last executing test programs: 19.564090154s ago: executing program 3 (id=168): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x30}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$kcm(0x21, 0x2, 0x2) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_RMID(0x0, 0x0) mremap(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 15.512561619s ago: executing program 4 (id=178): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 15.1366096s ago: executing program 3 (id=180): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 14.068612702s ago: executing program 3 (id=184): socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008881}, 0x0) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 13.570933797s ago: executing program 1 (id=186): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) 12.722905699s ago: executing program 1 (id=187): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000003c0)={0x8, 0x1000, "88ccc5daf80cd6a4471030967393bca9378705edf628163e", {0x7, 0x2}, 0x800}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x4, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {0x0, 0xffffffff}, {0x6}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="255b2a20f709b4a43a1307c620044218fe1f90c892edda55948fc95472faf24df297a8e4228b32dcc11a0a004c287b035078ffffffffffeffffd", 0x3a, 0x800, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x4e20, 0x4, @mcast2}}, {{0xa, 0x4e23, 0x9, @private2, 0x5}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="5f00000000003df150d0555f86dd60d2339600103afffe80000000000000000000000000e5d8e8528b535f890b0000000000000000018600907800fd020001000000060a00"], 0x0) 11.763946234s ago: executing program 3 (id=188): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f00000000c0)}, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x8, 0xffff}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) fsopen(&(0x7f0000000340)='zonefs\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r4, 0x0, 0xffff}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe23, 0x46, 0x8, 0xfffffed4, 0x0}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x44, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "63c36d06f388c8fb"}, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x6, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x44}}, 0x0) 11.69872078s ago: executing program 4 (id=189): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = inotify_init() r1 = creat(0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r0], 0x13) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 10.772794294s ago: executing program 4 (id=190): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f00000001c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r2) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0xfff0bdc1, 0x4100, 0xb, 0x0, 0xf423f, 0x800000000000003, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x7, 0xfffffffffffffffd, 0x3, 0x0, 0xe}) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, 0x0, 0x200048cc) 10.613899422s ago: executing program 3 (id=191): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x30}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$kcm(0x21, 0x2, 0x2) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_RMID(0x0, 0x0) mremap(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 7.814516825s ago: executing program 1 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0x6, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x401, 0x4}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x7, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.568559414s ago: executing program 4 (id=195): syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003c3fe5d08c016df05166b0102030109"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 6.318185105s ago: executing program 0 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.13108632s ago: executing program 0 (id=197): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) 5.803243626s ago: executing program 1 (id=198): socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008881}, 0x0) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 5.720636901s ago: executing program 3 (id=199): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.564462887s ago: executing program 0 (id=200): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = inotify_init() r1 = creat(0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r0], 0x13) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5.510184074s ago: executing program 2 (id=201): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000005c0)=0xe8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010103, 0x4e20, 0x3, 'sh\x00', 0x11, 0xa7e, 0x70}, 0x2c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="ff93af273af5cf9c2f3b16ca8434780000001000010400"/34, @ANYRES32=0x0, @ANYBLOB="5d5800000000000044001a8040000a8014000700fe8000000000000000000000000000aa14000700fc0100000000000000000000000000001400070000000000000000000000000000000000140003006970766c616e31000000000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @remote}}}, 0x118) 5.456692037s ago: executing program 1 (id=202): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.81291976s ago: executing program 0 (id=203): syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e04"], 0x7) 4.720028978s ago: executing program 2 (id=204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 4.565795065s ago: executing program 0 (id=205): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f00000001c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r2) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0xfff0bdc1, 0x4100, 0xb, 0x0, 0xf423f, 0x800000000000003, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x7, 0xfffffffffffffffd, 0x3, 0x0, 0xe}) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, 0x0, 0x200048cc) 3.034932021s ago: executing program 2 (id=206): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="10000000010001000000", @ANYRES32], 0x10}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, &(0x7f0000000280)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xe0}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111, 0x6f}], 0x1, &(0x7f0000000fc0)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x190}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000680)=""/28, 0x1c}], 0x1, &(0x7f0000000700)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000000980)=""/99, 0x63}, {0x0}, {0x0}, {&(0x7f0000000bc0)=""/237, 0xed}, {&(0x7f0000000cc0)=""/60, 0x3c}], 0x7, &(0x7f0000000e80)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}], 0x4, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.993199159s ago: executing program 4 (id=207): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 1.707600578s ago: executing program 4 (id=208): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000580)=0x4) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4e02) socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xc, 