last executing test programs: 15.576335346s ago: executing program 0 (id=1): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/166, 0xa6}], 0x1, 0x0, 0x0, 0x4000050}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 8.127355067s ago: executing program 1 (id=7): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb022000020205090505"], 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x8e2b01) write$char_usb(r0, 0x0, 0x0) 7.15352591s ago: executing program 2 (id=8): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x1000, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x7, 0x9, 0x4, 0xed, 0x5}, {0x7fff, 0x0, 0x0, 0x6, 0x0, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x42}, {0x4, 0xa, 0x20, 0x9, 0x40, 0x0, 0x61, 0x1, 0x2, 0xfc, 0x0, 0x0, 0xfffffffffffffffd}], 0x1efffff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 6.530087748s ago: executing program 2 (id=10): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f0000000580)={'sit0\x00', 0x0}) r10 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r11 = openat$cgroup_ro(r10, 0x0, 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) syz_ublk_setup_queues(r8, r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683b, 0x1820, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) 4.791809568s ago: executing program 2 (id=11): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) 4.330852564s ago: executing program 1 (id=12): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x30, 0x80001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.330683352s ago: executing program 2 (id=13): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xb, "", [{{0x9, 0x4, 0x0, 0x12, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0xb0, 0x80, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="40242800000028231ba57fb04d4f1e07d695f268e872d3852798b2974b1fc634f26cdaa2fd21e2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.121103145s ago: executing program 3 (id=14): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, r2, r3, 0x3, 0x3, 0x4, 0x18, {0x8, 0x5, 0x5, 0x8, 0x5, 0x9, 0x1, 0x8, 0x2, 0xd24, 0x1040, 0x3, 0x7ffffffe, 0xd, "6f4f1b1330d057a2f7d15586b7445443c528a9be00"}}) 3.675885133s ago: executing program 1 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xffdd) 3.67553321s ago: executing program 3 (id=16): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 3.144329165s ago: executing program 3 (id=17): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) gettimeofday(0x0, 0x0) 1.864850678s ago: executing program 3 (id=18): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x7, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x5, 0xfffffffffffffffd, 0xc595, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 910.914309ms ago: executing program 1 (id=19): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000003580)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="a8d07cee6d4e9ce02c2029fb3501d07c23435d11405c4f89e83f5ae700b509defbafce9712c72082fc22b4c6291aeb006bf6223c8d5928b69473ad62aaae460674867a046ad5b510c29796eed953ae23f31730c1207cdfafd481c40ecfd47a8e147b03b6d01f0606192dc46af639f7509a25bea9a8345bd8e7be5d7260edf07a21f49073752f859ea9d6d6cbf7ded678a80259d2f62839fbb27be1e603c21a1688d66ffe429cd192c570540b67ad479b5365bd8adeb6d554", 0xb8}, {&(0x7f0000000700)="ec8bdaf53ab25402cfb5ee0ed9f8e04c474b3e5f085c1d724f0cd6c2257dcc5e8bc94e6cc40b157be24d2f08cb2536cd78d6fd236be167b18d721525af8309bc5a373b0f142cebb71c14c0b501d4cfddb07e528302593bbeaf5b6ff983d50992dbd39834369679a5fd6370ed26f1ef1d9ffbba6068b5d55c9123e1e3c13c009dfc5f8e57710f5b33cbfd225d966b440bf2b5f09300e5bc97a0f9e0e8", 0x9c}, {&(0x7f0000002080)="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", 0xe4a}, {&(0x7f0000000400)="d0485b91fcedc210538ad5a3ffdb4d7478cc54a3874fb81bb6cdc566845b961f32d528562ddbf860253e5c8f4b077a39ddb756d07d172c230f1d5299e4140fca7fbf8401980a06b606ee81180553cbf9c2da03a9f97b2b581005f0b1a27cc2741bc9b2", 0x63}], 0x4, 0x0, 0x0, 0x40000}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) 763.545561ms ago: executing program 3 (id=20): socket(0x10, 0x80002, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000500)={0x3a, &(0x7f0000000180)=[{0x23, '\x00', @data=0x8001, 0xffffffb3}]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) mlockall(0x7) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3) socket$packet(0x11, 0x0, 0x300) 517.510399ms ago: executing program 1 (id=21): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000740)={0xa, 0x4e24, 0xda9, @loopback, 0x9}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000003c0)="6ca19f4adf85668402216706e2fcf903c251e962f4cf63a39b7a3651bf5b28e3855ef1b70669a01714f90632c3f82d2caad73dcb417fae773a7536d63231619aeedabc9b6530474a8aa8250ce3b87287c87e16f60915d7bbc2ccedd62c46fbbbab6fa7a9f8390255d9551a512f0f839712a835c712371ddb842e7058d0829970042355e601acc23319b4430dca582e809aae771b037cc927b485de01b82e7b7051d16ad2d70b4267d963d6cde97e1d5f6cdfb34d63f834039ee941e3d9384cf0d48458ecf0a75f35f906f519d4a34e5fb50f3ded5e", 