last executing test programs: 16.587688478s ago: executing program 2 (id=244): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 16.275176304s ago: executing program 1 (id=246): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x541b, 0x0) mkdir(0x0, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x30, 0x0, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x30}}, 0x2) mount$bind(&(0x7f0000000180)='.\x00', 0x0, 0x0, 0x101091, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) 15.169246686s ago: executing program 1 (id=252): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @loopback}, 0x0, 0x4}}, 0x26) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32da", 0xb, 0x20004811, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r7, &(0x7f0000000280)="42d366", &(0x7f0000000480)=@udp6=r8, 0x2}, 0x20) 12.906852548s ago: executing program 1 (id=254): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x40, 0x31, 0x5, "ca63ff9ca4"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xf9}}) 12.377475685s ago: executing program 5 (id=255): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0], 0x0) 11.519175058s ago: executing program 4 (id=262): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 11.378585419s ago: executing program 0 (id=263): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x440, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) write$dsp(r1, &(0x7f0000000000)="8d", 0x1) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000080)) 10.497508746s ago: executing program 2 (id=264): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@heap}, {@nolazytime}, {@noinline_dentry}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x1b}}, {@discard}, {@noinline_xattr}, {@errors_continue}, {@alloc_mode_def}, {@noinline_xattr}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5512, &(0x7f0000005a80)="$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") creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x40) symlink(0x0, 0x0) creat(0x0, 0x104) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x1d1, &(0x7f0000000100)="$eJzslT3r01AUxp9703/S+BFcHPyDdTBNUgWXQl2cHARfioNgsa1UUyptBlsQ8RO4uzn4MYS6+iGkCqIguqibcOW+NLktjdLa2MHzg54+Nzk5OfdceAKCIP5b3r/7sRDfmx+rAHwcwzPXPzl5Drfy31a/Pn595XL72e2Xb7xF4K9W81aXP4UQf3h/BcD8koPUrMXaI8fm/zp4pm+A46zRbTAERt8Bx02je2C4ZfR9S49kfhD0B0kvuDtKulKEMkQyxDI01vv78pSha/XHrPuT6exBJ0l64xLF5snNP2f9VYGm1Z99XgF0t6E1vwgckdENMFwz+iK85Wz0SKz9n6zk9Z3f7t/FX277A4D8Sr/MybryVTs9DrB/cvYlCwdKLE/04P3sXaCyt4LCAw69nQLxqqXPL2v1iV5vV6dVcMvdso6ZfOaf4gXDGcuftJU8Vx+Lejp8WJ9MZ+cGw8491ySF58PwQlxXRqTjZgtU9X3lTyfy+n5RrstcPOqk6TjSMVvHOm5yXK78j6N2GkdyLd1UtXmU53xT304NMz+u/qWqOYXNo7BVgiCI0jkFpjxZ+fJSmK9JdkOI+OqB+yQIgiAIgiAIgiAIYnd+BQAA//+AMWDL") 10.308046343s ago: executing program 5 (id=265): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @loopback}, 0x0, 0x4}}, 0x26) 10.196772064s ago: executing program 3 (id=266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000280)="42d366", &(0x7f0000000480)=@udp6=r1, 0x2}, 0x20) 9.837556316s ago: executing program 3 (id=267): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9.064667549s ago: executing program 5 (id=268): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_clone3(&(0x7f0000000340)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) 9.063576894s ago: executing program 0 (id=269): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xa, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x30, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) 9.047669753s ago: executing program 4 (id=270): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/85}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="390104000000b0710d"], 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 9.045790706s ago: executing program 1 (id=271): r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f0000000240), 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, 0x0, 0x4000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) recvmmsg(r1, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40000002, 0x0) shutdown(r1, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r4, 0x0, 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x21c00c, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 8.797535147s ago: executing program 0 (id=272): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) userfaultfd(0x80001) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0xbedffffb}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xe9d0, 0x22, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x800) 8.76298975s ago: executing program 1 (id=273): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_delete(r3) 6.803634611s ago: executing program 1 (id=274): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000a192db"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 6.21216423s ago: executing program 0 (id=275): socket$inet6(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002000)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010ff0200"/53], 0x340a) 6.131396209s ago: executing program 4 (id=276): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 6.077538597s ago: executing program 3 (id=277): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000100)={[0x0]}, 0x1000) 5.873147457s ago: executing program 4 (id=278): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, r1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x1000000, 0x2, {0x4, 0x1}, 0x3, 0x800}) 5.85857405s ago: executing program 2 (id=279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000280)="42d366", &(0x7f0000000480)=@udp6=r1, 0x2}, 0x20) 5.829637859s ago: executing program 3 (id=280): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x0, 0x4}}, 0x26) 5.67901572s ago: executing program 4 (id=281): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x440, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000080)) 5.653453401s ago: executing program 5 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 5.521523537s ago: executing program 2 (id=283): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xef9, &(0x7f0000000580)={0x0, 0xd730, 0x80, 0x3, 0xbffffff6}, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 5.519959942s ago: executing program 3 (id=284): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x24000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sync() ioctl$TCSETS(0xffffffffffffffff, 0x40384708, 0x0) 2.348041441s ago: executing program 5 (id=285): r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f0000000240), 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, 0x0, 0x4000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) recvmmsg(r1, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40000002, 