0xc8, 0xfa}}}, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) 1.705690469s ago: executing program 1 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0x6, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x401, 0x4}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x7, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.527054773s ago: executing program 2 (id=210): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) 1.374418161s ago: executing program 0 (id=211): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) read$FUSE(r2, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1b980c37, 0x121000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1003, 0x6, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) 1.176651069s ago: executing program 2 (id=212): getpeername(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x9f20b700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = inotify_init() r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r0], 0x13) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 87.155242][ T992] cfg80211: failed to load regulatory.db [ 90.165851][ T5787] cgroup: Unknown subsys name 'net' [ 90.388761][ T5787] cgroup: Unknown subsys name 'cpuset' [ 90.432656][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.466531][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.983972][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.989178][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.993164][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.994525][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.012424][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.025684][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.027454][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.028221][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.028373][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.030560][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.031547][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.034227][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.037940][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.038402][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.041065][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.140634][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.147534][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.150930][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.158379][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.161944][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.169343][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.259134][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.260801][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.264428][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.265246][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.156187][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 98.177093][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 98.266738][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 98.482973][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 98.659686][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 99.073471][ T5117] Bluetooth: hci1: command tx timeout [ 99.073764][ T61] Bluetooth: hci0: command tx timeout [ 99.151965][ T61] Bluetooth: hci2: command tx timeout [ 99.152044][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.152459][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.153928][ T5806] bridge_slave_0: entered allmulticast mode [ 99.155814][ T5806] bridge_slave_0: entered promiscuous mode [ 99.234356][ T61] Bluetooth: hci3: command tx timeout [ 99.243550][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.243685][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.243852][ T5809] bridge_slave_0: entered allmulticast mode [ 99.246573][ T5809] bridge_slave_0: entered promiscuous mode [ 99.276086][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.276298][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.276439][ T5806] bridge_slave_1: entered allmulticast mode [ 99.278224][ T5806] bridge_slave_1: entered promiscuous mode [ 99.373077][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.373232][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.373488][ T5809] bridge_slave_1: entered allmulticast mode [ 99.375520][ T5809] bridge_slave_1: entered promiscuous mode [ 99.391961][ T61] Bluetooth: hci4: command tx timeout [ 99.502803][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.502905][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.503048][ T5805] bridge_slave_0: entered allmulticast mode [ 99.504729][ T5805] bridge_slave_0: entered promiscuous mode [ 99.744182][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.744329][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.744527][ T5805] bridge_slave_1: entered allmulticast mode [ 99.746746][ T5805] bridge_slave_1: entered promiscuous mode [ 99.894228][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.894338][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.894469][ T5817] bridge_slave_0: entered allmulticast mode [ 99.896206][ T5817] bridge_slave_0: entered promiscuous mode [ 99.903799][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.986986][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.082993][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.083971][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.084113][ T5817] bridge_slave_1: entered allmulticast mode [ 100.085854][ T5817] bridge_slave_1: entered promiscuous mode [ 100.089394][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.165385][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.165807][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.166037][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.166374][ T5819] bridge_slave_0: entered allmulticast mode [ 100.168320][ T5819] bridge_slave_0: entered promiscuous mode [ 100.306871][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.382840][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.382982][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.383279][ T5819] bridge_slave_1: entered allmulticast mode [ 100.384975][ T5819] bridge_slave_1: entered promiscuous mode [ 100.715573][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.855846][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.858219][ T5806] team0: Port device team_slave_0 added [ 100.964188][ T5809] team0: Port device team_slave_0 added [ 101.035624][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.037580][ T5806] team0: Port device team_slave_1 added [ 101.125154][ T5809] team0: Port device team_slave_1 added [ 101.128834][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.152324][ T61] Bluetooth: hci0: command tx timeout [ 101.152359][ T61] Bluetooth: hci1: