last executing test programs: 7.547425606s ago: executing program 2 (id=7): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r1, 0x60b, 0x70bd2d, 0x10000000, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7.306346066s ago: executing program 3 (id=4): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000001b80)={0xe1, 0x0, 0x99}) 7.170021906s ago: executing program 2 (id=8): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000000c0)="02ce04332b", 0x5}], 0x1}}], 0x1, 0x200088d8) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f00000000c0)) 6.871034015s ago: executing program 2 (id=9): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x4000005) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xfffe, 0x2, [0xf00d, 0x6]}, &(0x7f00000001c0)=0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.852834894s ago: executing program 1 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) 6.689527719s ago: executing program 3 (id=11): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 6.438521787s ago: executing program 0 (id=1): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x38, r0, 0xbe0081c14342c833, 0x70bd24, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20004040) 6.270483103s ago: executing program 1 (id=12): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) write(r0, &(0x7f0000000180)="b4", 0x1) 6.176824958s ago: executing program 3 (id=13): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) 5.929595948s ago: executing program 0 (id=14): bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 5.522575148s ago: executing program 1 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="66b80500000066b91c08489d0f01c10f458469fff30f1ee86766c7442400008000006766c74424022f08ffee6766c744240600000000670f0114246729d30f080f01c5f30f2b7d7c2e660f1b96000066b8010000000f01d9", 0x58}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.210791197s ago: executing program 2 (id=16): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) dup(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0xb, 0xffffffff, 0x4, 0xbfffff89, 0x6, 0x6, 0x3}, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x5}, {0x0, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x1, 0x8, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2ab, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0xc0000005, 0x100, 0x4, 0x7, 0x400003, 0x40000002, 0x9}, {0x7ffffffe, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) socket$netlink(0x10, 0x3, 0x8000000004) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$PTRACE_GETSIGMASK(0x420a, r8, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r9, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x20, 0x40, 0x4, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf02, 0x0) getsockopt(r1, 0x200000000114, 0x2717, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000109000200000000000000000300800205000300060000000600024000110000"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000bbdf83010a01040000000000000000020000010900010073797a481b00000076fb97fd1f7527a59e8067f93ded430b98c7820ffe65588c1750"], 0x20}, 0x1, 0x0, 0x0, 0x400c095}, 0x8020) 5.018628861s ago: executing program 0 (id=17): syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 4.155637402s ago: executing program 1 (id=18): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220a00000093b4a8f41525ea06e2440828f6c04276d11d7a579c8a7c478297c2889166ea"], 0x0}, 0x0) 3.93584334s ago: executing program 0 (id=19): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x7, 0xfffffffe, 0xb7f9, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.956065838s ago: executing program 3 (id=20): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f, 0xdfffffff, 0x5e490620, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r1, 0x0, 0x0) 2.464207695s ago: executing program 2 (id=21): syz_usb_connect(0x0, 0x24, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x100000000000, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r2, 0x0, 0x0) 1.730666962s ago: executing program 3 (id=22): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f7902"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write(r0, &(0x7f0000000000)="383a01c011d8e6068eaf27f5ab444e6e9e3d7b1c015f2ae93ffcffcb3f675b0cb154d64006ed8ff1efa258cf391b284acc4b55bcf0c8ded6226cced201867ca77f06078db1ef06716f8456aed00526cf63", 0x51) 1.648142832s ago: executing program 1 (id=23): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) 1.61457525s ago: executing program 2 (id=24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) sigaltstack(0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) timer_create(0x4, &(0x7f0000000200)={0x0, 0x18, 0x2, @tid=r3}, &(0x7f00000012c0)=0x0) timer_delete(r4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000a97000/0x4000)=nil) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.47914607s ago: executing program 1 (id=25): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r3, &(0x7f0000d6f000/0x3000)=nil, 0x6000) shmdt(0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c010000"], 0x0) 0s ago: executing program 0 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.110' (ED25519) to the list of known hosts. [ 91.886200][ T32] cfg80211: failed to load regulatory.db [ 92.625280][ T5600] cgroup: Unknown subsys name 'net' [ 92.865593][ T5600] cgroup: Unknown subsys name 'cpuset' [ 92.919151][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.000691][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.731359][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.731359][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.760176][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.761958][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.763005][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.764971][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.765127][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.767246][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.767790][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.790333][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.853342][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.879909][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.888855][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.919311][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.924700][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.970750][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.976775][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.977604][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.985184][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.013563][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.887417][ T5619] Bluetooth: hci0: command tx timeout [ 100.029760][ T5619] Bluetooth: hci1: command tx timeout [ 100.108667][ T5619] Bluetooth: hci3: command tx timeout [ 100.108673][ T5625] Bluetooth: hci2: command tx timeout [ 100.231104][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.232054][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.232266][ T5617] bridge_slave_0: entered allmulticast mode [ 100.235120][ T5617] bridge_slave_0: entered promiscuous mode [ 