last executing test programs: 4.091089144s ago: executing program 1 (id=2): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090264"], 0x0) close(r0) 2.371042883s ago: executing program 2 (id=3): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.230929014s ago: executing program 1 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x9}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x104}]}]}, 0x30}}, 0x0) 1.737917724s ago: executing program 1 (id=6): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)="0f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="a64b42", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000049c0)='{', 0x1}], 0x1}}], 0x3, 0x448c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 720.580019ms ago: executing program 1 (id=7): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 711.552597ms ago: executing program 3 (id=4): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x27) 265.845519ms ago: executing program 1 (id=8): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000740)={0x0, 0xfffffffa}, 0x8) 64.695824ms ago: executing program 1 (id=9): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000093e1ad40402010726b5b010203010902240001010740000904bcd10101"], 0x0) 38.602152ms ago: executing program 3 (id=10): openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x4e24, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x20000, 0x0, 0x1, 0x2, 0x1}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) 0s ago: executing program 0 (id=1): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000800)={0x0, 0x8, [{r0, 0x0, 0x0, 0x8000}, {0xffffffffffffffff, 0x0, 0x1000000000000}, {r0, 0x0, 0x100000000, 0x1000000000000}, {r0, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0x4000, 0xffffe000}, {r0, 0x0, 0xfffffffff0000000, 0x100000000}, {r0}, {r0, 0x0, 0x1000, 0xfffffffffffff000}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299f000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000900)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004080), 0x0, &(0x7f0000004100)=""/146, 0x92}, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) close(0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. [ 72.191228][ T5594] cgroup: Unknown subsys name 'net' [ 72.429818][ T5594] cgroup: Unknown subsys name 'cpuset' [ 72.485620][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.179880][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.961167][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.969344][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.970906][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.973550][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.013616][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.016324][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.017506][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.018633][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.018964][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.020891][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.021911][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.046007][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.047326][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.047991][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.053470][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.059441][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.060948][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.074519][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.170789][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.172767][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.998546][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.998757][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.999095][ T5609] bridge_slave_0: entered allmulticast mode [ 80.002045][ T5609] bridge_slave_0: entered promiscuous mode [ 80.064772][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.065560][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.065795][ T5609] bridge_slave_1: entered allmulticast mode [ 80.068886][ T5609] bridge_slave_1: entered promiscuous mode [ 80.120981][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.121164][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.121312][ T5607] bridge_slave_0: entered allmulticast mode [ 80.123422][ T5607] bridge_slave_0: entered promiscuous mode [ 80.127502][ T60] Bluetooth: hci3: command tx timeout [ 80.127688][ T4924] Bluetooth: hci0: command tx timeout [ 80.136871][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.137140][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.137406][ T5606] bridge_slave_0: entered allmulticast mode [ 80.141982][ T5606] bridge_slave_0: entered promiscuous mode [ 80.196819][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.197087][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.197632][ T5607] bridge_slave_1: entered allmulticast mode [ 80.199302][ T5607] bridge_slave_1: entered promiscuous mode [ 80.200798][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.200982][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.201130][ T5606] bridge_slave_1: entered allmulticast mode [ 80.202861][ T5606] bridge_slave_1: entered promiscuous mode [ 80.205213][ T4924] Bluetooth: hci2: command tx timeout [ 80.251528][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.291243][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.291439][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.291597][ T5608] bridge_slave_0: entered allmulticast mode [ 80.293432][ T5608] bridge_slave_0: entered promiscuous mode [ 80.296902][ T4924] Bluetooth: hci1: command tx timeout [ 80.306512][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.349652][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.349928][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.350233][ T5608] bridge_slave_1: entered allmulticast mode [ 80.352785][ T5608] bridge_slave_1: entered promiscuous mode [ 80.392050][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.406293][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.450405][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.453389][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.482899][ T5609] team0: Port device team_slave_0 added [ 80.517955][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.521181][ T5609] team0: Port device team_slave_1 added [ 80.564470][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.799578][ T5607] team0: Port device team_slave_0 added [ 80.802156][ T5606] team0: Port device team_slave_0 added [ 80.841078][ T5607] team0: Port device team_slave_1 added [ 80.843321][ T5606] team0: Port device team_slave_1 added [ 80.869569][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.869585][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.869614][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.926433][ T5608] team0: Port device team_slave_0 added [ 