last executing test programs: 1m5.658020149s ago: executing program 2 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200001400000016030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f7500000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 1m2.290170196s ago: executing program 2 (id=184): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 58.979435706s ago: executing program 2 (id=191): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001280)=""/166, 0xa6}, {0x0}, {0x0}, {0x0}], 0x8}, 0x123) 57.838252975s ago: executing program 2 (id=197): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x50, 0xbf, 0x29, 0x20, 0x19d2, 0xf2ac, 0x844f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x80002, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r4, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0xe}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r5}) 54.430770214s ago: executing program 2 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) 52.212734864s ago: executing program 2 (id=207): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8003, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="09000000000000000000000000000000000000000900010073"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) ioctl$FITHAW(r3, 0xc0045878) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$kcm(0x29, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x64bb, 0x1000, 0x2, 0x2ce}, &(0x7f0000000400), &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) 36.123385216s ago: executing program 32 (id=207): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8003, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="09000000000000000000000000000000000000000900010073"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) ioctl$FITHAW(r3, 0xc0045878) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$kcm(0x29, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x64bb, 0x1000, 0x2, 0x2ce}, &(0x7f0000000400), &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) 22.461769808s ago: executing program 4 (id=246): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x106c, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x1040, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_POLICE={0x102c, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5312, 0x10000, 0x10, 0x9, 0x0, 0xe, 0x3, 0xb4, 0x9, 0x1, 0x5, 0x8, 0x1, 0x0, 0x4, 0x80000001, 0x8001, 0x0, 0x5, 0x9, 0xffffffff, 0x5, 0x5, 0x2, 0x7, 0x7, 0x2, 0x10000, 0x4, 0x11d, 0x1, 0x88, 0x1, 0xfffffff3, 0xfffffed7, 0xa7, 0xfffffffb, 0x10e9, 0xfff, 0x8, 0xc, 0x3, 0x0, 0x9, 0x1, 0x7f, 0xd9c, 0x6, 0x4, 0x30, 0x8, 0x80000001, 0x9f2, 0x6, 0x3, 0x5, 0x80000001, 0xffff0001, 0x80000001, 0x6, 0xffffffff, 0x1000, 0x0, 0x8, 0x3d49, 0x4, 0xffff98b7, 0x80000000, 0x6c, 0x81, 0x5, 0xd70, 0x4, 0x6, 0x5820, 0x3, 0xf, 0xb8b8, 0xffffffff, 0x7, 0x3, 0x1acc000, 0x3ff, 0x33a, 0x9, 0x834f, 0x5c, 0x80000000, 0x4, 0x100, 0x7e22, 0x8, 0xdaea, 0x6, 0x64b0, 0xcb2, 0x3ff, 0x3ff, 0x81, 0x3, 0x9, 0xfffffff7, 0x4, 0x80, 0x7, 0x8000, 0x9, 0x81, 0x8001, 0x0, 0x2, 0x3, 0x4, 0x6, 0x4, 0x200, 0x1, 0x8, 0x2, 0x3, 0x9, 0x9, 0x10001, 0x2, 0x52, 0x2, 0xffff, 0x2, 0xf8e, 0x2, 0x10001, 0x0, 0x72cd, 0x3, 0xd3, 0x2, 0x91, 0x9, 0x2, 0x8, 0x3, 0x8, 0x0, 0x7fffffff, 0x7c840355, 0x4, 0x100, 0x3, 0xffffffff, 0xd, 0x4, 0x7, 0x7, 0x2b12, 0x7, 0x3adb, 0x2e, 0x8, 0x7, 0x4, 0x9, 0x1000, 0x6, 0x9, 0x60000000, 0xfffffffb, 0x800, 0x9, 0x0, 0x80, 0x6, 0x5c, 0x8000, 0x100, 0x6, 0x59, 0xfffffffe, 0xda5, 0x7, 0x7, 0x6, 0x8, 0x9, 0x1, 0x5, 0x40, 0x10001, 0xff, 0x3c000000, 0x8, 0x7a35, 0x1728, 0x9, 0x18, 0xffffffc0, 0x100, 0xc3ea, 0x101, 0x6, 0x8, 0x6, 0x2, 0x3b, 0xc5, 0x5, 0xfffffc00, 0x2, 0xaddd, 0x2, 0xe9, 0x400, 0xf0b, 0x8, 0xfffffff8, 0x8000, 0x68, 0x800, 0x629e, 0x1000, 0x5, 0x1000, 0x3, 0x2f, 0x5, 0x6, 0x8, 0x1000, 0x10001, 0xb6, 0x200, 0x8000, 0x1ff, 0x2, 0x5, 0x8, 0xe3, 0x9, 0x7, 0x6e, 0x2, 0x8b36, 0x2, 0x97, 0x4, 0x6, 0x3, 0x3, 0xdc4, 0x8, 0x4, 0x4, 0xa0, 0xffffffe6, 0x4, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x4, 0x101, 0x5, 0xbda, 0x4469, 0xa803, 0x5, 0x9, 0x5, 0x6, 0x6, 0x7f4, 0x98f, 0x32d, 0x401, 0x200, 0xff, 0x1580000, 0x1000, 0xe, 0x0, 0x1, 0x32a, 0x9, 0x5, 0x1, 0x400, 0x8, 0x80000000, 0x7, 0xfffffff4, 0x7b5, 0x200, 0x3, 0x1, 0x7, 0x7, 0x9, 0x7, 0x5, 0x81, 0x6, 0x2, 0x27, 0xed, 0x8, 0x1, 0x2, 0x4, 0x1000, 0x4, 0x817, 0x60000000, 0x7fffffff, 0x282e, 0x1000, 0xdec8, 0x8000, 0xffffffff, 0xd, 0x1, 0x8, 0x5, 0xa, 0xffff8000, 0x80000001, 0x177, 0xfffffbff, 0x6, 0x24, 0x3ff, 0x2, 0x200, 0x94, 0x3, 0x4, 0x6, 0x26f, 0x6, 0xeea7, 0x3, 0x91, 0x30, 0xfffffffa, 0xe, 0x3, 0x7c, 0x9, 0x3, 0x7574, 0x0, 0x7, 0x9, 0x80f, 0x1, 0x1, 0x5f, 0x1, 0x1ff, 0x6, 0x33e499f0, 0x6, 0x325f, 0x9, 0x0, 0xffff, 0x6, 0x10, 0x7, 0x4, 0x98ae, 0xa96d, 0xffff8001, 0xc, 0x781, 0x6, 0xffffff40, 0x8, 0xb, 0xfd, 0x6, 0x4, 0x1, 0x9, 0x8, 0xffffff12, 0x2, 0x5, 0x7fffffff, 0x2, 0x1, 0xffff4abe, 0x7f, 0x40, 0x478b, 0x80000001, 0x7, 0x3ff, 0x0, 0x800000, 0x1f75, 0x400, 0xa5, 0xea, 0x2000000, 0x3, 0xffffffff, 0x400, 0x81, 0x1, 0x7, 0x6, 0x149808c9, 0x9, 0x7fffffff, 0x7c74, 0x5, 0x400, 0x14ea, 0x1, 0x0, 0x10000, 0x9, 0xfffffe00, 0x1, 0x5, 0x78f1647b, 0x10, 0xc8, 0x8000, 0x8, 0x2, 0x0, 0xc, 0x5, 0x9, 0xb, 0x6f, 0x5, 0x3, 0xff, 0x4, 0x2, 0x1, 0x9e, 0x10, 0x9, 0x7, 0x2, 0x7fffffff, 0x4, 0x6, 0xdbaf, 0x7, 0xcb, 0xe0b, 0x6, 0x9, 0x2, 0x0, 0x0, 0x4, 0xde, 0x101, 0xf1a, 0x2, 0x7, 0x1, 0x8, 0xbe36, 0x66, 0x3, 0x7, 0x40, 0x1, 0x7, 0x4, 0x2, 0x9, 0xc3b1, 0x7fffffff, 0x3, 0x1000, 0x43, 0xffff0000, 0x1816, 0x5, 0x1, 0x4, 0x9, 0x0, 0x8, 0xfffffffb, 0x7, 0x0, 0xe, 0x5, 0x6, 0x7fffffff, 0x60f, 0x8, 0x40, 0x1, 0x0, 0x8, 0x7, 0x8, 0x63e7, 0xfffffffa, 0x22d, 0x9, 0xc905, 0x5, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x65c, 0x5, 0x0, 0x6, 0xfffffffb, 0x80000001, 0x7, 0x6, 0x5, 0x5, 0x101, 0x3df, 0x1, 0x9b37, 0x100, 0x6, 0x3, 0x4, 0x4, 0x8, 0x25, 0x5, 0x3ff, 0x24, 0x3800000, 0x0, 0xfef, 0x7, 0x9, 0x80, 0x101, 0x1ff, 0x1ff, 0x88, 0x7, 0x7, 0xe92, 0x6, 0x3, 0x9, 0x6, 0x401, 0x80, 0x0, 0x8, 0x6, 0x3, 0xc, 0xa2e2, 0x9, 0xfffffffe, 0x7, 0x4, 0x7ffc, 0x3, 0xd, 0x2, 0x2, 0x2, 0x2, 0x7, 0x6, 0x8, 0x47d, 0x3, 0xfffffffe, 0xfffffffa, 0x3, 0x2, 0x9, 0x6, 0x1, 0xcfc9, 0x544, 0x4, 0x2, 0x3, 0x6, 0x8, 0xc0, 0x7, 0xc3e, 0x7, 0x2, 0xffffff00, 0xd7c, 0x1000, 0xffffff96, 0x29, 0x1, 0x400, 0xeac, 0x5, 0x8, 0xca, 0xa6, 0x7ff, 0x3, 0x8, 0x4, 0xfffffc00, 0xb96, 0x5, 0x8, 0x100, 0x1e, 0x2, 0x13, 0x1, 0x4, 0x8, 0x3, 0x1, 0x3, 0x7, 0x2931, 0x3, 0x7, 0x5, 0xffffffe5, 0x140, 0xcfa5, 0x6, 0x4, 0xfffffffb, 0x6, 0x200, 0x7f, 0x5, 0x0, 0x80000001, 0x692, 0x5, 0x0, 0x6ba, 0x400, 0x7, 0x7ff, 0xc7b, 0x9, 0x5, 0x7f, 0xe981, 0x7, 0x6, 0x81, 0x101, 0x5, 0x7, 0x7, 0x3, 0x16, 0x7, 0x81, 0x7, 0x0, 0x4, 0x6, 0x1f8, 0xb, 0x2, 0x9, 0x40, 0xff, 0x2, 0x4, 0x7, 0x70ed, 0xfffffffd, 0xa8, 0x2, 0xfff, 0x8, 0x2, 0x4, 0x8, 0x9, 0x6, 0xf0000000, 0x2, 0x2, 0x80000000, 0x3, 0x9, 0x3, 0x3, 0xc7, 0x80, 0x3, 0x9, 0x4, 0x0, 0xffffff33, 0xbac, 0x98f, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x3, 0x7, 0x9, 0x2, 0x7a, 0x0, 0x10001, 0x80000000, 0x3e2, 0x81, 0x9, 0x1, 0x0, 0x3ff, 0x8, 0xffffffff, 0x5, 0x7f, 0x4281, 0x9, 0x800, 0x7, 0x8, 0x400, 0x82c, 0x19a1, 0x8000, 0x7, 0x4, 0x5, 0x2, 0x7, 0x5, 0x41d, 0x1, 0x5, 0x6, 0x2, 0x5, 0x7, 0x6, 0x6, 0x5, 0x0, 0x9, 0x3, 0x3, 0x49, 0x80000000, 0x68, 0x401, 0x6, 0x87e3, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x10, 0xfffffffd, 0x8001, 0x1, 0x9, 0x5, 0x63, 0x0, 0x5, 0xffffffff, 0x6, 0x5, 0x0, 0x200, 0x1, 0x3, 0x40, 0x6, 0x4e6, 0x9, 0x60, 0x6, 0xfffff000, 0x7, 0x7, 0xfffffffb, 0x7, 0x8, 0x80000000, 0xf848, 0x7, 0xf, 0x0, 0xc, 0x2, 0x6, 0x9, 0x3, 0x19d0000, 0x8000, 0x0, 0x2, 0x9, 0x5, 0xffffffff, 0xe2a3, 0x10000, 0x0, 0xfff, 0x100, 0x1c00000, 0x8, 0x4, 0x1, 0x4e56, 0x3000, 0x8001, 0x6, 0x7, 0x4, 0x6, 0x8000, 0x7, 0x5, 0x93, 0x2, 0x9, 0xffff7fff, 0x3, 0x0, 0x5, 0x2, 0x7, 0x4, 0x0, 0x7, 0x8, 0x9, 0x1, 0xa, 0x4, 0x1, 0xffff, 0x2, 0x7, 0x3, 0x70000, 0x3, 0xf0d, 0x3, 0x7bb, 0xcd95, 0x2, 0x7ff, 0x8, 0x6, 0x4, 0x0, 0x2, 0x56c, 0x2, 0x18, 0x4, 0x3, 0x10000, 0x5c4, 0x7, 0x7, 0x9, 0x3, 0x8b, 0x10, 0x9, 0x1, 0x101, 0x5924, 0x6, 0x5cc1, 0x0, 0x8, 0x81, 0x1000, 0x9, 0x4, 0x8001, 0x6, 0x6, 0x80, 0x3, 0x0, 0x4561f8c3, 0xd9fe, 0x6, 0x80000000, 0x3, 0x7, 0x1c, 0x5, 0x10001, 0x489, 0x52e3, 0x0, 0x400, 0x8, 0xc, 0xffffffff, 0x3, 0x8000, 0x0, 0x7, 0x3, 0x9, 0x1, 0x1009, 0xffffffc0, 0x344, 0xffffff68, 0x2, 0x3ff, 0x5, 0x6, 0x3, 0x9, 0x6e, 0x8, 0x9, 0x6, 0x6, 0x2, 0x1, 0x7fffffff, 0x8001, 0x5, 0x1ff, 0x4, 0x1, 0xb, 0x1840, 0x100000, 0xa9, 0x2, 0x3, 0x5, 0x9, 0x3, 0x0, 0x8000, 0x6, 0x9, 0x8, 0x5, 0x5e8, 0x1, 0x1, 0xfffffffe, 0x4, 0x8, 0x3, 0x5, 0xffff7fff, 0x9, 0x3, 0x48, 0x98, 0x3, 0x2, 0x6, 0x6, 0x33, 0x8, 0x4ac, 0x4, 0x8, 0x3, 0xfdfb, 0x1, 0x12, 0x0, 0x7, 0x5, 0x7, 0x3, 0x5, 0x800, 0x4, 0x2, 0x4, 0x10001, 0x0, 0x1ff, 0x81, 0x3, 0x7ff, 0x3, 0xd, 0x9, 0x5c94, 0x67, 0x7, 0xfc4fa85, 0x5, 0xec23, 0x3, 0x8, 0x312, 0x40, 0xc00b, 0x7fff, 0xba9, 0x7, 0x9, 0x4, 0xfffffffe, 0x5, 0x1000]}]}]}}]}, 0x106c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 20.581406171s ago: executing program 1 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 19.269993552s ago: executing program 1 (id=249): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000002280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) 18.772458191s ago: executing program 4 (id=250): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa000905", @ANYBLOB], 0x0) 17.392760768s ago: executing program 1 (id=253): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = socket$inet_udplite(0x2, 0x2, 0x88) pwrite64(r0, &(0x7f0000000000)='R', 0x50, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='ack_update_msk\x00', r6, 0x0, 0x3}, 0x18) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) 17.200906136s ago: executing program 4 (id=254): r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) r4 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x2, 0x4800020}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000001240)='net/wireless\x00') r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x1}, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r5, 0x26c3, 0xdffffffb, 0x0, 0x0, 0x0) 16.114140184s ago: executing program 4 (id=255): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8003, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="09000000000000000000000000000000000000000900010073"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) ioctl$FITHAW(r3, 0xc0045878) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$kcm(0x29, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x64bb, 0x1000, 0x2, 0x2ce}, &(0x7f0000000400), &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) 14.273006672s ago: executing program 0 (id=257): syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000077f1c910720c0c0059f6010203010902240001000000000904000002d31a3a00090501"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0xefff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11.762410498s ago: executing program 1 (id=259): sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xe0}, 0x1, 0x0, 0x0, 0x26000000}, 0x4000010) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg0\x00', 0x0}) r2 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xfffd}, &(0x7f0000000140)=0x8) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20021, r1}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000280)={@mcast2, 