0xd5}, {&(0x7f0000000600)="aeb3d678aadce59998be9c51996b28597fd656a33692a07cdf41831d0d6341248dc886e2ae658b4f2bb928963d92de800cf4525a361cab2706f0bede8be79bc8eb81913c135173d6319e1ec68aa76a9962fd43ad9ec2cd7fae0c73f2073a25c53b97", 0x62}, {&(0x7f0000000680)="8a323fecbc7047e5683d038d930e7a84e6d838a96705d8", 0x17}, {&(0x7f00000006c0)="0333f40fb7c60afdfaa9fe958ec0a74f9d8623a5e99a258b933e000000000000", 0x20}, {&(0x7f0000000700)="451311f53b12d4e920ab5ae8cacdb660c8c5ea45208827f0f11c8c003b85cd9f3fd5aab4", 0x24}, {&(0x7f00000007c0)="f1646d7efa3963adf017da38d702c73916fd60a490ebe2c4872aeec7f0dd5000905be61d1263f25307ccdfa7c5e4678d1e0604dfaaa328bc1e4d1add9f1d6882e30d95a26515d4e1f7f1f86a87467fd70130db8c0806247d350c9277d85b43bd29f5c98aa86112f0b4c3834bd5f055b78973f42a00342afac7eb54cb7e298ff0ab4d8814899279c03df69688da908c83b2a5345f21da70c12d6b4e10158f94416394785765dadcac264033ce5e31c4288a270962eb11bd8efbc840fea8bc44da48b2e55e8f0922259afbf1b4bf0dc04cb54689cfa6874578cbe07f0277800c8096a0a18f2caa5218df57090c3f21e6e911b4622a09600543ec", 0xf9}], 0x6}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f40)="e48b564cd34bc62df2ac238e1d3bed410fe86e8256b6fc2f9bc643203392ae36e1c0f69aa7e6c538ded95afe4b88eff836586e1d3bede821c4609d624135e88ae30508b1a2ddbddcff2c18720b1fb717fafe11116c8cc95ac0f8aa27e6f8975041d307", 0x63}, {&(0x7f0000001d80)="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", 0x2c0}], 0x2}}], 0x2, 0x400c044) 271.370518ms ago: executing program 32 (id=1): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/166, 0xa6}], 0x1, 0x0, 0x0, 0x4000050}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 245.339726ms ago: executing program 2 (id=23): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0x1, 0x0, 0x0, 0x5d, 0x60000, 0x49, 0x5, 0x666e2faf, 0x0, [{0x6, 0x6, 0xd}, {0xa, 0x4, 0x1000}, {0xfffffffb, 0x10a8, 0x8}, {0x2, 0x100, 0x3316a90a}, {0x1fb9, 0x6, 0x1}, {0xfffffffe, 0x2, 0x3}, {0xfff, 0x3, 0x3}, {0x6, 0xffffffff, 0x8}, {0x4, 0x2, 0xfffffffd}, {0x8, 0x9, 0x10001}, {0x8, 0x2, 0xfff80000}, {0x2, 0x80000000, 0x4}, {0xff, 0x80, 0x2}, {0xa, 0xfffffffe, 0x10001}, {0x4, 0x9, 0x7fffffff}, {0xe3, 0x8, 0xcdc}, {0x81, 0x0, 0x200}, {0x7fff, 0x43d100d1, 0x4}, {0x10, 0x5, 0x1}, {0xffffffff, 0x4}, {0x6, 0x7, 0x81}, {0x4e7, 0x8, 0xd201070}, {0x0, 0x7}, {0x5, 0x10001, 0xffff}, {0x3, 0x7, 0xa050}, {0x461, 0x1e1b, 0xfffffff7}, {0x1, 0x6, 0x5}, {0x7, 0x10001, 0x8}, {0x87c, 0x2, 0x2400}, {0xf74, 0x6e06, 0x8}, {0x1, 0xabc, 0x1e}, {0x7, 0x6, 0x5}, {0x3, 0x8, 0xba}, {0x3, 0xff, 0x10001}, {0x1, 0x8, 0xc}, {0xb57, 0x7, 0x8}, {0x8}, {0x6, 0xbc, 0x8}, {0x2, 0x8}, {0x2a0a, 0xc7a, 0x8}, {0x7, 0x7, 0x3}, {0x80000000, 0x7, 0xb}, {0x0, 0x7fffffff, 0x35}, {0xa, 0x8000}, {0x5, 0x7f, 0x100}, {0x175, 0xa6, 0x9}, {0x5, 0x3ff, 0xfffffffb}, {0x80000001, 0x20, 0x3}, {0x3, 0x8, 0x5}, {0x10000, 0x4, 0x87}, {0x4, 0x33c, 0x80000001}, {0x8000, 0x0, 0x6}, {0x100, 0xdbd, 0x4}, {0x6c, 0x0, 0x5}, {0xf17, 0x4, 0x2}, {0x1, 0x46ff, 0xfffffff9}, {0x6, 0xffffffff, 0x6}, {0xfffffffa, 0x6, 0x3}, {0x4, 0x6, 0x80000001}, {0x1e362597, 0x101, 0xfffffffd}, {0x8, 0x6, 0xab}, {0x8000, 0x7f, 0x9}, {0x8, 0xb7, 0x7b}, {0x0, 0xe, 0x7}, {0xa, 0x558, 0xe}, {0x712c758c, 0x8, 0x6}, {0x9, 0xe, 0x1ff}, {0x58, 0xb0d, 0x5a1b}, {0x80000001, 0x0, 0x101}, {0x98, 0x7, 0x2}, {0x7dc, 0x10001, 0x6}, {0x2, 0x0, 0x6}, {0xa, 0x0, 0x10001}]}) 166.057185ms ago: executing program 1 (id=24): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000280)={0x14, &(0x7f0000000040)={0x40, 0xf, 0x102, {0x102, 0x9, "90ccc026c62aa981827270dcfedb6523f9d79860c62cc71e5f35dd2d3c2d680b8e9e87d7bdc2c2979dca699e8854ef34615cd6b63214fcf91da8a9cc54a4e9204095923fc6e7e0f5e099eed677ade9979a18cf8b0a831bad3c5a7dcdd8c570634d4a25aeba58bdfdde27962449b78bed93f64f2bd592af25bdeec0ddab3ce88c9c36e4766a5af8bda2a26b015ce6ab8063d640c38725d337d4e64b69ce8ce72c7c1d639c108edacf1788621599d761f3b0eb1d33a534a38971685a724e4e2e2aacd4f1d0ef017d41e007ab0947e206050c4f16ab6d313d84a713194c92ce4e05378221640421735df27eaec1bffddd604716ad5a728af442cbf817ec8c1f9aa0"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x40, 0xb, 0x3a, "dcbc198c310e6fe02c54cbb004098356a39470b7142473285fd2f7304e258166b87bd8b31f1a7a1cc9e5f128a61383db17341982df431aec8fa6"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x50}, &(0x7f0000000380)={0x20, 0x81, 0x1, "c4"}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "1c917c"}, &(0x7f0000000400)={0x20, 0x83, 0x1, 'V'}, &(0x7f0000000440)={0x20, 0x84, 0x4, "511b5dae"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "009de0"}}) 5.80914ms ago: executing program 3 (id=25): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = syz_ublk_setup_io_uring(0x22, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 