last executing test programs: 2m56.545967043s ago: executing program 4 (id=126): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pipe2$9p(&(0x7f0000000cc0), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 2m55.139148301s ago: executing program 3 (id=128): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = fsopen(&(0x7f0000000240)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace_dev_match', 0x2000, 0x108) read$FUSE(r3, &(0x7f0000003840)={0x2020}, 0x2020) 2m55.108022936s ago: executing program 4 (id=129): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$inet(r2, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x80800}) listen(r2, 0x5) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 2m54.041585575s ago: executing program 3 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2m54.002190249s ago: executing program 0 (id=131): r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') userfaultfd(0x80801) write$sysctl(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r0, &(0x7f0000000000)=""/102340, 0x18fc4, 0x4004c2a) 2m52.115675675s ago: executing program 1 (id=134): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c000004001280140001202a"], 0x2c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m51.860959806s ago: executing program 3 (id=135): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x3, &(0x7f00000004c0)=0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1003f00, 0x0, 0x10}]) 2m51.524239771s ago: executing program 0 (id=136): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xc, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m47.783570186s ago: executing program 0 (id=139): pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="9c", 0x1}], 0x1, 0xffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x0, 0x0, 0x3, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m47.302598806s ago: executing program 3 (id=140): ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r3, 0x3516, 0x483, 0x0, 0x0, 0x0) 2m47.240123271s ago: executing program 2 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) set_mempolicy(0x2002, &(0x7f0000000280)=0xfffff3fe, 0x289) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) 2m46.078948499s ago: executing program 1 (id=142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m45.949406871s ago: executing program 0 (id=143): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124d960", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x100) 2m44.840959738s ago: executing program 2 (id=144): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x803e000000000000) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m42.485585058s ago: executing program 4 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [], {0x14}}, 0x28}}, 0x8807) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000380)}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c0000040000001400018006000680800a000008001400e00080015d54c8ea3fd13a60bf9dd9d9a4e4c29f0848d0893281bb601d1ae27dc629028f617d262c690417414c3aa64ab6f858764ccb5139434e2b62092b358db5f6a38ba8bfbb8214187f3fbe217f0d4497490f2447c46fe1685b5c3003c563406c0f6ef0c49fee7b0f402fa31ef2547e671c1330daf8af6a36ec7420e3d7fa8eaa0a71251615c0254df5d90645"], 0x2c}}, 0x8004) 2m42.2484198s ago: executing program 1 (id=146): lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b78, 0x400, 0x1, 0x237}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000a00)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 2m40.552604395s ago: executing program 0 (id=147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0010000", @ANYRES16=r4, @ANYBLOB], 0x1f0}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x44201a6, r6}) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 2m40.49429157s ago: executing program 2 (id=148): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000"], 0x118}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m40.323610034s ago: executing program 1 (id=149): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x14) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) remap_file_pages(&(0x7f0000a95000/0x2000)=nil, 0x2000, 0x8, 0x18, 0x10000) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f00000001c0)="a5ce7f", 0x3) lstat(0x0, &(0x7f00000002c0)) 2m40.233490648s ago: executing program 4 (id=150): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$rose(0xb, 0x5, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) 2m39.822325845s ago: executing program 0 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000), 0x4) 2m39.179841618s ago: executing program 3 (id=152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x2, [0x6, 0xf, 0x3], [{0xfc2, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x2}, {0x800000, 0x800001}, {}, {0x1ff}, {0x0, 0x1000}, {0x0, 0xffdfff7f}, {0x0, 0x1112bdc7}, {}, {0xffffffff, 0xfffffffd}, {0x0, 0xe68b}], 0xc}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m39.062966501s ago: executing program 2 (id=153): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 2m32.22306309s ago: executing program 1 (id=154): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x100a, 0x7, 0x8, 0x2}}) 2m29.109835129s ago: executing program 4 (id=155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m27.111369374s ago: executing program 2 (id=156): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3ff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m25.564507998s ago: executing program 1 (id=157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3f, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2, 0x1}}}}}}}]}}, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0x0, 0x40, 0x81, 0x0, 0xf43f, 0xb, 0x49, 0x7, 0x2, 0xfb, 0x3, 0xa4, 0x0, 0x4, 0x6bd, 0x2, 0x8, 0x1, 0x7, '\x00', 0x2, 0x5}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000680)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x4, 0x9, 0x100000000000009, 0x4, 0x80, 0x1, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m25.530086596s ago: executing program 3 (id=158): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0xc, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 2m23.75275345s ago: executing program 32 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000), 0x4) 2m23.719608614s ago: executing program 4 (id=160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score\x00') read$FUSE(r3, &(0x7f0000001840)={0x2020}, 0x2020) 2m21.967394353s ago: executing program 2 (id=161): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r3}, 0x20) recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 