0x36, r5}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffb, 0x24, 0xfffffffffffffffd, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.538238314s ago: executing program 1 (id=262): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8003, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="09000000000000000000000000000000000000000900010073"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) ioctl$FITHAW(r3, 0xc0045878) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$kcm(0x29, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x64bb, 0x1000, 0x2, 0x2ce}, &(0x7f0000000400), &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) 8.410148373s ago: executing program 3 (id=263): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa000905", @ANYBLOB], 0x0) 8.210370395s ago: executing program 0 (id=264): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7.585105571s ago: executing program 0 (id=265): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b77601020301090224000100"], 0x0) 7.055006527s ago: executing program 4 (id=266): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8003, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="09000000000000000000000000000000000000000900010073"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) ioctl$FITHAW(r3, 0xc0045878) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$kcm(0x29, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x64bb, 0x1000, 0x2, 0x2ce}, &(0x7f0000000400), &(0x7f0000000440)) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) 6.573989016s ago: executing program 3 (id=267): syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000077f1c910720c0c0059f6010203010902240001000000000904000002d31a3a00090501"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0xefff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.457161554s ago: executing program 0 (id=268): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) move_pages(0x0, 0x2262, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e060062"], 0x9) 3.480712495s ago: executing program 0 (id=269): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r0, 0x0, 0x10040800) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 3.268061793s ago: executing program 0 (id=270): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x7, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2.844110299s ago: executing program 1 (id=271): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000003880)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004880) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) 1.492900954s ago: executing program 3 (id=272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) 800.585303ms ago: executing program 4 (id=273): syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000077f1c910720c0c0059f6010203010902240001000000000904000002d31a3a00090501"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0xefff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 382.858704ms ago: executing program 3 (id=274): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 236.710949ms ago: executing program 3 (id=275): ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) 0s ago: executing program 3 (id=276): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) writev(r3, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) syz_open_procfs(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x2c, r5, 0x5, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2c}}, 0x40006) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801002010000100000000000000000000000000000000090000000000000000e0000002000000000000000000efff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010100000000000000000000000000000000002b000000e0000002000000000000000000000000ff03000000000000030000000000000000000000000000000000000000000000000000000400000002000000000000000000000000000000000000080000000000000000020000000000000000000000000000000000000004000000000000000000800001000000fcffffff00000000000000000a00040040000000000000004800010073686132353600"/240], 0x138}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_usb_connect(0x1, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x77, 0xe, 0x63, 0x40, 0xbda, 0x1724, 0x7bca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xb, 0x2, 0x20, 0x7}}]}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 85.075779][ T5793] cgroup: Unknown subsys name 'net' [ 85.318935][ T5793] cgroup: Unknown subsys name 'cpuset' [ 85.372706][ T5793] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.925341][ T10] cfg80211: failed to load regulatory.db [ 87.499919][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.712846][ T5123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.716486][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.721464][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.730235][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.731558][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.732951][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.735551][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.736196][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.737640][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.738845][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.742181][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.743728][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.745493][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.747944][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.770694][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.772239][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.775004][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.793012][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.874668][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.878416][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.967277][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.971272][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.987247][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.988814][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.989786][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.952344][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 92.003027][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 92.178983][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 92.198941][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 92.376143][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 92.833039][ T5123] Bluetooth: hci1: command tx timeout [ 92.911877][ T5123] Bluetooth: hci2: command tx timeout [ 92.911885][ T5814] Bluetooth: hci0: command tx timeout [ 92.917595][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.918693][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.919067][ T5808] bridge_slave_0: entered allmulticast mode [ 92.920983][ T5808] bridge_slave_0: entered promiscuous mode [ 92.991991][ T5123] Bluetooth: hci3: command tx timeout [ 93.065717][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.065866][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.066051][ T5808] bridge_slave_1: entered allmulticast mode [ 93.067988][ T5808] bridge_slave_1: entered promiscuous mode [ 93.070532][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.070652][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.071043][ T5804] bridge_slave_0: entered allmulticast mode [ 93.086509][ T5123] Bluetooth: hci4: command tx timeout [ 93.124807][ T5804] bridge_slave_0: entered promiscuous mode [ 93.322918][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.323036][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.323154][ T5804] bridge_slave_1: entered allmulticast mode [ 93.325101][ T5804] bridge_slave_1: entered promiscuous mode [ 93.752993][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.753269][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.753392][ T5809] bridge_slave_0: entered allmulticast mode [ 93.755069][ T5809] bridge_slave_0: entered promiscuous mode [ 93.758901][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.759048][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.759256][ T5807] bridge_slave_0: entered allmulticast mode [ 93.792488][ T5807] bridge_slave_0: entered promiscuous mode [ 93.821044][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.993175][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.993395][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.993591][ T5809] bridge_slave_1: entered allmulticast mode [ 93.995637][ T5809] bridge_slave_1: entered promiscuous mode [ 93.998944][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.999067][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.999197][ T5807] bridge_slave_1: entered allmulticast mode [ 94.000938][ T5807] bridge_slave_1: entered promiscuous mode [ 94.007303][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.013541][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.173892][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.173991][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.174134][ T5820] bridge_slave_0: entered allmulticast mode [ 94.175857][ T5820] bridge_slave_0: entered promiscuous mode [ 94.405565][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.406740][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.406839][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.407203][ T5820] bridge_slave_1: entered allmulticast mode [ 94.408916][ T5820] bridge_slave_1: entered promiscuous mode [ 94.795850][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.799811][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.804233][ T5808] team0: Port device team_slave_0 added [ 94.911979][ T5123] Bluetooth: hci1: command tx timeout [ 94.966083][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.968486][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.970249][ T5808] team0: Port device team_slave_1 added [ 94.982821][ T5804] team0: Port device team_slave_0 added [ 94.991902][ T5123] Bluetooth: hci0: command tx timeout [ 95.001886][ T5123] Bluetooth: hci2: command tx timeout [ 95.007557][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.071976][ T5123] Bluetooth: hci3: command tx timeout [ 95.151878][ T5123] Bluetooth: hci4: command tx timeout [ 95.205393][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.207309][ T5804] team0: Port device team_slave_1 added [ 95.834694][ T5809] team0: Port device team_slave_0 added [ 95.837002][ T5807] team0: Port device team_slave_0 added [ 95.838353][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.838363][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.838378][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.026003][ T5809] team0: Port device team_slave_1 added [ 96.027817][ T5807] team0: Port device team_slave_1 added [ 96.028514][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.028525][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.028539][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.030811][ T5820] team0: Port device team_slave_0 added [ 