last executing test programs: 5.445945977s ago: executing program 2 (id=52): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000884) 5.352393207s ago: executing program 2 (id=53): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x5, 0xd, 0x4, 0x400, 0x3, {0x77359400}, {0x1, 0x8, 0xaa, 0x0, 0x8, 0x1, "4bc903f9"}, 0x30, 0x4, {}, 0x86}) 5.290173425s ago: executing program 2 (id=55): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000500)={0x0, 0xe, 0x3ff, 0x1, 0x44}) 5.155600757s ago: executing program 2 (id=57): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff05, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x4}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) 5.115278886s ago: executing program 2 (id=58): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x20, 0x31, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000080)={0x40, 0x16, 0x4, "54fe06b6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.769313048s ago: executing program 3 (id=61): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000884) 4.720411666s ago: executing program 3 (id=62): truncate(&(0x7f0000000080)='./bus\x00', 0x7) finit_module(0xffffffffffffffff, 0x0, 0x0) 4.63522792s ago: executing program 3 (id=63): r0 = socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000340)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) 3.537802028s ago: executing program 3 (id=65): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x208c0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7ffffbff], 0x0, 0x4}) 3.145943425s ago: executing program 0 (id=69): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.12954686s ago: executing program 1 (id=70): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dff, 0xffffffff80000002, 0xcd41}}}, 0xfffffd74) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, r1, 0x73}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 3.062315143s ago: executing program 1 (id=71): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000884) 2.997526081s ago: executing program 0 (id=72): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 2.923697435s ago: executing program 1 (id=73): pipe2(0x0, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file7/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0xf3b3abc02919ce07) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x807, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x91) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') lseek(r3, 0x1000000, 0x0) 1.778840514s ago: executing program 0 (id=74): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 1.73677863s ago: executing program 1 (id=75): socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.602601576s ago: executing program 0 (id=76): cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1.527032769s ago: executing program 1 (id=77): socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000500)='net/wireless\x00') prctl$PR_SET_PDEATHSIG(0x1, 0x41) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$swradio(&(0x7f0000001040), 0x1, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) sendfile(r4, r3, 0x0, 0xf03a0005) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r5, @ANYRES16=r0, @ANYRES64=r3, @ANYRES16=r2, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r7}, 0x71, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x48}}, 0x400d4) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) r10 = dup(r8) write$UHID_INPUT(r10, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) 698.818528ms ago: executing program 2 (id=78): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000004c0)={{0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0) 356.826735ms ago: executing program 0 (id=79): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dff, 0xffffffff80000002, 0xcd41}}}, 0xfffffd74) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, r1, 0x73}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 245.440686ms ago: executing program 1 (id=80): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 236.039479ms ago: executing program 3 (id=81): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000884) 63.14888ms ago: executing program 0 (id=82): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'sit0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x51a}}, './file0\x00'}) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r4, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x87, @remote, 0x4e21, 0x1, 'lblc\x00', 0x0, 0x36e9, 0x2c}, 0x2c) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) 0s ago: executing program 3 (id=83): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 73.771185][ T5594] cgroup: Unknown subsys name 'net' [ 74.011559][ T5594] cgroup: Unknown subsys name 'cpuset' [ 