33 (id=157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3f, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2, 0x1}}}}}}}]}}, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0x0, 0x40, 0x81, 0x0, 0xf43f, 0xb, 0x49, 0x7, 0x2, 0xfb, 0x3, 0xa4, 0x0, 0x4, 0x6bd, 0x2, 0x8, 0x1, 0x7, '\x00', 0x2, 0x5}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000680)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x4, 0x9, 0x100000000000009, 0x4, 0x80, 0x1, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 83.481277][ T5804] cgroup: Unknown subsys name 'net' [ 83.639643][ T5804] cgroup: Unknown subsys name 'cpuset' [ 83.649118][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.208134][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.941853][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.950307][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.958397][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.966594][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.973893][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.974394][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.988224][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.996477][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.004703][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.013234][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.033523][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.054983][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.062846][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.071376][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.079537][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.089443][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.097402][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.104522][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.118308][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.142438][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.150994][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.159758][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.178239][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.186407][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.194664][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.547840][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 88.842147][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.849493][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.857031][ T5817] bridge_slave_0: entered allmulticast mode [ 88.864291][ T5817] bridge_slave_0: entered promiscuous mode [ 88.877637][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.885543][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.892717][ T5817] bridge_slave_1: entered allmulticast mode [ 88.901543][ T5817] bridge_slave_1: entered promiscuous mode [ 88.916099][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 89.039686][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.089666][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.099238][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 89.111234][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 89.257178][ T5817] team0: Port device team_slave_0 added [ 89.307182][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.314341][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.321980][ T5824] bridge_slave_0: entered allmulticast mode [ 89.329270][ T5824] bridge_slave_0: entered promiscuous mode [ 89.339050][ T5817] team0: Port device team_slave_1 added [ 89.378432][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.386054][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.393302][ T5824] bridge_slave_1: entered allmulticast mode [ 89.401248][ T5824] bridge_slave_1: entered promiscuous mode [ 89.493815][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.504443][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.513203][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.539434][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.566920][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.574081][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.581447][ T5815] bridge_slave_0: entered allmulticast mode [ 89.589260][ T5815] bridge_slave_0: entered promiscuous mode [ 89.602355][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.609701][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.617275][ T5815] bridge_slave_1: entered allmulticast mode [ 89.624501][ T5815] bridge_slave_1: entered promiscuous mode [ 89.634854][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.644913][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.651878][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.677856][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.700600][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 89.748750][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.756149][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.763479][ T5828] bridge_slave_0: entered allmulticast mode [ 89.771499][ T5828] bridge_slave_0: entered promiscuous mode [ 89.821748][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.829338][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.836690][ T5828] bridge_slave_1: entered allmulticast mode [ 89.843894][ T5828] bridge_slave_1: entered promiscuous mode [ 89.866152][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.879652][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.906118][ T5824] team0: Port device team_slave_0 added [ 89.958136][ T5824] team0: Port device team_slave_1 added [ 89.970163][ T5817] hsr_slave_0: entered promiscuous mode [ 89.977071][ T5817] hsr_slave_1: entered promiscuous mode [ 90.025688][ T55] Bluetooth: hci1: command tx timeout [ 90.037217][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.049816][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.082207][ T5815] team0: Port device team_slave_0 added [ 90.092214][ T5815] team0: Port device team_slave_1 added [ 90.104693][ T55] Bluetooth: hci0: command tx timeout [ 90.113878][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.121579][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.150259][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.185359][ T55] Bluetooth: hci3: command tx timeout [ 90.191393][ T5127] Bluetooth: hci2: command tx timeout [ 90.223216][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.230374][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.257006][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.274940][ T5127] Bluetooth: hci4: command tx timeout [ 90.298887][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.306152][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.313313][ T5827] bridge_slave_0: entered allmulticast mode [ 90.321365][ T5827] bridge_slave_0: entered promiscuous mode [ 90.343420][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.350757][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.376944][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.389680][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.396705][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.422771][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.463185][ T5828] team0: Port device team_slave_0 added [ 90.469480][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.476844][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.484026][ T5827] bridge_slave_1: entered allmulticast mode [ 90.491880][ T5827] bridge_slave_1: entered promiscuous mode [ 90.537680][ T5828] team0: Port device team_slave_1 added [ 90.561658][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.573793][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.689822][ T5824] hsr_slave_0: entered promiscuous mode [ 90.696977][ T5824] hsr_slave_1: entered promiscuous mode [ 90.703163][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.711552][ T5824] Cannot create hsr debugfs directory [ 90.725167][ T5815] hsr_slave_0: entered promiscuous mode [ 90.731646][ T5815] hsr_slave_1: entered promiscuous mode [ 90.738106][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.745785][ T5815] Cannot create hsr debugfs directory [ 90.774377][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.781482][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.807622][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.858614][ T5827] team0: Port device team_slave_0 added [ 90.872069][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.879167][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.905841][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.940302][ T5827] team0: Port device team_slave_1 added [ 91.081736][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.088860][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.115805][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.162748][ T5828] hsr_slave_0: entered promiscuous mode [ 91.171076][ T5828] hsr_slave_1: entered promiscuous mode [ 91.178257][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.186380][ T5828] Cannot create hsr debugfs directory [ 91.192533][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.200075][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.226364][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.397861][ T5827] hsr_slave_0: entered promiscuous mode [ 91.404269][ T5827] hsr_slave_1: entered promiscuous mode [ 91.410659][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.418942][ T5827] Cannot create hsr debugfs directory [ 91.623735][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.638932][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.683910][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.721404][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.836847][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.852017][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.862366][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.880616][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.957902][ T59] cfg80211: failed to load regulatory.db [ 91.978159][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.990638][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.031441][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.049975][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.105599][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.108403][ T5127] Bluetooth: hci1: command tx timeout [ 92.138726][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.151331][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.183347][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.185083][ T5127] Bluetooth: hci0: command tx timeout [ 92.243914][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.265187][ T5127] Bluetooth: hci3: command tx timeout [ 92.266749][ T55] Bluetooth: hci2: command tx timeout [ 92.321764][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.338302][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.345278][ T55] Bluetooth: hci4: command tx timeout [ 92.369302][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.383042][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.398860][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.406260][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.430518][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.463175][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.470469][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.561051][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.615785][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.650597][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.701807][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.709114][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.731176][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.738351][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.754293][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.780107][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.820753][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.827972][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.885414][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.893033][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.919992][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.976549][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.983748][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.001013][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.028272][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.048364][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.055616][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.163066][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.222004][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.229262][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.257247][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.283406][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.290642][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.511716][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.619003][ T5817] veth0_vlan: entered promiscuous mode [ 93.662937][ T5817] veth1_vlan: entered promiscuous mode [ 93.740924][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.849432][ T5817] veth0_macvtap: entered promiscuous mode [ 93.871980][ T5817] veth1_macvtap: entered promiscuous mode [ 93.931236][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.963562][ T5828] veth0_vlan: entered promiscuous mode [ 93.998956][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.041842][ T5828] veth1_vlan: entered promiscuous mode [ 94.077430][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.113997][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.123203][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.132681][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.144914][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.185237][ T55] Bluetooth: hci1: command tx timeout [ 94.233157][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.248081][ T5828] veth0_macvtap: entered promiscuous mode [ 94.265431][ T55] Bluetooth: hci0: command tx timeout [ 94.293573][ T5828] veth1_macvtap: entered promiscuous mode [ 94.306489][ T5815] veth0_vlan: entered promiscuous mode [ 94.345271][ T55] Bluetooth: hci3: command tx timeout [ 94.345291][ T5127] Bluetooth: hci2: command tx timeout [ 94.397806][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.401488][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.406531][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.433315][ T5815] veth1_vlan: entered promiscuous mode [ 94.443943][ T55] Bluetooth: hci4: command tx timeout [ 94.458663][ T5824] veth0_vlan: entered promiscuous mode [ 94.469088][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.517877][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.527842][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.539319][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.548761][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.560244][ T5824] veth1_vlan: entered promiscuous mode [ 94.571371][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.580560][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.630561][ T5815] veth0_macvtap: entered promiscuous mode [ 94.656844][ T5827] veth0_vlan: entered promiscuous mode [ 94.677711][ T5815] veth1_macvtap: entered promiscuous mode [ 94.681270][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.692122][ T5827] veth1_vlan: entered promiscuous mode [ 94.773385][ T5824] veth0_macvtap: entered promiscuous mode [ 94.806764][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.898162][ T5824] veth1_macvtap: entered promiscuous mode [ 95.075445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.151336][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.256653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.359046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.389306][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.521570][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.563877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.609010][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.647653][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.666311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.697932][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.732078][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.968693][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.051154][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.067549][ T5827] veth0_macvtap: entered promiscuous mode [ 96.106568][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.128369][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.147542][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.159832][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.190349][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.211517][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.232399][ T5827] veth1_macvtap: entered promiscuous mode [ 96.270735][ T55] Bluetooth: hci1: command tx timeout [ 96.375338][ T55] Bluetooth: hci0: command tx timeout [ 96.425506][ T55] Bluetooth: hci3: command tx timeout [ 96.431387][ T55] Bluetooth: hci2: command tx timeout [ 96.505145][ T55] Bluetooth: hci4: command tx timeout [ 96.870268][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.882808][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.043927][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.086250][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.097558][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.129710][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.154472][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.163388][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.229281][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.243822][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.457094][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.469170][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.114873][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.128118][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.409567][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.454864][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.528991][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.601658][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.626931][ T5931] loop6: detected capacity change from 0 to 63 [ 98.644242][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.722220][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.744680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.773921][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.824991][ T5883] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.845368][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.853841][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.911621][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 99.025482][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 99.044391][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.080804][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.100793][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 99.110769][ T5883] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 99.121298][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.137723][ T5883] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 