last executing test programs: 8.984783668s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) syz_init_net_socket$x25(0x9, 0x5, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xe8c40, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) msgget$private(0x0, 0x1c6) msgsnd(0x0, &(0x7f0000019300)={0x3}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) 7.033100626s ago: executing program 2 (id=6): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r1, 0x1, 0x400000, 0x25dfdbfd, {{0x8}, {@void, @val={0xc, 0x99, {0x1}}}}}, 0x20}}, 0x400c0) ioctl$FIONCLEX(r0, 0x5450) 6.167327729s ago: executing program 3 (id=10): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) 5.5163542s ago: executing program 3 (id=14): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030325bd7000fbdbdf251f00000008000300", @ANYRES32=r2], 0x1c}}, 0x8000) 5.332082777s ago: executing program 0 (id=15): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000600)={'pcmmio\x00', [0x2002, 0x2f, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0xfffffffe, 0x5, 0xfffffff7, 0x400001, 0x6, 0x6, 0x0, 0x7f, 0x3, 0x40000003, 0x200086, 0x4, 0x3ff, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) 5.198681821s ago: executing program 3 (id=17): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000000bf80)={0x0, 0x0, 0x0}, &(0x7f000000bfc0)=0xc) setresgid(0x0, r1, r1) 5.184493118s ago: executing program 0 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 5.01138865s ago: executing program 3 (id=19): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.009348364s ago: executing program 0 (id=21): r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) write(r0, &(0x7f0000000700)='0', 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 4.882422127s ago: executing program 3 (id=22): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000008c0)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000900)={0xa0000001}) 4.881871848s ago: executing program 1 (id=23): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000640)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000680)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x4000000) sendmmsg$sock(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f00000001c0)="a57c3314a352ee755a818ddd06afd2f843afb8e791f70e907785a83dc3bbb1bc0e9fdd3b0262f587b82afcffe7c00c1fbff0d8172f79aed8e14b00c310e6216daf901c1c3c30e43549b4cca63ec3df1a928c343f6651a4be89a9c220be3dc7e9c9dadfd5b586ad23f50f2c5fbd7362a0a7fb5dfe55e8ddc85e31677e8a11f59822e7d40f841cbed4210976f94583456a9768760a9e87cfd2972d76f95e6020981dbae8694cb1357549438d7290b8", 0xae}, {&(0x7f0000000280)="6ebea22d925cc42bfaf712a955465aed5727de5210f25cfeac2a746616054e2d0baf83350b05956a80e759a710333b02634d8b6fc2deb832ab6746c69a2fed9af4d404218b5c2a82d59a1dded60c38ff0552b4671be3da239009f7672dce620037431438be9bacd906088cce13fa54634887eb632c4d525bbba760d3c58b4360bd919df7fd27d7a62234d910723cdd662a699be8f5a3f98f3635d7b26c4d183cef631c2ed65687fcca315d0c6f0ed23960e4c8cf7b900a41bc62cca45e8bf5bba87531d9929a9ffea7742af06256a4baea23071c0ed9f4e506d9ad7922eb030bd8", 0xe1}, {&(0x7f0000000f00)="8a69ff6b1f3fdb9a3bc406944c258dda606e20dbf1e82bd0f0ef98bc774d9ecca019b1a0796f2d502a40ebe005da4ebcbdffc4229f9dd404817129fd5cfb6b5d6a978c43dd0135c2c3ec47b2e604b2914f0b053933a6072a1784a4359abe21c28e6253bd9a8d1c985edecaf48e74dcb97575711fc9aa41b4d9a654e35de6da44a72156acc85e0f769801829bb535c9f29ce777bb91e36b09fd841b745de63ef5c2caf910d52c363b18dacd50017f405126122ecc968b27e9d09c0090acda0d99b65a50d1d418e4d6461af2956f04066e1d4cb0088aa7370dde675281f24776c0de0c0890eafa2588561a9a9499e37893ce1a53c9faa65beafc82169493015281cbe7ba40e5cae9949b909a9428f507f49fc0b3b438c57d9f79555693c88c8cde7f1ef8c99e11a66998dab9739b4d022579c40ec1cdd82da0b3cae8e73d0330369a865ef6891d28e5fa199310d16b80881b3fb996b9d647b9072d83af28f0a2396021a332af2c05684ab0a25e1e030bd2f803ac974a0c1ed419eabf38b230a26e163aa16c17dc5396fa3493ab0b3c38eb37032002d73dc4257be72e8e4a396bd4f83151f7a3ea8a7b3d38877ec1e95601d47afca4781bf3d06a0574c22405a1ccad50950467b369fdf5099b05e36141297d917de0dacb8011a5a81a2ad8833cc50ac925b71116754a0732cb9b09ddaba30e3068c3374bceeb14997b582636db75bba6c076fed3b7cd27d9e841fd2eea4824c476f075bc7c56e1b3cc8af74423de4b26bc7de596d2ecad4c8fb778915c076f8960b42b6ab604f58d9561e8cc2694c019c2b636f8c990f75785d30a45203f108f6b64d037964ad1fd246bdb96260bf11babd8d59570827d0ec2d0d4b6cb03a781fd941adbfdf557e36c19abbdcfabeca9a32507785d481504cac51300ed606edb5c4009ece0d5082332f0a7769aa383c347fd040dff8812c29a1492fccabae0fd6b849eaa15a200e16d213de2abe4632838973195b451ae35f9023701be17411e705eaea86843a44aecf9ebbea6e94bd33e463fe94218122844d060a276d8ac8185b79a7d2073cf22a6298248d36d6d07413df06e86e6c5e1e97cd867870187e973570126bc8769286a951b0bc7a0a274954b095a93c271d4483c8efeb2412afb2f47251da3b054ffce82ffee523a1477194bae51f20c1f8f222f456060f4af13e3bc5c91e2c5130deb18d55dc6eb26cacf502ebacc31da6b914c60e38bc6cba4d0e39d5234ead8d3a18a5d60954a22a04a9ba5c04595cf11560867aee24970fb6b70fe35181013feeb08c8433787e6ccd1e65d31d2dbee9b34045c28ffb5e23c5901d44bc607b69571c30435362bdb832f1ab1a3136052a3408b2548b5a4e80fc082a45069cd3c6e6dab33da6fd451e28a873a023f627838f6f73523aadeec6bd61683040fbe0040b68e09cb776e0afd7928a125f85dab57a16812d849a7e86aacb958e33ef1eb3aa40e82793334511cedda0b6b24b290052d4df75d35453220557017896b396b8cfe21c0cbc4bc0a50b2415e9b67aae3209ad75fab92606a7c3b51977c3c07a59be7486520d61b9b6f8ae290135f0a9ffc4ee946bfa5eab09dbb450dab11aee5a7f6