=682): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.675791164s ago: executing program 5 (id=686): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.831964078s ago: executing program 6 (id=688): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000080)='O', 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 7.414976105s ago: executing program 6 (id=691): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.391076259s ago: executing program 5 (id=692): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) socket$inet(0xa, 0x801, 0x84) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r2, &(0x7f0000000940), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000840)="2cb13cbc11b45ea6e1c6ea1d46eb11be52eff2af60cfd8839f7b6442eb13ebe402f92f36166d87f502c3949f12155b19d024e6ef2aff23526e3f84d8f50e6db73a808f7b43048ee42071", 0x4a}, {&(0x7f0000000900)="31b9122c2eeaad4513b863ca3b80f82acf704c183c7b42117f5af737a27bf9d480fec7969d7ecf685bc3b4b2318671f16a51ae90eada49207329ecee47331fbdc4c84c408e86557234f854d63d90ff8a88175739062eedc6e09aab63ad86cb16383b6cb46f1ebac49f422991b58f98692450bde797b0b634845ade70980674c8e59acb3ca36a25d0b559d766561ff53aa6e39eb29739eb6d", 0x98}, {0x0}, {0x0}], 0x4, &(0x7f0000000d00)}}], 0x1, 0x24000809) madvise(&(0x7f000023f000/0x2000)=nil, 0x2000, 0x13) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000200)="f632e343263e0f01c3f436f30f09b8bd0600000f23d00f21f835100000010f23f80f01caf364f3670f181a0fd525b7c3c2060f01c5", 0x35}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.132639169s ago: executing program 5 (id=694): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) 5.880966854s ago: executing program 4 (id=695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x1001}], 0x2) 5.096822626s ago: executing program 2 (id=697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x1000005, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3, 0x2, 0x7fffffff, 0x669, 0x6, 0x3, 0xffffffff, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.022401476s ago: executing program 5 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) 4.555816107s ago: executing program 4 (id=699): pipe2$9p(&(0x7f0000000000), 0x880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.198975228s ago: executing program 2 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000002700)=ANY=[@ANYRES64=r2], 0x1118) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000060900010073797a300000000028000000000a030000000000000000000100000a0900010073797a3000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @sliced={0xa, [0x9, 0x8001, 0x400, 0x6, 0xa63, 0x1, 0x1, 0x8, 0xf42, 0x886d, 0x1ff, 0x7, 0x5, 0x6, 0x7, 0x3a, 0xcc, 0xffff, 0x4, 0xff, 0x0, 0x7, 0x0, 0x6, 0x3, 0x8000, 0x7, 0xe, 0x5, 0x8, 0xa6, 0xe0c, 0x8, 0x9, 0x310, 0x0, 0x1, 0x401, 0x7, 0x6, 0x6, 0x7fff, 0x3, 0xfffa, 0x7, 0x1660, 0x0, 0x2], 0x8}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004340)=""/102376, 0x18fe8) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="89000000120081ae08060cdc030000017f03e3f70000000067e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0003000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000000008080) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000000000000000a0000030900010035f03af23ccfff2a18000480140001800a0001006c696d6974000000040002800900020073797a3200000000050007402e0000001400000011a1010000000000000000000100000ada1dc83debf2672b96859901da2d149b62282935822f54802d7893c72182efbcda9d33209255ff33b0866ac7344bdecf69b5a3"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) read$FUSE(r3, &(0x7f00000006c0)={0x2020}, 0x2020) 3.687499599s ago: executing program 1 (id=701): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000080)='O', 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 3.612210986s ago: executing program 4 (id=702): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e1400", 0x26}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 3.563598675s ago: executing program 2 (id=703): epoll_create1(0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000140)}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1d3) chdir(0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 3.33892241s ago: executing program 6 (id=704): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), 0x0, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) 3.295808407s ago: executing program 1 (id=705): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r3, 0x0) listen(r3, 0x9ce2) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "000500"}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)}}], 0x1, 0x0) 2.988124737s ago: executing program 5 (id=706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 2.828412161s ago: executing program 1 (id=707): syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x10000000368}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 2.71173295s ago: executing program 5 (id=708): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.362304884s ago: executing program 2 (id=709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.9497916s ago: executing program 6 (id=710): ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff0000000094080000000017"], 0x0, 0xc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.78386644s ago: executing program 1 (id=711): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x1, {{0xa, 0x4e22, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x800018f1) r1 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) 1.783612598s ago: executing program 2 (id=712): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) mount$overlay(0x0, 0x0, &(0x7f0000000400), 0xb0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r8 = shmat(r7, &(0x7f0000001000/0x3000)=nil, 0x1000) shmdt(r8) shmdt(r8) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x325}, 0x14}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYRES8=r5, @ANYRES16=r1], 0x0) 562.645628ms ago: executing program 6 (id=713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 387.840294ms ago: executing program 4 (id=714): pipe2$9p(&(0x7f0000000000), 0x880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 356.313501ms ago: executing program 1 (id=715): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x0, 0xfd}]}, 0x10) 274.566097ms ago: executing program 2 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) 0s ago: executing program 1 (id=717): socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x15}, 0xef29}}, [0x9, 0x5, 0x9, 0x7f, 0x0, 0xc, 0x8ab5, 0xfffffffffffffff7, 0x6, 0x2, 0x0, 0x8000000000000001, 0x7fffffffffffffff, 0x6, 0x2000]}, &(0x7f0000000100)=0x100) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 85.041301][ T5823] cgroup: Unknown subsys name 'net' [ 85.217447][ T5823] cgroup: Unknown subsys name 'cpuset' [ 85.226875][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.036080][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.405509][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.432352][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.440789][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.449109][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.449573][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.458348][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.465281][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.479530][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.479667][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.487708][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.502138][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.503809][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.539157][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.559442][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.568355][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.594075][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.606949][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.614874][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.624102][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.632205][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.646375][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.661035][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.669870][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.681322][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.689428][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.975798][ T9] cfg80211: failed to load regulatory.db [ 92.332001][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 92.379514][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 92.464464][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.532388][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 92.694712][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 92.777312][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.785124][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.792666][ T5850] bridge_slave_0: entered allmulticast mode [ 92.800325][ T5850] bridge_slave_0: entered promiscuous mode [ 92.870954][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.879385][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.886692][ T5850] bridge_slave_1: entered allmulticast mode [ 92.894816][ T5850] bridge_slave_1: entered promiscuous mode [ 92.919496][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.927188][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.936749][ T5834] bridge_slave_0: entered allmulticast mode [ 92.944457][ T5834] bridge_slave_0: entered promiscuous mode [ 