99.149562][ T5883] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 99.157713][ T5868] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.167101][ T5883] usb 4-1: Manufacturer: syz [ 99.395784][ T5883] usb 4-1: config 0 descriptor?? [ 99.469406][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 99.814147][ T5868] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 100.265906][ T5868] usb 1-1: config 0 has no interface number 0 [ 100.288285][ T5868] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 100.306532][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.321172][ T5868] usb 1-1: Product: syz [ 100.332572][ T5868] usb 1-1: Manufacturer: syz [ 100.354938][ T5868] usb 1-1: SerialNumber: syz [ 100.367781][ T5868] usb 1-1: config 0 descriptor?? [ 100.387734][ T5868] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 100.544658][ T5883] rc_core: IR keymap rc-hauppauge not found [ 100.551962][ T5883] Registered IR keymap rc-empty [ 100.568771][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 100.606605][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 101.264615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 101.408942][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 101.659859][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 101.704198][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 101.962040][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 101.969538][ T5868] gspca_topro: reg_r err -71 [ 101.974183][ T5868] gspca_topro: Sensor soi763a [ 101.986779][ T5868] usb 1-1: USB disconnect, device number 2 [ 101.995226][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 102.025066][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 102.101261][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 102.159061][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 102.262177][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 102.440197][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 102.964815][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 102.993539][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.230853][ T5883] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 103.261592][ T5883] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 103.277915][ T5883] usb 4-1: USB disconnect, device number 2 [ 103.385815][ T5976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21'. [ 105.435005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.444591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 105.562281][ T6002] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 105.570574][ T6002] netlink: 'syz.0.25': attribute type 2 has an invalid length. [ 105.584505][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 106.077939][ T30] audit: type=1326 audit(1748111709.238:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6001 comm="syz.3.28" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87f4b8e969 code=0x0 [ 107.570526][ T6021] netlink: 666 bytes leftover after parsing attributes in process `syz.3.34'. [ 108.015173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.761057][ T6065] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.023104][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 116.442961][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.693063][ T6092] bridge_slave_1 (unregistering): left allmulticast mode [ 116.764612][ T6092] bridge_slave_1 (unregistering): left promiscuous mode [ 116.771716][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.170201][ T6120] process 'syz.2.65' launched '/dev/fd/4' with NULL argv: empty string added [ 120.843818][ T6133] xt_NFQUEUE: number of total queues is 0 [ 121.918626][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.962171][ T6136] batadv_slave_0: entered promiscuous mode [ 122.111330][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 122.120327][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 126.293526][ T6179] overlayfs: upper fs does not support file handles, falling back to index=off. [ 126.679389][ T6189] netlink: 'syz.2.81': attribute type 6 has an invalid length. [ 127.609627][ T6193] evm: overlay not supported [ 129.734846][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 130.509897][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.551005][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 130.592269][ T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 130.644603][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.681049][ T24] usb 5-1: config 0 descriptor?? [ 130.731009][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 130.864494][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 130.957824][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 131.023208][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 131.086844][ T24] usb 5-1: media controller created [ 131.758199][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.848021][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 131.888567][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 131.939390][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 132.028200][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 132.081585][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 132.183036][ T24] usb 5-1: USB disconnect, device number 2 [ 132.414242][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 132.966489][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.973990][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.991840][ T6242] Unknown options in mask 5 [ 139.252206][ T6271] syz.1.106 uses obsolete (PF_INET,SOCK_PACKET) [ 140.566593][ T11] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.084820][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 141.102819][ T11] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 141.164008][ T11] usb 5-1: config 0 has no interface number 0 [ 141.206156][ T11] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 141.231364][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.242767][ T11] usb 5-1: Product: syz [ 141.247600][ T11] usb 5-1: Manufacturer: syz [ 141.252386][ T11] usb 5-1: SerialNumber: syz [ 141.267973][ T11] usb 5-1: config 0 descriptor?? [ 141.759162][ T6291] netlink: 32 bytes leftover after parsing attributes in process `syz.4.111'. [ 141.885929][ T11] usb 5-1: USB disconnect, device number 3 [ 141.902259][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.127215][ T6313] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.159032][ T6313] bond_slave_0: entered promiscuous mode [ 142.164984][ T6313] bond_slave_1: entered promiscuous mode [ 142.225023][ T6313] vlan2: entered promiscuous mode [ 142.230134][ T6313] bond0: entered promiscuous mode [ 142.314685][ T6319] Zero length message leads to an empty skb [ 145.374699][ T5883] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 145.559385][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 145.597435][ T5883] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 145.652586][ T5883] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.684870][ T5883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.695287][ T5883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.707017][ T5883] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.724752][ T5883] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.734000][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.310509][ T5883] usb 2-1: usb_control_msg returned -32 [ 146.377694][ T5883] usbtmc 2-1:16.0: can't read capabilities [ 148.025941][ T5883] usb 2-1: USB disconnect, device number 2 [ 161.674283][ T6413] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 167.473764][ T6423] mmap: syz.1.149 (6423) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.661572][ C0] sched: DL replenish lagged too much [ 194.929410][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.155453][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 231.126376][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 231.132483][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 233.884787][ T5822] Bluetooth: hci2: command tx timeout [ 233.890277][ T5822] Bluetooth: hci4: command tx timeout [ 233.905038][ T5822] Bluetooth: hci3: command tx timeout [ 256.719051][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.775314][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.719904][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.329836][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.780173][ T5187] udevd[5187]: worker [6385] /devices/virtual/block/loop4 is taking a long time [ 346.474466][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 346.481583][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6427/1:b..l [ 346.489895][ C1] rcu: (detected by 1, t=10503 jiffies, g=13825, q=571 ncpus=2) [ 346.497651][ C1] task:syz.0.151 state:R running task stack:25720 pid:6427 tgid:6427 ppid:5815 task_flags:0x40044c flags:0x00004006 [ 346.512040][ C1] Call Trace: [ 346.515402][ C1] [ 346.518381][ C1] __schedule+0x168f/0x4c70 [ 346.522935][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 346.528185][ C1] ? __lock_acquire+0xaac/0xd20 [ 346.533080][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 346.538414][ C1] ? __pfx___schedule+0x10/0x10 [ 346.543322][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 346.548658][ C1] preempt_schedule_irq+0xb5/0x150 [ 346.553811][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 346.559581][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 346.565437][ C1] irqentry_exit+0x6f/0x90 [ 346.569890][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 346.575905][ C1] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 346.581318][ C1] Code: 89 f7 e8 9c ad 78 00 48 c7 c3 58 cb 73 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 49 87 cb 10 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc cc e8 e1 6b [ 346.600974][ C1] RSP: 0018:ffffc90003ddf598 EFLAGS: 00000286 [ 346.607107][ C1] RAX: 00000000001cef84 RBX: ffff8880b8832b58 RCX: a10837e9fcd30600 [ 346.615128][ C1] RDX: 0000000000000001 RSI: ffffffff8bc122e0 RDI: ffffffff8bc122a0 [ 346.623233][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.631241][ C1] R10: 0000000000000000 R11: ffffffff8171ca05 R12: 1ffff920007bbed1 [ 346.639248][ C1] R13: ffffc90003ddf6c0 R14: ffffffff8d95cc20 R15: dffffc0000000000 [ 346.647267][ C1] ? unwind_next_frame+0xa5/0x2390 [ 346.652435][ C1] ? rcu_is_watching+0x15/0xb0 [ 346.657244][ C1] ? __reset_page_owner+0x71/0x1f0 [ 346.662401][ C1] ? unwind_next_frame+0xa5/0x2390 [ 346.667568][ C1] unwind_next_frame+0xd4/0x2390 [ 346.672559][ C1] ? unwind_next_frame+0xa5/0x2390 [ 346.677708][ C1] ? save_stack+0xf7/0x1f0 [ 346.682174][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 346.688366][ C1] arch_stack_walk+0x11c/0x150 [ 346.693184][ C1] ? __reset_page_owner+0x71/0x1f0 [ 346.698348][ C1] stack_trace_save+0x9c/0xe0 [ 346.703060][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 346.708476][ C1] save_stack+0xf7/0x1f0 [ 346.712767][ C1] ? __pfx_save_stack+0x10/0x10 [ 346.717687][ C1] ? page_ext_put+0x97/0xc0 [ 346.722243][ C1] __reset_page_owner+0x71/0x1f0 [ 346.727234][ C1] __free_frozen_pages+0xb05/0xcd0 [ 346.732387][ C1] vfree+0x1a6/0x330 [ 346.736331][ C1] ? __pfx_kcov_close+0x10/0x10 [ 346.741231][ C1] kcov_close+0x28/0x50 [ 346.745425][ C1] __fput+0x449/0xa70 [ 346.749458][ C1] task_work_run+0x1d4/0x260 [ 346.754092][ C1] ? __pfx_task_work_run+0x10/0x10 [ 346.759252][ C1] ? kmem_cache_free+0x192/0x3f0 [ 346.764245][ C1] do_exit+0x8d6/0x2550 [ 346.768451][ C1] ? do_raw_spin_lock+0x121/0x290 [ 346.773516][ C1] ? __pfx_do_exit+0x10/0x10 [ 346.778152][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 346.783583][ C1] do_group_exit+0x21c/0x2d0 [ 346.788209][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.793490][ C1] get_signal+0x125e/0x1310 [ 346.798059][ C1] arch_do_signal_or_restart+0x95/0x780 [ 346.803651][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 346.809861][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 346.815800][ C1] irqentry_exit_to_user_mode+0x81/0x120 [ 346.821467][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 346.827482][ C1] RIP: 0033:0x7f1cc7067db0 [ 346.831961][ C1] RSP: 002b:00007ffcbf63a600 EFLAGS: 00000206 [ 346.838065][ C1] RAX: 00007f1cc6ab0950 RBX: 00007f1cc6aacb28 RCX: ffffffff820d1d94 [ 346.846172][ C1] RDX: ffffffff820d1d94 RSI: ffffffff820d1d94 RDI: 00007f1cc6ab18c8 [ 346.854184][ C1] RBP: 00007f1cc6aab440 R08: 00007f1cc6aae680 R09: 00007f1cc73a2000 [ 346.862288][ C1] R10: 00007f1cc67ff008 R11: 0000000000000004 R12: 00007f1cc6aab438 [ 346.870310][ C1] R13: 000000000000001a R14: 00007ffcbf63a7b8 R15: 00007f1cc67ff008 [ 346.878329][ C1] ? ___pte_offset_map+0xf4/0x2a0 [ 346.883396][ C1] ? ___pte_offset_map+0xf4/0x2a0 [ 346.888437][ C1] ? ___pte_offset_map+0xf4/0x2a0 [ 346.893471][ C1] [ 350.701820][ T31] INFO: task kworker/0:5:5867 blocked for more than 144 seconds. [ 350.718399][ T31] Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0