96.092692][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.092705][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.092720][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.264096][ T5820] team0: Port device team_slave_1 added [ 96.264715][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.264725][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.264737][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.624497][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.624511][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.624523][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.625717][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.625731][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.625757][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.745105][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.745119][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.745131][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.746414][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.746424][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.746439][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.863841][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.863854][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.863869][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.974418][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.974437][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.974463][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.991960][ T5123] Bluetooth: hci1: command tx timeout [ 97.070536][ T5808] hsr_slave_0: entered promiscuous mode [ 97.071673][ T5808] hsr_slave_1: entered promiscuous mode [ 97.072102][ T5123] Bluetooth: hci2: command tx timeout [ 97.072111][ T5814] Bluetooth: hci0: command tx timeout [ 97.152237][ T5814] Bluetooth: hci3: command tx timeout [ 97.232023][ T5814] Bluetooth: hci4: command tx timeout [ 97.261051][ T5804] hsr_slave_0: entered promiscuous mode [ 97.262969][ T5804] hsr_slave_1: entered promiscuous mode [ 97.264044][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 97.264148][ T5804] Cannot create hsr debugfs directory [ 97.638687][ T5809] hsr_slave_0: entered promiscuous mode [ 97.639626][ T5809] hsr_slave_1: entered promiscuous mode [ 97.640269][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 97.640289][ T5809] Cannot create hsr debugfs directory [ 97.650936][ T5807] hsr_slave_0: entered promiscuous mode [ 97.653057][ T5807] hsr_slave_1: entered promiscuous mode [ 97.654116][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 97.654139][ T5807] Cannot create hsr debugfs directory [ 98.028279][ T5820] hsr_slave_0: entered promiscuous mode [ 98.029420][ T5820] hsr_slave_1: entered promiscuous mode [ 98.030098][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 98.030119][ T5820] Cannot create hsr debugfs directory [ 99.073866][ T5814] Bluetooth: hci1: command tx timeout [ 99.152042][ T5814] Bluetooth: hci2: command tx timeout [ 99.152051][ T5123] Bluetooth: hci0: command tx timeout [ 99.241914][ T5123] Bluetooth: hci3: command tx timeout [ 99.311978][ T5123] Bluetooth: hci4: command tx timeout [ 99.368459][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.410317][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.445931][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.514683][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.606540][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.643453][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.679879][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.734546][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.886490][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.931414][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.966785][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.007229][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.147782][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.188780][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.221379][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.276874][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.400091][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.445729][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.486652][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.535008][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.571108][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.641445][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.689944][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.690603][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.731407][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.750348][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.750621][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.836988][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.841149][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.890193][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.890356][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.938152][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.938289][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.976936][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.021646][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.024310][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.056124][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.093674][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.093767][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.223250][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.266536][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.280136][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.280373][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.346412][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.346507][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.418074][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.478271][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.478511][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.534443][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.534674][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.575443][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.913264][ T5808] veth0_vlan: entered promiscuous mode [ 101.920451][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.988013][ T5808] veth1_vlan: entered promiscuous mode [ 102.198623][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.241971][ T5804] veth0_vlan: entered promiscuous mode [ 102.244171][ T5808] veth0_macvtap: entered promiscuous mode [ 102.304929][ T5808] veth1_macvtap: entered promiscuous mode [ 102.339964][ T5804] veth1_vlan: entered promiscuous mode [ 102.395705][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.414265][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.483378][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.547408][ T3568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.560648][ T3568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.584071][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.591191][ T3568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.591437][ T5809] veth0_vlan: entered promiscuous mode [ 102.606753][ T3568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.621673][ T5804] veth0_macvtap: entered promiscuous mode [ 102.712284][ T5804] veth1_macvtap: entered promiscuous mode [ 102.740832][ T5809] veth1_vlan: entered promiscuous mode [ 102.909977][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.988644][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.013123][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.013145][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.055424][ T1469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.080899][ T1469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.107620][ T1469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.107906][ T5820] veth0_vlan: entered promiscuous mode [ 103.116308][ T1469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.139909][ T5809] veth0_macvtap: entered promiscuous mode [ 103.150518][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.150542][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.216985][ T5809] veth1_macvtap: entered promiscuous mode [ 103.219205][ T5820] veth1_vlan: entered promiscuous mode [ 103.285639][ T5807] veth0_vlan: entered promiscuous mode [ 103.403976][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.407904][ T5807] veth1_vlan: entered promiscuous mode [ 103.459418][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.489300][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.489322][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.536217][ T1469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.561588][ T1469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.614176][ T1469] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.682316][ T1469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.792018][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.792042][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.796982][ T5820] veth0_macvtap: entered promiscuous mode [ 104.666526][ T5820] veth1_macvtap: entered promiscuous mode [ 104.792358][ T5807] veth0_macvtap: entered promiscuous mode [ 104.953660][ T5807] veth1_macvtap: entered promiscuous mode [ 104.986997][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.021012][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.057284][ T1009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.059873][ T1009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.061602][ T1009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.100161][ T1009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.115545][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.183107][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.582036][ T5936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.608872][ T3568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.439336][ T5943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.482591][ T3568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.539654][ T1200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.539677][ T1200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.653781][ T3568] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.660323][ T3568] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.759708][ T5949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.909423][ T1200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.909440][ T1200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.122063][ T1469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.122085][ T1469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.124695][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.176988][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.327159][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.327197][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.327240][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 