0s ago: executing program 2 (id=26): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x20, r1, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) readv(r4, &(0x7f0000003a00)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 75.233184][ T5599] cgroup: Unknown subsys name 'net' [ 75.474657][ T5599] cgroup: Unknown subsys name 'cpuset' [ 75.530798][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.136989][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.469405][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.491330][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.509529][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.533163][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.534844][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.553181][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.558143][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.567841][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.587257][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.589943][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.595655][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.598973][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.602748][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.605092][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.636167][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.638983][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.641370][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.648035][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.649896][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.650770][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.504231][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.505532][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.506236][ T5612] bridge_slave_0: entered allmulticast mode [ 81.508034][ T5612] bridge_slave_0: entered promiscuous mode [ 81.548363][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.548536][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.548859][ T5610] bridge_slave_0: entered allmulticast mode [ 81.571422][ T5610] bridge_slave_0: entered promiscuous mode [ 81.573864][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.574101][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.574347][ T5612] bridge_slave_1: entered allmulticast mode [ 81.596764][ T37] cfg80211: failed to load regulatory.db [ 81.604043][ T5612] bridge_slave_1: entered promiscuous mode [ 81.652229][ T4926] Bluetooth: hci3: command tx timeout [ 81.652393][ T5628] Bluetooth: hci0: command tx timeout [ 81.656561][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.656842][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.657477][ T5610] bridge_slave_1: entered allmulticast mode [ 81.666530][ T5610] bridge_slave_1: entered promiscuous mode [ 81.730181][ T4926] Bluetooth: hci2: command tx timeout [ 81.730343][ T5628] Bluetooth: hci1: command tx timeout [ 81.735255][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.735548][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.735802][ T5613] bridge_slave_0: entered allmulticast mode [ 81.739366][ T5613] bridge_slave_0: entered promiscuous mode [ 81.867948][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.868240][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.868462][ T5613] bridge_slave_1: entered allmulticast mode [ 81.907942][ T5613] bridge_slave_1: entered promiscuous mode [ 81.915701][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.916016][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.916248][ T5611] bridge_slave_0: entered allmulticast mode [ 81.919682][ T5611] bridge_slave_0: entered promiscuous mode [ 81.986145][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.009495][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.009782][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.012107][ T5611] bridge_slave_1: entered allmulticast mode [ 82.015030][ T5611] bridge_slave_1: entered promiscuous mode [ 82.045482][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.113585][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.146815][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.168608][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.215884][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.220755][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.245883][ T5612] team0: Port device team_slave_0 added [ 82.265985][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.268429][ T5610] team0: Port device team_slave_0 added [ 82.274477][ T5612] team0: Port device team_slave_1 added [ 82.309288][ T5610] team0: Port device team_slave_1 added [ 82.327978][ T5613] team0: Port device team_slave_0 added [ 82.372459][ T5613] team0: Port device team_slave_1 added [ 82.377280][ T5611] team0: Port device team_slave_0 added [ 82.405350][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.405366][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.405389][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.435437][ T5611] team0: Port device team_slave_1 added [ 82.439160][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.439174][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.439197][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.444425][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.444438][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.444461][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.490108][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.490124][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.490147][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.510459][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.510474][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.510511][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.563123][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.563139][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.563162][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.565778][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.565791][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.565813][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.594860][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.594875][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.594898][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.760367][ T5612] hsr_slave_0: entered promiscuous mode [ 82.762597][ T5612] hsr_slave_1: entered promiscuous mode [ 82.792171][ T5610] hsr_slave_0: entered promiscuous mode [ 82.793315][ T5610] hsr_slave_1: entered promiscuous mode [ 82.794308][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 82.794389][ T5610] Cannot create hsr debugfs directory [ 82.839058][ T5613] hsr_slave_0: entered promiscuous mode [ 82.842857][ T5613] hsr_slave_1: entered promiscuous mode [ 82.844430][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 82.844452][ T5613] Cannot create hsr debugfs directory [ 82.886368][ T5611] hsr_slave_0: entered promiscuous mode [ 82.887437][ T5611] hsr_slave_1: entered promiscuous mode [ 82.888344][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 82.888365][ T5611] Cannot create hsr debugfs directory [ 83.730274][ T4926] Bluetooth: hci3: command tx timeout [ 83.730711][ T5628] Bluetooth: hci0: command tx timeout [ 83.811158][ T4926] Bluetooth: hci2: command tx timeout [ 83.811234][ T5628] Bluetooth: hci1: command tx timeout [ 83.924271][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.975180][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.986766][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.015798][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.019978][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.065969][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.086127][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.126666][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.226367][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.267346][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.279723][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.316208][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.318346][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.353118][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.379778][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.414416][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.558487][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.597079][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.605839][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.649672][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.664564][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.702107][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.739286][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.775420][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.903240][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.946604][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.956162][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.995605][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.003011][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.033636][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.048965][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.073561][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.156649][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.258607][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.284134][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.312236][ T1352] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.312486][ T1352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.358740][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.358885][ T1438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.422513][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.477994][ T1352] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.478144][ T1352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.499090][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.519316][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.519464][ T1438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.615018][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.634791][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.658034][ T1352] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.658691][ T1352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.748299][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.748391][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.813035][ T4926] Bluetooth: hci3: command tx timeout [ 85.813118][ T5628] Bluetooth: hci0: command tx timeout [ 85.835755][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.891810][ T4926] Bluetooth: hci2: command tx timeout [ 85.891895][ T5628] Bluetooth: hci1: command tx timeout [ 85.896945][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.897348][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.994225][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.994337][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.825647][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.999838][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.321050][ T5612] veth0_vlan: entered promiscuous mode [ 87.337455][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.427342][ T5612] veth1_vlan: entered promiscuous mode [ 87.443110][ T5613] veth0_vlan: entered promiscuous mode [ 87.458098][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.504107][ T5613] veth1_vlan: entered promiscuous mode [ 87.578316][ T5612] veth0_macvtap: entered promiscuous mode [ 87.608794][ T5611] veth0_vlan: entered promiscuous mode [ 87.615415][ T5612] veth1_macvtap: entered promiscuous mode [ 87.688791][ T5613] veth0_macvtap: entered promiscuous mode [ 87.694073][ T5611] veth1_vlan: entered promiscuous mode [ 87.717403][ T5610] veth0_vlan: entered promiscuous mode [ 87.728659][ T5613] veth1_macvtap: entered promiscuous mode [ 87.748862][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.775348][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.796385][ T5610] veth1_vlan: entered promiscuous mode [ 87.827690][ T1438] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.846394][ T1438] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.862560][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.866256][ T1438] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.890256][ T4926] Bluetooth: hci3: command tx timeout [ 87.890309][ T5628] Bluetooth: hci0: command tx timeout [ 87.894400][ T1438] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.970294][ T4926] Bluetooth: hci2: command tx timeout [ 87.970345][ T5628] Bluetooth: hci1: command tx timeout [ 87.989583][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.992306][ T5611] veth0_macvtap: entered promiscuous mode [ 88.083830][ T5611] veth1_macvtap: entered promiscuous mode [ 88.115773][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.143613][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.155247][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.220802][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.347707][ T5610] veth0_macvtap: entered promiscuous mode [ 88.474134][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.477113][ T5610] veth1_macvtap: entered promiscuous mode [ 88.535754][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.535770][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.603305][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.682439][ T1352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.688861][ T1352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.705880][ T1352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.716482][ T1352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.738632][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.745630][ T1438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.745647][ T1438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.862042][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.870563][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.870581][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.088933][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.107221][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.119760][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.269797][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.269814][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.271140][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.559338][ T5767] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 89.718207][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.718226][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.118109][ T5777] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.127133][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.127152][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.767252][ T1352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.767270][ T1352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.914801][ T5777] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 94.666637][ T1438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.666704][ T1438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.491799][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.792429][ T9] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 98.792455][ T9] usb 2-1: config 5 has no interface number 0 [ 98.792496][ T9] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 98.792522][ T9] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.792543][ T9] usb 2-1: config 5 interface 123 has no altsetting 0 [ 98.799327][ T9] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 98.799356][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.799376][ T9] usb 2-1: Product: syz [ 98.799390][ T9] usb 2-1: Manufacturer: syz [ 98.799402][ T9] usb 2-1: SerialNumber: syz [ 98.993170][ T823] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 100.205065][ T823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.205092][ T823] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 100.205140][ T823] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 100.205162][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.266610][ T823] usb 4-1: config 0 descriptor?? [ 100.343549][ T823] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 100.346577][ T823] dvb-usb: bulk message failed: -22 (3/0) [ 100.425695][ T823] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 100.439087][ T823] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 100.439178][ T823] usb 4-1: media controller created [ 100.459244][ T823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.543830][ T823] dvb-usb: bulk message failed: -22 (6/0) [ 100.543950][ T823] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 100.587764][ T823] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 100.618288][ T823] dvb-usb: schedule remote query interval to 150 msecs. [ 100.618310][ T823] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 100.645657][ T5795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.646207][ T5795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.773697][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 100.773726][ T32] dvb-usb: error while querying for an remote control event. [ 100.820154][ T823] usb 4-1: USB disconnect, device number 2 [ 100.884236][ T5808] capability: warning: `syz.2.11' uses 32-bit capabilities (legacy support in use) [ 101.237066][ T9] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 101.473874][ T9] usb 2-1: USB disconnect, device number 2 [ 101.509013][ T5812] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 101.607377][ T5702] IPVS: starting estimator thread 0... [ 101.682471][ T37] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.720170][ T5816] IPVS: using max 9 ests per chain, 21600 per kthread [ 101.853970][ T37] usb 3-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 101.854003][ T37] usb 3-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 101.854030][ T37] usb 3-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.854055][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.854087][ T37] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 101.854109][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.038183][ T5628] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 102.038228][ T5628] CPU: 1 UID: 0 PID: 5628 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 102.038253][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 102.038265][ T5628] Workqueue: hci2 hci_rx_work [ 102.038301][ T5628] Call Trace: [ 102.038314][ T5628] [ 102.038323][ T5628] dump_stack_lvl+0xe8/0x150 [ 102.038354][ T5628] sysfs_create_dir_ns+0x271/0x2a0 [ 102.038388][ T5628] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 102.038410][ T5628] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 102.038446][ T5628] ? rt_spin_unlock+0x160/0x200 [ 102.038469][ T5628] kobject_add_internal+0x631/0xd10 [ 102.038510][ T5628] kobject_add+0x163/0x240 [ 102.038546][ T5628] ? __pfx_kobject_add+0x10/0x10 [ 