74.068117][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.685767][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.420885][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.421870][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.424308][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.425050][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.425449][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.432655][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.432896][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.436087][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.468144][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.474825][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.476486][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.482209][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.482608][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.492324][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.508510][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.509699][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.515768][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.520887][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.549888][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.552229][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.353184][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.354334][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.354487][ T5607] bridge_slave_0: entered allmulticast mode [ 81.356320][ T5607] bridge_slave_0: entered promiscuous mode [ 81.400156][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.400424][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.400576][ T5607] bridge_slave_1: entered allmulticast mode [ 81.402386][ T5607] bridge_slave_1: entered promiscuous mode [ 81.403869][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.404024][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.404155][ T5608] bridge_slave_0: entered allmulticast mode [ 81.405860][ T5608] bridge_slave_0: entered promiscuous mode [ 81.473233][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.473459][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.473601][ T5608] bridge_slave_1: entered allmulticast mode [ 81.475257][ T5608] bridge_slave_1: entered promiscuous mode [ 81.539090][ T5619] Bluetooth: hci0: command tx timeout [ 81.568965][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.569331][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.569624][ T5605] bridge_slave_0: entered allmulticast mode [ 81.574237][ T5605] bridge_slave_0: entered promiscuous mode [ 81.616578][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.617544][ T5611] Bluetooth: hci2: command tx timeout [ 81.617645][ T5611] Bluetooth: hci1: command tx timeout [ 81.617810][ T5619] Bluetooth: hci3: command tx timeout [ 81.692775][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.693089][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.693320][ T5605] bridge_slave_1: entered allmulticast mode [ 81.719852][ T5605] bridge_slave_1: entered promiscuous mode [ 81.737433][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.743011][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.743568][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.743872][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.744107][ T5606] bridge_slave_0: entered allmulticast mode [ 81.790481][ T5606] bridge_slave_0: entered promiscuous mode [ 81.834227][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.919148][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.919331][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.919671][ T5606] bridge_slave_1: entered allmulticast mode [ 81.921379][ T5606] bridge_slave_1: entered promiscuous mode [ 81.992666][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.996657][ T5607] team0: Port device team_slave_0 added [ 82.032663][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.035061][ T5607] team0: Port device team_slave_1 added [ 82.038332][ T5608] team0: Port device team_slave_0 added [ 82.046333][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.084284][ T5608] team0: Port device team_slave_1 added [ 82.087217][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.153309][ T5605] team0: Port device team_slave_0 added [ 82.155271][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.155282][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.155302][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.241867][ T5605] team0: Port device team_slave_1 added [ 82.243037][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.243046][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.243059][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.244440][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.244448][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.244462][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.252086][ T5606] team0: Port device team_slave_0 added [ 82.299213][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.299228][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.299252][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.305676][ T5606] team0: Port device team_slave_1 added [ 