92.987510][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.995136][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.002532][ T5849] bridge_slave_0: entered allmulticast mode [ 93.011059][ T5849] bridge_slave_0: entered promiscuous mode [ 93.032404][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.039732][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.049572][ T5834] bridge_slave_1: entered allmulticast mode [ 93.056903][ T5834] bridge_slave_1: entered promiscuous mode [ 93.064955][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.072286][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.079760][ T5835] bridge_slave_0: entered allmulticast mode [ 93.088337][ T5835] bridge_slave_0: entered promiscuous mode [ 93.100520][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.109919][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.118260][ T5835] bridge_slave_1: entered allmulticast mode [ 93.126500][ T5835] bridge_slave_1: entered promiscuous mode [ 93.140264][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.147629][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.155437][ T5849] bridge_slave_1: entered allmulticast mode [ 93.162595][ T5849] bridge_slave_1: entered promiscuous mode [ 93.232592][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.274441][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.314261][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.339941][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.354395][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.366383][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.392521][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.406593][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.482643][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.490772][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.498769][ T5842] bridge_slave_0: entered allmulticast mode [ 93.506378][ T5842] bridge_slave_0: entered promiscuous mode [ 93.529871][ T5850] team0: Port device team_slave_0 added [ 93.540995][ T5834] team0: Port device team_slave_0 added [ 93.549296][ T5834] team0: Port device team_slave_1 added [ 93.568227][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.576563][ T5846] Bluetooth: hci0: command tx timeout [ 93.576581][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.576768][ T5842] bridge_slave_1: entered allmulticast mode [ 93.596494][ T5842] bridge_slave_1: entered promiscuous mode [ 93.628150][ T5850] team0: Port device team_slave_1 added [ 93.653295][ T5843] Bluetooth: hci1: command tx timeout [ 93.659101][ T5846] Bluetooth: hci2: command tx timeout [ 93.675557][ T5835] team0: Port device team_slave_0 added [ 93.698633][ T5849] team0: Port device team_slave_0 added [ 93.733023][ T5846] Bluetooth: hci4: command tx timeout [ 93.738687][ T5846] Bluetooth: hci3: command tx timeout [ 93.745576][ T5835] team0: Port device team_slave_1 added [ 93.756016][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.767314][ T5849] team0: Port device team_slave_1 added [ 93.790074][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.797158][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.823594][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.836409][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.844008][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.870000][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.901854][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.926898][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.937702][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.964448][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.976408][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.983994][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.010432][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.045732][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.052734][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.079564][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.106972][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.114030][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.140135][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.152586][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.159690][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.185706][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.241958][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.249273][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.275569][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.359042][ T5834] hsr_slave_0: entered promiscuous mode [ 94.366201][ T5834] hsr_slave_1: entered promiscuous mode [ 94.377048][ T5842] team0: Port device team_slave_0 added [ 94.406761][ T5850] hsr_slave_0: entered promiscuous mode [ 94.413676][ T5850] hsr_slave_1: entered promiscuous mode [ 94.420105][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.428480][ T5850] Cannot create hsr debugfs directory [ 94.451973][ T5842] team0: Port device team_slave_1 added [ 94.489618][ T5849] hsr_slave_0: entered promiscuous mode [ 94.496419][ T5849] hsr_slave_1: entered promiscuous mode [ 94.507074][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.523124][ T5849] Cannot create hsr debugfs directory [ 94.560992][ T5835] hsr_slave_0: entered promiscuous mode [ 94.571425][ T5835] hsr_slave_1: entered promiscuous mode [ 94.577884][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.585681][ T5835] Cannot create hsr debugfs directory [ 94.649411][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.656588][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.683102][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.699778][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.706889][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.733052][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.904250][ T5842] hsr_slave_0: entered promiscuous mode [ 94.910882][ T5842] hsr_slave_1: entered promiscuous mode [ 94.917271][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.925245][ T5842] Cannot create hsr debugfs directory [ 95.477787][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.491167][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.506114][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.529029][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.592939][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.614088][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.636184][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.648621][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.663139][ T5846] Bluetooth: hci0: command tx timeout [ 95.724488][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.733698][ T5843] Bluetooth: hci1: command tx timeout [ 95.739317][ T5846] Bluetooth: hci2: command tx timeout [ 95.743762][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.782381][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.793514][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.813156][ T5843] Bluetooth: hci4: command tx timeout [ 95.818638][ T5846] Bluetooth: hci3: command tx timeout [ 95.920131][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.931374][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.975830][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.988248][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.103949][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.118040][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.128445][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.148387][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.168509][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.200971][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.267388][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.299528][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.306880][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.336205][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.352741][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.366183][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.373581][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.416035][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.423403][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.459023][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.466202][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.521715][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.545609][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.595324][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.602917][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.635168][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.650161][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.657356][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.705197][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.712420][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.747546][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.754800][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.921901][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.063662][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.100559][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.107859][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.188505][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.196225][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.273380][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.541087][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.613867][ T5834] veth0_vlan: entered promiscuous mode [ 97.679164][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.691178][ T5834] veth1_vlan: entered promiscuous mode [ 97.734626][ T5846] Bluetooth: hci0: command tx timeout [ 97.772169][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.815421][ T5846] Bluetooth: hci2: command tx timeout [ 97.820891][ T5843] Bluetooth: hci1: command tx timeout [ 97.893944][ T5846] Bluetooth: hci4: command tx timeout [ 97.899505][ T5843] Bluetooth: hci3: command tx timeout [ 98.008428][ T5834] veth0_macvtap: entered promiscuous mode [ 98.040749][ T5850] veth0_vlan: entered promiscuous mode [ 98.070895][ T5834] veth1_macvtap: entered promiscuous mode [ 98.106611][ T5850] veth1_vlan: entered promiscuous mode [ 98.130183][ T5849] veth0_vlan: entered promiscuous mode [ 98.162112][ T5849] veth1_vlan: entered promiscuous mode [ 98.180796][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.192146][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.218176][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.231739][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.241898][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.250895][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.259726][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.363783][ T5849] veth0_macvtap: entered promiscuous mode [ 98.412256][ T5849] veth1_macvtap: entered promiscuous mode [ 98.427332][ T5835] veth0_vlan: entered promiscuous mode [ 98.445962][ T5850] veth0_macvtap: entered promiscuous mode [ 98.497010][ T5850] veth1_macvtap: entered promiscuous mode [ 98.523427][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.527611][ T5842] veth0_vlan: entered promiscuous mode [ 98.542727][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.556149][ T5835] veth1_vlan: entered promiscuous mode [ 98.608855][ T5842] veth1_vlan: entered promiscuous mode [ 98.620285][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.634033][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.666403][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.676134][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.680603][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.694015][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.702904][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.708782][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.711750][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.736102][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.772341][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.783260][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.792022][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.801294][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.866340][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.902655][ T5835] veth0_macvtap: entered promiscuous mode [ 98.972093][ T5835] veth1_macvtap: entered promiscuous mode [ 98.992523][ T5842] veth0_macvtap: entered promiscuous mode [ 99.060364][ T5842] veth1_macvtap: entered promiscuous mode [ 99.148220][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.179310][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.191117][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.251731][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.275209][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.304369][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.307810][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.329691][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.338738][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.347347][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.356456][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.435562][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.446279][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.454672][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.494737][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.522951][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.531717][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.542177][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.620126][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.633883][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.813149][ T5843] Bluetooth: hci0: command tx timeout [ 99.822265][ T5828] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.845289][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.878128][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.893498][ T5843] Bluetooth: hci1: command tx timeout [ 99.899903][ T5846] Bluetooth: hci2: command tx timeout [ 99.945957][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.973679][ T5846] Bluetooth: hci3: command tx timeout [ 99.979986][ T5843] Bluetooth: hci4: command tx timeout [ 99.986429][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 99.992676][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.005933][ T5828] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 100.021531][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.032035][ T5828] usb 2-1: Product: syz [ 100.036909][ T5828] usb 2-1: Manufacturer: syz [ 100.052017][ T5828] usb 2-1: SerialNumber: syz [ 100.073598][ T5828] usb 2-1: config 0 descriptor?? [ 100.090196][ T5828] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 100.105871][ T5828] usb 2-1: Detected FT-X [ 100.252023][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.297197][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.353911][ T5828] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 100.457916][ T5974] overlayfs: failed to resolve './file1': -2 [ 101.299045][ T972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.344064][ T972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.400320][ T5979] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.443698][ T5828] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 101.482262][ T5828] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 101.583024][ T5828] usb 2-1: USB disconnect, device number 2 [ 101.626445][ T5828] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 101.678936][ T5828] ftdi_sio 2-1:0.0: device disconnected [ 106.222357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.801103][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 106.933155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 106.944630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #24a!!! [ 107.205019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.254099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 107.262554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 107.334579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 107.554260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.655575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 107.664744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.022221][ T6023] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 108.031784][ T6023] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 108.041397][ T6023] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 108.052725][ T30] audit: type=1800 audit(1755886285.563:2): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.18" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 113.354717][ T6079] syzkaller0: entered promiscuous mode [ 113.360231][ T6079] syzkaller0: entered allmulticast mode [ 116.382835][ T6093] syz.1.38 (6093) used greatest stack depth: 19872 bytes left [ 116.413504][ T6096] binder: 6090:6096 ioctl c0306201 2000000003c0 returned -22 [ 118.233964][ T6104] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 120.688915][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.700622][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.722118][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.741328][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.751563][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.918963][ T6145] Zero length message leads to an empty skb [ 120.944046][ T5965] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.154070][ T5965] usb 3-1: Using ep0 maxpacket: 8 [ 121.193159][ T5965] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 121.219122][ T5965] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.260643][ T5965] usb 3-1: config 0 has no interfaces? [ 121.298687][ T5965] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 121.348228][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.424600][ T5912] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.550705][ T5965] usb 3-1: config 0 descriptor?? [ 121.649711][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 121.769300][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.833903][ T5912] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.976083][ T5912] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 122.005960][ T6138] libceph: resolve '4.' (ret=-3): failed [ 122.007626][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.017770][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.048037][ T5912] usb 2-1: Product: syz [ 122.052554][ T5912] usb 2-1: Manufacturer: syz [ 122.109490][ T5912] usb 2-1: SerialNumber: syz [ 122.131639][ T5851] IPVS: starting estimator thread 0... [ 122.144183][ T5912] usb 2-1: config 0 descriptor?? [ 122.149715][ T6138] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 122.203396][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 122.259919][ T5912] usb 3-1: USB disconnect, device number 2 [ 122.292986][ T6158] IPVS: using max 23 ests per chain, 55200 per kthread [ 122.610602][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 