899084c1d6ed8822b57a6f3fe137688b1a1cb96804d3825476065cc53a2365733ed48d42a26232b1a168c7c5106898d1f64de88247175131a21df47ca3d91306109a8333f0d18d142f9645ce431678664679cf38deacd9174af6ae986b43bfbcec48f4f4a24d8c34c7fb01987fd1073381ac203adeafad2294731bd84886aa289d6ecfc72da13369da23838c21819a55498bd485576b758217d3b6c7f93f1979de4abebdaccf2001dd4e0c35ed26e53cdb0f40917453c17b9c8373afc8fc7dfe180c9e4680187066955959a27e61af5c5ec436a4703d8f074dbe7e0e37cd89491d1f3319ff68abba2bbf1d6201e88f17c0afed225e050ec68c084d9bc93209926af40e60485f45e8c59fa16d82822ee3858843c5ebd21dcf48d31d2094e105ea8a096ef37d7cedce03c7f969e4ca4594b89f3481f2b645ef0d334b8dd81d54b1a75413d4a911e6a2605dea26570f6b6067f42649ff95a171b282ca2fa617b803c3a70f1a5a7ef774bd0b3b44687c99c7239a2b3e649db9fd33fd1412ab7ebd0ffcc4e3a821aa819380c545f6c6e3bbaf84c66d85a96afb343e26e98a43b7f35e5a7ec20061db9b9034bae7171a9c7fa49e260062a5bc8fa3a52eb8d9725b949170b57f15e356de49b59fc3d52800f374343cb67c32ecef87e99a6917a2bf183e662a3ba5ae6eb6b8a872b7dcb98e6ef15cf568da01691565120ffe0f4e3b8d9e9939e222737bf3e9d1f82d002cce605789c729539268b5b6ff4e0bdad90e8150a4504cffd03b855e2ee33ac703b47cdd4a359bcf5dfab73f657f04000f7fb28dfad976501d6241287f2192562cd56c3df766fafe8447cd2cb00b6e980cfe05f4f0ecb6fc3687b857eb22c1ac660fa2d21f7c1014eeddd36e7b1ad07568ceefd89cb1ddcda0964e5a66fac2247a444fb45de5472abf73dc24b17442e8cfdaeacb4a08fa5e57377e2bcb83f42ca1bb1e39d82ab7a0ad3bf3e686e353525ad9596bed931ba2b032f1579ea6c638ab798f163d90f05dc4907872bcd0770b5cd32990e30403e31e6656caaa6d278b983d1461ca3baf931124f1ce8b5f39b01bd2084c3c1ab215aa226af3b31f45eb36337868aedacb567534f68f6d45a7f6fda9cc7963280daa6c03cf4a1059f18a3c886be014dbf4bc3d5f43d21cacf272948dfd99fd7d4e9a3809b4e3ff83e205e99f97723de7fbd4552b29cd31cdbc5c893667d63205c6425dca2f92cc5178f11b3ae28a7c34b2a2cf5457002a0842558e6cf92cdb8e6f8d90dbabd6367483b43fad62a878d133cf84e6865c8eb2879b41cef5f70871b9f13ca6163c819c9b99f73a3a51c07051f9f4f9a830ad95b39b4459bee2e1e744121fa4b0b0f1c227bccff4a17d0518d17f3f692f2454b2b972b669898bdb203912084624f83802c73eef1782ae575189ad4d1a9b94f093f76a428c9c6ee08c3b116eacb525887276534d9a77a6733d7c58d13ac610216bf9b747cbc5e91e2defaeac547eac2f301ad0f7f01e01b51aa540965b8ab9e57970944954c7d20a4f80a32bf418eb45d489ab01037f5a8f655750044d6ec6f3fd923141763d31ac1f096f504815fbc55ecde92bea8df09d5b5959ab12802fe1d72b52009d8a86dbc93382dd54b285e365d0460a0a4a4362765ecd87481b11553a749233f13b5c82ef215031c50e057e2008b470ae0ced5d026f3d380ad2c647f034a797fd2f2b3e766d8880ac5194536e421aaae62bde5ff1fc32f0f2132bcbc2388f8abfcd3d2ee2e671168ec4951f17d733b6061de671224bf886e46bd66d7aeb9618d9e3ccb651afe1e4cc456617e5c0982561c67498982de94c61933c08dcc5d12da60664398fdf2d8bc29165b7e7a3a530d6e102790f8bb43f25c63a7ca63c77a320810105b9fec4a6ed2535260c0409d15db6910ebae291c81cc2a44b7f84a47e094fbb74427b01726f4021e639e9c965badfeb0b77767fa446d882406d55ca92f863f119ab06c55c7a5d9088d26168da6c7d9f62cf8670e22127cf32d6d865d308a447c0b01197d63c2c1a9438405e31ca6478447dc4777c5a9340d23b7d92ead7843ef22345cd08689c9e18bfe250e17988ac5ff0183cdcd8ac7c9c96c4d086a412076dcf7f8d0e9cc8499f4e76783ded67450e61b16a589cea5247a7b31802acfd26582a14879f9c20ed720813e3d1532ba33c084aa3da8dfdf2fbcb8004f2e443a75bdcaa4c8efc1284fe2f9894c5ce230c7d0b0e1f97bae7", 0xab2}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=[@txtime={{0x18, 0x1, 0x3d, 0xd}}], 0x18}}], 0x3, 0xc814) 4.660856808s ago: executing program 1 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000000206050400000000000000000a00000005000100070000000900020073797a30000000000d000300686173683a6e6574000000000500040000000000050005000a"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x44, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x7f}}, 0x0) 4.434812075s ago: executing program 1 (id=25): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_open_dev$vim2m(0x0, 0xe2, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b0001000000000904"], 0x0) 4.135514302s ago: executing program 2 (id=26): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000440), 0x0, 0x40850) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r4, &(0x7f0000000a00)={0x2020}, 0x2020) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) 3.935432904s ago: executing program 0 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640040000000500010006000000050005000200000005000400000000000900020073797a31000d00000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x200088c4) 3.236046131s ago: executing program 0 (id=28): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x3, 0x4) rseq(&(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x1b83, 0x2, 0x9a}, 0x2}, 0x20, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000880)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r3, &(0x7f0000000900)='cpu.stat\x00', 0x0, 0x0) 3.041102116s ago: executing program 2 (id=29): syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgid(0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f00000007c0)=""/102392, 0x18ff8) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000197c0)=""/32) mkdirat(0xffffffffffffff9c, &(0x7f0000019800)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000019840)='./nfsd\x00', &(0x7f0000019880)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000198c0)='./nfsd/filehandle\x00', 0x2, 0x0) write(r5, &(0x7f0000019900)='mydomain / 64\n', 0xe) 1.135028169s ago: executing program 2 (id=30): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b90101000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41b}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.032498819s ago: executing program 1 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000009fc0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f000000a0c0)={0x1, 0x0, [{0x4000009f, 0x0, 0x9}]}) 427.989303ms ago: executing program 0 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000400)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2082, 0x0) write(r7, &(0x7f0000000640)='6', 0x1) 367.574908ms ago: executing program 1 (id=33): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000600)={'pcmmio\x00', [0x2002, 0x2f, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0xfffffffe, 0x5, 0xfffffff7, 0x400001, 0x6, 0x6, 0x0, 0x7f, 0x3, 0x40000003, 0x200086, 0x4, 0x3ff, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) 202.273554ms ago: executing program 1 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000240)) ioctl(r2, 0x4048aecb, &(0x7f0000000900)="070000000000000001000000ffffffff40") 0s ago: executing program 3 (id=35): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.110' (ED25519) to the list of known hosts. [ 78.394052][ T5598] cgroup: Unknown subsys name 'net' [ 78.533118][ T5598] cgroup: Unknown subsys name 'cpuset' [ 78.542865][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.231778][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.927503][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.928245][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.930703][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.941496][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.944323][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.947359][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.948475][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.951829][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.957306][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.960612][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.961197][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.962005][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.967297][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.971158][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.979244][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.980589][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.989189][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.989733][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.000337][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.001725][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.684197][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.684308][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.684692][ T5608] bridge_slave_0: entered allmulticast mode [ 85.686475][ T5608] bridge_slave_0: entered promiscuous mode [ 85.748949][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.749064][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.749427][ T5608] bridge_slave_1: entered allmulticast mode [ 85.771585][ T5608] bridge_slave_1: entered promiscuous mode [ 85.774353][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.774632][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.774991][ T5611] bridge_slave_0: entered allmulticast mode [ 85.782341][ T5611] bridge_slave_0: entered promiscuous mode [ 85.834833][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.834953][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.835059][ T5611] bridge_slave_1: entered allmulticast mode [ 85.836276][ T5611] bridge_slave_1: entered promiscuous mode [ 85.841129][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.841447][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.841935][ T5609] bridge_slave_0: entered allmulticast mode [ 85.850324][ T5609] bridge_slave_0: entered promiscuous mode [ 85.862437][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.862726][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.863086][ T5609] bridge_slave_1: entered allmulticast mode [ 85.864757][ T5609] bridge_slave_1: entered promiscuous mode [ 85.981804][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.006099][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.027737][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.038256][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.040150][ T5615] Bluetooth: hci3: command tx timeout [ 86.056116][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.056370][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.056522][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.056659][ T5610] bridge_slave_0: entered allmulticast mode [ 86.057945][ T5610] bridge_slave_0: entered promiscuous mode [ 86.102743][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.119196][ T5615] Bluetooth: hci1: command tx timeout [ 86.120600][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.120777][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.120888][ T5610] bridge_slave_1: entered allmulticast mode [ 86.122135][ T5610] bridge_slave_1: entered promiscuous mode [ 86.129477][ T5615] Bluetooth: hci2: command tx timeout [ 86.129961][ T5615] Bluetooth: hci0: command tx timeout [ 86.205451][ T5608] team0: Port device team_slave_0 added [ 86.224112][ T5609] team0: Port device team_slave_0 added [ 86.244826][ T5608] team0: Port device