82.377983][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.377999][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.378021][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.471433][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.471443][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.471458][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.473817][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.473826][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.473839][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.548420][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.548436][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.548460][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.566949][ T5607] hsr_slave_0: entered promiscuous mode [ 82.582441][ T5607] hsr_slave_1: entered promiscuous mode [ 82.636502][ T5608] hsr_slave_0: entered promiscuous mode [ 82.643729][ T5608] hsr_slave_1: entered promiscuous mode [ 82.644783][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 82.644860][ T5608] Cannot create hsr debugfs directory [ 82.729166][ T5605] hsr_slave_0: entered promiscuous mode [ 82.730301][ T5605] hsr_slave_1: entered promiscuous mode [ 82.731190][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 82.731211][ T5605] Cannot create hsr debugfs directory [ 82.793869][ T5606] hsr_slave_0: entered promiscuous mode [ 82.794978][ T5606] hsr_slave_1: entered promiscuous mode [ 82.795841][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 82.795861][ T5606] Cannot create hsr debugfs directory [ 83.617727][ T5616] Bluetooth: hci0: command tx timeout [ 83.697900][ T5616] Bluetooth: hci3: command tx timeout [ 83.697927][ T5616] Bluetooth: hci1: command tx timeout [ 83.697944][ T5616] Bluetooth: hci2: command tx timeout [ 83.847914][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.898830][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.903717][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.924141][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.935838][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.963132][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.984847][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.010839][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.117356][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.143084][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.148542][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.193756][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.207052][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.253580][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.296823][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.321853][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.465052][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.493143][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.505980][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.532879][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.536510][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.572161][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.598299][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.633613][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.751052][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.791454][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.797162][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.830695][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.837232][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.870847][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.885504][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.922593][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.981656][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.094925][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.135562][ T211] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.136469][ T211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.177082][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.216365][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.216477][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.295737][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.344997][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.364237][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.364329][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.406965][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.407099][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.476144][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.502462][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.524116][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.524247][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.601390][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.601565][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.686958][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.699676][ T5619] Bluetooth: hci0: command tx timeout [ 85.757462][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.757618][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.778336][ T5616] Bluetooth: hci1: command tx timeout [ 85.778365][ T5616] Bluetooth: hci3: command tx timeout [ 85.778486][ T5619] Bluetooth: hci2: command tx timeout [ 85.814856][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.815011][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.623033][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.725852][ T43] cfg80211: failed to load regulatory.db [ 86.950950][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.009245][ T5607] veth0_vlan: entered promiscuous mode [ 87.089539][ T5607] veth1_vlan: entered promiscuous mode [ 87.248708][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.299987][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.318889][ T5605] veth0_vlan: entered promiscuous mode [ 87.353605][ T5607] veth0_macvtap: entered promiscuous mode [ 87.376233][ T5605] veth1_vlan: entered promiscuous mode [ 87.384083][ T5607] veth1_macvtap: entered promiscuous mode [ 87.484562][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.520883][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.521088][ T5606] veth0_vlan: entered promiscuous mode [ 87.574887][ T3717] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.577125][ T5608] veth0_vlan: entered promiscuous mode [ 87.593703][ T3717] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.600278][ T5605] veth0_macvtap: entered promiscuous mode [ 87.605553][ T5606] veth1_vlan: entered promiscuous mode [ 87.611432][ T3717] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.632929][ T3717] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.647664][ T5605] veth1_macvtap: entered promiscuous mode [ 87.723145][ T5608] veth1_vlan: entered promiscuous mode [ 87.777619][ T5619] Bluetooth: hci0: command tx timeout [ 87.858455][ T5619] Bluetooth: hci2: command tx timeout [ 87.858483][ T5619] Bluetooth: hci3: command tx timeout [ 87.858503][ T5619] Bluetooth: hci1: command tx timeout [ 88.014934][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.054098][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.108293][ T5606] veth0_macvtap: entered promiscuous mode [ 88.126025][ T211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.141719][ T211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.145385][ T211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.158994][ T211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.175040][ T3717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.175061][ T3717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.191880][ T5606] veth1_macvtap: entered promiscuous mode [ 88.201180][ T5608] veth0_macvtap: entered promiscuous mode [ 88.274782][ T5608] veth1_macvtap: entered promiscuous mode [ 88.372756][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.372774][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.596807][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.632844][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.667680][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.709095][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.731671][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.731687][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.802271][ T1181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.822202][ T1181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.852176][ T1181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.862718][ T1181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.960521][ T1181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.963288][ T1181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.964520][ T1181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.964560][ T1181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.032492][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.032511][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.066531][ T5765] binder: 5764:5765 ioctl c0306201 0 returned -14 [ 90.076924][ T5772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.200971][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.200988][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.285614][ T2271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.285636][ T2271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.504262][ T2271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.504278][ T2271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.594892][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.594911][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.632904][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.725117][ T37] audit: type=1326 audit(1781803924.209:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.2.8" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb96791ce59 code=0x0 [ 90.890711][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 90.932792][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 