122.863705][ T5843] Bluetooth: hci5: command tx timeout [ 123.502963][ T5926] usb 2-1: USB disconnect, device number 3 [ 123.748454][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.839996][ T6137] chnl_net:caif_netlink_parms(): no params data found [ 123.908917][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.316312][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.013464][ T5843] Bluetooth: hci5: command tx timeout [ 125.567962][ T6193] overlayfs: missing 'lowerdir' [ 125.908461][ T6137] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.945065][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.970633][ T6137] bridge_slave_0: entered allmulticast mode [ 125.996190][ T6137] bridge_slave_0: entered promiscuous mode [ 126.058953][ T6137] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.080642][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.094704][ T6137] bridge_slave_1: entered allmulticast mode [ 126.134425][ T6137] bridge_slave_1: entered promiscuous mode [ 126.954013][ T6137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.998021][ T6137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.061383][ T13] bridge_slave_1: left allmulticast mode [ 127.079816][ T13] bridge_slave_1: left promiscuous mode [ 127.123016][ T5843] Bluetooth: hci5: command tx timeout [ 127.182843][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.320340][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.336606][ T13] bridge_slave_0: left allmulticast mode [ 127.342320][ T13] bridge_slave_0: left promiscuous mode [ 127.349212][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.363139][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 127.375860][ T10] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 127.396278][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.429834][ T10] usb 1-1: config 0 has no interfaces? [ 127.447481][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 127.471870][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.497454][ T10] usb 1-1: config 0 descriptor?? [ 127.698298][ T6222] syz.4.77 uses obsolete (PF_INET,SOCK_PACKET) [ 127.741539][ T6211] libceph: resolve '4.' (ret=-3): failed [ 127.830522][ T24] IPVS: starting estimator thread 0... [ 127.835323][ T6211] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 127.879451][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 128.003029][ T6227] IPVS: using max 26 ests per chain, 62400 per kthread [ 128.269866][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.316974][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.360413][ T13] bond0 (unregistering): Released all slaves [ 129.173390][ T5843] Bluetooth: hci5: command tx timeout [ 129.206585][ T10] usb 1-1: USB disconnect, device number 2 [ 130.303253][ T6137] team0: Port device team_slave_0 added [ 130.624099][ T6137] team0: Port device team_slave_1 added [ 131.185742][ T30] audit: type=1800 audit(1755886308.733:3): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.82" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 131.186042][ T6250] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 131.216265][ T6250] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 131.225974][ T6250] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 131.775828][ T6137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.879688][ T6137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.049036][ T6137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.302515][ T13] hsr_slave_0: left promiscuous mode [ 132.318771][ T13] hsr_slave_1: left promiscuous mode [ 132.326353][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.340740][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.351469][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.364633][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.408093][ T13] veth1_macvtap: left promiscuous mode [ 132.418767][ T13] veth0_macvtap: left promiscuous mode [ 132.428428][ T13] veth1_vlan: left promiscuous mode [ 132.441736][ T13] veth0_vlan: left promiscuous mode [ 132.938746][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.947173][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.976282][ T6302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.340748][ T13] team0 (unregistering): Port device team_slave_1 removed [ 134.448192][ T13] team0 (unregistering): Port device team_slave_0 removed [ 137.356863][ T6266] syzkaller0: entered promiscuous mode [ 137.362420][ T6266] syzkaller0: entered allmulticast mode [ 137.379373][ T6137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.392455][ T6137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.427065][ T6137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.372276][ T6137] hsr_slave_0: entered promiscuous mode [ 139.381085][ T6137] hsr_slave_1: entered promiscuous mode [ 139.390606][ T6137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.398450][ T6137] Cannot create hsr debugfs directory [ 142.652475][ T6137] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.705247][ T6137] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.861183][ T6137] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.914198][ T6137] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.004616][ T6137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.146410][ T6137] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.407747][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.415016][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.897619][ T6407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.117'. [ 145.271218][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.278510][ T972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.051239][ T6434] hub 9-0:1.0: USB hub found [ 147.790008][ T6434] hub 9-0:1.0: 1 port detected [ 147.909433][ T6137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.340555][ T6480] input: syz0 as /devices/virtual/input/input5 [ 153.823540][ T6137] veth0_vlan: entered promiscuous mode [ 154.070096][ T6137] veth1_vlan: entered promiscuous mode [ 155.565569][ T6137] veth0_macvtap: entered promiscuous mode [ 155.673874][ T6137] veth1_macvtap: entered promiscuous mode [ 155.752552][ T6137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.861365][ T6137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.901443][ T6137] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.943377][ T6137] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.975724][ T6137] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.022018][ T6137] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.950357][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.005057][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.011436][ T5990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.181845][ T5990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.529529][ T6548] hub 8-0:1.0: USB hub found [ 161.540281][ T6548] hub 8-0:1.0: 1 port detected [ 163.909611][ T6556] bridge: RTM_NEWNEIGH with invalid ether address [ 164.374802][ T6568] netem: change failed [ 166.335324][ T6603] syzkaller0: entered promiscuous mode [ 166.362996][ T6603] syzkaller0: entered allmulticast mode [ 166.653064][ T5828] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 166.848062][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.878366][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.913083][ T5828] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 166.940982][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.028273][ T5828] usb 1-1: config 0 descriptor?? [ 167.561184][ T5828] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 167.713136][ T5837] usb 1-1: USB disconnect, device number 3 [ 168.022359][ T6633] hub 8-0:1.0: USB hub found [ 168.029764][ T6633] hub 8-0:1.0: 1 port detected [ 169.744462][ T6627] fido_id[6627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 174.323431][ T5912] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 174.374976][ T5828] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 174.555769][ T5828] usb 6-1: Using ep0 maxpacket: 16 [ 174.603627][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 174.646581][ T5828] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.672839][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 174.680119][ T5912] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 174.705389][ T5912] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 174.722801][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.732579][ T5912] usb 5-1: Product: syz [ 174.752806][ T5912] usb 5-1: Manufacturer: syz [ 174.757533][ T5912] usb 5-1: SerialNumber: syz [ 174.760050][ T5828] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 174.794458][ T5912] usb 5-1: config 0 descriptor?? [ 174.914146][ T5912] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 175.538278][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.555820][ T5828] usb 6-1: config 0 descriptor?? [ 175.713923][ T5912] usb 5-1: Detected FT232R [ 175.737407][ T5912] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 175.990382][ T5828] playstation 0003:054C:0DF2.0002: item fetching failed at offset 4/5 [ 176.000725][ T5912] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 176.031969][ T5828] playstation 0003:054C:0DF2.0002: Parse failed [ 176.061369][ T5828] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -22 [ 176.177785][ T5828] usb 5-1: USB disconnect, device number 2 [ 176.235912][ T5926] usb 6-1: USB disconnect, device number 2 [ 176.275082][ T5828] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 176.317453][ T5828] ftdi_sio 5-1:0.0: device disconnected [ 179.059856][ T5926] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 179.222844][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 179.258553][ T5926] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 179.303277][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.357223][ T5926] usb 3-1: config 0 has no interfaces? [ 179.370796][ T5926] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 179.410205][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.479273][ T5926] usb 3-1: config 0 descriptor?? [ 180.876582][ T5913] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 181.114730][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.271200][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.284338][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 181.300780][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.197938][ T5913] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.288337][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.360601][ T5913] usb 6-1: config 0 descriptor?? [ 183.505292][ T6742] 9pnet_fd: Insufficient options for proto=fd [ 183.925255][ T5913] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 184.064371][ T5913] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 184.183558][ T6751] capability: warning: `syz.1.199' uses deprecated v2 capabilities in a way that may be insecure [ 184.293813][ T5913] usb 6-1: USB disconnect, device number 3 [ 185.075995][ T5851] usb 3-1: USB disconnect, device number 3 [ 185.082605][ T6757] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 185.399328][ T6756] fido_id[6756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 185.524448][ T6769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.086824][ T6773] tipc: Started in network mode [ 186.111663][ T6773] tipc: Node identity 8e97cc55e20d, cluster identity 4711 [ 186.140361][ T6773] tipc: Enabled bearer , priority 0 [ 186.175048][ T6774] syzkaller0: entered promiscuous mode [ 186.180596][ T6774] syzkaller0: entered allmulticast mode [ 186.313783][ T6773] tipc: Resetting bearer [ 186.423175][ T6772] tipc: Resetting bearer [ 186.483551][ T6772] tipc: Disabling bearer [ 186.990398][ T6786] hub 8-0:1.0: USB hub found [ 187.129422][ T6786] hub 8-0:1.0: 1 port detected [ 187.187717][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.198377][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.206925][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.224724][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.234775][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.294805][ T6789] chnl_net:caif_netlink_parms(): no params data found [ 188.314864][ T6802] netlink: 165 bytes leftover after parsing attributes in process `syz.2.209'. [ 189.353824][ T5843] Bluetooth: hci4: command tx timeout [ 189.861747][ T6789] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.900431][ T6789] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.950968][ T6789] bridge_slave_0: entered allmulticast mode [ 189.971475][ T6789] bridge_slave_0: entered promiscuous mode [ 190.035737][ T6789] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.067727][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.099714][ T6789] bridge_slave_1: entered allmulticast mode [ 190.142877][ T6789] bridge_slave_1: entered promiscuous mode [ 190.501751][ T6789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.633018][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.768463][ T6789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.045629][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.217715][ T6789] team0: Port device team_slave_0 added [ 191.287084][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.405781][ T6789] team0: Port device team_slave_1 added [ 191.413290][ T5843] Bluetooth: hci4: command tx timeout [ 191.545727][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.666044][ T6789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.692618][ T6789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.772887][ T6789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.844697][ T6789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.851709][ T6789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.912526][ T6789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.362877][ T978] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 192.382867][ T5851] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 192.512906][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 192.537304][ T978] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 192.539441][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.575417][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.627288][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.640615][ T978] usb 2-1: config 0 has no interfaces? [ 192.665961][ T6789] hsr_slave_0: entered promiscuous mode [ 192.671776][ T978] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 192.672833][ T5851] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 192.691350][ T6789] hsr_slave_1: entered promiscuous mode [ 192.718150][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.735137][ T6789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.744783][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.765146][ T5851] usb 3-1: config 0 descriptor?? [ 193.413011][ T6789] Cannot create hsr debugfs directory [ 193.419763][ T978] usb 2-1: config 0 descriptor?? [ 193.492858][ T5843] Bluetooth: hci4: command tx timeout [ 193.640590][ T5851] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 193.742073][ T6857] libceph: resolve '4.' (ret=-3): failed [ 193.853268][ T5851] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 193.860326][ T5851] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 193.902810][ T5851] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 193.910004][ T5851] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 193.936374][ T49] bridge_slave_1: left allmulticast mode [ 193.942359][ T49] bridge_slave_1: left promiscuous mode [ 193.969041][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.972790][ T5851] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 193.990691][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 194.000189][ T6857] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.026181][ T5913] IPVS: starting estimator thread 0... [ 194.052273][ T5851] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 194.092546][ T5851] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 194.196472][ T49] bridge_slave_0: left allmulticast mode [ 194.202190][ T49] bridge_slave_0: left promiscuous mode [ 194.231045][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.322912][ T6873] IPVS: using max 26 ests per chain, 62400 per kthread [ 194.899560][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.903312][ T5851] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 194.907291][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.942955][ T5851] cp2112 0003:10C4:EA90.0004: error requesting SMBus config [ 195.004512][ T5851] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -32 [ 195.218494][ T5851] usb 3-1: USB disconnect, device number 4 [ 195.573084][ T5843] Bluetooth: hci4: command tx timeout [ 195.913553][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.990803][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.159058][ T6882] netlink: 165 bytes leftover after parsing attributes in process `syz.2.222'. [ 196.554842][ T49] bond0 (unregistering): Released all slaves [ 199.295493][ T5851] usb 2-1: USB disconnect, device number 4 [ 200.301980][ T6907] hub 8-0:1.0: USB hub found [ 200.308011][ T6907] hub 8-0:1.0: 1 port detected [ 201.288750][ T6789] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.299554][ T6789] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.483699][ T6920] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.231'. [ 202.911399][ T49] hsr_slave_0: left promiscuous mode [ 203.001266][ T49] hsr_slave_1: left promiscuous mode [ 203.008094][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.059495][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.133938][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.161170][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.470896][ T49] veth1_macvtap: left promiscuous mode [ 203.483180][ T49] veth0_macvtap: left promiscuous mode [ 203.512596][ T49] veth1_vlan: left promiscuous mode [ 203.577942][ T49] veth0_vlan: left promiscuous mode [ 205.082861][ T5851] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 205.232854][ T5851] usb 3-1: Using ep0 maxpacket: 8 [ 205.241101][ T5851] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 205.251215][ T5851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.289362][ T5851] usb 3-1: config 0 has no interfaces? [ 205.313218][ T5851] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 205.350184][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.397264][ T5851] usb 3-1: config 0 descriptor?? [ 205.762265][ T6946] libceph: resolve '4.' (ret=-3): failed [ 205.774310][ T6946] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.783152][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 206.102279][ T49] team0 (unregistering): Port device team_slave_1 removed [ 206.316683][ T49] team0 (unregistering): Port device team_slave_0 removed [ 207.765864][ T6789] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 207.777934][ T6789] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 208.301341][ T5837] usb 3-1: USB disconnect, device number 5 [ 208.409624][ T6789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.500648][ T6789] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.575486][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.582798][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.655556][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.663182][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.755622][ T6982] tipc: Enabling of bearer rejected, failed to enable media [ 209.425096][ T49] IPVS: stop unused estimator thread 0... [ 209.528449][ T7003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.738698][ T7009] netlink: 165 bytes leftover after parsing attributes in process `syz.5.246'. [ 212.360658][ T6789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.776013][ T7056] syz.4.252 (7056) used greatest stack depth: 16496 bytes left [ 215.078261][ T6789] veth0_vlan: entered promiscuous mode [ 215.128255][ T6789] veth1_vlan: entered promiscuous mode [ 215.276652][ T6789] veth0_macvtap: entered promiscuous mode [ 215.327295][ T6789] veth1_macvtap: entered promiscuous mode [ 215.420623][ T6789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.507780][ T6789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.647902][ T6789] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.733445][ T6789] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.742210][ T6789] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.853036][ T6789] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.462782][ T7087] netlink: 165 bytes leftover after parsing attributes in process `syz.1.258'. [ 216.862160][ T5976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.896304][ T5976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.935324][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 216.941504][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 216.947684][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 217.033644][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.152816][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.306226][ T7093] tipc: Started in network mode [ 217.311200][ T7093] tipc: Node identity 26dd1a197cb, cluster identity 4711 [ 217.322032][ T7093] tipc: Enabled bearer , priority 0 [ 217.370743][ T7094] syzkaller0: entered promiscuous mode [ 217.377899][ T7094] syzkaller0: entered allmulticast mode [ 217.388708][ T7093] tipc: Resetting bearer [ 217.478226][ T7091] tipc: Resetting bearer [ 217.617772][ T7091] tipc: Disabling bearer [ 218.484578][ T7107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.071184][ T5828] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 220.363398][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 220.430827][ T5828] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 220.697437][ T5828] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.745360][ T5828] usb 5-1: config 0 has no interfaces? [ 220.751018][ T5828] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 220.924363][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.043870][ T7138] netlink: 165 bytes leftover after parsing attributes in process `syz.1.268'. [ 221.803508][ T5828] usb 5-1: config 0 descriptor?? [ 223.734623][ T7162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.101271][ T7167] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 225.091587][ T5912] usb 5-1: USB disconnect, device number 3 [ 228.060215][ T7208] netlink: 64 bytes leftover after parsing attributes in process `syz.2.283'. [ 228.612382][ T7213] netlink: 165 bytes leftover after parsing attributes in process `syz.5.282'. [ 228.938223][ T978] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 229.242342][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 229.286727][ T978] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 229.374362][ T7224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.402919][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.459758][ T978] usb 2-1: config 0 has no interfaces? [ 229.523472][ T978] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 229.569846][ T7228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.636018][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.731363][ T978] usb 2-1: config 0 descriptor?? [ 230.269824][ T7233] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 232.392277][ T978] usb 2-1: can't set config #0, error -71 [ 232.466572][ T978] usb 2-1: USB disconnect, device number 5 [ 234.233005][ T7271] netlink: 165 bytes leftover after parsing attributes in process `syz.5.297'. [ 235.444301][ T7288] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 235.455672][ T7288] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 235.616495][ T7299] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 238.930551][ T7330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.083218][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 239.272816][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 239.330666][ T10] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 239.379219][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.465459][ T10] usb 2-1: config 0 has no interfaces? [ 239.497000][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 239.646262][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.714680][ T10] usb 2-1: config 0 descriptor?? [ 240.317285][ T7351] libceph: resolve '4.' (ret=-3): failed [ 240.325479][ T7351] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.334726][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 240.833570][ T5851] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 241.033149][ T5851] usb 3-1: Using ep0 maxpacket: 8 [ 241.061732][ T5851] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 241.089576][ T5851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.140943][ T5851] usb 3-1: config 0 has no interfaces? [ 241.162477][ T5851] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 241.193574][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.244106][ T5851] usb 3-1: config 0 descriptor?? [ 241.723588][ T7356] libceph: resolve '4.' (ret=-3): failed [ 241.766916][ T7349] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.795336][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 243.991186][ T10] usb 2-1: USB disconnect, device number 6 [ 244.061252][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.327'. [ 244.557507][ T5837] usb 3-1: USB disconnect, device number 6 [ 245.908212][ T7430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.362053][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 246.392541][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.337'. [ 247.659983][ T7476] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.346'. [ 247.854941][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 248.048925][ T7483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.210981][ T7564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.288260][ T7574] binder_alloc: 7566: binder_alloc_buf, no vma [ 255.867224][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.873997][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.677326][ T7588] 9pnet_fd: Insufficient options for proto=fd [ 258.555258][ T7610] fuse: Bad value for 'group_id' [ 258.579557][ T7610] fuse: Bad value for 'group_id' [ 262.197171][ T7658] netlink: 36 bytes leftover after parsing attributes in process `syz.1.391'. [ 263.227281][ T7682] fuse: Bad value for 'group_id' [ 263.250103][ T7682] fuse: Bad value for 'group_id' [ 265.020044][ T7718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.871047][ T7759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.047091][ T7777] binder_alloc: 7775: binder_alloc_buf, no vma [ 270.323324][ T7788] binder_alloc: 7779: binder_alloc_buf, no vma [ 270.858243][ T7787] tipc: Enabled bearer , priority 0 [ 270.953156][ T7789] syzkaller0: entered promiscuous mode [ 270.995947][ T7789] syzkaller0: entered allmulticast mode [ 271.049562][ T7794] netlink: 65536 bytes leftover after parsing attributes in process `syz.4.425'. [ 271.386686][ T7785] tipc: Resetting bearer [ 271.454023][ T7785] tipc: Disabling bearer [ 271.686482][ T7808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.709464][ T7826] binder_alloc: 7821: binder_alloc_buf, no vma [ 273.429263][ T7834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.094516][ T7844] netlink: 165 bytes leftover after parsing attributes in process `syz.1.435'. [ 275.491711][ T7838] binder: BINDER_SET_CONTEXT_MGR already set [ 275.537526][ T7838] binder: 7836:7838 ioctl 4018620d 200000004a80 returned -16 [ 276.701366][ T7865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.962827][ T5837] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 277.219190][ T5837] usb 6-1: Using ep0 maxpacket: 8 [ 277.284297][ T5837] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 277.355990][ T5837] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.620281][ T5837] usb 6-1: config 0 has no interfaces? [ 277.676005][ T5837] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 277.701158][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.739236][ T5837] usb 6-1: config 0 descriptor?? [ 278.477195][ T7868] libceph: resolve '4.' (ret=-3): failed [ 278.486234][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.440'. [ 278.521276][ T5828] IPVS: starting estimator thread 0... [ 278.636435][ T7888] IPVS: using max 29 ests per chain, 69600 per kthread [ 279.240043][ T7896] netlink: 165 bytes leftover after parsing attributes in process `syz.2.447'. [ 280.677522][ T5837] usb 6-1: USB disconnect, device number 4 [ 281.864618][ T7916] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 282.112314][ T7915] binder_alloc: 7906: binder_alloc_buf, no vma [ 282.484637][ T7928] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 282.642437][ T7934] netlink: 165 bytes leftover after parsing attributes in process `syz.5.458'. [ 283.706840][ T7953] binder_alloc: 7948: binder_alloc_buf, no vma [ 285.149428][ T7972] tipc: Enabled bearer , priority 0 [ 285.218304][ T7976] binder_alloc: 7969: binder_alloc_buf, no vma [ 285.222510][ T7972] syzkaller0: entered promiscuous mode [ 285.231923][ T7972] syzkaller0: entered allmulticast mode [ 285.330629][ T7972] tipc: Resetting bearer [ 285.501617][ T7967] tipc: Resetting bearer [ 285.632398][ T7967] tipc: Disabling bearer [ 285.932095][ T7988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.172209][ T7990] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 286.790939][ T7998] tipc: Enabling of bearer rejected, failed to enable media [ 288.683798][ T8037] syzkaller0: entered promiscuous mode [ 288.689388][ T8037] syzkaller0: entered allmulticast mode [ 289.021073][ T8048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.191169][ T8054] binder_alloc: 8051: binder_alloc_buf, no vma [ 291.092874][ T5828] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 291.395760][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 291.490095][ T5828] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 291.529677][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.563168][ T5828] usb 2-1: config 0 has no interfaces? [ 291.593282][ T5828] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 291.720316][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.834657][ T5828] usb 2-1: config 0 descriptor?? [ 292.181874][ T8072] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.199937][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 293.145585][ T8110] tipc: Started in network mode [ 293.169672][ T8110] tipc: Node identity 0268ad80c49f, cluster identity 4711 [ 293.211635][ T8110] tipc: Enabled bearer , priority 0 [ 293.261890][ T8113] syzkaller0: entered promiscuous mode [ 293.282387][ T8113] syzkaller0: entered allmulticast mode [ 293.605375][ T5837] usb 2-1: USB disconnect, device number 7 [ 293.811438][ T8109] tipc: Resetting bearer [ 293.931626][ T8109] tipc: Disabling bearer [ 294.012832][ T5926] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 294.272870][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 294.296557][ T5926] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 294.367006][ T5926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.693899][ T5926] usb 6-1: config 0 has no interfaces? [ 294.937004][ T5926] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 294.958068][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.560978][ T5926] usb 6-1: config 0 descriptor?? [ 295.882077][ T8146] 9pnet_fd: Insufficient options for proto=fd [ 295.935079][ T8121] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.995889][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.501'. [ 296.013717][ T8151] syzkaller0: entered promiscuous mode [ 296.019259][ T8151] syzkaller0: entered allmulticast mode [ 297.046115][ T8173] tipc: Started in network mode [ 297.061457][ T8173] tipc: Node identity 367809d5096c, cluster identity 4711 [ 297.085232][ T8173] tipc: Enabled bearer , priority 0 [ 297.133810][ T8174] syzkaller0: entered promiscuous mode [ 297.163031][ T8174] syzkaller0: entered allmulticast mode [ 297.314252][ T8173] tipc: Resetting bearer [ 297.335713][ T8172] tipc: Resetting bearer [ 297.383647][ T8172] tipc: Disabling bearer [ 299.166573][ T5926] usb 6-1: USB disconnect, device number 5 [ 299.463056][ T8204] syzkaller0: entered promiscuous mode [ 299.468614][ T8204] syzkaller0: entered allmulticast mode [ 307.753533][ T8325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.515101][ T8344] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 310.074083][ T8353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.365431][ T8366] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 312.334672][ T8379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.228295][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 314.529799][ T8407] tipc: Enabled bearer , priority 0 [ 314.562144][ T8407] syzkaller0: entered promiscuous mode [ 314.588747][ T8407] syzkaller0: entered allmulticast mode [ 314.645298][ T8413] syzkaller0: entered promiscuous mode [ 314.650847][ T8413] syzkaller0: entered allmulticast mode [ 314.707088][ T8407] tipc: Resetting bearer [ 314.760847][ T8406] tipc: Resetting bearer [ 314.852065][ T8406] tipc: Disabling bearer [ 317.265555][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.308416][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.161387][ T8463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.813671][ T8466] fuse: Unknown parameter 'group_id00000000000000000000' [ 320.155318][ T8482] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 321.421631][ T8497] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 321.544086][ T8493] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 321.682746][ T8493] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 322.763063][ T8500] siw: device registration error -23 [ 323.174711][ T8518] fuse: Unknown parameter 'group_id00000000000000000000' [ 323.303803][ T8514] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 323.318063][ T8520] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 323.320780][ T8509] siw: device registration error -23 [ 324.529219][ T8526] syzkaller0: entered promiscuous mode [ 324.541010][ T8526] syzkaller0: entered allmulticast mode [ 327.135635][ T5912] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 327.208213][ T8572] syzkaller0: entered promiscuous mode [ 327.236696][ T8572] syzkaller0: entered allmulticast mode [ 327.292928][ T5912] usb 6-1: Using ep0 maxpacket: 8 [ 327.307909][ T5912] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 327.318210][ T8574] fuse: Unknown parameter 'group_id00000000000000000000' [ 327.334213][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.389715][ T5912] usb 6-1: config 0 has no interfaces? [ 328.359369][ T5912] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 328.368968][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.403801][ T5912] usb 6-1: config 0 descriptor?? [ 329.425409][ T8564] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.434506][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.606'. [ 330.665170][ T8607] siw: device registration error -23 [ 330.780476][ T5851] usb 6-1: USB disconnect, device number 6 [ 331.356358][ T8616] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.621'. [ 332.846389][ T8636] fuse: Bad value for 'user_id' [ 332.874611][ T8636] fuse: Bad value for 'user_id' [ 334.023640][ T8657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 335.357403][ T8669] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.637'. [ 337.212920][ T8695] siw: device registration error -23 [ 337.719386][ T8698] fuse: Bad value for 'user_id' [ 337.719409][ T8698] fuse: Bad value for 'user_id' [ 338.040771][ T8703] siw: device registration error -23 [ 339.003789][ T8711] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.648'. [ 340.945294][ T8721] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 341.681120][ T8740] syzkaller0: entered promiscuous mode [ 341.689924][ T8740] syzkaller0: entered allmulticast mode [ 342.078214][ T8750] fuse: Bad value for 'user_id' [ 342.120089][ T8750] fuse: Bad value for 'user_id' [ 342.691647][ T8760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.219364][ T8771] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 345.025150][ T8781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.011493][ T8794] tipc: Enabling of bearer rejected, failed to enable media [ 346.083222][ T8794] syzkaller0: entered promiscuous mode [ 346.088930][ T8794] syzkaller0: entered allmulticast mode [ 349.047482][ T8815] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 350.496999][ T8847] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.687'. [ 351.636106][ T8862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.961285][ T8869] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 354.765793][ T8900] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.700'. [ 356.791941][ T8909] netlink: 'syz.4.702': attribute type 13 has an invalid length. [ 356.809117][ T8909] netlink: 'syz.4.702': attribute type 17 has an invalid length. [ 356.852533][ T8909] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 358.610979][ T8946] tipc: Enabled bearer , priority 0 [ 358.658121][ T8946] syzkaller0: entered promiscuous mode [ 358.722888][ T8946] syzkaller0: entered allmulticast mode [ 359.039028][ T8954] tipc: Resetting bearer [ 359.075681][ T8945] tipc: Resetting bearer [ 359.139521][ T8945] tipc: Disabling bearer [ 359.164662][ T8958] [ 359.167071][ T8958] ====================================================== [ 359.174093][ T8958] WARNING: possible circular locking dependency detected [ 359.181157][ T8958] 6.16.0-syzkaller #0 Not tainted [ 359.186194][ T8958] ------------------------------------------------------ [ 359.193226][ T8958] syz.1.717/8958 is trying to acquire lock: [ 359.199122][ T8958] ffff88801fb9b988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 359.210120][ T8958] [ 359.210120][ T8958] but task is already holding lock: [ 359.217508][ T8958] ffff88801fb9ba30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 359.227146][ T8958] [ 359.227146][ T8958] which lock already depends on the new lock. [ 359.227146][ T8958] [ 359.237566][ T8958] [ 359.237566][ T8958] the existing dependency