command tx timeout [ 101.232300][ T5117] Bluetooth: hci2: command tx timeout [ 101.284371][ T5805] team0: Port device team_slave_0 added [ 101.311993][ T5117] Bluetooth: hci3: command tx timeout [ 101.345546][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.471933][ T5117] Bluetooth: hci4: command tx timeout [ 101.486782][ T5805] team0: Port device team_slave_1 added [ 101.854614][ T5817] team0: Port device team_slave_0 added [ 101.856243][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.856259][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.856283][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.933376][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.933390][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.933405][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.014705][ T5817] team0: Port device team_slave_1 added [ 102.016017][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.016029][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.016044][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.113748][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.113766][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.113793][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.115733][ T5819] team0: Port device team_slave_0 added [ 102.231451][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.231468][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.231483][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.251083][ T5819] team0: Port device team_slave_1 added [ 102.325354][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.325367][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.325382][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.404067][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.404080][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.404094][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.583581][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.583653][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.583668][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.663540][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.663553][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.663568][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.864097][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.864116][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.864144][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.939083][ T5806] hsr_slave_0: entered promiscuous mode [ 102.940221][ T5806] hsr_slave_1: entered promiscuous mode [ 103.008002][ T5809] hsr_slave_0: entered promiscuous mode [ 103.009023][ T5809] hsr_slave_1: entered promiscuous mode [ 103.010464][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 103.010539][ T5809] Cannot create hsr debugfs directory [ 103.190745][ T5805] hsr_slave_0: entered promiscuous mode [ 103.192192][ T5805] hsr_slave_1: entered promiscuous mode [ 103.193130][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 103.193153][ T5805] Cannot create hsr debugfs directory [ 103.232299][ T5117] Bluetooth: hci1: command tx timeout [ 103.232337][ T5117] Bluetooth: hci0: command tx timeout [ 103.311930][ T61] Bluetooth: hci2: command tx timeout [ 103.402278][ T61] Bluetooth: hci3: command tx timeout [ 103.509654][ T5817] hsr_slave_0: entered promiscuous mode [ 103.510580][ T5817] hsr_slave_1: entered promiscuous mode [ 103.511183][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 103.511201][ T5817] Cannot create hsr debugfs directory [ 103.551900][ T61] Bluetooth: hci4: command tx timeout [ 103.878999][ T5819] hsr_slave_0: entered promiscuous mode [ 103.879956][ T5819] hsr_slave_1: entered promiscuous mode [ 103.880655][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 103.880673][ T5819] Cannot create hsr debugfs directory [ 105.108176][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.136034][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.166789][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.199090][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.304575][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.312974][ T61] Bluetooth: hci0: command tx timeout [ 105.312983][ T5117] Bluetooth: hci1: command tx timeout [ 105.360322][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.391873][ T5117] Bluetooth: hci2: command tx timeout [ 105.397581][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.464854][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.474719][ T5117] Bluetooth: hci3: command tx timeout [ 105.606544][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.631980][ T5117] Bluetooth: hci4: command tx timeout [ 105.641245][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.690094][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.745086][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.901146][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.944886][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.981900][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.027089][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.157224][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.188274][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.225239][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.260612][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.306145][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.372174][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.413401][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.413790][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.435172][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.460319][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.460457][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.544899][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.573756][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.598075][ T732] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.598214][ T732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.627004][ T732] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.627143][ T732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.687641][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.726412][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.729776][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.730060][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.779433][ T732] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.780415][ T732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.871248][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.916926][ T732] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.917233][ T732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.937195][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.974795][ T1362] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.974962][ T1362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.123776][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.174288][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.174426][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.258737][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.260561][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.359480][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.539797][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.706229][ T5806] veth0_vlan: entered promiscuous mode [ 107.717418][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.760388][ T5806] veth1_vlan: entered promiscuous mode [ 107.999766][ T5806] veth0_macvtap: entered promiscuous mode [ 108.051391][ T5806] veth1_macvtap: entered promiscuous mode [ 108.115371][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.138023][ T5805] veth0_vlan: entered promiscuous mode [ 108.170740][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.189947][ T5805] veth1_vlan: entered promiscuous mode [ 108.205972][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.249682][ T732] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.260163][ T732] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.266344][ T732] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.289934][ T732] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.315334][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.404927][ T5809] veth0_vlan: entered promiscuous mode [ 108.456854][ T5817] veth0_vlan: entered promiscuous mode [ 108.484729][ T5805] veth0_macvtap: entered promiscuous mode [ 108.546196][ T5809] veth1_vlan: entered promiscuous mode [ 108.569193][ T5805] veth1_macvtap: entered promiscuous mode [ 108.576502][ T5817] veth1_vlan: entered promiscuous mode [ 108.683007][ T732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.683030][ T732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.718990][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.781038][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.785123][ T5819] veth0_vlan: entered promiscuous mode [ 108.824622][ T5809] veth0_macvtap: entered promiscuous mode [ 108.828427][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.828516][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.828546][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.843691][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.850099][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.858381][ T5819] veth1_vlan: entered promiscuous mode [ 108.860297][ T5809] veth1_macvtap: entered promiscuous mode [ 108.862560][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.879564][ T5817] veth0_macvtap: entered promiscuous mode [ 108.979867][ T5817] veth1_macvtap: entered promiscuous mode [ 109.139711][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.219156][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.265663][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.347813][ T5819] veth0_macvtap: entered promiscuous mode [ 109.358580][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.377191][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.390167][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.394039][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.394059][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.419739][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.437769][ T5819] veth1_macvtap: entered promiscuous mode [ 109.448699][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.531503][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.717589][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.724066][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.732239][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.739310][ T732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.739363][ T732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.819208][ T5922] Zero length message leads to an empty skb [ 110.767948][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.853079][ T5926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.901337][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.024704][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.072073][ T3604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.072094][ T3604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.080355][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.126225][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.141195][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.207997][ T5930] process 'syz.3.4' launched '/dev/fd/4' with NULL argv: empty string added [ 111.257340][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.257363][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.384248][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.384272][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.569360][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.569383][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.774544][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.774569][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.967083][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.967106][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.281746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.558795][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.691766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.742526][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 112.770651][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.770684][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.770729][ T44] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a57, bcdDevice= 0.00 [ 112.770752][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.827406][ T44] usb 5-1: config 0 descriptor?? [ 113.021760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.031750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.041718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.051720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.061717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.071713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.081715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.091717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.729612][ T44] hid-corsair-void 0003:1B1C:0A57.0001: unknown main item tag 0x0 [ 113.729659][ T44] hid-corsair-void 0003:1B1C:0A57.0001: unknown main item tag 0x0 [ 113.729684][ T44] hid-corsair-void 0003:1B1C:0A57.0001: unknown main item tag 0x0 [ 113.729709][ T44] hid-corsair-void 0003:1B1C:0A57.0001: unknown main item tag 0x0 [ 113.729744][ T44] hid-corsair-void 0003:1B1C:0A57.0001: unknown main item tag 0x0 [ 114.560890][ T44] hid-corsair-void 0003:1B1C:0A57.0001: hidraw0: USB HID v0.0c Device [HID 1b1c:0a57] on usb-dummy_hcd.4-1/input0 [ 114.715556][ T31] hid-corsair-void 