90.932819][ T10] usb 1-1: config 0 has no interface number 0 [ 90.932867][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 90.963449][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 90.963476][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.963495][ T10] usb 1-1: Product: syz [ 90.963508][ T10] usb 1-1: Manufacturer: syz [ 90.963522][ T10] usb 1-1: SerialNumber: syz [ 91.283074][ T10] usb 1-1: config 0 descriptor?? [ 93.275064][ T5795] binder: 5794:5795 ioctl c0306201 0 returned -14 [ 93.701792][ T10] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 93.701859][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 93.701875][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 93.701966][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 93.860398][ T10] usb 1-1: USB disconnect, device number 2 [ 94.190589][ T5615] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.385070][ T5615] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.385095][ T5615] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.388868][ T5615] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.388902][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 94.388921][ T5615] usb 3-1: SerialNumber: syz [ 94.863320][ T5615] usb 3-1: 0:2 : does not exist [ 95.267359][ T5821] binder: 5819:5821 ioctl c0306201 0 returned -14 [ 95.420365][ T5615] usb 3-1: USB disconnect, device number 2 [ 95.871330][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.110325][ T5839] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET) [ 96.133053][ T5843] binder: 5842:5843 ioctl c0306201 0 returned -14 [ 96.133836][ T5611] Bluetooth: Unexpected start frame (len 0) [ 97.778713][ T5864] Invalid logical block size (-4) [ 97.845653][ T5867] binder: 5866:5867 ioctl c0306201 0 returned -14 [ 97.846777][ T5611] Bluetooth: Unexpected start frame (len 0) [ 98.167309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.187312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.197310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.569461][ T5887] sctp: [Deprecated]: syz.3.47 (pid 5887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.569461][ T5887] Use struct sctp_sack_info instead [ 99.184715][ T5611] Bluetooth: Unexpected start frame (len 0) [ 99.319777][ T5911] evm: overlay not supported [ 99.328299][ T37] audit: type=1800 audit(1781803932.789:3): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.56" name="file0" dev="overlay" ino=73 res=0 errno=0 [ 99.537613][ T5698] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.839771][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 99.854137][ T5698] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 99.854162][ T5698] usb 3-1: config 0 has no interface number 0 [ 99.854202][ T5698] usb 3-1: config 0 interface 12 has no altsetting 0 [ 99.856403][ T5698] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 99.856428][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.856446][ T5698] usb 3-1: Product: syz [ 99.856459][ T5698] usb 3-1: Manufacturer: syz [ 99.856473][ T5698] usb 3-1: SerialNumber: syz [ 99.886443][ T5698] usb 3-1: config 0 descriptor?? [ 100.958839][ T5611] Bluetooth: Unexpected start frame (len 0) [ 101.021865][ T5934] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 101.021865][ T5934] Please contact the netfilter-devel mailing list or update your nftables rules. [ 101.317487][ T1325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.467425][ T1325] usb 4-1: Using ep0 maxpacket: 32 [ 101.500206][ T1325] usb 4-1: config 0 has no interfaces? [ 101.509724][ T1325] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 101.509753][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.509985][ T1325] usb 4-1: Product: syz [ 101.510000][ T1325] usb 4-1: Manufacturer: syz [ 101.510015][ T1325] usb 4-1: SerialNumber: syz [ 101.654590][ T1325] usb 4-1: config 0 descriptor?? [ 103.105334][ T5698] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 103.105391][ T5698] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 103.105408][ T5698] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 103.105506][ T5698] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 103.163777][ T5698] usb 3-1: USB disconnect, device number 3 [ 104.004559][ T5610] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 104.020706][ T10] usb 4-1: USB disconnect, device number 2 [ 104.233140][ T5610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 104.233168][ T5610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 104.233214][ T5610] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 104.233236][ T5610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.312016][ T5610] usb 3-1: config 0 descriptor?? [ 104.352544][ T5610] ------------[ cut here ]------------ [ 104.352559][ T5610] workqueue: ath6kl_wq is using neither WQ_PERCPU or WQ_UNBOUND. Setting WQ_PERCPU. [ 104.352574][ T5610] WARNING: kernel/workqueue.c:5856 at __alloc_workqueue+0x1d02/0x2070, CPU#1: kworker/1:3/5610 [ 