last executing test programs: 2.653908126s ago: executing program 1 (id=2): r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) 2.457288554s ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9c01"}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 2.292832192s ago: executing program 1 (id=5): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) preadv(r3, 0x0, 0x0, 0xa2e1, 0xc) pread64(r2, &(0x7f0000000400)=""/214, 0xf8, 0x7) 1.805021525s ago: executing program 1 (id=6): socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.430711491s ago: executing program 0 (id=1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x1ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x1780) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x7) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1.177098984s ago: executing program 1 (id=7): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x2adff, 0x0}, 0x0, 0x0, 0x7, 0x0, 0x8000000, 0x0}) 1.17472555s ago: executing program 2 (id=3): r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x700, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) 1.109811713s ago: executing program 1 (id=8): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000207e050e2000000000000109022400010000000009040000010300000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "b0720071"}]}}, 0x0}, 0x0) 1.093137398s ago: executing program 0 (id=9): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5b04, 0x0) 584.155238ms ago: executing program 2 (id=10): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 313.141212ms ago: executing program 2 (id=11): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 2 (id=12): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000880)={0xc, 0x8, 0x143, {0x0}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 91.376954][ T5594] cgroup: Unknown subsys name 'net' [ 91.621278][ T5594] cgroup: Unknown subsys name 'cpuset' [ 91.673377][ T5594] cgroup: Unknown subsys name 'rlimit' [ 91.938069][ T37] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 93.746269][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.394988][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.398948][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.400142][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.401383][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.450109][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.547205][ T4923] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.568419][ T4923] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.583440][ T4923] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.590458][ T4923] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.591893][ T4923] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.668458][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.691005][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.701415][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.718883][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.740517][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.746032][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.749174][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.750132][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.776709][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.810662][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.514042][ T4923] Bluetooth: hci0: command tx timeout [ 99.682808][ T4923] Bluetooth: hci2: command tx timeout [ 99.832710][ T4923] Bluetooth: hci3: command tx timeout [ 99.877338][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.878741][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.878973][ T5611] bridge_slave_0: entered allmulticast mode [ 99.881891][ T5611] bridge_slave_0: entered promiscuous mode [ 99.913657][ T4923] Bluetooth: hci1: command tx timeout [ 99.957575][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.957936][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.958408][ T5611] bridge_slave_1: entered allmulticast mode [ 99.960911][ T5611] bridge_slave_1: entered promiscuous mode [ 100.084078][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.084323][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.084519][ T5616] bridge_slave_0: entered allmulticast mode [ 100.087052][ T5616] bridge_slave_0: entered promiscuous mode [ 100.125781][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.126138][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.126528][ T5617] bridge_slave_0: entered allmulticast mode [ 100.129879][ T5617] bridge_slave_0: entered promiscuous mode [ 100.177676][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.178008][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.178223][ T5616] bridge_slave_1: entered allmulticast mode [ 100.180969][ T5616] bridge_slave_1: entered promiscuous mode [ 100.210738][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.211193][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.211513][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.211794][ T5617] bridge_slave_1: entered allmulticast mode [ 100.219539][ T5617] bridge_slave_1: entered promiscuous mode [ 100.252927][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.253254][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.253558][ T5614] bridge_slave_0: entered allmulticast mode [ 100.256637][ T5614] bridge_slave_0: entered promiscuous mode [ 100.309292][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.361585][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.361823][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.362025][ T5614] bridge_slave_1: entered allmulticast mode [ 100.371861][ T5614] bridge_slave_1: entered promiscuous mode [ 100.468507][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.499241][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.530163][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.538284][ T5611] team0: Port device team_slave_0 added [ 100.552474][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.558477][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.597265][ T5611] team0: Port device team_slave_1 added [ 100.625579][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.708340][ T5616] team0: Port device team_slave_0 added [ 100.745912][ T5617] team0: Port device team_slave_0 added [ 100.774052][ T5616] team0: Port device team_slave_1 added [ 100.775980][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.775992][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.776012][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.781115][ T5617] team0: Port device team_slave_1 added [ 100.797263][ T5614] team0: Port device team_slave_0 added [ 100.854895][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.854908][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.854929][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.910340][ T5614] team0: Port device team_slave_1 added [ 100.984775][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.984788][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.984809][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.989809][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.989821][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.989841][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.068995][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.069038][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.069127][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.098473][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.098524][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.098600][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.125200][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.125243][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.125314][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.237675][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.237689][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.237710][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.315913][ T5611] hsr_slave_0: entered promiscuous mode [ 101.317634][ T5611] hsr_slave_1: entered promiscuous mode [ 101.592763][ T4923] Bluetooth: hci0: command tx timeout [ 101.753302][ T4923] Bluetooth: hci2: command tx timeout [ 101.788502][ T5616] hsr_slave_0: entered promiscuous mode [ 101.790846][ T5616] hsr_slave_1: entered promiscuous mode [ 101.807427][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 101.807549][ T5616] Cannot create hsr debugfs directory [ 101.841541][ T5617] hsr_slave_0: entered promiscuous mode [ 101.851804][ T5617] hsr_slave_1: entered promiscuous mode [ 101.855069][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 101.855159][ T5617] Cannot create hsr debugfs directory [ 101.916056][ T5614] hsr_slave_0: entered promiscuous mode [ 101.917589][ T5614] hsr_slave_1: entered promiscuous mode [ 101.918843][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 101.918867][ T5614] Cannot create hsr debugfs directory [ 101.924479][ T4923] Bluetooth: hci3: command tx timeout [ 101.992724][ T4923] Bluetooth: hci1: command tx timeout [ 102.791709][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.856934][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.870765][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.908645][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.919917][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.960975][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.986067][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.007750][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.132919][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.157720][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.164028][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.216704][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.233465][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.278211][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.306888][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.348685][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.499224][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.537266][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.554718][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.598716][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.621853][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.649524][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.672850][ T4923] Bluetooth: hci0: command tx timeout [ 103.680555][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.718976][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.832737][ T4923] Bluetooth: hci2: command tx timeout [ 103.896819][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.938695][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.951622][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.977334][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.981815][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.003058][ T4923] Bluetooth: hci3: command tx timeout [ 104.021105][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.036961][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.072784][ T4923] Bluetooth: hci1: command tx timeout [ 104.082281][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.226139][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.331515][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.366971][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.399989][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.400783][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.461905][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.462072][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.528342][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.562026][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.601581][ T3403] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.601728][ T3403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.665766][ T3403] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.666175][ T3403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.763471][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.813713][ T3403] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.813882][ T3403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.831476][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.899158][ T3403] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.899325][ T3403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.022099][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.099314][ T3403] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.099563][ T3403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.180559][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.180767][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.755276][ T4923] Bluetooth: hci0: command tx timeout [ 105.913074][ T4923] Bluetooth: hci2: command tx timeout [ 106.072729][ T4923] Bluetooth: hci3: command tx timeout [ 106.160136][ T4923] Bluetooth: hci1: command tx timeout [ 106.447149][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.624282][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.716659][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.847307][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.880576][ T5611] veth0_vlan: entered promiscuous mode [ 106.956893][ T5611] veth1_vlan: entered promiscuous mode [ 106.991293][ T5617] veth0_vlan: entered promiscuous mode [ 107.039967][ T5614] veth0_vlan: entered promiscuous mode [ 107.067106][ T5617] veth1_vlan: entered promiscuous mode [ 107.107356][ T5614] veth1_vlan: entered promiscuous mode [ 107.174384][ T5616] veth0_vlan: entered promiscuous mode [ 107.199061][ T5611] veth0_macvtap: entered promiscuous mode [ 107.228419][ T5611] veth1_macvtap: entered promiscuous mode [ 107.246798][ T5616] veth1_vlan: entered promiscuous mode [ 107.319685][ T5617] veth0_macvtap: entered promiscuous mode [ 107.361597][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.371395][ T5614] veth0_macvtap: entered promiscuous mode [ 107.384296][ T5617] veth1_macvtap: entered promiscuous mode [ 107.408914][ T5614] veth1_macvtap: entered promiscuous mode [ 107.426623][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.507089][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.527902][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.543680][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.544654][ T5616] veth0_macvtap: entered promiscuous mode [ 107.576907][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.578053][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.617724][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.618816][ T5616] veth1_macvtap: entered promiscuous mode [ 107.635848][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.729469][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.825839][ T153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.858279][ T1147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.901654][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.966467][ T1147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.972999][ T3403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.977482][ T3403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.031928][ T3403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.089317][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.110380][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.206950][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.499099][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.555261][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.555282][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.562434][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.611796][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.634186][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.927683][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.927700][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.158517][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.158538][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.298883][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.298905][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.578985][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.579005][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.753818][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.753838][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.959010][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.959031][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.274748][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.274778][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.697823][ T5596] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.954750][ T5596] usb 4-1: Using ep0 maxpacket: 16 [ 111.097693][ T5596] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.097752][ T5596] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 111.097798][ T5596] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.097822][ T5596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.429025][ T5596] usb 4-1: config 0 descriptor?? [ 111.874409][ T5596] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 112.039974][ T822] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.124473][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.234310][ T822] usb 2-1: Using ep0 maxpacket: 32 [ 112.236994][ T822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.237049][ T822] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.237080][ T822] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 112.237098][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.334938][ T822] usb 2-1: config 0 descriptor?? [ 112.335557][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 112.338751][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 112.338807][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.338834][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.338862][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.338889][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.338934][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.338959][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.575171][ T822] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 112.729606][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 112.729659][ T10] usbtmc 1-1:16.0: can't read capabilities [ 113.022095][ T0] ------------[ cut here ]------------ [ 113.022108][ T0] task_rq(p) != rq [ 113.022119][ T0] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#1: swapper/1/0 [ 113.022159][ T0] Modules linked in: [ 113.022189][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.022209][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.022222][ T0] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 113.022248][ T0] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 113.022262][ T0] RSP: 0018:ffffc900001e7ba0 EFLAGS: 00010006 [ 113.022277][ T0] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 113.022290][ T0] RDX: 0000000000000000 RSI: ffff8880317e0000 RDI: ffff8880b873ba40 [ 113.022302][ T0] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 113.022315][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 113.022335][ T0] R13: 1ffff110170e78d6 R14: ffff8880317e0000 R15: ffffffff8dc257d0 [ 113.022348][ T0] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 113.022362][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.022374][ T0] CR2: 00007fdc65f4a540 CR3: 00000000296b4000 CR4: 00000000003526f0 [ 113.022389][ T0] Call Trace: [ 113.022400][ T0] [ 113.022411][ T0] set_next_task_fair+0xa68/0xce0 [ 113.022433][ T0] ? update_rq_avg_idle+0x8e/0x240 [ 113.022460][ T0] __schedule+0x3e03/0x5550 [ 113.022502][ T0] ? __pfx___schedule+0x10/0x10 [ 113.022520][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 113.022550][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 113.022578][ T0] schedule_idle+0x51/0x90 [ 113.022598][ T0] do_idle+0x4a6/0x540 [ 113.022624][ T0] ? __pfx_do_idle+0x10/0x10 [ 113.022651][ T0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 113.022677][ T0] cpu_startup_entry+0x43/0x60 [ 113.022702][ T0] start_secondary+0x101/0x110 [ 113.022722][ T0] common_startup_64+0x13e/0x157 [ 113.022763][ T0] [ 113.022771][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 113.022783][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.022802][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.022812][ T0] Call Trace: [ 113.022819][ T0] [ 113.022827][ T0] vpanic+0x56c/0xa60 [ 113.022854][ T0] ? __pfx__printk+0x10/0x10 [ 113.022877][ T0] ? __pfx_vpanic+0x10/0x10 [ 113.022901][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 113.022927][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 113.022958][ T0] panic+0xc5/0xd0 [ 113.022983][ T0] ? __pfx_panic+0x10/0x10 [ 113.023016][ T0] ? common_startup_64+0x13e/0x157 [ 113.023047][ T0] __warn+0x315/0x4c0 [ 113.023071][ T0] ? hrtick_start_fair+0x196/0x1f0 [ 113.023096][ T0] ? hrtick_start_fair+0x196/0x1f0 [ 113.023120][ T0] __report_bug+0x339/0x540 [ 113.023148][ T0] ? hrtick_start_fair+0x196/0x1f0 [ 113.023172][ T0] ? __pfx___report_bug+0x10/0x10 [ 113.023195][ T0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 113.023219][ T0] ? update_curr+0x6e/0x460 [ 113.023250][ T0] ? hrtick_start_fair+0x196/0x1f0 [ 113.023273][ T0] report_bug+0x16a/0x220 [ 113.023296][ T0] ? hrtick_start_fair+0x196/0x1f0 [ 113.023325][ T0] ? hrtick_start_fair+0x198/0x1f0 [ 113.023348][ T0] handle_bug+0x9c/0x200 [ 113.023374][ T0] exc_invalid_op+0x1a/0x50 [ 113.023400][ T0] asm_exc_invalid_op+0x1a/0x20 [ 113.023418][ T0] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 113.023441][ T0] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 113.023455][ T0] RSP: 0018:ffffc900001e7ba0 EFLAGS: 00010006 [ 113.023470][ T0] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 113.023483][ T0] RDX: 0000000000000000 RSI: ffff8880317e0000 RDI: ffff8880b873ba40 [ 113.023495][ T0] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 113.023508][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 113.023521][ T0] R13: 1ffff110170e78d6 R14: ffff8880317e0000 R15: ffffffff8dc257d0 [ 113.023541][ T0] ? set_next_task_fair+0xa4e/0xce0 [ 113.023566][ T0] set_next_task_fair+0xa68/0xce0 [ 113.023587][ T0] ? update_rq_avg_idle+0x8e/0x240 [ 113.023614][ T0] __schedule+0x3e03/0x5550 [ 113.023655][ T0] ? __pfx___schedule+0x10/0x10 [ 113.023673][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 113.023702][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 113.023730][ T0] schedule_idle+0x51/0x90 [ 113.023749][ T0] do_idle+0x4a6/0x540 [ 113.023776][ T0] ? __pfx_do_idle+0x10/0x10 [ 113.023803][ T0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 113.023830][ T0] cpu_startup_entry+0x43/0x60 [ 113.023855][ T0] start_secondary+0x101/0x110 [ 113.023874][ T0] common_startup_64+0x13e/0x157 [ 113.023914][ T0] [ 114.129361][ T0] Shutting down cpus with NMI [ 114.130009][ T0] Kernel Offset: disabled