0003:1B1C:0A57.0001: failed to request battery (reason: -71) [ 115.184031][ T31] hid-corsair-void 0003:1B1C:0A57.0001: failed to request firmware (reason: -71) [ 115.221955][ T44] usb 5-1: USB disconnect, device number 2 [ 115.319785][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.367792][ T5966] syz.1.18 uses obsolete (PF_INET,SOCK_PACKET) [ 115.776238][ T5970] fuse: Unknown parameter 'user_i00000000000000000000' [ 115.832054][ T5889] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.926745][ T5968] fido_id[5968]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 115.991925][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 115.994601][ T5889] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 115.994629][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.994649][ T5889] usb 3-1: config 0 has no interface number 0 [ 115.998006][ T5889] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 115.998036][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.998057][ T5889] usb 3-1: Product: syz [ 115.998072][ T5889] usb 3-1: Manufacturer: syz [ 115.998086][ T5889] usb 3-1: SerialNumber: syz [ 116.301164][ T5889] usb 3-1: config 0 descriptor?? [ 117.376342][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.022136][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.970128][ T5889] usb 3-1: USB disconnect, device number 2 [ 119.117823][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.318584][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.478012][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.099470][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.496112][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.843234][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.126836][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.733756][ T5994] 9pnet_virtio: no channels available for device syz [ 124.052996][ T6015] fuse: Unknown parameter 'user_i00000000000000000000' [ 125.953459][ T5868] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.972067][ T6027] netlink: 36 bytes leftover after parsing attributes in process `syz.3.35'. [ 126.211830][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 126.225578][ T5868] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 126.225612][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.225629][ T5868] usb 3-1: config 0 has no interface number 0 [ 126.229077][ T5868] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 126.229101][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.229119][ T5868] usb 3-1: Product: syz [ 126.229131][ T5868] usb 3-1: Manufacturer: syz [ 126.229144][ T5868] usb 3-1: SerialNumber: syz [ 126.411569][ T5868] usb 3-1: config 0 descriptor?? [ 126.420037][ T6032] bridge_slave_0: left allmulticast mode [ 126.420069][ T6032] bridge_slave_0: left promiscuous mode [ 126.440980][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.770131][ T6032] bridge_slave_1: left allmulticast mode [ 126.770166][ T6032] bridge_slave_1: left promiscuous mode [ 126.785072][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.986940][ T6032] bond0: (slave bond_slave_0): Releasing backup interface [ 127.138409][ T6032] bond0: (slave bond_slave_1): Releasing backup interface [ 127.363814][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.412528][ T6032] team0: Port device team_slave_0 removed [ 127.558873][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 127.573993][ T44] usb 1-1: config 118 has an invalid interface number: 234 but max is 0 [ 127.574024][ T44] usb 1-1: config 118 has no interface number 0 [ 127.574060][ T44] usb 1-1: config 118 interface 234 has no altsetting 0 [ 127.609724][ T44] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=31.0c [ 127.609749][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.609760][ T44] usb 1-1: Product: syz [ 127.609769][ T44] usb 1-1: Manufacturer: syz [ 127.609777][ T44] usb 1-1: SerialNumber: syz [ 127.774997][ T6032] team0: Port device team_slave_1 removed [ 127.780762][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.780795][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.999858][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.002574][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.075145][ T6032] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.167203][ T6029] team0: Mode changed to "loadbalance" [ 128.169474][ T44] qmi_wwan 1-1:118.234: bogus CDC Union: master=0, slave=1 [ 128.193370][ T44] qmi_wwan 1-1:118.234: probe with driver qmi_wwan failed with error -22 [ 128.238677][ T44] usb 1-1: USB disconnect, device number 2 [ 128.820399][ T5948] usb 3-1: USB disconnect, device number 3 [ 129.323921][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.561316][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.662229][ T6053] 9pnet_virtio: no channels available for device syz [ 130.512912][ T6067] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 130.512933][ T6067] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 130.570101][ T6067] vhci_hcd vhci_hcd.0: Device attached [ 130.662257][ T6070] syz.2.45 (6070): /proc/6066/oom_adj is deprecated, please use /proc/6066/oom_score_adj instead. [ 131.004799][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.060122][ T31] usb 38-1: SetAddress Request (2) to port 0 [ 131.060216][ T31] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 131.629307][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.894973][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.907160][ T6069] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 131.910010][ T6068] vhci_hcd: connection closed [ 131.927902][ T13] vhci_hcd: stop threads [ 131.928576][ T13] vhci_hcd: release socket [ 131.979441][ T13] vhci_hcd: disconnect device [ 132.235697][ T6084] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 132.236267][ T6084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 132.238556][ T6084] vhci_hcd vhci_hcd.0: Device attached [ 132.594064][ T6088] vhci_hcd: connection closed [ 132.672790][ T732] vhci_hcd: stop threads [ 132.672811][ T732] vhci_hcd: release socket [ 132.672861][ T732] vhci_hcd: disconnect device [ 132.711827][ T5888] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 132.711910][ T5888] usb 41-1: enqueue for inactive port 0 [ 132.792824][ T5888] vhci_hcd: vhci_device speed not set [ 133.264537][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.300183][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.300916][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.692839][ T6095] fuse: Unknown parameter 'user_id00000000000000000000' [ 133.996174][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.206985][ T6106] bridge0: port 1(netdevsim2) entered blocking state [ 134.207135][ T6106] bridge0: port 1(netdevsim2) entered disabled state [ 134.207399][ T6106] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 134.211151][ T6106] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 