104.352614][ T5610] Modules linked in: [ 104.352646][ T5610] CPU: 1 UID: 0 PID: 5610 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 104.352669][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.352683][ T5610] Workqueue: usb_hub_wq hub_event [ 104.352712][ T5610] RIP: 0010:__alloc_workqueue+0x1d07/0x2070 [ 104.352737][ T5610] Code: e9 36 f9 ff ff e8 89 8a 37 00 e9 05 fb ff ff e8 7f 8a 37 00 e9 92 fb ff ff e8 75 8a 37 00 48 8d 3d ee ff 43 0e 48 8b 74 24 20 <67> 48 0f b9 3a 81 cd 00 01 00 00 e9 88 e5 ff ff e8 54 8a 37 00 48 [ 104.352754][ T5610] RSP: 0018:ffffc90004b6ebc8 EFLAGS: 00010287 [ 104.352770][ T5610] RAX: ffffffff818e412b RBX: 0000000000000000 RCX: 0000000000100000 [ 104.352785][ T5610] RDX: ffffc90017c21000 RSI: ffff8880592e7568 RDI: ffffffff8fd24120 [ 104.352800][ T5610] RBP: 0000000000000000 R08: ffff888033ef9f00 R09: 0000000000000002 [ 104.352814][ T5610] R10: 0000000000000100 R11: 0000000000000102 R12: dffffc0000000000 [ 104.352828][ T5610] R13: ffff8880592e7400 R14: ffffc90004b6ece0 R15: 0000000000000000 [ 104.352843][ T5610] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 104.352859][ T5610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.352873][ T5610] CR2: 00007fd452e67dac CR3: 00000000294fe000 CR4: 00000000003526f0 [ 104.352891][ T5610] Call Trace: [ 104.352903][ T5610] [ 104.352930][ T5610] alloc_workqueue_noprof+0xe3/0x210 [ 104.352962][ T5610] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 104.352991][ T5610] ? __kmalloc_cache_noprof+0x3d0/0x6d0 [ 104.353015][ T5610] ? ath6kl_usb_probe+0x8e/0x1580 [ 104.353055][ T5610] ath6kl_usb_probe+0xaa/0x1580 [ 104.353091][ T5610] ? usb_unlocked_disable_lpm+0x8c/0xb0 [ 104.353124][ T5610] usb_probe_interface+0x659/0xc70 [ 104.353174][ T5610] ? __pfx_usb_probe_interface+0x10/0x10 [ 104.353199][ T5610] really_probe+0x267/0xaf0 [ 104.353236][ T5610] __driver_probe_device+0x1e2/0x350 [ 104.353266][ T5610] driver_probe_device+0x4f/0x240 [ 104.353297][ T5610] __device_attach_driver+0x270/0x410 [ 104.353329][ T5610] bus_for_each_drv+0x25b/0x2f0 [ 104.353350][ T5610] ? __pfx___device_attach_driver+0x10/0x10 [ 104.353378][ T5610] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.353399][ T5610] ? rt_spin_unlock+0x160/0x200 [ 104.353428][ T5610] __device_attach+0x2c8/0x450 [ 104.353458][ T5610] ? __pfx___device_attach+0x10/0x10 [ 104.353485][ T5610] ? rt_spin_unlock+0x160/0x200 [ 104.353513][ T5610] device_initial_probe+0xa1/0xd0 [ 104.353543][ T5610] bus_probe_device+0x12d/0x220 [ 104.353568][ T5610] device_add+0x7ec/0xb90 [ 104.353597][ T5610] usb_set_configuration+0x1a87/0x2110 [ 104.353652][ T5610] usb_generic_driver_probe+0x8d/0x150 [ 104.353679][ T5610] usb_probe_device+0x1c4/0x3b0 [ 104.353711][ T5610] ? __pfx_usb_probe_device+0x10/0x10 [ 104.353736][ T5610] really_probe+0x267/0xaf0 [ 104.353771][ T5610] __driver_probe_device+0x1e2/0x350 [ 104.353801][ T5610] driver_probe_device+0x4f/0x240 [ 104.353837][ T5610] __device_attach_driver+0x270/0x410 [ 104.353870][ T5610] bus_for_each_drv+0x25b/0x2f0 [ 104.353891][ T5610] ? __pfx___device_attach_driver+0x10/0x10 [ 104.353919][ T5610] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.353940][ T5610] ? rt_spin_unlock+0x160/0x200 [ 104.353991][ T5610] __device_attach+0x2c8/0x450 [ 104.354021][ T5610] ? __pfx___device_attach+0x10/0x10 [ 104.354046][ T5610] ? rt_spin_unlock+0x160/0x200 [ 104.354074][ T5610] device_initial_probe+0xa1/0xd0 [ 104.354104][ T5610] bus_probe_device+0x12d/0x220 [ 104.354128][ T5610] device_add+0x7ec/0xb90 [ 104.354157][ T5610] usb_new_device+0x9f8/0x16e0 [ 104.354198][ T5610] ? __pfx_usb_new_device+0x10/0x10 [ 104.354230][ T5610] hub_event+0x2a49/0x4f60 [ 104.354308][ T5610] ? __pfx_hub_event+0x10/0x10 [ 104.354332][ T5610] ? process_one_work+0x8be/0x1630 [ 104.354372][ T5610] ? process_one_work+0x8be/0x1630 [ 104.354399][ T5610] process_one_work+0x98b/0x1630 [ 104.354446][ T5610] ? __pfx_process_one_work+0x10/0x10 [ 104.354473][ T5610] ? do_raw_spin_lock+0x12b/0x2f0 [ 104.354514][ T5610] worker_thread+0xb49/0x1140 [ 104.354571][ T5610] kthread+0x388/0x470 [ 104.354594][ T5610] ? __pfx_worker_thread+0x10/0x10 [ 104.354623][ T5610] ? __pfx_kthread+0x10/0x10 [ 104.354649][ T5610] ret_from_fork+0x514/0xb70 [ 104.354677][ T5610] ? __pfx_ret_from_fork+0x10/0x10 [ 104.354702][ T5610] ? __switch_to+0xc79/0x1410 [ 104.354725][ T5610] ? __pfx_kthread+0x10/0x10 [ 104.354750][ T5610] ret_from_fork_asm+0x1a/0x30 [ 104.354796][ T5610] [ 104.354807][ T5610] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.354822][ T5610] CPU: 1 UID: 0 PID: 5610 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 104.354845][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.354858][ T5610] Workqueue: usb_hub_wq hub_event [ 104.354881][ T5610] Call Trace: [ 104.354889][ T5610] [ 104.354897][ T5610] vpanic+0x56c/0xa60 [ 104.354927][ T5610] ? __pfx__printk+0x10/0x10 [ 104.354948][ T5610] ? __pfx_vpanic+0x10/0x10 [ 104.354974][ T5610] ? is_bpf_text_address+0x292/0x2b0 [ 104.355003][ T5610] ? is_bpf_text_address+0x26/0x2b0 [ 104.355039][ T5610] panic+0xc5/0xd0 [ 104.355067][ T5610] ? __pfx_panic+0x10/0x10 [ 104.355105][ T5610] ? ret_from_fork_asm+0x1a/0x30 [ 104.355137][ T5610] __warn+0x315/0x4c0 [ 104.355173][ T5610] ? __alloc_workqueue+0x1d02/0x2070 [ 104.355199][ T5610] ? __alloc_workqueue+0x1d02/0x2070 [ 104.355225][ T5610] __report_bug+0x339/0x540 [ 104.355251][ T5610] ? __device_attach+0x2c8/0x450 [ 104.355276][ T5610] ? device_initial_probe+0xa1/0xd0 [ 104.355301][ T5610] ? bus_probe_device+0x12d/0x220 [ 104.355325][ T5610] ? __alloc_workqueue+0x1d02/0x2070 [ 104.355350][ T5610] ? __pfx___report_bug+0x10/0x10 [ 104.355374][ T5610] ? device_add+0x7ec/0xb90 [ 104.355419][ T5610] report_bug_entry+0x19a/0x290 [ 104.355446][ T5610] ? __alloc_workqueue+0x1d07/0x2070 [ 104.355469][ T5610] ? __alloc_workqueue+0x1d0c/0x2070 [ 104.355492][ T5610] handle_bug+0xce/0x200 [ 104.355522][ T5610] exc_invalid_op+0x1a/0x50 [ 104.355551][ T5610] asm_exc_invalid_op+0x1a/0x20 [ 104.355572][ T5610] RIP: 0010:__alloc_workqueue+0x1d07/0x2070 [ 104.355596][ T5610] Code: e9 36 f9 ff ff e8 89 8a 37 00 e9 05 fb ff ff e8 7f 8a 37 00 e9 92 fb ff ff e8 75 8a 37 00 48 8d 3d ee ff 43 0e 48 8b 74 24 20 <67> 48 0f b9 3a 81 cd 00 01 00 00 e9 88 e5 ff ff e8 54 8a 37 00 48 [ 104.355613][ T5610] RSP: 0018:ffffc90004b6ebc8 EFLAGS: 00010287 [ 104.355630][ T5610] RAX: ffffffff818e412b RBX: 0000000000000000 RCX: 0000000000100000 [ 104.355645][ T5610] RDX: ffffc90017c21000 RSI: ffff8880592e7568 RDI: ffffffff8fd24120 [ 104.355660][ T5610] RBP: 0000000000000000 R08: ffff888033ef9f00 R09: 0000000000000002 [ 104.355673][ T5610] R10: 0000000000000100 R11: 0000000000000102 R12: dffffc0000000000 [ 104.355686][ T5610] R13: ffff8880592e7400 R14: ffffc90004b6ece0 R15: 0000000000000000 [ 104.355709][ T5610] ? __alloc_workqueue+0x1cfb/0x2070 [ 104.355740][ T5610] ? __alloc_workqueue+0x1cfb/0x2070 [ 104.355780][ T5610] alloc_workqueue_noprof+0xe3/0x210 [ 104.355807][ T5610] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 104.355832][ T5610] ? __kmalloc_cache_noprof+0x3d0/0x6d0 [ 104.355854][ T5610] ? ath6kl_usb_probe+0x8e/0x1580 [ 104.355895][ T5610] ath6kl_usb_probe+0xaa/0x1580 [ 104.355930][ T5610] ? usb_unlocked_disable_lpm+0x8c/0xb0 [ 104.355961][ T5610] usb_probe_interface+0x659/0xc70 [ 104.355999][ T5610] ? __pfx_usb_probe_interface+0x10/0x10 [ 104.356022][ T5610] really_probe+0x267/0xaf0 [ 104.356053][ T5610] __driver_probe_device+0x1e2/0x350 [ 104.356081][ T5610] driver_probe_device+0x4f/0x240 [ 104.356112][ T5610] __device_attach_driver+0x270/0x410 [ 104.356144][ T5610] bus_for_each_drv+0x25b/0x2f0 [ 104.356172][ T5610] ? __pfx___device_attach_driver+0x10/0x10 [ 104.356199][ T5610] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.356220][ T5610] ? rt_spin_unlock+0x160/0x200 [ 104.356246][ T5610] __device_attach+0x2c8/0x450 [ 104.356272][ T5610] ? __pfx___device_attach+0x10/0x10 [ 104.356297][ T5610] ? rt_spin_unlock+0x160/0x200 [ 104.356321][ T5610] device_initial_probe+0xa1/0xd0 [ 104.356349][ T5610] bus_probe_device+0x12d/0x220 [ 104.356371][ T5610] device_add+0x7ec/0xb90 [ 104.356398][ T5610] usb_set_configuration+0x1a87/0x2110 [ 104.356452][ T5610] usb_generic_driver_probe+0x8d/0x150 [ 104.356479][ T5610] usb_probe_device+0x1c4/0x3b0 [ 104.356508][ T5610] ? __pfx_usb_probe_device+0x10/0x10 [ 104.356533][ T5610] really_probe+0x267/0xaf0 [ 104.356566][ T5610] __driver_probe_device+0x1e2/0x350 [ 104.356596][ T5610] driver_probe_device+0x4f/0x240 [ 104.356625][ T5610] __device_attach_driver+0x270/0x410 [ 104.356656][ T5610] bus_for_each_drv+0x25b/0x2f0 [ 104.356675][ T5610] ? __pfx___device_attach_driver+0x10/0x10 [ 104.356702][ T5610] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.356722][ T5610] ? rt_spin_unlock+0x160/0x200 [ 104.356747][ T5610] __device_attach+0x2c8/0x450 [ 104.356776][ T5610] ? __pfx___device_attach+0x10/0x10 [ 104.356800][ T5610] ? rt_spin_unlock+0x160/0x200 [ 104.356826][ T5610] device_initial_probe+0xa1/0xd0 [ 104.356853][ T5610] bus_probe_device+0x12d/0x220 [ 104.356876][ T5610] device_add+0x7ec/0xb90 [ 104.356902][ T5610] usb_new_device+0x9f8/0x16e0 [ 104.356935][ T5610] ? __pfx_usb_new_device+0x10/0x10 [ 104.356965][ T5610] hub_event+0x2a49/0x4f60 [ 104.357036][ T5610] ? __pfx_hub_event+0x10/0x10 [ 104.357060][ T5610] ? process_one_work+0x8be/0x1630 [ 104.357102][ T5610] ? process_one_work+0x8be/0x1630 [ 104.357129][ T5610] process_one_work+0x98b/0x1630 [ 104.357188][ T5610] ? __pfx_process_one_work+0x10/0x10 [ 104.357216][ T5610] ? do_raw_spin_lock+0x12b/0x2f0 [ 104.357258][ T5610] worker_thread+0xb49/0x1140 [ 104.357310][ T5610] kthread+0x388/0x470 [ 104.357333][ T5610] ? __pfx_worker_thread+0x10/0x10 [ 104.357360][ T5610] ? __pfx_kthread+0x10/0x10 [ 104.357382][ T5610] ret_from_fork+0x514/0xb70 [ 104.357407][ T5610] ? __pfx_ret_from_fork+0x10/0x10 [ 104.357431][ T5610] ? __switch_to+0xc79/0x1410 [ 104.357454][ T5610] ? __pfx_kthread+0x10/0x10 [ 104.357479][ T5610] ret_from_fork_asm+0x1a/0x30 [ 104.357523][ T5610] [ 104.357775][ T5610] Kernel Offset: disabled