102.038585][ T5628] ? get_device_parent+0x370/0x3a0 [ 102.038617][ T5628] device_add+0x408/0xb90 [ 102.038645][ T5628] hci_conn_add_sysfs+0xd5/0x210 [ 102.038671][ T5628] le_conn_complete_evt+0x10e6/0x16b0 [ 102.038710][ T5628] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 102.038739][ T5628] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 102.038772][ T5628] ? lockdep_hardirqs_on+0x7a/0x110 [ 102.038801][ T5628] ? skb_pull_data+0xfb/0x200 [ 102.038836][ T5628] hci_le_conn_complete_evt+0x187/0x470 [ 102.038871][ T5628] hci_event_packet+0x659/0xef0 [ 102.038901][ T5628] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 102.038920][ T5628] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 102.038945][ T5628] ? __pfx_hci_event_packet+0x10/0x10 [ 102.038966][ T5628] ? rt_spin_unlock+0x14f/0x200 [ 102.038996][ T5628] ? hci_send_to_monitor+0xe2/0x590 [ 102.039029][ T5628] hci_rx_work+0x3ee/0x1040 [ 102.039062][ T5628] ? process_one_work+0x8be/0x1630 [ 102.039091][ T5628] process_one_work+0x98b/0x1630 [ 102.039139][ T5628] ? __pfx_process_one_work+0x10/0x10 [ 102.039166][ T5628] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.039205][ T5628] worker_thread+0xb49/0x1140 [ 102.039244][ T5628] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 102.039281][ T5628] kthread+0x388/0x470 [ 102.039305][ T5628] ? __pfx_worker_thread+0x10/0x10 [ 102.039332][ T5628] ? __pfx_kthread+0x10/0x10 [ 102.039354][ T5628] ret_from_fork+0x514/0xb70 [ 102.039379][ T5628] ? __pfx_ret_from_fork+0x10/0x10 [ 102.039402][ T5628] ? __switch_to+0xc79/0x1410 [ 102.039424][ T5628] ? __pfx_kthread+0x10/0x10 [ 102.039445][ T5628] ret_from_fork_asm+0x1a/0x30 [ 102.039487][ T5628] [ 102.039540][ T5628] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 102.039580][ T5628] Bluetooth: hci2: failed to register connection device [ 103.600056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.685824][ T37] usb 3-1: config 0 descriptor?? [ 103.687726][ T5813] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.027101][ T823] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 104.266230][ T37] ryos 0003:1E7D:3232.0001: unknown main item tag 0x2 [ 104.266268][ T37] ryos 0003:1E7D:3232.0001: unknown main item tag 0x7 [ 104.266294][ T37] ryos 0003:1E7D:3232.0001: unknown main item tag 0x2 [ 104.266318][ T37] ryos 0003:1E7D:3232.0001: unknown main item tag 0x0 [ 104.266342][ T37] ryos 0003:1E7D:3232.0001: unknown main item tag 0x0 [ 104.266366][ T37] ryos 0003:1E7D:3232.0001: unknown main item tag 0x0 [ 104.266390][ T37] ryos 0003:1E7D:3232.0001: unknown main item tag 0x0 [ 104.266412][ T37] ryos 0003:1E7D:3232.0001: unknown main item tag 0x0 [ 104.266436][ T37] ryos 0003:1E7D:3232.0001: unknown main item tag 0x0 [ 104.266460][ T37] ryos 0003:1E7D:3232.0001: unknown main item tag 0x0 [ 104.420716][ T37] ryos 0003:1E7D:3232.0001: hidraw0: USB HID v0.08 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 104.606324][ T37] usb 3-1: USB disconnect, device number 2 [ 104.987946][ T5832] fido_id[5832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 105.406067][ T5842] usb usb7: usbfs: process 5842 (syz.2.23) did not claim interface 0 before use [ 105.626797][ T18] ------------[ cut here ]------------ [ 105.626807][ T18] task_rq(p) != rq [ 105.626815][ T18] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#0: rcu_preempt/18 [ 105.626846][ T18] Modules linked in: [ 105.626859][ T18] CPU: 0 UID: 0 PID: 18 Comm: rcu_preempt Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.626875][ T18] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.626884][ T18] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 105.626903][ T18] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 105.626915][ T18] RSP: 0018:ffffc900001777e0 EFLAGS: 00010087 [ 105.626926][ T18] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 105.626937][ T18] RDX: 0000000000000000 RSI: ffff88802a969f00 RDI: ffff8880b863ba40 [ 105.626946][ T18] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 105.626956][ T18] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 105.626966][ T18] R13: 1ffff110170c78d6 R14: ffff88802a969f00 R15: ffffffff8dc257d8 [ 105.626977][ T18] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 105.626988][ T18] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.626998][ T18] CR2: 00007f6f10545690 CR3: 0000000040b3a000 CR4: 00000000003526f0 [ 105.627010][ T18] Call Trace: [ 105.627021][ T18] [ 105.627030][ T18] set_next_task_fair+0xa68/0xce0 [ 105.627051][ T18] __schedule+0x3e03/0x5550 [ 105.627086][ T18] ? __pfx___schedule+0x10/0x10 [ 105.627109][ T18] ? schedule+0x90/0x360 [ 105.627126][ T18] schedule+0x164/0x360 [ 105.627150][ T18] schedule_timeout+0x158/0x2c0 [ 105.627168][ T18] ? __pfx_schedule_timeout+0x10/0x10 [ 105.627184][ T18] ? __pfx_process_timeout+0x10/0x10 [ 