0x0) shutdown(r1, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r4, 0x0, 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x21c00c, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 2.30971473s ago: executing program 0 (id=286): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_delete(r3) 1.997834261s ago: executing program 3 (id=287): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) userfaultfd(0x80001) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0xbedffffb}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xe9d0, 0x22, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x800) 1.997387217s ago: executing program 4 (id=288): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/85}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="390104000000b0710d"], 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 417.679743ms ago: executing program 0 (id=289): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 360.895555ms ago: executing program 2 (id=290): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 150.134686ms ago: executing program 5 (id=291): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x6048095) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) 0s ago: executing program 2 (id=292): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) rename(0x0, &(0x7f0000000180)='./file1\x00') memfd_create(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. [ 83.901293][ T5811] cgroup: Unknown subsys name 'net' [ 84.114684][ T5811] cgroup: Unknown subsys name 'cpuset' [ 84.126001][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.611884][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.029652][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.039587][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.072070][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.079281][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.089064][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.099109][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.106850][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.118384][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.118713][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.125896][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.133444][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.140308][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.153757][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.154255][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.168613][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.170727][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.183508][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.199432][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.199753][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.213648][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.213870][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.226502][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.235215][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.244963][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.252641][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.290444][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.301186][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.308673][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.319213][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.326947][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.157871][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.222735][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 89.260315][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 89.416850][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 89.489386][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 89.600415][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 89.664904][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.672549][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.679774][ T5835] bridge_slave_0: entered allmulticast mode [ 89.687391][ T5835] bridge_slave_0: entered promiscuous mode [ 89.757538][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.764752][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.771935][ T5835] bridge_slave_1: entered allmulticast mode [ 89.779309][ T5835] bridge_slave_1: entered promiscuous mode [ 89.860097][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.867277][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.874518][ T5839] bridge_slave_0: entered allmulticast mode [ 89.882327][ T5839] bridge_slave_0: entered promiscuous mode [ 89.890449][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.897582][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.904781][ T5826] bridge_slave_0: entered allmulticast mode [ 89.912177][ T5826] bridge_slave_0: entered promiscuous mode [ 89.967510][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.974823][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.982734][ T5839] bridge_slave_1: entered allmulticast mode [ 89.990127][ T5839] bridge_slave_1: entered promiscuous mode [ 89.998264][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.005475][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.012849][ T5826] bridge_slave_1: entered allmulticast mode [ 90.020364][ T5826] bridge_slave_1: entered promiscuous mode [ 90.063232][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.070434][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.077756][ T5845] bridge_slave_0: entered allmulticast mode [ 90.085813][ T5845] bridge_slave_0: entered promiscuous mode [ 90.097141][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.134308][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.141791][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.148920][ T5823] bridge_slave_0: entered allmulticast mode [ 90.156668][ T5823] bridge_slave_0: entered promiscuous mode [ 90.178621][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.185858][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.193193][ T5845] bridge_slave_1: entered allmulticast mode [ 90.200743][ T5845] bridge_slave_1: entered promiscuous mode [ 90.210327][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.261403][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.268602][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.276158][ T5827] Bluetooth: hci4: command tx timeout [ 90.276229][ T5823] bridge_slave_1: entered allmulticast mode [ 90.281833][ T5827] Bluetooth: hci1: command tx timeout [ 90.287598][ T5842] Bluetooth: hci0: command tx timeout [ 90.293188][ T5832] Bluetooth: hci2: command tx timeout [ 90.298670][ T5837] Bluetooth: hci3: command tx timeout [ 90.311929][ T5823] bridge_slave_1: entered promiscuous mode [ 90.350457][ T5837] Bluetooth: hci5: command tx timeout [ 90.368987][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.381915][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.406104][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.413543][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.421117][ T5828] bridge_slave_0: entered allmulticast mode [ 90.428580][ T5828] bridge_slave_0: entered promiscuous mode [ 90.452830][ T5835] team0: Port device team_slave_0 added [ 90.461339][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.473013][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.496892][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.504290][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.512031][ T5828] bridge_slave_1: entered allmulticast mode [ 90.519487][ T5828] bridge_slave_1: entered promiscuous mode [ 90.529339][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.540863][ T5835] team0: Port device team_slave_1 added [ 90.548949][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.588630][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.668969][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.722586][ T5839] team0: Port device team_slave_0 added [ 90.731166][ T5826] team0: Port device team_slave_0 added [ 90.754269][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.764704][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.772066][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.798673][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.812905][ T5845] team0: Port device team_slave_0 added [ 90.820818][ T5839] team0: Port device team_slave_1 added [ 90.828467][ T5826] team0: Port device team_slave_1 added [ 90.851825][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.861752][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.868681][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.895081][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.908394][ T5845] team0: Port device team_slave_1 added [ 90.942574][ T5823] team0: Port device team_slave_0 added [ 91.014152][ T5823] team0: Port device team_slave_1 added [ 91.049998][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.057259][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.084378][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.096410][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.103585][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.130566][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.159325][ T974] cfg80211: failed to load regulatory.db [ 91.180013][ T5828] team0: Port device team_slave_0 added [ 91.187061][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.194922][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.221116][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.245188][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.252207][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.278845][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.290998][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.297919][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.323839][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.343665][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.350619][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.376568][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.403153][ T5828] team0: Port device team_slave_1 added [ 91.409422][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.416410][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.442469][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.477900][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.484918][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.511528][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.583819][ T5835] hsr_slave_0: entered promiscuous mode [ 91.591002][ T5835] hsr_slave_1: entered promiscuous mode [ 91.654623][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.662511][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.689445][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.736189][ T5826] hsr_slave_0: entered promiscuous mode [ 91.742900][ T5826] hsr_slave_1: entered promiscuous mode [ 91.749067][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 91.755393][ T5826] Cannot create hsr debugfs directory [ 91.764463][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.771418][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.797382][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.813506][ T5839] hsr_slave_0: entered promiscuous mode [ 91.819976][ T5839] hsr_slave_1: entered promiscuous mode [ 91.827017][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 91.832796][ T5839] Cannot create hsr debugfs directory [ 91.844234][ T5845] hsr_slave_0: entered promiscuous mode [ 91.850745][ T5845] hsr_slave_1: entered promiscuous mode [ 91.856857][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 91.862870][ T5845] Cannot create hsr debugfs directory [ 91.983744][ T5823] hsr_slave_0: entered promiscuous mode [ 91.991184][ T5823] hsr_slave_1: entered promiscuous mode [ 91.997388][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 92.003243][ T5823] Cannot create hsr debugfs directory [ 92.179523][ T5828] hsr_slave_0: entered promiscuous mode [ 92.186309][ T5828] hsr_slave_1: entered promiscuous mode [ 92.192897][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 92.198610][ T5828] Cannot create hsr debugfs directory [ 92.350464][ T5842] Bluetooth: hci0: command tx timeout [ 92.355894][ T5834] Bluetooth: hci2: command tx timeout [ 92.355929][ T5827] Bluetooth: hci4: command tx timeout [ 92.361443][ T5837] Bluetooth: hci3: command tx timeout [ 92.366922][ T5832] Bluetooth: hci1: command tx timeout [ 92.430690][ T5832] Bluetooth: hci5: command tx timeout [ 92.750661][ T5835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.765989][ T5835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.777667][ T5835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.796895][ T5835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.865107][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.882387][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.895199][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.907499][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.995502][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.013377][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.030925][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.061702][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.141768][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.155758][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.177729][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.200965][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.272414][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.294929][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.307982][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.335465][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.365605][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.417901][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.477437][ T1970] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.484771][ T1970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.503167][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.519291][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.544503][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.557180][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.569700][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.576851][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.594648][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.657792][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.689968][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.697128][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.727994][ T3769] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.735124][ T3769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.836565][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.917769][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.987369][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.014310][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.039996][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.063699][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.074292][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.081451][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.124818][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.132005][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.164950][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.172101][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.203741][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.210926][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.233459][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.240635][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.265457][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.299403][ T3740] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.306602][ T3740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.388388][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.430920][ T5827] Bluetooth: hci2: command tx timeout [ 94.431981][ T5842] Bluetooth: hci4: command tx timeout [ 94.436404][ T5832] Bluetooth: hci3: command tx timeout [ 94.442086][ T5834] Bluetooth: hci0: command tx timeout [ 94.452610][ T5837] Bluetooth: hci1: command tx timeout [ 94.457125][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.510456][ T5834] Bluetooth: hci5: command tx timeout [ 94.559937][ T1970] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.567126][ T1970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.603753][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.636110][ T1970] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.643261][ T1970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.903068][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.939472][ T5826] veth0_vlan: entered promiscuous mode [ 95.029270][ T5826] veth1_vlan: entered promiscuous mode [ 95.157274][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.202527][ T5835] veth0_vlan: entered promiscuous mode [ 95.241454][ T5826] veth0_macvtap: entered promiscuous mode [ 95.256025][ T5826] veth1_macvtap: entered promiscuous mode [ 95.299619][ T5835] veth1_vlan: entered promiscuous mode [ 95.332698][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.365999][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.388784][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.414034][ T3456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.432764][ T3456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.441799][ T3456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.466892][ T3456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.481070][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.505433][ T5835] veth0_macvtap: entered promiscuous mode [ 95.516460][ T5839] veth0_vlan: entered promiscuous mode [ 95.529831][ T5835] veth1_macvtap: entered promiscuous mode [ 95.555641][ T5839] veth1_vlan: entered promiscuous mode [ 95.574290][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.662897][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.718511][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.779939][ T5839] veth0_macvtap: entered promiscuous mode [ 95.828431][ T5839] veth1_macvtap: entered promiscuous mode [ 95.835281][ T3769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.843503][ T3456] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.854808][ T3456] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.864623][ T3769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.876401][ T5828] veth0_vlan: entered promiscuous mode [ 95.897552][ T3456] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.927093][ T3456] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.946030][ T5845] veth0_vlan: entered promiscuous mode [ 96.015850][ T5845] veth1_vlan: entered promiscuous mode [ 96.023931][ T5828] veth1_vlan: entered promiscuous mode [ 96.040658][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.049057][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.085836][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.158505][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.180820][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.234927][ T5828] veth0_macvtap: entered promiscuous mode [ 96.274839][ T5828] veth1_macvtap: entered promiscuous mode [ 96.282369][ T3740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.288591][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.298291][ T3740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.308437][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.332105][ T5845] veth0_macvtap: entered promiscuous mode [ 96.343683][ T5845] veth1_macvtap: entered promiscuous mode [ 96.366748][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.379686][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.414145][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.426707][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.510483][ T5834] Bluetooth: hci0: command tx timeout [ 96.515906][ T5834] Bluetooth: hci4: command tx timeout [ 96.521612][ T5834] Bluetooth: hci1: command tx timeout [ 96.527012][ T5834] Bluetooth: hci3: command tx timeout [ 96.532907][ T5834] Bluetooth: hci2: command tx timeout [ 96.554440][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.563220][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.587477][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.600508][ T5842] Bluetooth: hci5: command tx timeout [ 96.958129][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.027407][ T5823] veth0_vlan: entered promiscuous mode [ 97.067106][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.099979][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.188885][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.209695][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.285412][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.307876][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.377118][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.412813][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.485663][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.512246][ T3769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.524635][ T3769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.540127][ T5823] veth1_vlan: entered promiscuous mode [ 97.559502][ T3769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.746270][ T3769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.771650][ T3769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.829669][ T5823] veth0_macvtap: entered promiscuous mode [ 97.912004][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.920233][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.928094][ T5823] veth1_macvtap: entered promiscuous mode [ 97.956461][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.975463][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.103140][ T5916] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 98.415043][ T5916] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 98.434806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.448587][ T5916] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 98.479255][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.486583][ T5916] usb 6-1: config 0 has no interface number 0 [ 98.486929][ T5916] usb 6-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.614667][ T5916] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 98.622888][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.635866][ T5916] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.660752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.693949][ T5916] usb 6-1: config 0 interface 52 has no altsetting 0 [ 98.716523][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.744066][ T5916] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 98.748024][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.765374][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 98.774801][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.801833][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.820285][ T5916] usb 6-1: Product: syz [ 98.824459][ T5916] usb 6-1: SerialNumber: syz [ 98.838725][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.875301][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.925546][ T5916] usb 6-1: config 0 descriptor?? [ 99.195305][ T5916] input: syz (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input5 [ 100.278358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.279112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.380998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 100.381822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.483081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.484155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.585479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.586291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.080375][ T5956] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.333184][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.343282][ T5916] usb 6-1: USB disconnect, device number 2 [ 101.363745][ T5179] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 101.380473][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 101.390775][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.413253][ T5956] usb 2-1: config 1 has an invalid interface number: 30 but max is 0 [ 101.450265][ T5956] usb 2-1: config 1 has no interface number 0 [ 101.459458][ T5956] usb 2-1: config 1 interface 30 has no altsetting 0 [ 101.475062][ T5956] usb 2-1: New USB device found, idVendor=0bda, idProduct=0179, bcdDevice=4a.2f [ 101.528160][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.568811][ T5956] usb 2-1: Product: syz [ 101.576391][ T5956] usb 2-1: Manufacturer: syz [ 101.594748][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.609695][ T5956] usb 2-1: SerialNumber: syz [ 101.625617][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.797696][ T5956] usb 2-1: USB disconnect, device number 2 [ 103.905298][ T6017] 9p: Could not find request transport: fd00000000000000000000005 [ 104.114693][ T6033] Zero length message leads to an empty skb [ 104.213784][ T6035] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 105.092197][ T6039] vivid-000: ================= START STATUS ================= [ 105.100003][ T6039] vivid-000: Radio HW Seek Mode: Bounded [ 105.141656][ T6039] vivid-000: Radio Programmable HW Seek: false [ 105.189376][ T6039] vivid-000: RDS Rx I/O Mode: Block I/O [ 105.231044][ T6039] vivid-000: Generate RBDS Instead of RDS: false [ 105.259809][ T6039] vivid-000: RDS Reception: true [ 105.299290][ T6039] vivid-000: RDS Program Type: 0 inactive [ 105.311252][ T6039] vivid-000: RDS PS Name: inactive [ 105.316495][ T6039] vivid-000: RDS Radio Text: inactive [ 105.391945][ T6039] vivid-000: RDS Traffic Announcement: false inactive [ 105.420476][ T6039] vivid-000: RDS Traffic Program: false inactive [ 105.487749][ T6039] vivid-000: RDS Music: false inactive [ 105.537652][ T6039] vivid-000: ================== END STATUS ================== [ 108.838675][ T6062] loop2: detected capacity change from 0 to 4096 [ 109.211826][ T3740] ntfs3(loop2): ino=21, mi_enum_attr [ 109.217237][ T3740] ntfs3(loop2): ino=21, mi_enum_attr [ 109.265099][ T3740] ntfs3(loop2): ino=21, mi_enum_attr [ 112.662896][ T5895] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.860718][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 113.006860][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.032787][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.063399][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.096733][ T5895] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.136091][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.203484][ T5895] usb 1-1: config 0 descriptor?? [ 114.303653][ T5895] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 114.313387][ T5895] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 114.323931][ T5895] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 114.370233][ T5895] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 114.377493][ T5895] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 114.397496][ T5895] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 114.432781][ T5895] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 114.440025][ T5895] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 114.502321][ T5895] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 114.509642][ T5895] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 114.733028][ T6134] syz.1.58 uses obsolete (PF_INET,SOCK_PACKET) [ 114.737930][ T5895] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 114.851196][ T5895] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input6 [ 115.426200][ T5895] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 115.485316][ T5895] usb 1-1: USB disconnect, device number 2 [ 115.776795][ T6141] fido_id[6141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 116.247280][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.433477][ T24] usb 3-1: config 0 has an invalid interface number: 112 but max is 0 [ 116.455848][ T24] usb 3-1: config 0 has no interface number 0 [ 116.490310][ T24] usb 3-1: config 0 interface 112 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 116.546008][ T24] usb 3-1: config 0 interface 112 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 116.593248][ T24] usb 3-1: config 0 interface 112 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.627784][ T24] usb 3-1: config 0 interface 112 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 116.643899][ T24] usb 3-1: config 0 interface 112 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 8 [ 116.654840][ T24] usb 3-1: config 0 interface 112 altsetting 4 bulk endpoint 0x7 has invalid maxpacket 8 [ 116.668735][ T24] usb 3-1: config 0 interface 112 has no altsetting 0 [ 116.679403][ T24] usb 3-1: New USB device found, idVendor=2001, idProduct=7d04, bcdDevice=80.53 [ 116.689067][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.888416][ T24] usb 3-1: Product: syz [ 116.893002][ T24] usb 3-1: Manufacturer: syz [ 116.897592][ T24] usb 3-1: SerialNumber: syz [ 117.024286][ T6158] syz_tun: entered allmulticast mode [ 117.034377][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 117.508813][ T6152] syz_tun: left allmulticast mode [ 117.674018][ T24] usb 3-1: config 0 descriptor?? [ 117.898223][ T24] option 3-1:0.112: GSM modem (1-port) converter detected [ 118.893960][ T5895] usb 3-1: USB disconnect, device number 2 [ 119.971541][ T5895] option 3-1:0.112: device disconnected [ 121.612502][ T6192] 9p: Bad value for 'rfdno' [ 122.428978][ T6209] trusted_key: encrypted_key: keylen parameter is missing [ 122.748811][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 122.824774][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.834365][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 122.866196][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.980983][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.120271][ T5956] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.212489][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.950703][ T5956] usb 6-1: Using ep0 maxpacket: 16 [ 123.996201][ T5956] usb 6-1: config 0 interface 0 has no altsetting 0 [ 124.133867][ T5956] usb 6-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= e.90 [ 124.181051][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.233685][ T5956] usb 6-1: Product: syz [ 124.237854][ T5956] usb 6-1: Manufacturer: syz [ 124.260457][ T5956] usb 6-1: SerialNumber: syz [ 124.347408][ T5956] usb 6-1: config 0 descriptor?? [ 124.370045][ T5956] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.479773][ T6243] 9p: Bad value for 'rfdno' [ 124.740494][ T5956] usb 6-1: USB disconnect, device number 3 [ 125.200245][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.410077][ T30] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.456172][ T30] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 125.553665][ T30] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 125.614212][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.647253][ T30] usb 4-1: Product: syz [ 125.676846][ T30] usb 4-1: Manufacturer: syz [ 125.697112][ T30] usb 4-1: SerialNumber: syz [ 127.187026][ T5992] kernel read not supported for file /vcs (pid: 5992 comm: kworker/0:7) [ 127.190975][ T6115] kernel write not supported for file /vcs (pid: 6115 comm: kworker/1:9) [ 127.433927][ T30] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 127.617000][ T30] usb 4-1: unable to get BOS descriptor or descriptor too short [ 127.944608][ T5992] usb 4-1: USB disconnect, device number 2 [ 129.700244][ T5924] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.882550][ T5924] usb 3-1: device descriptor read/64, error -71 [ 129.910965][ T6114] kernel read not supported for file /vcs (pid: 6114 comm: kworker/0:12) [ 130.285845][ T5924] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.600337][ T5924] usb 3-1: device descriptor read/64, error -71 [ 130.713692][ T5924] usb usb3-port1: attempt power cycle [ 131.512491][ T6341] vivid-003: disconnect [ 131.540769][ T6340] vivid-003: reconnect [ 131.630800][ T5924] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.728357][ T5924] usb 3-1: device descriptor read/8, error -71 [ 131.911889][ T6114] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.230399][ T6114] usb 1-1: Using ep0 maxpacket: 16 [ 132.951597][ T6114] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.971368][ T6114] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 157 [ 132.985878][ T6114] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.069908][ T6114] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 133.122493][ T6114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.201262][ T6114] usb 1-1: Product: syz [ 133.205464][ T6114] usb 1-1: Manufacturer: syz [ 133.260663][ T6114] usb 1-1: SerialNumber: syz [ 133.327864][ T6114] usb 1-1: config 0 descriptor?? [ 133.541890][ T6346] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 133.633045][ T6114] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 134.048633][ T5924] usb 1-1: USB disconnect, device number 3 [ 137.091781][ T6404] vivid-000: disconnect [ 137.134295][ T6401] vivid-000: reconnect [ 137.271131][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.277688][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.913920][ T6418] ======================================================= [ 137.913920][ T6418] WARNING: The mand mount option has been deprecated and [ 137.913920][ T6418] and is ignored by this kernel. Remove the mand [ 137.913920][ T6418] option from the mount to silence this warning. [ 137.913920][ T6418] ======================================================= [ 138.008958][ T6418] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 139.795073][ T6429] overlay: Unknown parameter '/' [ 140.172388][ T5992] kernel read not supported for file /vcs (pid: 5992 comm: kworker/0:7) [ 141.367581][ T6467] vivid-000: disconnect [ 141.377411][ T6466] vivid-000: reconnect [ 141.711181][ T6471] veth1_to_hsr: entered promiscuous mode [ 141.720485][ T6471] macvlan2: entered promiscuous mode [ 142.702881][ T6475] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 142.781421][ T6475] overlay: Unknown parameter '/' [ 143.151999][ T5992] kernel read not supported for file /vcs (pid: 5992 comm: kworker/0:7) [ 143.170421][ T6115] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 143.703859][ T6115] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 143.751894][ T6115] usb 2-1: config 0 interface 0 has no altsetting 0 [ 143.787761][ T6115] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 143.830546][ T6115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.884791][ T6115] usb 2-1: config 0 descriptor?? [ 143.911460][ T6482] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.223815][ T6506] vivid-000: disconnect [ 144.254765][ T6504] vivid-000: reconnect [ 144.401477][ T6482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.425229][ T6482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.626603][ T6115] usbhid 2-1:0.0: can't add hid device: -71 [ 144.635766][ T6115] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 144.653447][ T6115] usb 2-1: USB disconnect, device number 3 [ 145.742791][ T6518] ip6gretap0: entered promiscuous mode [ 146.723315][ T6541] overlayfs: failed to resolve './file1': -2 [ 151.731709][ T6598] trusted_key: encrypted_key: insufficient parameters specified [ 158.660268][ T6668] process 'syz.3.240' launched './file1' with NULL argv: empty string added [ 165.574742][ T6710] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 165.790313][ T6067] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 165.940294][ T6067] usb 2-1: Using ep0 maxpacket: 32 [ 165.963138][ T6067] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 166.000246][ T6067] usb 2-1: config 0 has no interface number 0 [ 166.028400][ T6067] usb 2-1: config 0 interface 12 has no altsetting 0 [ 166.062983][ T6067] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 166.122780][ T6067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.158684][ T6067] usb 2-1: Product: syz [ 166.178625][ T6067] usb 2-1: Manufacturer: syz [ 166.194125][ T6067] usb 2-1: SerialNumber: syz [ 166.210595][ T5924] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 166.221673][ T6067] usb 2-1: config 0 descriptor?? [ 166.411048][ T5916] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 166.428796][ T5924] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.456304][ T5924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.474521][ T5924] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.504078][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.554792][ T5924] usb 6-1: SerialNumber: syz [ 166.600547][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 166.612419][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.634589][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.682395][ T5916] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.700510][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.739304][ T5916] usb 4-1: Product: syz [ 166.747259][ T5916] usb 4-1: Manufacturer: syz [ 166.762797][ T5916] usb 4-1: SerialNumber: syz [ 166.770614][ T6678] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 166.823412][ T5924] usb 6-1: 0:2 : does not exist [ 166.883047][ T5924] usb 6-1: USB disconnect, device number 4 [ 166.961397][ T6678] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 166.984377][ T6678] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.009317][ T5916] usb 4-1: 0:2 : does not exist [ 167.019483][ T6678] usb 5-1: config 0 has no interfaces? [ 167.027991][ T6678] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 167.059192][ T5916] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 167.072104][ T6678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.137011][ T6678] usb 5-1: config 0 descriptor?? [ 167.182151][ T5916] usb 4-1: USB disconnect, device number 3 [ 167.254972][ T5847] udevd[5847]: setting owner of /dev/bus/usb/004/003 to uid=0, gid=0 failed: No such file or directory [ 167.292428][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.394822][ T5895] usb 5-1: USB disconnect, device number 2 [ 167.422345][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 167.477179][ T6067] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 167.509627][ T6067] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 167.538896][ T6067] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 167.573294][ T6067] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 167.624883][ T6067] usb 2-1: USB disconnect, device number 4 [ 177.728957][ T6805] Bluetooth: MGMT ver 1.23 [ 177.919655][ T31] audit: type=1326 audit(1766271524.549:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.5.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76098f749 code=0x7ffc0000 [ 177.990008][ T31] audit: type=1326 audit(1766271524.609:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.5.