134.212699][ T6106] bridge0: port 1(netdevsim2) entered blocking state [ 134.212859][ T6106] bridge0: port 1(netdevsim2) entered forwarding state [ 134.326958][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.354299][ T992] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.588864][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.692899][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 134.696672][ T992] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 134.696700][ T992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.696720][ T992] usb 5-1: config 0 has no interface number 0 [ 134.705720][ T992] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 134.705751][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.705772][ T992] usb 5-1: Product: syz [ 134.705787][ T992] usb 5-1: Manufacturer: syz [ 134.705802][ T992] usb 5-1: SerialNumber: syz [ 134.769212][ T992] usb 5-1: config 0 descriptor?? [ 135.319958][ T6111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.57'. [ 135.812669][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.975721][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.117958][ T31] usb 38-1: device descriptor read/8, error -110 [ 136.235920][ T6120] bridge_slave_0: left allmulticast mode [ 136.235955][ T6120] bridge_slave_0: left promiscuous mode [ 136.236245][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.437830][ T6120] bridge_slave_1: left allmulticast mode [ 136.437905][ T6120] bridge_slave_1: left promiscuous mode [ 136.440860][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.490858][ T6125] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 136.490884][ T6125] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 136.490955][ T6125] vhci_hcd vhci_hcd.0: Device attached [ 136.525562][ T31] usb usb38-port1: attempt power cycle [ 136.562717][ T6126] 9pnet_virtio: no channels available for device syz [ 136.749440][ T5811] usb 5-1: USB disconnect, device number 3 [ 136.767370][ T6120] bond0: (slave bond_slave_0): Releasing backup interface [ 136.811978][ T44] usb 40-1: SetAddress Request (2) to port 0 [ 136.812074][ T44] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 137.066553][ T6120] bond0: (slave bond_slave_1): Releasing backup interface [ 137.225898][ T6120] team0: Port device team_slave_0 removed [ 137.280233][ T6127] vhci_hcd: connection reset by peer [ 137.346344][ T43] vhci_hcd: stop threads [ 137.346366][ T43] vhci_hcd: release socket [ 137.346614][ T43] vhci_hcd: disconnect device [ 137.377138][ T6120] team0: Port device team_slave_1 removed [ 137.377770][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.377788][ T6120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.405219][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.405239][ T6120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.435205][ T6120] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.502443][ T6115] team0: Mode changed to "loadbalance" [ 137.534424][ T31] usb usb38-port1: unable to enumerate USB device [ 138.495748][ T6139] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 138.509573][ T6139] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 138.592155][ T6139] vhci_hcd vhci_hcd.0: Device attached [ 138.594763][ T6142] vhci_hcd: connection closed [ 138.641895][ T5977] vhci_hcd: stop threads [ 138.641914][ T5977] vhci_hcd: release socket [ 138.642031][ T5977] vhci_hcd: disconnect device [ 139.243894][ T6146] fuse: Unknown parameter 'user_id00000000000000000000' [ 142.074325][ T44] usb 40-1: device descriptor read/8, error -110 [ 143.925293][ T44] usb usb40-port1: attempt power cycle [ 144.062454][ T6181] fuse: Bad value for 'fd' [ 144.318776][ T6185] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 144.318821][ T6185] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 144.319096][ T6185] vhci_hcd vhci_hcd.0: Device attached [ 144.539292][ T6192] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 144.652630][ T44] usb usb40-port1: unable to enumerate USB device [ 144.683176][ T992] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 145.382620][ T6186] vhci_hcd: connection reset by peer [ 146.174811][ T43] vhci_hcd: stop threads [ 146.174833][ T43] vhci_hcd: release socket [ 146.174906][ T43] vhci_hcd: disconnect device [ 146.693506][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.783100][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.652541][ T44] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 148.032043][ T44] usb 3-1: device descriptor read/64, error -71 [ 148.610849][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.835683][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.051606][ T44] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 152.259377][ T992] vhci_hcd: vhci_device speed not set [ 152.281859][ T44] usb 3-1: device descriptor read/64, error -71 [ 152.395253][ T44] usb usb3-port1: attempt power cycle [ 153.858541][ T6220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.87'. [ 155.239686][ T6228] fuse: Bad value for 'fd' [ 157.541820][ T6240] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 157.541849][ T6240] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 157.542071][ T6240] vhci_hcd vhci_hcd.0: Device attached [ 157.771862][ T6243] vhci_hcd: connection closed [ 157.780549][ T6210] vhci_hcd: stop threads [ 157.780611][ T6210] vhci_hcd: release socket [ 157.781454][ T6210] vhci_hcd: disconnect device [ 158.365788][ T44] vhci_hcd: vhci_device speed not set [ 158.836204][ T5868] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 158.961871][ T5868] usb 4-1: device descriptor read/64, error -71 [ 159.201903][ T5868] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 159.331946][ T5868] usb 4-1: device descriptor read/64, error -71 [ 159.466473][ T5868] usb usb4-port1: attempt power cycle [ 159.557152][ T6274] fuse: Bad value for 'fd' [ 159.831874][ T5868] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 159.855242][ T5868] usb 4-1: device descriptor read/8, error -71 [ 161.951920][ T5868] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 161.978154][ T5868] usb 4-1: device descriptor read/8, error -71 [ 162.083196][ T5868] usb usb4-port1: unable to enumerate USB device [ 169.666593][ T6311] fuse: Unknown parameter '0x0000000000000003' [ 171.091308][ T44] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 171.271908][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 171.274054][ T44] usb 1-1: config 118 has an invalid interface number: 234 but max is 0 [ 171.274073][ T44] usb 1-1: config 118 has no interface number 0 [ 171.274093][ T44] usb 1-1: config 118 interface 234 has no altsetting 0 [ 171.276461][ T44] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=31.0c [ 171.276479][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.276490][ T44] usb 1-1: Product: syz [ 171.276498][ T44] usb 1-1: Manufacturer: syz [ 171.276507][ T44] usb 1-1: SerialNumber: syz [ 171.491851][ T992] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 171.623127][ T992] usb 2-1: device descriptor read/64, error -71 [ 171.715822][ T44] qmi_wwan 1-1:118.234: bogus CDC Union: master=0, slave=1 [ 171.722042][ T44] qmi_wwan 1-1:118.234: probe with driver qmi_wwan failed with error -22 [ 171.790298][ T44] usb 1-1: USB disconnect, device number 3 [ 171.873968][ T992] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 172.001839][ T992] usb 2-1: device descriptor read/64, error -71 [ 172.122836][ T992] usb usb2-port1: attempt power cycle [ 172.471853][ T992] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 172.493292][ T992] usb 2-1: device descriptor read/8, error -71 [ 173.643166][ T992] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 173.669824][ T992] usb 2-1: device descriptor read/8, error -71 [ 173.775679][ T992] usb usb2-port1: unable to enumerate USB device [ 173.971818][ T5948] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 174.131947][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 174.134827][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 174.138271][ T5948] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 174.138300][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.138320][ T5948] usb 3-1: Product: syz [ 174.138336][ T5948] usb 3-1: Manufacturer: syz [ 174.138351][ T5948] usb 3-1: SerialNumber: syz [ 174.164982][ T5948] usb 3-1: config 0 descriptor?? [ 174.201043][ T5948] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 174.201076][ T5948] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 174.836288][ T5948] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 174.990635][ T6346] fuse: Unknown parameter '0x0000000000000003' [ 176.508420][ T5948] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 176.508488][ T5948] em28xx 3-1:0.0: board has no eeprom [ 176.613610][ T5948] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 176.613646][ T5948] em28xx 3-1:0.0: dvb set to bulk mode. [ 176.616866][ T5811] em28xx 3-1:0.0: Binding DVB extension [ 176.635610][ T5948] usb 3-1: USB disconnect, device number 7 [ 176.644862][ T5948] em28xx 3-1:0.0: Disconnecting em28xx [ 176.951799][ T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 177.036235][ T5811] em28xx 3-1:0.0: Registering input extension [ 177.040855][ T5948] em28xx 3-1:0.0: Closing input extension [ 177.105690][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 177.108466][ T44] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 177.108484][ T44] usb 1-1: config 0 has no interface number 0 [ 177.114935][ T44] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 177.114963][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.114981][ T44] usb 1-1: Product: syz [ 177.114993][ T44] usb 1-1: Manufacturer: syz [ 177.115006][ T44] usb 1-1: SerialNumber: syz [ 177.275800][ T44] usb 1-1: config 0 descriptor?? [ 177.296709][ T44] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 177.635519][ T5948] em28xx 3-1:0.0: Freeing device [ 179.431067][ T44] gspca_topro: reg_r err -71 [ 179.431090][ T44] gspca_topro: Sensor soi763a [ 180.643189][ T44] usb 1-1: USB disconnect, device number 4 [ 181.372889][ T6386] fuse: Unknown parameter '0x0000000000000003' [ 183.514772][ T6402] fuse: Unknown parameter 'grou00000000000000000000' [ 183.932289][ T6410] No control pipe specified [ 185.111329][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.713143][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.687511][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.687561][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.672881][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.064597][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.430831][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.501822][ T5811] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 205.655428][ T5811] usb 5-1: Using ep0 maxpacket: 32 [ 205.661476][ T5811] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 205.661507][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.661528][ T5811] usb 5-1: Product: syz [ 205.661543][ T5811] usb 5-1: Manufacturer: syz [ 205.661557][ T5811] usb 5-1: SerialNumber: syz [ 205.714046][ T5811] usb 5-1: config 0 descriptor?? [ 205.719458][ T5811] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 206.429248][ T5811] gspca_topro: reg_w err -110 [ 206.455350][ T5811] gspca_topro: Sensor soi763a [ 206.599367][ T6529] Bluetooth: MGMT ver 1.23 [ 207.097866][ T6540] comedi comedi0: Minor 3 could not be opened [ 207.341787][ T5811] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 207.501757][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 207.528753][ T5811] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 207.530660][ T5811] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 207.530747][ T5811] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.530799][ T5811] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.534689][ T5811] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.534716][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.945856][ T5868] usb 5-1: USB disconnect, device number 4 [ 212.684030][ T5811] usb 3-1: usb_control_msg returned -110 [ 212.684089][ T5811] usbtmc 3-1:16.0: can't read capabilities [ 214.551846][ T5888] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 214.657628][ T5811] usb 3-1: USB disconnect, device number 8 [ 214.735180][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 214.737152][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 214.737190][ T5888] usb 5-1: can't read configurations, error -61 [ 214.861908][ T5888] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 215.027930][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 215.038725][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 215.038765][ T5888] usb 5-1: can't read configurations, error -61 [ 215.039242][ T5888] usb usb5-port1: attempt power cycle [ 215.355701][ T5890] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 215.862617][ T5811] IPVS: starting estimator thread 0... [ 215.873007][ T5888] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 215.895785][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 215.898292][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 215.898332][ T5888] usb 5-1: can't read configurations, error -61 [ 215.975479][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 215.987486][ T6596] IPVS: using max 6 ests per chain, 14400 per kthread [ 215.993856][ T5890] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 215.993888][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.993909][ T5890] usb 4-1: Product: syz [ 215.993924][ T5890] usb 4-1: Manufacturer: syz [ 215.993938][ T5890] usb 4-1: SerialNumber: syz [ 216.032078][ T5888] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 216.055323][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 