team_slave_1 added [ 86.246663][ T5611] team0: Port device team_slave_0 added [ 86.248615][ T5609] team0: Port device team_slave_1 added [ 86.263320][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.285900][ T5611] team0: Port device team_slave_1 added [ 86.288347][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.355883][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.355900][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.355923][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.415042][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.415057][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.415077][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.416153][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.416168][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.416196][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.417578][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.417589][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.417609][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.418650][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.418663][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.418695][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.429127][ T5610] team0: Port device team_slave_0 added [ 86.487723][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.487782][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.487855][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.500786][ T5610] team0: Port device team_slave_1 added [ 86.708612][ T5608] hsr_slave_0: entered promiscuous mode [ 86.715621][ T5608] hsr_slave_1: entered promiscuous mode [ 86.737684][ T5609] hsr_slave_0: entered promiscuous mode [ 86.738493][ T5609] hsr_slave_1: entered promiscuous mode [ 86.750752][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 86.750827][ T5609] Cannot create hsr debugfs directory [ 86.751701][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.751714][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.751738][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.832549][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.832570][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.832597][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.852040][ T5611] hsr_slave_0: entered promiscuous mode [ 86.856498][ T5611] hsr_slave_1: entered promiscuous mode [ 86.858660][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 86.859614][ T5611] Cannot create hsr debugfs directory [ 87.088140][ T5610] hsr_slave_0: entered promiscuous mode [ 87.091757][ T5610] hsr_slave_1: entered promiscuous mode [ 87.095298][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 87.095352][ T5610] Cannot create hsr debugfs directory [ 87.513659][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.527194][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.528195][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.546488][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.547497][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.565051][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.582194][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.585395][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.663691][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.675803][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.691596][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.697185][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.698077][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.720001][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.726579][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.741587][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.843105][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.847363][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.848551][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.874086][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.875102][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.878569][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.910324][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.914471][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.005652][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.060279][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.064090][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.066533][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.093411][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.111538][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.115138][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.115833][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.118531][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.119267][ T5612] Bluetooth: hci3: command tx timeout [ 88.170061][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.199319][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.199435][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.210586][ T5615] Bluetooth: hci2: command tx timeout [ 88.210672][ T5615] Bluetooth: hci1: command tx timeout [ 88.210996][ T5612] Bluetooth: hci0: command tx timeout [ 