109.327263][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.344251][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.344288][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.344330][ T31] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 109.344354][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.411882][ T31] usb 4-1: config 0 descriptor?? [ 109.426236][ T9] usb 1-1: config 0 descriptor?? [ 109.685231][ T5957] faux_driver vgem: [drm] Unknown color mode 511; guessing buffer size. [ 112.476720][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.476804][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.482351][ T5814] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 112.482378][ T5814] CPU: 1 UID: 0 PID: 5814 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.482404][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.482417][ T5814] Workqueue: hci2 hci_rx_work [ 112.482456][ T5814] Call Trace: [ 112.482465][ T5814] [ 112.482473][ T5814] dump_stack_lvl+0x189/0x250 [ 112.482506][ T5814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.482531][ T5814] ? __pfx__printk+0x10/0x10 [ 112.482556][ T5814] ? kernfs_path_from_node+0x2c/0x280 [ 112.482579][ T5814] ? kernfs_path_from_node+0x243/0x280 [ 112.482601][ T5814] ? kernfs_path_from_node+0x2c/0x280 [ 112.482627][ T5814] sysfs_create_dir_ns+0x259/0x280 [ 112.482650][ T5814] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 112.482676][ T5814] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 112.482703][ T5814] ? rt_spin_unlock+0x161/0x200 [ 112.482730][ T5814] kobject_add_internal+0x6ae/0xca0 [ 112.482773][ T5814] kobject_add+0x155/0x220 [ 112.482799][ T5814] ? __pfx_kobject_add+0x10/0x10 [ 112.482826][ T5814] ? get_device_parent+0x370/0x3a0 [ 112.482861][ T5814] device_add+0x408/0xb50 [ 112.482897][ T5814] hci_conn_add_sysfs+0xd5/0x1e0 [ 112.482932][ T5814] le_conn_complete_evt+0xf1d/0x1420 [ 112.482957][ T5814] ? lockdep_hardirqs_on+0x98/0x140 [ 112.482994][ T5814] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 112.483015][ T5814] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 112.483044][ T5814] ? lockdep_hardirqs_on+0x98/0x140 [ 112.483076][ T5814] ? skb_pull_data+0xfb/0x200 [ 112.483108][ T5814] hci_le_enh_conn_complete_evt+0x189/0x470 [ 112.483134][ T5814] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 112.483163][ T5814] hci_event_packet+0x78f/0x1200 [ 112.483197][ T5814] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 112.483223][ T5814] ? __pfx_hci_event_packet+0x10/0x10 [ 112.483264][ T5814] ? hci_send_to_monitor+0xe2/0x570 [ 112.483292][ T5814] hci_rx_work+0x42b/0xf20 [ 112.483332][ T5814] ? process_scheduled_works+0x9ef/0x1770 [ 112.483357][ T5814] process_scheduled_works+0xad1/0x1770 [ 112.483412][ T5814] ? __pfx_process_scheduled_works+0x10/0x10 [ 112.483453][ T5814] worker_thread+0x8a0/0xda0 [ 112.483505][ T5814] kthread+0x711/0x8a0 [ 112.483539][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 112.483561][ T5814] ? __pfx_kthread+0x10/0x10 [ 112.483586][ T5814] ? rt_spin_unlock+0x150/0x200 [ 112.483616][ T5814] ? rt_spin_unlock+0x161/0x200 [ 112.483637][ T5814] ? __pfx_kthread+0x10/0x10 [ 112.483665][ T5814] ret_from_fork+0x599/0xb30 [ 112.483690][ T5814] ? __pfx_ret_from_fork+0x10/0x10 [ 112.483724][ T5814] ? __switch_to_asm+0x39/0x70 [ 112.483751][ T5814] ? __switch_to_asm+0x33/0x70 [ 112.483787][ T5814] ? __pfx_kthread+0x10/0x10 [ 112.483816][ T5814] ret_from_fork_asm+0x1a/0x30 [ 112.483863][ T5814] [ 112.483899][ T5814] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 112.483945][ T5814] Bluetooth: hci2: failed to register connection device [ 112.904495][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 112.904655][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 112.940868][ T31] usb 4-1: USB disconnect, device number 2 [ 113.174377][ T1469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.174400][ T1469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.284022][ T5960] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.284508][ T5960] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.420198][ T5960] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.825118][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.825142][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.866607][ T5960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.866784][ T5960] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.108214][ T5960] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.205675][ T5960] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.205780][ T5960] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.271741][ T5960] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.312005][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.410583][ T5960] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.487376][ T5960] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.487477][ T5960] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.624662][ T5960] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.443026][ T9] usbhid 1-1:0.0: can't add hid device: -32 [ 116.522245][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 116.913998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.915996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.916992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.919998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.920945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.921002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.382639][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.383842][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.414413][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.564520][ T5123] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.683158][ T5960] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 117.683323][ T5960] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 117.796820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 117.797180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 117.863084][ T5960] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 118.346717][ T31] usb 1-1: USB disconnect, device number 2 [ 119.530049][ T5123] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.530099][ T5123] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.530124][ T5123] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.634048][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.968598][ T5890] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.971541][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 121.562757][ T5123] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.562813][ T5123] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.616220][ T5890] usb 5-1: device descriptor read/all, error -71 [ 121.659545][ T5998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.712511][ T5811] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.411648][ T6021] blktrace: Concurrent blktraces are not allowed on loop2 [ 123.158327][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.992419][ T5811] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.596092][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.834746][ T6045] bridge0: entered promiscuous mode [ 126.981125][ T6029] bridge0: left promiscuous mode [ 127.422472][ T6051] overlayfs: missing 'workdir' [ 127.874589][ T5962] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 128.272129][ T5962] usb 3-1: Using ep0 maxpacket: 32 [ 129.369183][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.369218][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.369257][ T5962] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.369276][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.477346][ T6068] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET) [ 129.895201][ T5962] usb 3-1: config 0 descriptor?? [ 129.902065][ T5962] hub 3-1:0.0: USB hub found [ 133.098886][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.098991][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.177589][ T5962] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 133.417910][ T5962] usbhid 3-1:0.0: can't add hid device: -71 [ 133.418047][ T5962] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 133.459241][ T5962] usb 3-1: USB disconnect, device number 2 [ 133.784376][ T6083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.501918][ T6081] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.662040][ T6093] ntfs3(loop2): try to read out of volume at offset 0x0 [ 134.780407][ T6081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.780442][ T6081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.780484][ T6081] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 134.780506][ T6081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.831633][ T6081] usb 2-1: config 0 descriptor?? [ 134.941726][ T6096] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 135.834171][ T6095] overlayfs: missing 'lowerdir' [ 137.405345][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 139.060475][ T6099] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.061384][ T6099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.061817][ T6099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.062254][ T6099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.062439][ T6099] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 139.154303][ T6099] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.455107][ T6081] usbhid 2-1:0.0: can't add hid device: -32 [ 140.455279][ T6081] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 140.742808][ T6126] syzkaller1: entered promiscuous mode [ 140.742836][ T6126] syzkaller1: entered allmulticast mode [ 140.810490][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.876494][ T5962] usb 2-1: USB disconnect, device number 2 [ 141.071894][ T5123] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.071959][ T5811] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.072097][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.590720][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 142.331213][ T6142] blktrace: Concurrent blktraces are not allowed on loop2 [ 142.965065][ T6012] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.201964][ T6012] usb 3-1: Using ep0 maxpacket: 8 [ 143.206123][ T6012] usb 3-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 143.206154][ T6012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.269410][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.771450][ T6149] overlayfs: missing 'lowerdir' [ 144.037450][ T6012] usb 3-1: config 0 descriptor?? [ 144.218782][ T6012] usb 3-1: can't set config #0, error -71 [ 144.227334][ T6012] usb 3-1: USB disconnect, device number 3 [ 144.238316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 144.238770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 145.904269][ T6159] syzkaller1: entered promiscuous mode [ 145.904297][ T6159] syzkaller1: entered allmulticast mode [ 147.790167][ T6182] Device name not specified. [ 147.790167][ T6182] [ 148.001218][ T70] Bluetooth: (null): Invalid header checksum [ 148.119637][ T5971] Bluetooth: (null): Invalid header checksum [ 148.225108][ T3507] Bluetooth: (null): Invalid header checksum [ 148.334258][ T5971] Bluetooth: (null): Invalid header checksum [ 148.445274][ T141] Bluetooth: (null): Invalid header checksum [ 148.456850][ T6180] syzkaller1: entered promiscuous mode [ 148.456875][ T6180] syzkaller1: entered allmulticast mode [ 148.804876][ T6193] ntfs3(loop3): try to read out of volume at offset 0x0 [ 150.555434][ T6200] overlayfs: missing 'lowerdir' [ 150.581850][ T6022] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 150.731856][ T6022] usb 2-1: Using ep0 maxpacket: 8 [ 150.748365][ T6022] usb 2-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 150.748398][ T6022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.043822][ T6022] usb 2-1: config 0 descriptor?? [ 151.435029][ T6022] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 151.950781][ T5962] usb 2-1: USB disconnect, device number 3 [ 157.093280][ T6251] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 157.093350][ T6251] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 165.723050][ T6329] ntfs3(loop0): try to read out of volume at offset 0x0 [ 165.741823][ T6013] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 165.944242][ T6013] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 165.944273][ T6013] usb 2-1: config 0 has no interface number 0 [ 165.944327][ T6013] usb 2-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 165.944353][ T6013] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 165.953979][ T6013] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 165.954012][ T6013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.954032][ T6013] usb 2-1: Product: syz [ 165.954047][ T6013] usb 2-1: Manufacturer: syz [ 165.954061][ T6013] usb 2-1: SerialNumber: syz [ 165.965135][ T6013] usb 2-1: config 0 descriptor?? [ 166.786028][ T6013] usb 2-1: USB disconnect, device number 4 [ 168.759431][ T5868] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 168.975427][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.975464][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.975505][ T5868] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 168.975529][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.037196][ T5868] usb 4-1: config 0 descriptor?? [ 169.532538][ T5868] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 169.532587][ T5868] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 169.532615][ T5868] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 169.532653][ T5868] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 169.533603][ T5868] steelseries 0003:1038:1410.0001: missing HID_OUTPUT_REPORT 0 [ 169.824624][ T194] usb 4-1: USB disconnect, device number 3 [ 170.126010][ T6358] overlayfs: missing 'lowerdir' [ 176.982359][ T6022] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 177.352191][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 177.531814][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 177.562830][ T31] usb 5-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 177.562865][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.562886][ T31] usb 5-1: Product: syz [ 177.562901][ T31] usb 5-1: Manufacturer: syz [ 177.562916][ T31] usb 5-1: SerialNumber: syz [ 177.615491][ T31] usb 5-1: config 0 descriptor?? [ 177.685092][ T31] usb 5-1: bad CDC descriptors [ 179.030135][ T194] usb 5-1: USB disconnect, device number 4 [ 179.439482][ T6410] ntfs3(loop2): try to read out of volume at offset 0x0 [ 179.512115][ T194] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 179.732057][ T194] usb 1-1: Using ep0 maxpacket: 32 [ 180.453399][ T194] usb 1-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 180.453431][ T194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.453452][ T194] usb 1-1: Product: syz [ 180.453467][ T194] usb 1-1: Manufacturer: syz [ 180.453481][ T194] usb 1-1: SerialNumber: syz [ 180.487563][ T194] usb 1-1: config 0 descriptor?? [ 180.536707][ T194] usb 1-1: bad CDC descriptors [ 183.297379][ T5897] usb 1-1: USB disconnect, device number 3 [ 186.627708][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 186.629679][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 186.643415][ T6431] ceph: No mds server is up or the cluster is laggy [ 187.099517][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 188.010027][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 188.862742][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 188.862964][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 188.884917][ T6445] block device autoloading is deprecated and will be removed. [ 195.833704][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.833786][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 210.026322][ T6504] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 210.164010][ T6504] usb 2-1: device descriptor read/64, error -71 [ 210.291889][ T6484] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 210.311773][ T6081] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 210.411778][ T6504] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 210.441782][ T6484] usb 1-1: Using ep0 maxpacket: 32 [ 210.444575][ T6484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.444610][ T6484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.444652][ T6484] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.444674][ T6484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.473077][ T6484] usb 1-1: config 0 descriptor?? [ 210.499150][ T6484] hub 1-1:0.0: USB hub found [ 210.513076][ T6081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.513106][ T6081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.513140][ T6081] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 210.513158][ T6081] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.564581][ T6081] usb 5-1: config 0 descriptor?? [ 210.579851][ T6504] usb 2-1: device descriptor read/64, error -71 [ 210.694139][ T6504] usb usb2-port1: attempt power cycle [ 210.722656][ T6484] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 211.132265][ T6484] usbhid 1-1:0.0: can't add hid device: -71 [ 211.132405][ T6484] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 211.211951][ T6504] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 211.233435][ T6504] usb 2-1: device descriptor read/8, error -71 [ 211.243455][ T6484] usb 1-1: USB disconnect, device number 4 [ 211.491952][ T6504] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 211.514438][ T6504] usb 2-1: device descriptor read/8, error -71 [ 211.625299][ T6504] usb usb2-port1: unable to enumerate USB device [ 212.967115][ T6575] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.981496][ T6575] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.987354][ T6575] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 213.153903][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 213.291133][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.392708][ T6575] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 213.393036][ T6575] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 213.393338][ T6575] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 213.683693][ T5876] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 213.804579][ T6081] usbhid 5-1:0.0: can't add hid device: -71 [ 213.804716][ T6081] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 213.840278][ T6081] usb 5-1: USB disconnect, device number 5 [ 215.037461][ T5876] usb 3-1: device descriptor read/all, error -71 [ 215.231762][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 215.483503][ T5123] Bluetooth: hci4: command 0x0c1a tx timeout [ 215.483652][ T5811] Bluetooth: hci3: command 0x0c1a tx timeout [ 215.483792][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.312319][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 220.766681][ T6638] TCP: TCP_TX_DELAY enabled [ 222.301869][ T6484] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 222.461830][ T6484] usb 3-1: device descriptor read/64, error -71 [ 223.771879][ T6484] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 224.339911][ T6662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.716732][ T6670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.030436][ T6484] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 228.272312][ T6484] usb 3-1: Using ep0 maxpacket: 32 [ 228.347319][ T6484] usb 3-1: device descriptor read/all, error -71 [ 229.521824][ T6504] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 230.666166][ T5814] Bluetooth: hci1: unexpected event for opcode 0xfff2 [ 232.564028][ T5875] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 239.503034][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 244.502200][ T6779] ntfs3(loop1): try to read out of volume at offset 0x0 [ 245.371815][ T6754] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 245.521831][ T6754] usb 4-1: Using ep0 maxpacket: 32 [ 245.661818][ T5962] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 245.832518][ T6754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.832542][ T6754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.832568][ T6754] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 245.832581][ T6754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.846971][ T5962] usb 2-1: device descriptor read/64, error -71 [ 246.631994][ T6754] usb 4-1: config 0 descriptor?? [ 246.640928][ T6754] hub 4-1:0.0: USB hub found [ 246.782255][ T5962] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 246.914324][ T5962] usb 2-1: device descriptor read/64, error -71 [ 247.024510][ T5962] usb usb2-port1: attempt power cycle [ 247.115289][ T6754] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 247.343230][ T6754] usbhid 4-1:0.0: can't add hid device: -71 [ 247.343372][ T6754] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 247.387440][ T6754] usb 4-1: USB disconnect, device number 5 [ 247.404691][ T5962] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 247.422788][ T5962] usb 2-1: device descriptor read/8, error -71 [ 247.675448][ T5962] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 247.697744][ T5962] usb 2-1: device descriptor read/8, error -71 [ 248.491575][ T5962] usb usb2-port1: unable to enumerate USB device [ 248.537756][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.741978][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.744820][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.749178][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.750177][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.258901][ T6811] bridge0: entered promiscuous mode [ 249.746261][ T6804] bridge0: left promiscuous mode [ 250.126244][ T5918] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 250.322841][ T5854] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 250.421871][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 250.425529][ T5918] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 250.425558][ T5918] usb 2-1: config 0 has no interface number 0 [ 250.425608][ T5918] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 250.425632][ T5918] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 250.425657][ T5918] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 250.425682][ T5918] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 