105.627203][ T18] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 105.627221][ T18] ? prepare_to_swait_event+0x340/0x370 [ 105.627241][ T18] rcu_gp_fqs_loop+0x312/0x11b0 [ 105.627261][ T18] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.627280][ T18] ? rcu_gp_init+0x136b/0x1610 [ 105.627302][ T18] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 105.627318][ T18] ? _raw_spin_unlock_irq+0x2e/0x50 [ 105.627339][ T18] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.627359][ T18] rcu_gp_kthread+0x9e/0x2b0 [ 105.627379][ T18] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 105.627395][ T18] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.627413][ T18] ? __kthread_parkme+0x7a/0x1f0 [ 105.627427][ T18] ? __kthread_parkme+0x19c/0x1f0 [ 105.627445][ T18] kthread+0x388/0x470 [ 105.627460][ T18] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 105.627477][ T18] ? __pfx_kthread+0x10/0x10 [ 105.627499][ T18] ret_from_fork+0x514/0xb70 [ 105.627526][ T18] ? __pfx_ret_from_fork+0x10/0x10 [ 105.627538][ T18] ? __switch_to+0xc79/0x1410 [ 105.627549][ T18] ? __pfx_kthread+0x10/0x10 [ 105.627561][ T18] ret_from_fork_asm+0x1a/0x30 [ 105.627582][ T18] [ 105.627587][ T18] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.627595][ T18] CPU: 0 UID: 0 PID: 18 Comm: rcu_preempt Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.627606][ T18] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.627611][ T18] Call Trace: [ 105.627615][ T18] [ 105.627619][ T18] vpanic+0x56c/0xa60 [ 105.627634][ T18] ? __pfx__printk+0x10/0x10 [ 105.627644][ T18] ? __pfx_vpanic+0x10/0x10 [ 105.627657][ T18] ? is_bpf_text_address+0x292/0x2b0 [ 105.627672][ T18] ? is_bpf_text_address+0x26/0x2b0 [ 105.627690][ T18] panic+0xc5/0xd0 [ 105.627704][ T18] ? __pfx_panic+0x10/0x10 [ 105.627722][ T18] ? ret_from_fork_asm+0x1a/0x30 [ 105.627737][ T18] __warn+0x315/0x4c0 [ 105.627751][ T18] ? hrtick_start_fair+0x196/0x1f0 [ 105.627765][ T18] ? hrtick_start_fair+0x196/0x1f0 [ 105.627779][ T18] __report_bug+0x339/0x540 [ 105.627795][ T18] ? hrtick_start_fair+0x196/0x1f0 [ 105.627809][ T18] ? __pfx___report_bug+0x10/0x10 [ 105.627822][ T18] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.627839][ T18] ? hrtick_start_fair+0x196/0x1f0 [ 105.627852][ T18] report_bug+0x16a/0x220 [ 105.627865][ T18] ? hrtick_start_fair+0x196/0x1f0 [ 105.627877][ T18] ? hrtick_start_fair+0x198/0x1f0 [ 105.627890][ T18] handle_bug+0x9c/0x200 [ 105.627904][ T18] exc_invalid_op+0x1a/0x50 [ 105.627919][ T18] asm_exc_invalid_op+0x1a/0x20 [ 105.627929][ T18] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 105.627943][ T18] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 105.627953][ T18] RSP: 0018:ffffc900001777e0 EFLAGS: 00010087 [ 105.627961][ T18] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 105.627969][ T18] RDX: 0000000000000000 RSI: ffff88802a969f00 RDI: ffff8880b863ba40 [ 105.627975][ T18] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 105.627982][ T18] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 105.627989][ T18] R13: 1ffff110170c78d6 R14: ffff88802a969f00 R15: ffffffff8dc257d8 [ 105.628000][ T18] ? set_next_task_fair+0xa4e/0xce0 [ 105.628020][ T18] set_next_task_fair+0xa68/0xce0 [ 105.628034][ T18] __schedule+0x3e03/0x5550 [ 105.628058][ T18] ? __pfx___schedule+0x10/0x10 [ 105.628073][ T18] ? schedule+0x90/0x360 [ 105.628086][ T18] schedule+0x164/0x360 [ 105.628098][ T18] schedule_timeout+0x158/0x2c0 [ 105.628110][ T18] ? __pfx_schedule_timeout+0x10/0x10 [ 105.628122][ T18] ? __pfx_process_timeout+0x10/0x10 [ 105.628135][ T18] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 105.628148][ T18] ? prepare_to_swait_event+0x340/0x370 [ 105.628162][ T18] rcu_gp_fqs_loop+0x312/0x11b0 [ 105.628176][ T18] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.628189][ T18] ? rcu_gp_init+0x136b/0x1610 [ 105.628205][ T18] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 105.628217][ T18] ? _raw_spin_unlock_irq+0x2e/0x50 [ 105.628232][ T18] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.628246][ T18] rcu_gp_kthread+0x9e/0x2b0 [ 105.628260][ T18] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 105.628272][ T18] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.628285][ T18] ? __kthread_parkme+0x7a/0x1f0 [ 105.628295][ T18] ? __kthread_parkme+0x19c/0x1f0 [ 105.628307][ T18] kthread+0x388/0x470 [ 105.628319][ T18] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 105.628331][ T18] ? __pfx_kthread+0x10/0x10 [ 105.628343][ T18] ret_from_fork+0x514/0xb70 [ 105.628356][ T18] ? __pfx_ret_from_fork+0x10/0x10 [ 105.628368][ T18] ? __switch_to+0xc79/0x1410 [ 105.628379][ T18] ? __pfx_kthread+0x10/0x10 [ 105.628391][ T18] ret_from_fork_asm+0x1a/0x30 [ 105.628411][ T18] [ 106.699804][ T18] Shutting down cpus with NMI [ 106.700124][ T18] Kernel Offset: disabled