chain (in reverse order) is: [ 359.246717][ T8958] [ 359.246717][ T8958] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 359.254844][ T8958] lock_acquire+0x120/0x360 [ 359.259903][ T8958] __mutex_lock+0x182/0xe80 [ 359.264955][ T8958] refcount_dec_and_mutex_lock+0x30/0xa0 [ 359.271321][ T8958] nbd_config_put+0x2c/0x790 [ 359.276463][ T8958] nbd_release+0xfe/0x140 [ 359.281343][ T8958] bdev_release+0x533/0x650 [ 359.286396][ T8958] blkdev_release+0x15/0x20 [ 359.291480][ T8958] __fput+0x449/0xa70 [ 359.296031][ T8958] fput_close_sync+0x119/0x200 [ 359.301379][ T8958] __x64_sys_close+0x7f/0x110 [ 359.306618][ T8958] do_syscall_64+0xfa/0x3b0 [ 359.311942][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.318386][ T8958] [ 359.318386][ T8958] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 359.326247][ T8958] lock_acquire+0x120/0x360 [ 359.331489][ T8958] __mutex_lock+0x182/0xe80 [ 359.336526][ T8958] __del_gendisk+0x129/0x9e0 [ 359.341743][ T8958] del_gendisk+0xe8/0x160 [ 359.347216][ T8958] loop_remove+0x42/0xc0 [ 359.352092][ T8958] loop_control_ioctl+0x4ac/0x5a0 [ 359.357650][ T8958] __se_sys_ioctl+0xfc/0x170 [ 359.362799][ T8958] do_syscall_64+0xfa/0x3b0 [ 359.367961][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.374659][ T8958] [ 359.374659][ T8958] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 359.383122][ T8958] validate_chain+0xb9b/0x2140 [ 359.388627][ T8958] __lock_acquire+0xab9/0xd20 [ 359.393844][ T8958] lock_acquire+0x120/0x360 [ 359.398879][ T8958] down_write+0x96/0x1f0 [ 359.403675][ T8958] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 359.410153][ T8958] nbd_start_device+0x16c/0xac0 [ 359.415545][ T8958] nbd_genl_connect+0x135b/0x18f0 [ 359.421117][ T8958] genl_family_rcv_msg_doit+0x215/0x300 [ 359.427310][ T8958] genl_rcv_msg+0x60e/0x790 [ 359.432363][ T8958] netlink_rcv_skb+0x205/0x470 [ 359.437672][ T8958] genl_rcv+0x28/0x40 [ 359.442194][ T8958] netlink_unicast+0x75c/0x8e0 [ 359.447580][ T8958] netlink_sendmsg+0x805/0xb30 [ 359.452881][ T8958] __sock_sendmsg+0x21c/0x270 [ 359.458121][ T8958] ____sys_sendmsg+0x505/0x830 [ 359.463422][ T8958] ___sys_sendmsg+0x21f/0x2a0 [ 359.468636][ T8958] __x64_sys_sendmsg+0x19b/0x260 [ 359.474109][ T8958] do_syscall_64+0xfa/0x3b0 [ 359.479239][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.485751][ T8958] [ 359.485751][ T8958] other info that might help us debug this: [ 359.485751][ T8958] [ 359.496334][ T8958] Chain exists of: [ 359.496334][ T8958] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 359.496334][ T8958] [ 359.511057][ T8958] Possible unsafe locking scenario: [ 359.511057][ T8958] [ 359.518602][ T8958] CPU0 CPU1 [ 359.523978][ T8958] ---- ---- [ 359.529431][ T8958] lock(&nbd->config_lock); [ 359.534121][ T8958] lock(&disk->open_mutex); [ 359.541239][ T8958] lock(&nbd->config_lock); [ 359.548369][ T8958] lock(&set->update_nr_hwq_lock); [ 359.553577][ T8958] [ 359.553577][ T8958] *** DEADLOCK *** [ 359.553577][ T8958] [ 359.561903][ T8958] 3 locks held by syz.1.717/8958: [ 359.566938][ T8958] #0: ffffffff8f5701f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.575138][ T8958] #1: ffffffff8f570008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 359.584121][ T8958] #2: ffff88801fb9ba30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 359.594149][ T8958] [ 359.594149][ T8958] stack backtrace: [ 359.600047][ T8958] CPU: 0 UID: 0 PID: 8958 Comm: syz.1.717 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 359.600067][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.600076][ T8958] Call Trace: [ 359.600084][ T8958] [ 359.600091][ T8958] dump_stack_lvl+0x189/0x250 [ 359.600113][ T8958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.600130][ T8958] ? __pfx__printk+0x10/0x10 [ 359.600149][ T8958] ? print_lock_name+0xde/0x100 [ 359.600169][ T8958] print_circular_bug+0x2ee/0x310 [ 359.600189][ T8958] check_noncircular+0x134/0x160 [ 359.600209][ T8958] validate_chain+0xb9b/0x2140 [ 359.600234][ T8958] __lock_acquire+0xab9/0xd20 [ 359.600250][ T8958] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 359.600271][ T8958] lock_acquire+0x120/0x360 [ 359.600284][ T8958] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 359.600307][ T8958] ? kernfs_add_one+0xf0/0x520 [ 359.600327][ T8958] down_write+0x96/0x1f0 [ 359.600345][ T8958] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 359.600365][ T8958] ? __pfx_down_write+0x10/0x10 [ 359.600383][ T8958] ? kernfs_add_one+0xf0/0x520 [ 359.600403][ T8958] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 359.600425][ T8958] ? sysfs_add_file_mode_ns+0x238/0x300 [ 359.600439][ T8958] ? sysfs_add_file_mode_ns+0x259/0x300 [ 359.600457][ T8958] nbd_start_device+0x16c/0xac0 [ 359.600478][ T8958] ? __nla_parse+0x40/0x60 [ 359.600496][ T8958] ? device_create_file+0xf4/0x1c0 [ 359.600518][ T8958] nbd_genl_connect+0x135b/0x18f0 [ 359.600539][ T8958] ? __pfx_nbd_genl_connect+0x10/0x10 [ 359.600564][ T8958] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 359.600584][ T8958] genl_family_rcv_msg_doit+0x215/0x300 [ 359.600604][ T8958] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 359.600628][ T8958] genl_rcv_msg+0x60e/0x790 [ 359.600645][ T8958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.600661][ T8958] ? __pfx_nbd_genl_connect+0x10/0x10 [ 359.600684][ T8958] netlink_rcv_skb+0x205/0x470 [ 359.600705][ T8958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.600720][ T8958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.600746][ T8958] ? down_read+0x1ad/0x2e0 [ 359.600764][ T8958] genl_rcv+0x28/0x40 [ 359.600778][ T8958] netlink_unicast+0x75c/0x8e0 [ 359.600801][ T8958] netlink_sendmsg+0x805/0xb30 [ 359.600825][ T8958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.600849][ T8958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.600864][ T8958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.600885][ T8958] __sock_sendmsg+0x21c/0x270 [ 359.600911][ T8958] ____sys_sendmsg+0x505/0x830 [ 359.600936][ T8958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.600962][ T8958] ? import_iovec+0x74/0xa0 [ 359.600984][ T8958] ___sys_sendmsg+0x21f/0x2a0 [ 359.601007][ T8958] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.601042][ T8958] ? __fget_files+0x2a/0x420 [ 359.601059][ T8958] ? __fget_files+0x3a0/0x420 [ 359.601078][ T8958] __x64_sys_sendmsg+0x19b/0x260 [ 359.601102][ T8958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.601128][ T8958] ? rcu_is_watching+0x15/0xb0 [ 359.601146][ T8958] ? do_syscall_64+0xbe/0x3b0 [ 359.601165][ T8958] do_syscall_64+0xfa/0x3b0 [ 359.601181][ T8958] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.601196][ T8958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.601211][ T8958] ? clear_bhb_loop+0x60/0xb0 [ 359.601228][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.601242][ T8958] RIP: 0033:0x7fee5258ebe9 [ 359.601257][ T8958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.601270][ T8958] RSP: 002b:00007fee533a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.601287][ T8958] RAX: ffffffffffffffda RBX: 00007fee527b5fa0 RCX: 00007fee5258ebe9 [ 359.601299][ T8958] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 359.601309][ T8958] RBP: 00007fee52611e19 R08: 0000000000000000 R09: 0000000000000000 [ 359.601319][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.601328][ T8958] R13: 00007fee527b6038 R14: 00007fee527b5fa0 R15: 00007ffe3b414538 [ 359.601345][ T8958] [ 359.993870][ T5828] tipc: Node number set to 1058277845 [ 360.135184][ T8958] nbd1: detected capacity change from 0 to 63 [ 360.148643][ T8961] block nbd1: NBD_DISCONNECT [ 360.155437][ T8961] block nbd1: Disconnected due to user request. [ 360.163917][ T8961] block nbd1: shutting down sockets [ 360.164973][ T6214] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.189522][ T6214] Buffer I/O error on dev nbd1, logical block 0, async page read [ 360.260308][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 360.282111][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 360.298713][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 360.306799][ T11] Buffer I/O error on dev nbd1, logical block 3, async page read [ 360.315047][ T6214] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.326347][ T6214] Buffer I/O error on dev nbd1, logical block 0, async page read [ 360.334560][ T6214] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.345847][ T6214] Buffer I/O error on dev nbd1, logical block 1, async page read [ 360.359485][ T6214] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.371561][ T6214] Buffer I/O error on dev nbd1, logical block 2, async page read [ 360.382416][ T6214] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.393701][ T6214] Buffer I/O error on dev nbd1, logical block 3, async page read [ 360.401679][ T6214] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.411870][ T6214] Buffer I/O error on dev nbd1, logical block 0, async page read [ 360.421324][ T6214] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.431336][ T6214] Buffer I/O error on dev nbd1, logical block 1, async page read [ 360.440736][ T6214] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.451135][ T6214] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.468757][ T6214] ldm_validate_partition_table(): Disk read failed. [ 360.479254][ T6214] Dev nbd1: unable to read RDB block 0 [ 360.489994][ T6214] nbd1: unable to read partition table [ 360.504415][ T6214] ldm_validate_partition_table(): Disk read failed. [ 360.525698][ T6214] Dev nbd1: unable to read RDB block 0 [ 360.533216][ T6214] nbd1: unable to read partition table