250.425726][ T5918] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 250.425748][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.481804][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 250.483959][ T5854] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 250.483986][ T5854] usb 1-1: config 0 has no interface number 0 [ 250.484033][ T5854] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 250.484056][ T5854] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 250.484080][ T5854] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 250.484104][ T5854] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 250.484147][ T5854] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 250.484168][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.643236][ T5918] usb 2-1: config 0 descriptor?? [ 250.875230][ T5814] Bluetooth: hci5: command tx timeout [ 250.930260][ T5854] usb 1-1: config 0 descriptor?? [ 251.750101][ T5854] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 251.766094][ T5918] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 251.942240][ T5875] usb 1-1: USB disconnect, device number 6 [ 252.001038][ T5918] usb 2-1: USB disconnect, device number 14 [ 252.030282][ T5918] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 252.056775][ T5875] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 252.490280][ T6827] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.381674][ T5814] Bluetooth: hci5: command tx timeout [ 256.780333][ T5814] Bluetooth: hci5: command tx timeout [ 256.786277][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.786360][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.917595][ T5875] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 257.061905][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 257.066862][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.066894][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.066934][ T5875] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 257.066955][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.076881][ T5875] usb 5-1: config 0 descriptor?? [ 257.101506][ T5875] hub 5-1:0.0: USB hub found [ 257.232320][ T1056] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 257.381760][ T1056] usb 1-1: device descriptor read/64, error -71 [ 257.398607][ T5875] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 257.412812][ T5875] usbhid 5-1:0.0: can't add hid device: -71 [ 257.412947][ T5875] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 257.463771][ T5875] usb 5-1: USB disconnect, device number 6 [ 257.605426][ T6797] chnl_net:caif_netlink_parms(): no params data found [ 257.641791][ T1056] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 258.062668][ T5918] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 258.305420][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 258.371904][ T1056] usb 1-1: device descriptor read/64, error -71 [ 258.638171][ T1056] usb usb1-port1: attempt power cycle [ 258.861832][ T5814] Bluetooth: hci5: command tx timeout [ 258.893180][ T5918] usb 2-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 258.893212][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.893232][ T5918] usb 2-1: Product: syz [ 258.893245][ T5918] usb 2-1: Manufacturer: syz [ 258.893258][ T5918] usb 2-1: SerialNumber: syz [ 258.966509][ T5918] usb 2-1: config 0 descriptor?? [ 258.977544][ T5918] usb 2-1: bad CDC descriptors [ 258.979668][ T168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.430654][ T1056] usb 2-1: USB disconnect, device number 15 [ 261.477084][ T168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.750691][ T168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.011928][ T5854] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 264.135111][ T168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.176509][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 264.180635][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.180656][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.180681][ T5854] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 264.180694][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.238682][ T5854] usb 2-1: config 0 descriptor?? [ 264.292479][ T5854] hub 2-1:0.0: USB hub found [ 264.467450][ T6797] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.469450][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.469730][ T6797] bridge_slave_0: entered allmulticast mode [ 264.496250][ T6797] bridge_slave_0: entered promiscuous mode [ 264.508563][ T5876] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 264.560372][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.581488][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.585552][ T6797] bridge_slave_1: entered allmulticast mode [ 264.625300][ T6797] bridge_slave_1: entered promiscuous mode [ 264.665728][ T5854] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 264.687683][ T5876] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 264.687713][ T5876] usb 5-1: config 0 has no interface number 0 [ 264.687765][ T5876] usb 5-1: config 0 interface 49 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 264.722630][ T5876] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 264.722658][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.722674][ T5876] usb 5-1: Product: syz [ 264.722686][ T5876] usb 5-1: Manufacturer: syz [ 264.722696][ T5876] usb 5-1: SerialNumber: syz [ 264.812555][ T5876] usb 5-1: config 0 descriptor?? [ 264.885606][ T5854] usbhid 2-1:0.0: can't add hid device: -71 [ 264.885748][ T5854] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 264.912113][ T5875] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 264.934325][ T5854] usb 2-1: USB disconnect, device number 16 [ 265.028845][ T5876] qmi_wwan 5-1:0.49: probe with driver qmi_wwan failed with error -22 [ 265.043596][ T5875] usb 4-1: device descriptor read/64, error -71 [ 265.092796][ T5876] usb 5-1: USB disconnect, device number 7 [ 265.260688][ T6797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.282217][ T5875] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 265.289044][ T6797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.411889][ T5875] usb 4-1: device descriptor read/64, error -71 [ 265.511900][ T1056] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 265.522965][ T5875] usb usb4-port1: attempt power cycle [ 265.540244][ T6797] team0: Port device team_slave_0 added [ 265.564387][ T6797] team0: Port device team_slave_1 added [ 265.828926][ T1056] usb 1-1: Using ep0 maxpacket: 32 [ 265.852677][ T1056] usb 1-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 265.852710][ T1056] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.852730][ T1056] usb 1-1: Product: syz [ 265.852744][ T1056] usb 1-1: Manufacturer: syz [ 265.852759][ T1056] usb 1-1: SerialNumber: syz [ 265.873093][ T1056] usb 1-1: config 0 descriptor?? [ 266.725246][ T1056] usb 1-1: bad CDC descriptors [ 266.731101][ T5875] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 266.731263][ T5876] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 266.757542][ T5875] usb 4-1: device descriptor read/8, error -71 [ 266.885237][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.885270][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.885311][ T5876] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 266.885333][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.889488][ T5876] usb 2-1: config 0 descriptor?? [ 266.981689][ T168] bridge_slave_1: left allmulticast mode [ 266.981866][ T168] bridge_slave_1: left promiscuous mode [ 266.982887][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.031822][ T5875] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 267.053476][ T5875] usb 4-1: device descriptor read/8, error -71 [ 267.173193][ T5875] usb usb4-port1: unable to enumerate USB device [ 267.434419][ T168] bridge_slave_0: left allmulticast mode [ 267.441600][ T168] bridge_slave_0: left promiscuous mode [ 267.463063][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.453459][ T5890] usb 1-1: USB disconnect, device number 10 [ 269.882880][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.942376][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.986830][ T168] bond0 (unregistering): Released all slaves [ 270.025118][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.025128][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.025141][ T6797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.180948][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.180961][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.180974][ T6797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.252316][ T6906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 270.377772][ T6906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.378866][ T6906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.448556][ T6906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.448763][ T6906] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 270.617651][ T6906] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 270.617788][ T6906] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 270.687593][ T6906] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 271.012709][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 271.092809][ T5876] usbhid 2-1:0.0: can't add hid device: -71 [ 271.092968][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 271.177496][ T5876] usb 2-1: USB disconnect, device number 17 [ 271.181856][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 271.193629][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.193689][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 271.193709][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.197258][ T44] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 271.197284][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.197301][ T44] usb 1-1: Product: syz [ 271.197314][ T44] usb 1-1: Manufacturer: syz [ 271.197326][ T44] usb 1-1: SerialNumber: syz [ 271.311407][ T44] usb 1-1: config 0 descriptor?? [ 272.324788][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 272.536952][ T5123] Bluetooth: hci3: command 0x0c1a tx timeout [ 272.541428][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 272.541495][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout [ 272.688727][ T5811] Bluetooth: hci5: command 0x0c1a tx timeout [ 272.714563][ T44] peak_usb 1-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 272.714595][ T44] peak_usb 1-1:0.0: unable to read PCAN-USB serial number (err -8) [ 274.591793][ T5811] Bluetooth: hci3: command 0x0c1a tx timeout [ 274.751837][ T5811] Bluetooth: hci5: command 0x0c1a tx timeout [ 274.758070][ T44] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -8 [ 274.811993][ T44] usb 1-1: USB disconnect, device number 11 [ 274.947970][ T5876] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 275.154220][ T5876] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 275.154251][ T5876] usb 4-1: config 0 has no interface number 0 [ 275.154308][ T5876] usb 4-1: config 0 interface 49 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 275.172624][ T5876] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 