88.251625][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.252222][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.313599][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.399764][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.427045][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.427123][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.450296][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.494087][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.494199][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.536998][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.587678][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.587759][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.632265][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.632368][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.654283][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.757515][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.792918][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.793032][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.860478][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.860600][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.554050][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.722653][ T5609] veth0_vlan: entered promiscuous mode [ 89.751185][ T5609] veth1_vlan: entered promiscuous mode [ 89.880812][ T5609] veth0_macvtap: entered promiscuous mode [ 89.911071][ T5609] veth1_macvtap: entered promiscuous mode [ 89.962064][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.001905][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.029300][ T1166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.029428][ T1166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.029469][ T1166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.090291][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.125979][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.188986][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.200396][ T54] Bluetooth: hci3: command tx timeout [ 90.279013][ T54] Bluetooth: hci0: command tx timeout [ 90.279047][ T54] Bluetooth: hci1: command tx timeout [ 90.279071][ T54] Bluetooth: hci2: command tx timeout [ 90.286915][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.335586][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.335615][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.375207][ T5608] veth0_vlan: entered promiscuous mode [ 90.417248][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.417271][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.461561][ T5608] veth1_vlan: entered promiscuous mode [ 90.488689][ T5611] veth0_vlan: entered promiscuous mode [ 90.536381][ T5611] veth1_vlan: entered promiscuous mode [ 90.587942][ T5610] veth0_vlan: entered promiscuous mode [ 90.595817][ T5609] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.638636][ T5608] veth0_macvtap: entered promiscuous mode [ 90.652859][ T5610] veth1_vlan: entered promiscuous mode [ 90.655142][ T5608] veth1_macvtap: entered promiscuous mode [ 90.749170][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.750802][ T5611] veth0_macvtap: entered promiscuous mode [ 90.782307][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.788210][ T5763] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.821038][ T5611] veth1_macvtap: entered promiscuous mode [ 90.840997][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.841885][ T1167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.841930][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.841969][ T1167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.888201][ T5610] veth0_macvtap: entered promiscuous mode [ 90.924348][ T5610] veth1_macvtap: entered promiscuous mode [ 90.953573][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.984010][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.016524][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.063736][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.132072][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.132095][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.208980][ T1123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.271728][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.271751][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.315417][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.315441][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.424635][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.424658][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.460217][ T1123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.571018][ T1123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.593298][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.593320][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.610164][ T1123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.612906][ T1166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.750962][ T1166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.751128][ T1166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.751277][ T1166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.825221][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.825244][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.635020][ T5612] Bluetooth: hci3: command tx timeout [ 93.635061][ T5612] Bluetooth: hci2: command tx timeout [ 93.635089][ T5612] Bluetooth: hci1: command tx timeout [ 93.635113][ T5612] Bluetooth: hci0: command tx timeout [ 93.678169][ T32] cfg80211: failed to load regulatory.db [ 94.081111][ T5778] FAULT_INJECTION: forcing a failure. [ 94.081111][ T5778] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.081165][ T5778] CPU: 1 UID: 0 PID: 5778 Comm: syz.1.7 Not tainted syzkaller #0 PREEMPT(full) [ 94.081193][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.081216][ T5778] Call Trace: [ 94.081230][ T5778] [ 94.081240][ T5778] dump_stack_lvl+0xe8/0x150 [ 94.081279][ T5778] should_fail_ex+0x3eb/0x540 [ 94.081318][ T5778] _copy_to_user+0x31/0xb0 [ 94.081342][ T5778] sctp_getsockopt_assoc_ids+0x2b4/0x360 [ 94.081386][ T5778] sctp_getsockopt+0x5d9/0xb90 [ 94.081422][ T5778] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 94.081455][ T5778] do_sock_getsockopt+0x4aa/0x640 [ 94.081494][ T5778] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 94.081544][ T5778] ? __fget_files+0x3a2/0x420 [ 94.081576][ T5778] ? __fget_files+0x2a/0x420 [ 94.081616][ T5778] __x64_sys_getsockopt+0x1a4/0x240 [ 94.081658][ T5778] do_syscall_64+0x166/0x520 [ 94.081681][ T5778] ? trace_irq_disable+0x3b/0x140 [ 94.081704][ T5778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.081728][ T5778] ? clear_bhb_loop+0x70/0xc0 [ 94.081789][ T5778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.081812][ T5778] RIP: 0033:0x7f040e99e2d9 [ 94.081844][ T5778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.081863][ T5778] RSP: 002b:00007f040f8dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 94.081894][ T5778] RAX: ffffffffffffffda RBX: 00007f040ec25fa0 RCX: 00007f040e99e2d9 [ 94.081912][ T5778] RDX: 000000000000001d RSI: 0000000000000084 RDI: 0000000000000004 [ 94.081926][ T5778] RBP: 00007f040ea35888 R08: 0000200000000100 R09: 0000000000000000 [ 94.081942][ T5778] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 94.081956][ T5778] R13: 00007f040ec26038 R14: 00007f040ec25fa0 R15: 00007ffd95999e38 [ 94.081993][ T5778] [ 94.096729][ T5781] ======================================================= [ 94.096729][ T5781] WARNING: The mand mount option has been deprecated and [ 94.096729][ T5781] and is ignored by this kernel. Remove the mand [ 94.096729][ T5781] option from the mount to silence this warning. [ 94.096729][ T5781] ======================================================= [ 94.320071][ T5780] netlink: zone id is out of range [ 94.320117][ T5780] netlink: zone id is out of range [ 94.320138][ T5780] netlink: zone id is out of range [ 94.320159][ T5780] netlink: zone id is out of range [ 94.320182][ T5780] netlink: zone id is out of range [ 94.320203][ T5780] netlink: zone id is out of range [ 94.324701][ T5780] netlink: zone id is out of range [ 94.324737][ T5780] netlink: zone id is out of range [ 94.406132][ T5783] Set syz1 is full, maxelem 1029 reached [ 94.466110][ T5785] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 94.581479][ T5787] FAULT_INJECTION: forcing a failure. [ 94.581479][ T5787] name failslab, interval 1, probability 0, space 0, times 1 [ 94.581512][ T5787] CPU: 1 UID: 0 PID: 5787 Comm: syz.1.11 Not tainted syzkaller #0 PREEMPT(full) [ 94.581539][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.581553][ T5787] Call Trace: [ 94.581567][ T5787] [ 94.581577][ T5787] dump_stack_lvl+0xe8/0x150 [ 94.581613][ T5787] should_fail_ex+0x3eb/0x540 [ 94.581655][ T5787] should_failslab+0xa8/0x100 [ 94.581688][ T5787] ? dst_alloc+0x105/0x170 [ 94.581712][ T5787] kmem_cache_alloc_noprof+0x9c/0x600 [ 94.581744][ T5787] ? __pfx_find_exception+0x10/0x10 [ 94.581771][ T5787] ? dst_alloc+0x105/0x170 [ 94.581792][ T5787] ? fib_lookup+0x76/0x440 [ 94.581819][ T5787] dst_alloc+0x105/0x170 [ 94.581841][ T5787] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 94.581876][ T5787] ? ip_route_output_key_hash+0xd8/0x2a0 [ 94.581902][ T5787] ip_route_output_key_hash+0x18d/0x2a0 [ 94.581931][ T5787] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 94.581956][ T5787] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 94.581994][ T5787] ? stack_depot_save_flags+0x404/0x7f0 [ 94.582039][ T5787] tcp_v4_connect+0x873/0x1b20 [ 94.582070][ T5787] ? tcp_sendmsg_locked+0x4a3b/0x5320 [ 94.582102][ T5787] ? tcp_sendmsg+0x2f/0x50 [ 94.582146][ T5787] ? __pfx_tcp_v4_connect+0x10/0x10 [ 94.582192][ T5787] __inet_stream_connect+0x28c/0xf50 [ 94.582240][ T5787] ? __pfx___inet_stream_connect+0x10/0x10 [ 94.582271][ T5787] ? __kasan_kmalloc+0x93/0xb0 [ 94.582296][ T5787] ? __kmalloc_cache_noprof+0x31c/0x600 [ 94.582330][ T5787] ? __kmalloc_cache_noprof+0x148/0x600 [ 94.582362][ T5787] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 94.582404][ T5787] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 94.582445][ T5787] tcp_sendmsg_locked+0x4a3b/0x5320 [ 94.582480][ T5787] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 94.582524][ T5787] ? tcp_sendmsg_locked+0x331/0x5320 [ 94.582560][ T5787] ? __lock_acquire+0x747/0x2de0 [ 94.582600][ T5787] ? __pfx_futex_wake_mark+0x10/0x10 [ 94.582651][ T5787] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 94.582704][ T5787] ? tcp_sendmsg+0x21/0x50 [ 94.582741][ T5787] ? __local_bh_enable_ip+0xd6/0x140 [ 94.582771][ T5787] tcp_sendmsg+0x2f/0x50 [ 94.582804][ T5787] ? __pfx_inet_sendmsg+0x10/0x10 [ 94.582832][ T5787] sock_sendmsg_nosec+0x10f/0x190 [ 94.582861][ T5787] __sys_sendto+0x408/0x5a0 [ 94.582897][ T5787] ? __pfx___sys_sendto+0x10/0x10 [ 94.582958][ T5787] ? rcu_is_watching+0x16/0xb0 [ 94.582993][ T5787] __x64_sys_sendto+0xde/0x100 [ 94.583027][ T5787] do_syscall_64+0x166/0x520 [ 94.583052][ T5787] ? trace_irq_disable+0x3b/0x140 [ 94.583076][ T5787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.583100][ T5787] ? clear_bhb_loop+0x70/0xc0 [ 94.583130][ T5787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.583153][ T5787] RIP: 0033:0x7f040e99e2d9 [ 94.583175][ T5787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.583195][ T5787] RSP: 002b:00007f040f8dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 94.583221][ T5787] RAX: ffffffffffffffda RBX: 00007f040ec25fa0 RCX: 00007f040e99e2d9 [ 94.583239][ T5787] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 94.583253][ T5787] RBP: 00007f040ea35888 R08: 0000200000000100 R09: 0000000000000010 [ 94.583268][ T5787] R10: 00000000200047fd R11: 0000000000000246 R12: 0000000000000000 [ 94.583283][ T5787] R13: 00007f040ec26038 R14: 00007f040ec25fa0 R15: 00007ffd95999e38 [ 94.583321][ T5787] [ 95.123192][ T5794] FAULT_INJECTION: forcing a failure. [ 95.123192][ T5794] name failslab, interval 1, probability 0, space 0, times 0 [ 95.123216][ T5794] CPU: 0 UID: 0 PID: 5794 Comm: syz.0.12 Not tainted syzkaller #0 PREEMPT(full) [ 95.123234][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.123244][ T5794] Call Trace: [ 95.123250][ T5794] [ 95.123257][ T5794] dump_stack_lvl+0xe8/0x150 [ 95.123282][ T5794] should_fail_ex+0x3eb/0x540 [ 95.123313][ T5794] should_failslab+0xa8/0x100 [ 95.123331][ T5794] __kmalloc_cache_noprof+0x9e/0x600 [ 95.123355][ T5794] ? __kmalloc_cache_noprof+0x148/0x600 [ 95.123377][ T5794] ? kvm_dev_ioctl+0xa0f/0x1700 [ 95.123400][ T5794] ? kvm_dev_ioctl+0xa0f/0x1700 [ 95.123428][ T5794] kvm_dev_ioctl+0xa0f/0x1700 [ 95.123456][ T5794] ? __fget_files+0x2a/0x420 [ 95.123480][ T5794] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 95.123506][ T5794] ? bpf_lsm_file_ioctl+0x9/0x20 [ 95.123522][ T5794] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 95.123546][ T5794] __se_sys_ioctl+0xfc/0x170 [ 95.123564][ T5794] do_syscall_64+0x166/0x520 [ 95.123582][ T5794] ? trace_irq_disable+0x3b/0x140 [ 95.123605][ T5794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.123622][ T5794] ? clear_bhb_loop+0x70/0xc0 [ 95.123642][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.123658][ T5794] RIP: 0033:0x7fd99559e2d9 [ 95.123673][ T5794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.123686][ T5794] RSP: 002b:00007fd9964c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.123703][ T5794] RAX: ffffffffffffffda RBX: 00007fd995825fa0 RCX: 00007fd99559e2d9 [ 95.123715][ T5794] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 95.123725][ T5794] RBP: 00007fd995635888 R08: 0000000000000000 R09: 0000000000000000 [ 95.123734][ T5794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.123744][ T5794] R13: 00007fd995826038 R14: 00007fd995825fa0 R15: 00007ffd4c8f53e8 [ 95.123768][ T5794] [ 95.451999][ T5799] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 96.641104][ T5753] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.949364][ T5753] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 97.476238][ T5753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.476271][ T5753] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.476311][ T5753] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.672145][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.672176][ T5753] usb 2-1: Product: syz [ 97.672192][ T5753] usb 2-1: Manufacturer: syz [ 97.672208][ T5753] usb 2-1: SerialNumber: syz [ 97.724576][ T5753] hub 2-1:1.0: bad descriptor, ignoring hub [ 97.724605][ T5753] hub 2-1:1.0: probe with driver hub failed with error -5 [ 99.682526][ T5753] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 99.804936][ T5753] usb 2-1: USB disconnect, device number 2 [ 99.871108][ T5753] usblp0: removed [ 100.812662][ C1] [ 100.815057][ C1] ============================= [ 100.820068][ C1] [ BUG: Invalid wait context ] [ 100.824969][ C1] syzkaller #0 Not tainted [ 100.829410][ C1] ----------------------------- [ 100.834280][ C1] syz.1.34/5873 is trying to lock: [ 100.839444][ C1] ffff88807afe9bc8 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 100.849006][ C1] other info that might help us debug this: [ 100.854917][ C1] context-{2:2} [ 100.858405][ C1] locks held by syz.1.34/5873: 4, last CPU#1: [ 100.864496][ C1] #0: ffff88802b6ed1a8 (&vcpu->mutex){+.+.}-{4:4}, at: kvm_vcpu_ioctl+0x27f/0xfd0 [ 100.873971][ C1] #1: ffff88807afe9b48 (&kvm->arch.xen.xen_lock){+.+.