100.306081][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.306455][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.307074][ T5617] bridge_slave_1: entered allmulticast mode [ 100.319108][ T5617] bridge_slave_1: entered promiscuous mode [ 100.380472][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.380707][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.380909][ T5622] bridge_slave_0: entered allmulticast mode [ 100.383386][ T5622] bridge_slave_0: entered promiscuous mode [ 100.424264][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.424541][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.436704][ T5618] bridge_slave_0: entered allmulticast mode [ 100.444891][ T5618] bridge_slave_0: entered promiscuous mode [ 100.477767][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.478018][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.478266][ T5622] bridge_slave_1: entered allmulticast mode [ 100.489501][ T5622] bridge_slave_1: entered promiscuous mode [ 100.523235][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.523562][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.523847][ T5618] bridge_slave_1: entered allmulticast mode [ 100.526396][ T5618] bridge_slave_1: entered promiscuous mode [ 100.528306][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.531311][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.532167][ T5621] bridge_slave_0: entered allmulticast mode [ 100.549451][ T5621] bridge_slave_0: entered promiscuous mode [ 100.602919][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.627125][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.627362][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.627584][ T5621] bridge_slave_1: entered allmulticast mode [ 100.647886][ T5621] bridge_slave_1: entered promiscuous mode [ 100.704531][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.755927][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.787577][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.821504][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.851230][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.856743][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.894315][ T5617] team0: Port device team_slave_0 added [ 100.925585][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.956047][ T5617] team0: Port device team_slave_1 added [ 101.020074][ T5622] team0: Port device team_slave_0 added [ 101.050279][ T5618] team0: Port device team_slave_0 added [ 101.076440][ T5622] team0: Port device team_slave_1 added [ 101.106319][ T5618] team0: Port device team_slave_1 added [ 101.114676][ T5621] team0: Port device team_slave_0 added [ 101.139231][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.139246][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.139266][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.198335][ T5621] team0: Port device team_slave_1 added [ 101.222211][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.222238][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.222258][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.291645][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.291658][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.291678][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.345648][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.345661][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.345681][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.405249][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.405262][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.405282][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.435368][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.435423][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.435510][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.446334][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.446388][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.446465][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.578318][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.578332][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.578355][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.714111][ T5617] hsr_slave_0: entered promiscuous mode [ 101.715931][ T5617] hsr_slave_1: entered promiscuous mode [ 101.948940][ T5619] Bluetooth: hci0: command tx timeout [ 102.051827][ T5622] hsr_slave_0: entered promiscuous mode [ 102.053449][ T5622] hsr_slave_1: entered promiscuous mode [ 102.054776][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 102.054861][ T5622] Cannot create hsr debugfs directory [ 102.082234][ T5618] hsr_slave_0: entered promiscuous mode [ 102.084091][ T5618] hsr_slave_1: entered promiscuous mode [ 102.085448][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 102.085481][ T5618] Cannot create hsr debugfs directory [ 102.108638][ T5619] Bluetooth: hci1: command tx timeout [ 102.164270][ T5621] hsr_slave_0: entered promiscuous mode [ 102.165943][ T5621] hsr_slave_1: entered promiscuous mode [ 102.167197][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 102.167228][ T5621] Cannot create hsr debugfs directory [ 102.193434][ T5625] Bluetooth: hci2: command tx timeout [ 102.193527][ T5619] Bluetooth: hci3: command tx timeout [ 103.047023][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.115040][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.132034][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.173084][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.179342][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.214671][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.246217][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.264851][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.409854][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.437127][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.452773][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.496288][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.513723][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.542899][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.575717][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.605368][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.785661][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.829814][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.833922][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.864013][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.881298][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.915015][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.954356][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.985716][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.029331][ T5619] Bluetooth: hci0: command tx timeout [ 104.173238][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.188633][ T5619] Bluetooth: hci1: command tx timeout [ 104.223921][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.237054][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.256584][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.279478][ T5625] Bluetooth: hci2: command tx timeout [ 104.279575][ T5619] Bluetooth: hci3: command tx timeout [ 104.291402][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.335984][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.357513][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.396039][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.465871][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.596399][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.665776][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.684408][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.684705][ T3293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.768229][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.770369][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.856140][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.905760][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.906108][ T3281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.021511][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.053753][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.053892][ T3293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.159797][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.224723][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.265277][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.276321][ T3281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.355232][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.355403][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.443509][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.552850][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.553029][ T3281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.624325][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.624541][ T3293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.108659][ T5619] Bluetooth: hci0: command tx timeout [ 106.280883][ T5619] Bluetooth: hci1: command tx timeout [ 106.348634][ T5625] Bluetooth: hci2: command tx timeout [ 106.348688][ T5619] Bluetooth: hci3: command tx timeout [ 106.608245][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.946493][ T5617] veth0_vlan: entered promiscuous mode [ 106.961215][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.057380][ T5617] veth1_vlan: entered promiscuous mode [ 107.164348][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.331095][ T5617] veth0_macvtap: entered promiscuous mode [ 107.349883][ T5622] veth0_vlan: entered promiscuous mode [ 107.366300][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.384064][ T5617] veth1_macvtap: entered promiscuous mode [ 107.462664][ T5622] veth1_vlan: entered promiscuous mode [ 107.525285][ T5618] veth0_vlan: entered promiscuous mode [ 107.543236][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.583652][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.607423][ T5618] veth1_vlan: entered promiscuous mode [ 107.646365][ T3293] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.663539][ T3293] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.684639][ T3293] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.711799][ T3293] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.778337][ T5621] veth0_vlan: entered promiscuous mode [ 107.792810][ T5622] veth0_macvtap: entered promiscuous mode [ 107.982310][ T5622] veth1_macvtap: entered promiscuous mode [ 108.069232][ T5621] veth1_vlan: entered promiscuous mode [ 108.262061][ T5618] veth0_macvtap: entered promiscuous mode [ 108.284484][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.331824][ T5618] veth1_macvtap: entered promiscuous mode [ 108.361952][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.404085][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.404108][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.503744][ T3281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.525225][ T3281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.543342][ T3281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.577264][ T3281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.612331][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.614568][ T5621] veth0_macvtap: entered promiscuous mode [ 108.686524][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.686543][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.805653][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.811681][ T5621] veth1_macvtap: entered promiscuous mode [ 108.968477][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.985998][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.060621][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.091320][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.181719][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.266050][ T1540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.266069][ T1540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.325680][ T5761] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.382640][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.533243][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.622807][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.639172][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.714051][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.797681][ T1540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.797701][ T1540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.949756][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.949778][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.593036][ T1540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.593058][ T1540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.827091][ T5771] capability: warning: `syz.2.6' uses 32-bit capabilities (legacy support in use) [ 111.029409][ T1540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.029431][ T1540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.252341][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.252364][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.961634][ T5785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 113.358589][ T5716] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.640363][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 113.657005][ T5716] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.708340][ T5716] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.709034][ T5716] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.741528][ T5716] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 113.741559][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.741579][ T5716] usb 4-1: Product: syz [ 113.741594][ T5716] usb 4-1: Manufacturer: syz [ 113.741609][ T5716] usb 4-1: SerialNumber: syz [ 113.828594][ T5807] IPVS: Scheduler module ip_vs_ not found [ 114.263040][ T5716] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 114.284341][ T5716] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 114.938729][ T823] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.128521][ T50] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.222263][ T823] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.222294][ T823] usb 2-1: config 0 has no interface number 0 [ 115.222344][ T823] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.222375][ T823] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.222423][ T823] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 115.222519][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.335442][ T50] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.335478][ T50] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.335528][ T50] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.404696][ T50] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.404730][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.404753][ T50] usb 1-1: Product: syz [ 115.404769][ T50] usb 1-1: Manufacturer: syz [ 115.404785][ T50] usb 1-1: SerialNumber: syz [ 115.592370][ T823] usb 2-1: config 0 descriptor?? [ 115.609937][ T50] cdc_mbim 1-1:1.0: skipping garbage [ 115.609978][ T50] cdc_mbim 1-1:1.0: skipping garbage [ 115.609994][ T50] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 115.615391][ T50] cdc_mbim 1-1:1.0: bind() failure [ 116.012685][ T5825] fuse: Bad value for 'fd' [ 116.102747][ T5716] usb 4-1: USB disconnect, device number 2 [ 116.256289][ T823] usbhid 2-1:0.1: can't add hid device: -71 [ 116.256408][ T823] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 116.303242][ T823] usb 2-1: USB disconnect, device number 2 [ 116.978629][ T5716] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 117.161235][ T5716] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 117.161266][ T5716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.161288][ T5716] usb 4-1: config 0 has no interface number 0 [ 117.161342][ T5716] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.161366][ T5716] usb 4-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.161411][ T5716] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 117.161437][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.346472][ T5716] usb 4-1: config 0 descriptor?? [ 117.473433][ T5846] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.473491][ T5846] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 117.478985][ T5846] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.479040][ T5846] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 118.206397][ T5716] ldusb 4-1:0.55: Interrupt in endpoint not found [ 118.299886][ T5716] usb 4-1: USB disconnect, device number 3 [ 118.474633][ T823] usb 1-1: USB disconnect, device number 2 [ 118.489750][ T5346] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.640807][ T5346] usb 2-1: Using ep0 maxpacket: 32 [ 118.648734][ T5346] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 118.648765][ T5346] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 118.648787][ T5346] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.648807][ T5346] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 118.648845][ T5346] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 118.648869][ T5346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.776988][ T0] ------------[ cut here ]------------ [ 118.777001][ T0] task_rq(p) != rq [ 118.777011][ T0] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#1: swapper/1/0 [ 118.777055][ T0] Modules linked in: [ 118.777093][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.777112][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.777126][ T0] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 118.777151][ T0] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 118.777167][ T0] RSP: 0018:ffffc900001e7ba0 EFLAGS: 00010006 [ 118.777181][ T0] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 118.777195][ T0] RDX: 0000000000000000 RSI: ffff888030915d00 RDI: ffff8880b873ba40 [ 118.777208][ T0] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 118.777221][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 118.777234][ T0] R13: 1ffff110170e78d6 R14: ffff888030915d00 R15: ffffffff8dc257d0 [ 118.777248][ T0] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 118.777262][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.777273][ T0] CR2: 00007fcbb937da08 CR3: 000000003455a000 CR4: 00000000003526f0 [ 118.777289][ T0] Call Trace: [ 118.777299][ T0] [ 118.777309][ T0] set_next_task_fair+0xa68/0xce0 [ 118.777336][ T0] __schedule+0x3e03/0x5550 [ 118.777378][ T0] ? __pfx___schedule+0x10/0x10 [ 118.777396][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.777426][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 118.777454][ T0] schedule_idle+0x51/0x90 [ 118.777474][ T0] do_idle+0x4a6/0x540 [ 118.777501][ T0] ? __pfx_do_idle+0x10/0x10 [ 118.777537][ T0] cpu_startup_entry+0x43/0x60 [ 118.777563][ T0] start_secondary+0x101/0x110 [ 118.777582][ T0] common_startup_64+0x13e/0x157 [ 118.777624][ T0] [ 118.777633][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.777645][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.777664][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.777674][ T0] Call Trace: [ 118.777680][ T0] [ 118.777687][ T0] vpanic+0x56c/0xa60 [ 118.777720][ T0] ? __pfx__printk+0x10/0x10 [ 118.777739][ T0] ? __pfx_vpanic+0x10/0x10 [ 118.777763][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 118.777788][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 118.777820][ T0] panic+0xc5/0xd0 [ 118.777845][ T0] ? __pfx_panic+0x10/0x10 [ 118.777877][ T0] ? common_startup_64+0x13e/0x157 [ 118.777908][ T0] __warn+0x315/0x4c0 [ 118.777932][ T0] ? hrtick_start_fair+0x196/0x1f0 [ 118.777957][ T0] ? hrtick_start_fair+0x196/0x1f0 [ 118.777981][ T0] __report_bug+0x339/0x540 [ 118.778010][ T0] ? hrtick_start_fair+0x196/0x1f0 [ 118.778034][ T0] ? __pfx___report_bug+0x10/0x10 [ 118.778056][ T0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 118.778088][ T0] ? hrtick_start_fair+0x196/0x1f0 [ 118.778111][ T0] report_bug+0x16a/0x220 [ 118.778134][ T0] ? hrtick_start_fair+0x196/0x1f0 [ 118.778156][ T0] ? hrtick_start_fair+0x198/0x1f0 [ 118.778179][ T0] handle_bug+0x9c/0x200 [ 118.778207][ T0] exc_invalid_op+0x1a/0x50 [ 118.778233][ T0] asm_exc_invalid_op+0x1a/0x20 [ 118.778250][ T0] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 118.778274][ T0] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 118.778288][ T0] RSP: 0018:ffffc900001e7ba0 EFLAGS: 00010006 [ 118.778302][ T0] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 118.778316][ T0] RDX: 0000000000000000 RSI: ffff888030915d00 RDI: ffff8880b873ba40 [ 118.778328][ T0] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 118.778341][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 118.778354][ T0] R13: 1ffff110170e78d6 R14: ffff888030915d00 R15: ffffffff8dc257d0 [ 118.778373][ T0] ? set_next_task_fair+0xa4e/0xce0 [ 118.778399][ T0] set_next_task_fair+0xa68/0xce0 [ 118.778424][ T0] __schedule+0x3e03/0x5550 [ 118.778464][ T0] ? __pfx___schedule+0x10/0x10 [ 118.778482][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.778511][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 118.778539][ T0] schedule_idle+0x51/0x90 [ 118.778559][ T0] do_idle+0x4a6/0x540 [ 118.778585][ T0] ? __pfx_do_idle+0x10/0x10 [ 118.778617][ T0] cpu_startup_entry+0x43/0x60 [ 118.778642][ T0] start_secondary+0x101/0x110 [ 118.778661][ T0] common_startup_64+0x13e/0x157 [ 118.778705][ T0] [ 119.894029][ T0] Shutting down cpus with NMI [ 119.894747][ T0] Kernel Offset: disabled