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd76098f749 code=0x7ffc0000 [ 283.000184][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 283.007173][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6807/1:b..l [ 283.015402][ C1] rcu: (detected by 1, t=10502 jiffies, g=14885, q=1038 ncpus=2) [ 283.023193][ C1] task:syz.5.291 state:R running task stack:25552 pid:6807 tgid:6806 ppid:5835 task_flags:0x400140 flags:0x00080000 [ 283.037421][ C1] Call Trace: [ 283.040784][ C1] [ 283.043702][ C1] __schedule+0x14bc/0x5000 [ 283.048217][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 283.053414][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.059038][ C1] ? kmem_cache_free+0x197/0x620 [ 283.063965][ C1] ? __pfx___schedule+0x10/0x10 [ 283.068820][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.074442][ C1] ? __seccomp_filter+0xcf0/0x1e20 [ 283.079547][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 283.084907][ C1] preempt_schedule_irq+0xb5/0x150 [ 283.090008][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 283.095726][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 283.100921][ C1] ? signal_setup_done+0x2cf/0x3b0 [ 283.106027][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.111645][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 283.117443][ C1] irqentry_exit+0x5d8/0x660 [ 283.122022][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.127984][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 [ 283.134119][ C1] Code: 48 8d 3d 33 a3 29 04 48 c7 c6 11 fb 77 8d 67 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 31 c0 83 3d 17 59 26 04 00 74 1e 83 3d 2a 88 26 04 00 [ 283.153707][ C1] RSP: 0018:ffffc9000b85fe90 EFLAGS: 00000246 [ 283.159758][ C1] RAX: 0000000000000000 RBX: ffff888077786d80 RCX: 0000000000080000 [ 283.167723][ C1] RDX: ffffc9000d21c000 RSI: 0000000000007b02 RDI: 0000000000007b03 [ 283.175676][ C1] RBP: 0000000000000087 R08: ffffffff818cf788 R09: ffffffff8df41a20 [ 283.183628][ C1] R10: dffffc0000000000 R11: fffffbfff1f0440f R12: ffff888077786e98 [ 283.191580][ C1] R13: dffffc0000000000 R14: ffff888077786e90 R15: 0000000000000010 [ 283.199540][ C1] ? __task_pid_nr_ns+0x28/0x490 [ 283.204476][ C1] __task_pid_nr_ns+0x31e/0x490 [ 283.209314][ C1] ? __task_pid_nr_ns+0x28/0x490 [ 283.214239][ C1] __ia32_sys_getpid+0x1e/0x30 [ 283.218984][ C1] do_syscall_64+0xfa/0xf80 [ 283.223474][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.229532][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.235150][ C1] ? exc_page_fault+0xab/0x100 [ 283.239923][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.245797][ C1] RIP: 0033:0x7fd7609865e7 [ 283.250194][ C1] RSP: 002b:00007fd76182ba48 EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 283.258618][ C1] RAX: ffffffffffffffda RBX: 00007fd76182bbb0 RCX: 00007fd7609865e7 [ 283.266576][ C1] RDX: 00007fd76182ba80 RSI: 00007fd76182bbb0 RDI: 0000000000000021 [ 283.274540][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.282491][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.290441][ C1] R13: 00007fd760be6038 R14: 00007fd760be5fa0 R15: 00007ffe921eb8a8 [ 283.298668][ C1] [ 283.301667][ C1] rcu: rcu_preempt kthread starved for 10529 jiffies! g14885 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 283.312837][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 283.322779][ C1] rcu: RCU grace-period kthread stack dump: [ 283.328642][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 283.342154][ C1] Call Trace: [ 283.345409][ C1] [ 283.348323][ C1] __schedule+0x14bc/0x5000 [ 283.352849][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 283.358031][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.363645][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 283.369535][ C1] ? __pfx___schedule+0x10/0x10 [ 283.374393][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.380013][ C1] ? schedule+0x91/0x360 [ 283.384239][ C1] schedule+0x165/0x360 [ 283.388376][ C1] schedule_timeout+0x12b/0x270 [ 283.393215][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 283.398579][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 283.404499][ C1] ? __pfx_process_timeout+0x10/0x10 [ 283.409792][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.415419][ C1] ? prepare_to_swait_event+0x341/0x380 [ 283.420958][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 283.425806][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 283.430985][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 283.436865][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 283.442146][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 283.447342][ C1] ? finish_swait+0xcd/0x1f0 [ 283.451925][ C1] rcu_gp_kthread+0x99/0x390 [ 283.456502][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 283.461681][ C1] ? __kthread_parkme+0x7b/0x200 [ 283.466603][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.472225][ C1] ? __kthread_parkme+0x1a1/0x200 [ 283.477254][ C1] kthread+0x711/0x8a0 [ 283.481315][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 283.486494][ C1] ? __pfx_kthread+0x10/0x10 [ 283.491066][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.496684][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 283.501879][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.507493][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 283.512670][ C1] ? __pfx_kthread+0x10/0x10 [ 283.517250][ C1] ret_from_fork+0x599/0xb30 [ 283.521846][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 283.526952][ C1] ? __switch_to_asm+0x39/0x70 [ 283.531708][ C1] ? __switch_to_asm+0x33/0x70 [ 283.536458][ C1] ? __pfx_kthread+0x10/0x10 [ 283.541037][ C1] ret_from_fork_asm+0x1a/0x30 [ 283.545809][ C1] [ 283.548805][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 283.555101][ C1] Sending NMI from CPU 1 to CPUs 0: [ 283.560297][ C0] NMI backtrace for cpu 0 [ 283.560318][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.560348][ C0] Tainted: [L]=SOFTLOCKUP [ 283.560356][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.560369][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 283.560402][ C0] Code: 5e 83 b4 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 33 83 b4 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 283.560420][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 283.560440][ C0] RAX: ac474848f429e900 RBX: ffffffff81978fda RCX: ac474848f429e900 [ 283.560457][ C0] RDX: 0000000000000001 RSI: ffffffff8d79261c RDI: ffffffff8bc08360 [ 283.560473][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 283.560490][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822070 [ 283.560508][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 283.560525][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 283.560543][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.560559][ C0] CR2: 00005591aa4174d8 CR3: 000000005a5c0000 CR4: 0000000000350ef0 [ 283.560576][ C0] Call Trace: [ 283.560585][ C0] [ 283.560593][ C0] default_idle+0x13/0x20 [ 283.560620][ C0] default_idle_call+0x73/0xb0 [ 283.560649][ C0] do_idle+0x1ea/0x520 [ 283.560674][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.560700][ C0] ? irqentry_exit+0x5ba/0x660 [ 283.560728][ C0] ? __pfx_do_idle+0x10/0x10 [ 283.560766][ C0] cpu_startup_entry+0x44/0x60 [ 283.560792][ C0] rest_init+0x2de/0x300 [ 283.560824][ C0] start_kernel+0x3a7/0x400 [ 283.560850][ C0] x86_64_start_reservations+0x24/0x30 [ 283.560881][ C0] x86_64_start_kernel+0x143/0x1c0 [ 283.560911][ C0] common_startup_64+0x13e/0x147 [ 283.560954][ C0]