}-{4:4}, at: kvm_xen_vcpu_set_attr+0x4d/0x1230 [ 100.884917][ C1] #2: ffff88807afea118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_vcpu_set_attr+0x8e/0x1230 [ 100.894736][ C1] #3: ffff88807afea118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 100.904742][ C1] stack backtrace: [ 100.908494][ C1] CPU: 1 UID: 0 PID: 5873 Comm: syz.1.34 Not tainted syzkaller #0 PREEMPT(full) [ 100.917642][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.927743][ C1] Call Trace: [ 100.931063][ C1] [ 100.933945][ C1] dump_stack_lvl+0xe8/0x150 [ 100.938592][ C1] __lock_acquire+0xf5b/0x2de0 [ 100.943423][ C1] lock_acquire+0x115/0x350 [ 100.947971][ C1] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 100.953640][ C1] ? xa_load+0x1db/0x210 [ 100.957931][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 100.963169][ C1] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 100.968841][ C1] kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 100.974355][ C1] ? kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 100.980089][ C1] xen_timer_callback+0x109/0x220 [ 100.985344][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 100.990936][ C1] __hrtimer_run_queues+0x371/0xa10 [ 100.996206][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 101.001214][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 101.007244][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 101.012919][ C1] [ 101.015880][ C1] [ 101.018877][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.024905][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 101.031382][ C1] Code: f7 e8 6d e8 9b f5 f7 c3 00 02 00 00 74 05 e8 e0 80 c8 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 94 db 8c f5 65 48 8b 05 ac c0 d8 08 48 85 c0 74 18 5b 41 5e c3 [ 101.051035][ C1] RSP: 0018:ffffc900055ff3e8 EFLAGS: 00000206 [ 101.057138][ C1] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000001 [ 101.065154][ C1] RDX: 0000000000000007 RSI: ffffffff8e7a73a9 RDI: 0000000000000001 [ 101.073171][ C1] RBP: ffffc900055ff528 R08: ffffffff91bce7bf R09: 1ffffffff2379cf7 [ 101.081174][ C1] R10: dffffc0000000000 R11: fffffbfff2379cf8 R12: 0000001775ec465e [ 101.089189][ C1] R13: ffff88802b6ee638 R14: ffff8880b83286c0 R15: dffffc0000000000 [ 101.097299][ C1] kvm_xen_start_timer+0x37f/0x5f0 [ 101.102468][ C1] ? __pfx_kvm_xen_start_timer+0x10/0x10 [ 101.108135][ C1] ? lock_acquire+0x115/0x350 [ 101.112849][ C1] ? hrtimer_try_to_cancel+0x1f7/0x680 [ 101.118457][ C1] kvm_xen_vcpu_set_attr+0xb29/0x1230 [ 101.123885][ C1] ? __might_fault+0xaf/0x130 [ 101.128620][ C1] ? kvm_xen_vcpu_set_attr+0x8e/0x1230 [ 101.134138][ C1] kvm_arch_vcpu_ioctl+0x148b/0x23a0 [ 101.139478][ C1] ? lock_acquire+0x115/0x350 [ 101.144201][ C1] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 101.149871][ C1] ? lock_acquire+0x115/0x350 [ 101.154590][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 101.159824][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 101.165146][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 101.170394][ C1] ? kernel_text_address+0xa5/0xe0 [ 101.175558][ C1] ? __kernel_text_address+0xd/0x30 [ 101.180803][ C1] ? unwind_get_return_address+0x4d/0x90 [ 101.186493][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 101.192692][ C1] ? arch_stack_walk+0xfb/0x150 [ 101.197585][ C1] ? stack_trace_save+0xa9/0x100 [ 101.202557][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 101.207990][ C1] ? kasan_save_track+0x4f/0x80 [ 101.213154][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 101.218663][ C1] ? __lock_acquire+0x747/0x2de0 [ 101.223648][ C1] ? kfree+0x1c5/0x650 [ 101.227767][ C1] ? __se_sys_ioctl+0x47/0x170 [ 101.232562][ C1] ? do_syscall_64+0x166/0x520 [ 101.237407][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.243525][ C1] ? __mutex_trylock_common+0x15f/0x270 [ 101.249109][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 101.255052][ C1] ? rcu_is_watching+0x16/0xb0 [ 101.259849][ C1] ? trace_contention_end+0x3d/0x140 [ 101.265180][ C1] ? __mutex_lock+0x305/0x15a0 [ 101.269995][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 101.275332][ C1] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 101.280256][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 101.285336][ C1] ? do_vfs_ioctl+0x116f/0x1530 [ 101.290227][ C1] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 101.295287][ C1] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 101.300059][ C1] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.305340][ C1] ? do_futex+0x458/0x4e0 [ 101.309730][ C1] ? __fget_files+0x2a/0x420 [ 101.314370][ C1] ? __fget_files+0x2a/0x420 [ 101.319032][ C1] ? __fget_files+0x2a/0x420 [ 101.323674][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 101.328650][ C1] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.333903][ C1] __se_sys_ioctl+0xfc/0x170 [ 101.338544][ C1] do_syscall_64+0x166/0x520 [ 101.343173][ C1] ? trace_irq_disable+0x3b/0x140 [ 101.348245][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.354368][ C1] ? clear_bhb_loop+0x70/0xc0 [ 101.359100][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.365055][ C1] RIP: 0033:0x7f040e99e2d9 [ 101.369504][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.389290][ C1] RSP: 002b:00007f040f8bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.397761][ C1] RAX: ffffffffffffffda RBX: 00007f040ec26090 RCX: 00007f040e99e2d9 [ 101.405771][ C1] RDX: 0000200000000900 RSI: 000000004048aecb RDI: 0000000000000005 [ 101.413897][ C1] RBP: 00007f040ea35888 R08: 0000000000000000 R09: 0000000000000000 [ 101.421903][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.429924][ C1] R13: 00007f040ec26128 R14: 00007f040ec26090 R15: 00007ffd95999e38 [ 101.437951][ C1] [ 101.768797][ T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.919393][ T32] usb 3-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 101.920232][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.920257][ T32] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 101.920290][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.921865][ T32] usb 3-1: config 0 descriptor?? [ 104.934290][ T5753] usb 3-1: USB disconnect, device number 2