216.057504][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 216.057537][ T5888] usb 5-1: can't read configurations, error -61 [ 216.058367][ T5888] usb usb5-port1: unable to enumerate USB device [ 216.061924][ T5868] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 216.151597][ T5890] usb 4-1: config 0 descriptor?? [ 216.160768][ T5890] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 216.234881][ T5868] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 216.234914][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.264490][ T5868] usb 2-1: config 0 descriptor?? [ 216.710885][ T5868] usb 2-1: Cannot read MAC address [ 216.711191][ T5868] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 216.734130][ T5868] usb 2-1: USB disconnect, device number 6 [ 216.972995][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.143314][ T6603] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 217.143491][ T6603] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.144369][ T6603] vhci_hcd vhci_hcd.0: Device attached [ 217.230251][ T6607] vhci_hcd: connection closed [ 217.230943][ T6210] vhci_hcd: stop threads [ 217.230966][ T6210] vhci_hcd: release socket [ 217.246856][ T6210] vhci_hcd: disconnect device [ 217.314616][ T5890] gspca_topro: reg_w err -110 [ 217.341847][ T5890] gspca_topro: Sensor soi763a [ 217.873481][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.066441][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.643833][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.184807][ T6618] syzkaller0: entered promiscuous mode [ 219.184835][ T6618] syzkaller0: entered allmulticast mode [ 219.635154][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.660658][ T61] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 220.660804][ T61] Bluetooth: hci1: Injecting HCI hardware error event [ 220.663847][ T61] ------------[ cut here ]------------ [ 220.663857][ T61] WARNING: CPU: 0 PID: 61 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0xff/0x290 [ 220.663887][ T61] Modules linked in: [ 220.663900][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 220.663915][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 220.663923][ T61] Workqueue: hci2 hci_conn_timeout [ 220.663939][ T61] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 220.663955][ T61] Code: 48 89 df e8 b3 1d 09 00 eb 07 e8 ac 1e fb f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 d7 c4 fe ff e8 92 1e fb f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 220.663965][ T61] RSP: 0018:ffffc9000127fa30 EFLAGS: 00010293 [ 220.663975][ T61] RAX: ffffffff89c32e9e RBX: ffff888033b48000 RCX: ffff888019b88000 [ 220.663984][ T61] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.663991][ T61] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 220.663998][ T61] R10: dffffc0000000000 R11: ffffed1006769003 R12: dffffc0000000000 [ 220.664006][ T61] R13: ffff8880206f0018 R14: ffff888033b489c8 R15: ffff888033b48010 [ 220.664016][ T61] FS: 0000000000000000(0000) GS:ffff888126bcd000(0000) knlGS:0000000000000000 [ 220.664025][ T61] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.664033][ T61] CR2: 00007f1231d48ff8 CR3: 0000000036400000 CR4: 00000000003526f0 [ 220.664046][ T61] Call Trace: [ 220.664051][ T61] [ 220.664056][ T61] ? process_scheduled_works+0x9ef/0x17b0 [ 220.664074][ T61] process_scheduled_works+0xae1/0x17b0 [ 220.664103][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 220.664126][ T61] worker_thread+0x8a0/0xda0 [ 220.664155][ T61] kthread+0x711/0x8a0 [ 220.664183][ T61] ? __pfx_worker_thread+0x10/0x10 [ 220.664197][ T61] ? __pfx_kthread+0x10/0x10 [ 220.664213][ T61] ? rt_spin_unlock+0x150/0x200 [ 220.664232][ T61] ? rt_spin_unlock+0x161/0x200 [ 220.664247][ T61] ? __pfx_kthread+0x10/0x10 [ 220.664265][ T61] ret_from_fork+0x4b9/0x870 [ 220.664280][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 220.664298][ T61] ? __switch_to_asm+0x39/0x70 [ 220.664313][ T61] ? __switch_to_asm+0x33/0x70 [ 220.664334][ T61] ? __pfx_kthread+0x10/0x10 [ 220.664351][ T61] ret_from_fork_asm+0x1a/0x30 [ 220.664376][ T61] [ 220.664383][ T61] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 220.664391][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 220.664404][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 220.664411][ T61] Workqueue: hci2 hci_conn_timeout [ 220.664426][ T61] Call Trace: [ 220.664431][ T61] [ 220.664435][ T61] dump_stack_lvl+0x99/0x250 [ 220.664449][ T61] ? __asan_memcpy+0x40/0x70 [ 220.664463][ T61] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.664476][ T61] ? __pfx__printk+0x10/0x10 [ 220.664498][ T61] vpanic+0x237/0x6d0 [ 220.664509][ T61] ? __pfx_vpanic+0x10/0x10 [ 220.664526][ T61] panic+0xb9/0xc0 [ 220.664536][ T61] ? __pfx_panic+0x10/0x10 [ 220.664556][ T61] __warn+0x31b/0x4b0 [ 220.664566][ T61] ? hci_conn_timeout+0xff/0x290 [ 220.664582][ T61] ? hci_conn_timeout+0xff/0x290 [ 220.664597][ T61] report_bug+0x2be/0x4f0 [ 220.664609][ T61] ? hci_conn_timeout+0xff/0x290 [ 220.664624][ T61] ? hci_conn_timeout+0xff/0x290 [ 220.664639][ T61] ? hci_conn_timeout+0x101/0x290 [ 220.664654][ T61] handle_bug+0x84/0x160 [ 220.664668][ T61] exc_invalid_op+0x1a/0x50 [ 220.664683][ T61] asm_exc_invalid_op+0x1a/0x20 [ 220.664694][ T61] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 220.664709][ T61] Code: 48 89 df e8 b3 1d 09 00 eb 07 e8 ac 1e fb f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 d7 c4 fe ff e8 92 1e fb f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 220.664718][ T61] RSP: 0018:ffffc9000127fa30 EFLAGS: 00010293 [ 220.664728][ T61] RAX: ffffffff89c32e9e RBX: ffff888033b48000 RCX: ffff888019b88000 [ 220.664736][ T61] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.664743][ T61] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 220.664750][ T61] R10: dffffc0000000000 R11: ffffed1006769003 R12: dffffc0000000000 [ 220.664759][ T61] R13: ffff8880206f0018 R14: ffff888033b489c8 R15: ffff888033b48010 [ 220.664772][ T61] ? hci_conn_timeout+0xfe/0x290 [ 220.664790][ T61] ? process_scheduled_works+0x9ef/0x17b0 [ 220.664805][ T61] process_scheduled_works+0xae1/0x17b0 [ 220.664833][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 220.664856][ T61] worker_thread+0x8a0/0xda0 [ 220.664884][ T61] kthread+0x711/0x8a0 [ 220.664903][ T61] ? __pfx_worker_thread+0x10/0x10 [ 220.664917][ T61] ? __pfx_kthread+0x10/0x10 [ 220.664932][ T61] ? rt_spin_unlock+0x150/0x200 [ 220.664951][ T61] ? rt_spin_unlock+0x161/0x200 [ 220.664966][ T61] ? __pfx_kthread+0x10/0x10 [ 220.664983][ T61] ret_from_fork+0x4b9/0x870 [ 220.664998][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 220.665016][ T61] ? __switch_to_asm+0x39/0x70 [ 220.665030][ T61] ? __switch_to_asm+0x33/0x70 [ 220.665044][ T61] ? __pfx_kthread+0x10/0x10 [ 220.665062][ T61] ret_from_fork_asm+0x1a/0x30 [ 220.665086][ T61] [ 220.665388][ T61] Kernel Offset: disabled