275.172653][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.172671][ T5876] usb 4-1: Product: syz [ 275.172685][ T5876] usb 4-1: Manufacturer: syz [ 275.172698][ T5876] usb 4-1: SerialNumber: syz [ 275.249211][ T5876] usb 4-1: config 0 descriptor?? [ 275.475782][ T5876] qmi_wwan 4-1:0.49: probe with driver qmi_wwan failed with error -22 [ 275.660241][ T5876] usb 4-1: USB disconnect, device number 10 [ 275.832071][ T44] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 276.336045][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.336068][ T44] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 276.382144][ T44] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 276.382219][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.382284][ T44] usb 1-1: Product: syz [ 276.382300][ T44] usb 1-1: Manufacturer: syz [ 276.382361][ T44] usb 1-1: SerialNumber: syz [ 276.395690][ T44] usb 1-1: config 0 descriptor?? [ 276.610209][ T5962] usb 1-1: USB disconnect, device number 12 [ 276.719672][ T6797] hsr_slave_0: entered promiscuous mode [ 276.738105][ T6797] hsr_slave_1: entered promiscuous mode [ 276.738724][ T6797] debugfs: 'hsr0' already exists in 'hsr' [ 276.738741][ T6797] Cannot create hsr debugfs directory [ 276.832117][ T5811] Bluetooth: hci5: command 0x0c1a tx timeout [ 277.001755][ T5876] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 277.031140][ T168] hsr_slave_0: left promiscuous mode [ 277.237497][ T168] hsr_slave_1: left promiscuous mode [ 277.240715][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.240800][ T168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.261700][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 277.270919][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.270958][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 277.270971][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.346437][ T5876] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 277.346469][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.346488][ T5876] usb 4-1: Product: syz [ 277.346501][ T5876] usb 4-1: Manufacturer: syz [ 277.346515][ T5876] usb 4-1: SerialNumber: syz [ 277.391124][ T5876] usb 4-1: config 0 descriptor?? [ 277.430923][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.431150][ T168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.674681][ T5811] Bluetooth: hci2: unexpected event for opcode 0xff62 [ 279.361420][ T168] veth1_macvtap: left promiscuous mode [ 279.363478][ T168] veth0_macvtap: left promiscuous mode [ 279.378278][ T168] veth1_vlan: left promiscuous mode [ 279.378942][ T168] veth0_vlan: left promiscuous mode [ 281.069886][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 281.722906][ T5811] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 281.723095][ T5811] Bluetooth: hci2: Injecting HCI hardware error event [ 281.725624][ T5811] Bluetooth: hci2: hardware error 0x00 [ 282.430499][ T6012] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 282.631788][ T6012] usb 5-1: Using ep0 maxpacket: 16 [ 282.635745][ T6012] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.635799][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 282.635812][ T6012] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.638377][ T6012] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 282.638395][ T6012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.638406][ T6012] usb 5-1: Product: syz [ 282.638415][ T6012] usb 5-1: Manufacturer: syz [ 282.638423][ T6012] usb 5-1: SerialNumber: syz [ 282.720867][ T6012] usb 5-1: config 0 descriptor?? [ 387.931588][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 387.931610][ C1] rcu: 1-...!: (10499 ticks this GP) idle=28cc/1/0x4000000000000000 softirq=0/0 fqs=0 rcuc=10499 jiffies(starved) [ 387.931634][ C1] rcu: (t=10500 jiffies g=15729 q=99 ncpus=2) [ 387.931646][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g15729 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 387.931662][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=13050 [ 387.931671][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g15729 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 387.931686][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 387.931694][ C1] rcu: RCU grace-period kthread stack dump: [ 387.931700][ C1] task:rcu_preempt state:I stack:27160 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 387.931749][ C1] Call Trace: [ 387.931756][ C1] [ 387.931767][ C1] __schedule+0x1480/0x50a0 [ 387.931815][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 387.931837][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 387.931859][ C1] ? __pfx___schedule+0x10/0x10 [ 387.931888][ C1] ? schedule+0x91/0x360 [ 387.931910][ C1] schedule+0x165/0x360 [ 387.931931][ C1] schedule_timeout+0x12b/0x270 [ 387.931950][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 387.931970][ C1] ? __pfx_process_timeout+0x10/0x10 [ 387.932060][ C1] ? prepare_to_swait_event+0x341/0x380 [ 387.932091][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 387.932116][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 387.932134][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 387.932153][ C1] ? finish_swait+0xcd/0x1f0 [ 387.932169][ C1] rcu_gp_kthread+0x99/0x390 [ 387.932186][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 387.932202][ C1] ? __kthread_parkme+0x7b/0x200 [ 387.932216][ C1] ? __kthread_parkme+0x1a1/0x200 [ 387.932233][ C1] kthread+0x711/0x8a0 [ 387.932251][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 387.932274][ C1] ? __pfx_kthread+0x10/0x10 [ 387.932288][ C1] ? rt_spin_unlock+0x150/0x200 [ 387.932305][ C1] ? rt_spin_unlock+0x161/0x200 [ 387.932316][ C1] ? __pfx_kthread+0x10/0x10 [ 387.932332][ C1] ret_from_fork+0x599/0xb30 [ 387.932347][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 387.932365][ C1] ? __switch_to_asm+0x39/0x70 [ 387.932380][ C1] ? __switch_to_asm+0x33/0x70 [ 387.932394][ C1] ? __pfx_kthread+0x10/0x10 [ 387.932409][ C1] ret_from_fork_asm+0x1a/0x30 [ 387.932435][ C1] [ 387.932440][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 387.932446][ C1] Sending NMI from CPU 1 to CPUs 0: [ 387.932470][ C0] NMI backtrace for cpu 0 [ 387.932485][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.932503][ C0] Tainted: [L]=SOFTLOCKUP [ 387.932507][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.932514][ C0] RIP: 0010:mm_get_cid+0xc7/0x130 [ 387.932530][ C0] Code: 00 00 80 eb 07 44 89 f0 f7 d8 71 d4 f3 90 43 0f b6 44 25 00 84 c0 75 41 44 8b 3d 0c 67 6e 0b 48 89 df 4c 89 fe e8 89 d8 e7 02 <41> be 00 00 00 80 41 39 c7 76 d0 41 89 c7 89 c1 c1 e9 06 48 8d 3c [ 387.932540][ C0] RSP: 0018:ffffc90000197a28 EFLAGS: 00000046 [ 387.932552][ C0] RAX: 0000000000000002 RBX: ffff88803b2e7ed0 RCX: 1ffff11004e1e67c [ 387.932561][ C0] RDX: 0000000000000002 RSI: 0000000000000002 RDI: ffff88803b2e7ed0 [ 387.932569][ C0] RBP: 0000000080000000 R08: 0000000000000000 R09: 0000000000000000 [ 387.932577][ C0] R10: dffffc0000000000 R11: ffffed100765cfab R12: dffffc0000000000 [ 387.932587][ C0] R13: 1ffffffff1a01299 R14: 0000000080000000 R15: 0000000000000002 [ 387.932595][ C0] FS: 0000000000000000(0000) GS:ffff888126d5b000(0000) knlGS:0000000000000000 [ 387.932606][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.932614][ C0] CR2: 00007f422985b338 CR3: 00000000357c0000 CR4: 00000000003526f0 [ 387.932627][ C0] Call Trace: [ 387.932633][ C0] [ 387.932640][ C0] __schedule+0x2153/0x50a0 [ 387.932667][ C0] ? __pfx___schedule+0x10/0x10 [ 387.932687][ C0] ? schedule+0x91/0x360 [ 387.932703][ C0] schedule+0x165/0x360 [ 387.932719][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 387.932733][ C0] smpboot_thread_fn+0x5bd/0xa60 [ 387.932749][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 387.932766][ C0] kthread+0x711/0x8a0 [ 387.932784][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 387.932798][ C0] ? __pfx_kthread+0x10/0x10 [ 387.932813][ C0] ? rt_spin_unlock+0x150/0x200 [ 387.932829][ C0] ? rt_spin_unlock+0x161/0x200 [ 387.932843][ C0] ? __pfx_kthread+0x10/0x10 [ 387.932863][ C0] ret_from_fork+0x599/0xb30 [ 387.932881][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 387.932901][ C0] ? __switch_to_asm+0x39/0x70 [ 387.932921][ C0] ? __switch_to_asm+0x33/0x70 [ 387.932941][ C0] ? __pfx_kthread+0x10/0x10 [ 387.932962][ C0] ret_from_fork_asm+0x1a/0x30 [ 387.932990][ C0] [ 387.933508][ C1] CPU: 1 UID: 0 PID: 1270 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.933531][ C1] Tainted: [L]=SOFTLOCKUP [ 387.933536][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.933545][ C1] Workqueue: events_unbound toggle_allocation_gate [ 387.933567][ C1] RIP: 0010:smp_call_function_many_cond+0xebf/0x12b0 [ 387.933587][ C1] Code: 00 00 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 18 99 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 53 94 0b 00 eb 38 90 42 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 [ 387.933599][ C1] RSP: 0018:ffffc900051b7620 EFLAGS: 00000293 [ 387.933611][ C1] RAX: ffffffff81b47959 RBX: 1ffff11017108af9 RCX: ffff8880270f5ac0 [ 387.933621][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 387.933630][ C1] RBP: ffffc900051b77a0 R08: 0000000000000000 R09: 0000000000000000 [ 387.933639][ C1] R10: dffffc0000000000 R11: fffffbfff1db47ef R12: ffff8880b88457c8 [ 387.933649][ C1] R13: dffffc0000000000 R14: ffff8880b893c780 R15: 0000000000000000 [ 387.933660][ C1] FS: 0000000000000000(0000) GS:ffff888126e5b000(0000) knlGS:0000000000000000 [ 387.933672][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.933691][ C1] CR2: 00007f4227855d58 CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 387.933705][ C1] Call Trace: [ 387.933712][ C1] [ 387.933724][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 387.933754][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 387.933771][ C1] ? perf_event_text_poke+0x13d/0x190 [ 387.933789][ C1] ? kmem_cache_alloc_bulk_noprof+0x8f/0x710 [ 387.933810][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 387.933830][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 387.933849][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 387.933869][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 387.933889][ C1] smp_text_poke_batch_finish+0xb44/0x1130 [ 387.933919][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 387.933947][ C1] ? mutex_lock_nested+0x154/0x1d0 [ 387.933964][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 387.933982][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 387.933996][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 387.934015][ C1] static_key_enable+0x1a/0x20 [ 387.934031][ C1] toggle_allocation_gate+0xad/0x240 [ 387.934050][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 387.934069][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 387.934094][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 387.934110][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 387.934127][ C1] process_scheduled_works+0xad1/0x1770 [ 387.934167][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 387.934198][ C1] worker_thread+0x8a0/0xda0 [ 387.934237][ C1] kthread+0x711/0x8a0 [ 387.934259][ C1] ? __pfx_worker_thread+0x10/0x10 [ 387.934283][ C1] ? __pfx_kthread+0x10/0x10 [ 387.934300][ C1] ? rt_spin_unlock+0x150/0x200 [ 387.934321][ C1] ? rt_spin_unlock+0x161/0x200 [ 387.934337][ C1] ? __pfx_kthread+0x10/0x10 [ 387.934357][ C1] ret_from_fork+0x599/0xb30 [ 387.934375][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 387.934400][ C1] ? __switch_to_asm+0x39/0x70 [ 387.934418][ C1] ? __switch_to_asm+0x33/0x70 [ 387.934436][ C1] ? __pfx_kthread+0x10/0x10 [ 387.934457][ C1] ret_from_fork_asm+0x1a/0x30 [ 387.934490][ C1] [ 530.604838][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [kworker/u8:14:1270] [ 530.604861][ C1] Modules linked in: [ 530.604871][ C1] irq event stamp: 746304 [ 530.604877][ C1] hardirqs last enabled at (746303): [] irqentry_exit+0x5dd/0x660 [ 530.604908][ C1] hardirqs last disabled at (746304): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 530.604931][ C1] softirqs last enabled at (696442): [] __local_bh_enable_ip+0x1b3/0x2e0 [ 530.604950][ C1] softirqs last disabled at (696436): [] ieee80211_ibss_work+0xd1/0x1090 [ 530.604978][ C1] CPU: 1 UID: 0 PID: 1270 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 530.604998][ C1] Tainted: [L]=SOFTLOCKUP [ 530.605003][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.605013][ C1] Workqueue: events_unbound toggle_allocation_gate [ 530.605032][ C1] RIP: 0010:smp_call_function_many_cond+0xec1/0x12b0 [ 530.605052][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 18 99 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 53 94 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 37 94 [ 530.605064][ C1] RSP: 0018:ffffc900051b7620 EFLAGS: 00000293 [ 530.605076][ C1] RAX: ffffffff81b47959 RBX: 1ffff11017108af9 RCX: ffff8880270f5ac0 [ 530.605086][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 530.605095][ C1] RBP: ffffc900051b77a0 R08: 0000000000000000 R09: 0000000000000000 [ 530.605104][ C1] R10: dffffc0000000000 R11: fffffbfff1db47ef R12: ffff8880b88457c8 [ 530.605115][ C1] R13: dffffc0000000000 R14: ffff8880b893c780 R15: 0000000000000000 [ 530.605125][ C1] FS: 0000000000000000(0000) GS:ffff888126e5b000(0000) knlGS:0000000000000000 [ 530.605136][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.605147][ C1] CR2: 00007f4227855d58 CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 530.605162][ C1] Call Trace: [ 530.605171][ C1] [ 530.605184][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 530.605210][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 530.605226][ C1] ? perf_event_text_poke+0x13d/0x190 [ 530.605243][ C1] ? kmem_cache_alloc_bulk_noprof+0x8f/0x710 [ 530.605263][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 530.605281][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 530.605300][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 530.605318][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 530.605337][ C1] smp_text_poke_batch_finish+0xb44/0x1130 [ 530.605365][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 530.605393][ C1] ? mutex_lock_nested+0x154/0x1d0 [ 530.605409][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 530.605427][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 530.605440][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 530.605458][ C1] static_key_enable+0x1a/0x20 [ 530.605472][ C1] toggle_allocation_gate+0xad/0x240 [ 530.605491][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 530.605510][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 530.605533][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 530.605548][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 530.605565][ C1] process_scheduled_works+0xad1/0x1770 [ 530.605603][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 530.605632][ C1] worker_thread+0x8a0/0xda0 [ 530.605676][ C1] kthread+0x711/0x8a0 [ 530.605699][ C1] ? __pfx_worker_thread+0x10/0x10 [ 530.605715][ C1] ? __pfx_kthread+0x10/0x10 [ 530.605731][ C1] ? rt_spin_unlock+0x150/0x200 [ 530.605752][ C1] ? rt_spin_unlock+0x161/0x200 [ 530.605767][ C1] ? __pfx_kthread+0x10/0x10 [ 530.605787][ C1] ret_from_fork+0x599/0xb30 [ 530.605805][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 530.605830][ C1] ? __switch_to_asm+0x39/0x70 [ 530.605848][ C1] ? __switch_to_asm+0x33/0x70 [ 530.605865][ C1] ? __pfx_kthread+0x10/0x10 [ 530.605885][ C1] ret_from_fork_asm+0x1a/0x30 [ 530.605919][ C1] [ 530.605925][ C1] Sending NMI from CPU 1 to CPUs 0: [ 530.605950][ C0] NMI backtrace for cpu 0 [ 530.605965][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 530.605986][ C0] Tainted: [L]=SOFTLOCKUP [ 530.605991][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.605999][ C0] RIP: 0010:mm_get_cid+0xc7/0x130 [ 530.606019][ C0] Code: 00 00 80 eb 07 44 89 f0 f7 d8 71 d4 f3 90 43 0f b6 44 25 00 84 c0 75 41 44 8b 3d 0c 67 6e 0b 48 89 df 4c 89 fe e8 89 d8 e7 02 <41> be 00 00 00 80 41 39 c7 76 d0 41 89 c7 89 c1 c1 e9 06 48 8d 3c [ 530.606031][ C0] RSP: 0018:ffffc90000197a28 EFLAGS: 00000046 [ 530.606044][ C0] RAX: 0000000000000002 RBX: ffff88803b2e7ed0 RCX: 1ffff11004e1e67c [ 530.606055][ C0] RDX: 0000000000000002 RSI: 0000000000000002 RDI: ffff88803b2e7ed0 [ 530.606066][ C0] RBP: 0000000080000000 R08: 0000000000000000 R09: 0000000000000000 [ 530.606076][ C0] R10: dffffc0000000000 R11: ffffed100765cfab R12: dffffc0000000000 [ 530.606087][ C0] R13: 1ffffffff1a01299 R14: 0000000080000000 R15: 0000000000000002 [ 530.606098][ C0] FS: 0000000000000000(0000) GS:ffff888126d5b000(0000) knlGS:0000000000000000 [ 530.606111][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.606122][ C0] CR2: 00007f422985b338 CR3: 00000000357c0000 CR4: 00000000003526f0 [ 530.606137][ C0] Call Trace: [ 530.606143][ C0] [ 530.606151][ C0] __schedule+0x2153/0x50a0 [ 530.606186][ C0] ? __pfx___schedule+0x10/0x10 [ 530.606212][ C0] ? schedule+0x91/0x360 [ 530.606233][ C0] schedule+0x165/0x360 [ 530.606253][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 530.606272][ C0] smpboot_thread_fn+0x5bd/0xa60 [ 530.606291][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 530.606313][ C0] kthread+0x711/0x8a0 [ 530.606335][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 530.606353][ C0] ? __pfx_kthread+0x10/0x10 [ 530.606372][ C0] ? rt_spin_unlock+0x150/0x200 [ 530.606392][ C0] ? rt_spin_unlock+0x161/0x200 [ 530.606409][ C0] ? __pfx_kthread+0x10/0x10 [ 530.606429][ C0] ret_from_fork+0x599/0xb30 [ 530.606446][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 530.606467][ C0] ? __switch_to_asm+0x39/0x70 [ 530.606486][ C0] ? __switch_to_asm+0x33/0x70 [ 530.606505][ C0] ? __pfx_kthread+0x10/0x10 [ 530.606526][ C0] ret_from_fork_asm+0x1a/0x30 [ 530.606553][ C0] [ 530.606944][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 530.606957][ C1] CPU: 1 UID: 0 PID: 1270 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 530.606976][ C1] Tainted: [L]=SOFTLOCKUP [ 530.606981][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.606989][ C1] Workqueue: events_unbound toggle_allocation_gate [ 530.607007][ C1] Call Trace: [ 530.607014][ C1] [ 530.607020][ C1] dump_stack_lvl+0x99/0x250 [ 530.607038][ C1] ? __asan_memcpy+0x40/0x70 [ 530.607053][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.607071][ C1] ? __pfx__printk+0x10/0x10 [ 530.607096][ C1] vpanic+0x237/0x6d0 [ 530.607115][ C1] ? __pfx_vpanic+0x10/0x10 [ 530.607132][ C1] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 530.607155][ C1] panic+0xb9/0xc0 [ 530.607173][ C1] ? __pfx_panic+0x10/0x10 [ 530.607190][ C1] ? printk_trigger_flush+0x111/0x170 [ 530.607220][ C1] watchdog_timer_fn+0x832/0x840 [ 530.607240][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 530.607258][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 530.607280][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 530.607299][ C1] ? debug_object_deactivate+0x6d/0x360 [ 530.607323][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 530.607339][ C1] __hrtimer_run_queues+0x4f6/0xd00 [ 530.607370][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 530.607384][ C1] ? read_tsc+0x9/0x20 [ 530.607396][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 530.607423][ C1] hrtimer_interrupt+0x45d/0xa90 [ 530.607460][ C1] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 530.607480][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 530.607500][ C1] [ 530.607505][ C1] [ 530.607511][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.607527][ C1] RIP: 0010:smp_call_function_many_cond+0xec1/0x12b0 [ 530.607545][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 18 99 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 53 94 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 37 94 [ 530.607556][ C1] RSP: 0018:ffffc900051b7620 EFLAGS: 00000293 [ 530.607568][ C1] RAX: ffffffff81b47959 RBX: 1ffff11017108af9 RCX: ffff8880270f5ac0 [ 530.607578][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 530.607587][ C1] RBP: ffffc900051b77a0 R08: 0000000000000000 R09: 0000000000000000 [ 530.607596][ C1] R10: dffffc0000000000 R11: fffffbfff1db47ef R12: ffff8880b88457c8 [ 530.607606][ C1] R13: dffffc0000000000 R14: ffff8880b893c780 R15: 0000000000000000 [ 530.607623][ C1] ? smp_call_function_many_cond+0xed9/0x12b0 [ 530.607657][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 530.607682][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 530.607698][ C1] ? perf_event_text_poke+0x13d/0x190 [ 530.607714][ C1] ? kmem_cache_alloc_bulk_noprof+0x8f/0x710 [ 530.607733][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 530.607752][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 530.607771][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 530.607789][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 530.607808][ C1] smp_text_poke_batch_finish+0xb44/0x1130 [ 530.607836][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 530.607863][ C1] ? mutex_lock_nested+0x154/0x1d0 [ 530.607879][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 530.607897][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 530.607911][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 530.607929][ C1] static_key_enable+0x1a/0x20 [ 530.607943][ C1] toggle_allocation_gate+0xad/0x240 [ 530.607961][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 530.607980][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 530.608002][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 530.608018][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 530.608035][ C1] process_scheduled_works+0xad1/0x1770 [ 530.608073][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 530.608102][ C1] worker_thread+0x8a0/0xda0 [ 530.608138][ C1] kthread+0x711/0x8a0 [ 530.608160][ C1] ? __pfx_worker_thread+0x10/0x10 [ 530.608176][ C1] ? __pfx_kthread+0x10/0x10 [ 530.608193][ C1] ? rt_spin_unlock+0x150/0x200 [ 530.608214][ C1] ? rt_spin_unlock+0x161/0x200 [ 530.608229][ C1] ? __pfx_kthread+0x10/0x10 [ 530.608249][ C1] ret_from_fork+0x599/0xb30 [ 530.608267][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 530.608290][ C1] ? __switch_to_asm+0x39/0x70 [ 530.608308][ C1] ? __switch_to_asm+0x33/0x70 [ 530.608326][ C1] ? __pfx_kthread+0x10/0x10 [ 530.608346][ C1] ret_from_fork_asm+0x1a/0x30 [ 530.608378][ C1] [ 531.735178][ C1] Shutting down cpus with NMI [ 531.736058][ C1] Kernel Offset: disabled