80.929515][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.929529][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.929552][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.984112][ T5608] team0: Port device team_slave_1 added [ 81.001154][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.001165][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.001179][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.002957][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.002966][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.002980][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.101718][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.101728][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.101742][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.103183][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.103192][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.103206][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.225595][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.225606][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.225620][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.251276][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.251293][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.251316][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.308731][ T5609] hsr_slave_0: entered promiscuous mode [ 81.311150][ T5609] hsr_slave_1: entered promiscuous mode [ 81.377958][ T5606] hsr_slave_0: entered promiscuous mode [ 81.379178][ T5606] hsr_slave_1: entered promiscuous mode [ 81.380230][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 81.380316][ T5606] Cannot create hsr debugfs directory [ 81.456236][ T5607] hsr_slave_0: entered promiscuous mode [ 81.457481][ T5607] hsr_slave_1: entered promiscuous mode [ 81.458837][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 81.458859][ T5607] Cannot create hsr debugfs directory [ 81.468645][ T5608] hsr_slave_0: entered promiscuous mode [ 81.471668][ T5608] hsr_slave_1: entered promiscuous mode [ 81.473486][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 81.473507][ T5608] Cannot create hsr debugfs directory [ 82.205447][ T4924] Bluetooth: hci0: command tx timeout [ 82.205476][ T4924] Bluetooth: hci3: command tx timeout [ 82.286868][ T60] Bluetooth: hci2: command tx timeout [ 82.366067][ T60] Bluetooth: hci1: command tx timeout [ 82.414271][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.492351][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.506633][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.549852][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.564030][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.593079][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.614415][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.651550][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.793078][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.832546][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.845764][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.874438][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.883546][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.911880][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.935731][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.971901][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.128695][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.151792][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.156840][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.194482][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.205795][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.251181][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.281343][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.310769][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.454784][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.490756][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.517268][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.561971][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.570196][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.610740][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.618248][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.651269][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.670948][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.764190][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.811536][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.811701][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.862703][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.869511][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.910389][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.028070][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.083601][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.083714][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.139307][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.144365][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.144513][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.286027][ T4924] Bluetooth: hci0: command tx timeout [ 84.286122][ T60] Bluetooth: hci3: command tx timeout [ 84.289695][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.347008][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.350765][ T3083] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.350871][ T3083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.371981][ T60] Bluetooth: hci2: command tx timeout [ 84.443557][ T3083] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.443791][ T3083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.447458][ T60] Bluetooth: hci1: command tx timeout [ 84.514520][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.570839][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.571092][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.642203][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.642362][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.099822][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.552261][ T5609] veth0_vlan: entered promiscuous mode [ 85.607793][ T5609] veth1_vlan: entered promiscuous mode [ 85.871745][ T5609] veth0_macvtap: entered promiscuous mode [ 85.897167][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.958100][ T5609] veth1_macvtap: entered promiscuous mode [ 86.097746][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.169604][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.185610][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.203587][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.267465][ T1018] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.292764][ T1018] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.317081][ T1018] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.321579][ T1018] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.367104][ T60] Bluetooth: hci3: command tx timeout [ 86.367137][ T60] Bluetooth: hci0: command tx timeout [ 86.446539][ T4924] Bluetooth: hci2: command tx timeout [ 86.503261][ T5607] veth0_vlan: entered promiscuous mode [ 86.534817][ T4924] Bluetooth: hci1: command tx timeout [ 86.624758][ T5607] veth1_vlan: entered promiscuous mode [ 86.814300][ T5608] veth0_vlan: entered promiscuous mode [ 86.828968][ T5606] veth0_vlan: entered promiscuous mode [ 86.854487][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.854512][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.921406][ T5608] veth1_vlan: entered promiscuous mode [ 86.949682][ T5606] veth1_vlan: entered promiscuous mode [ 86.957325][ T822] cfg80211: failed to load regulatory.db [ 87.028020][ T5607] veth0_macvtap: entered promiscuous mode [ 87.052881][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.052900][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.072314][ T5607] veth1_macvtap: entered promiscuous mode [ 87.172986][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.207323][ T5608] veth0_macvtap: entered promiscuous mode [ 87.237017][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.239448][ T5606] veth0_macvtap: entered promiscuous mode [ 87.350754][ T5606] veth1_macvtap: entered promiscuous mode [ 87.376971][ T5608] veth1_macvtap: entered promiscuous mode [ 87.378645][ T1018] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.380912][ T1018] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.383960][ T1018] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.424682][ T1018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.586191][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.679597][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.703163][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.850264][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.962180][ T1018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.971434][ T1018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.985040][ T1018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.985505][ T1018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.036399][ T1040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.070951][ T1040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.092677][ T1040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.096681][ T5596] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.112831][ T1040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.144856][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.144874][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.326419][ T5596] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.326445][ T5596] usb 2-1: config 0 has no interfaces? [ 88.364739][ T5596] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.364768][ T5596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.364796][ T5596] usb 2-1: Product: syz [ 88.364810][ T5596] usb 2-1: Manufacturer: syz [ 88.364824][ T5596] usb 2-1: SerialNumber: syz [ 88.442752][ T5596] usb 2-1: config 0 descriptor?? [ 88.626713][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.626732][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.743906][ T5596] usb 2-1: USB disconnect, device number 2 [ 89.332465][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.332485][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.544561][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.544581][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.690714][ T5596] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.711252][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.711265][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.840448][ T5596] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 89.840477][ T5596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.840496][ T5596] usb 3-1: Product: syz [ 89.840510][ T5596] usb 3-1: Manufacturer: syz [ 89.840524][ T5596] usb 3-1: SerialNumber: syz [ 90.222515][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.222534][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.540823][ T5596] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 90.540884][ T5596] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 91.179516][ T5596] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 91.179592][ T5596] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 91.182865][ T5596] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 91.245577][ T5596] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 91.689923][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 91.865469][ T32] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.956154][ T5788] hsr_slave_0 (unregistering): left promiscuous mode [ 92.042944][ T32] usb 2-1: config 1 has an invalid interface number: 188 but max is 0 [ 92.042961][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.042971][ T32] usb 2-1: config 1 has no interface number 0 [ 92.042997][ T32] usb 2-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.043012][ T32] usb 2-1: config 1 interface 188 has no altsetting 0 [ 92.114066][ T32] usb 2-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 92.114095][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.114114][ T32] usb 2-1: Product: syz [ 92.114127][ T32] usb 2-1: Manufacturer: syz [ 92.114140][ T32] usb 2-1: SerialNumber: syz [ 92.230348][ T0] ------------[ cut here ]------------ [ 92.230365][ T0] rq->clock_update_flags < RQCF_ACT_SKIP [ 92.230375][ T0] WARNING: kernel/sched/sched.h:1792 at update_curr_idle+0x1cf/0x260, CPU#0: swapper/0/0 [ 92.230415][ T0] Modules linked in: [ 92.230441][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 92.230457][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.230468][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 92.230489][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 3a 98 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 4c [ 92.230501][ T0] RSP: 0018:ffffffff8e007b98 EFLAGS: 00010097 [ 92.230514][ T0] RAX: 0000000000000000 RBX: ffff8880b863ba40 RCX: 0000000000000002 [ 92.230523][ T0] RDX: ffff888032bfdd00 RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80 [ 92.230533][ T0] RBP: ffffffff8e007dd0 R08: ffff8880b873c91f R09: 0000000000000000 [ 92.230543][ T0] R10: ffff8880b873c910 R11: ffffffff819a0020 R12: dffffc0000000000 [ 92.230553][ T0] R13: ffffffff8dc14a58 R14: ffffffff8e0fef40 R15: ffff8880b863c620 [ 92.230563][ T0] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 92.230575][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.230584][ T0] CR2: 00007f1c87cda540 CR3: 000000002b9de000 CR4: 00000000003526f0 [ 92.230597][ T0] Call Trace: [ 92.230607][ T0] [ 92.230617][ T0] put_prev_task_idle+0xd/0x20 [ 92.230637][ T0] __schedule+0x3da0/0x5550 [ 92.230672][ T0] ? __pfx___schedule+0x10/0x10 [ 92.230686][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 92.230710][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 92.230732][ T0] schedule_idle+0x51/0x90 [ 92.230748][ T0] do_idle+0x4a6/0x540 [ 92.230769][ T0] ? __pfx_do_idle+0x10/0x10 [ 92.230794][ T0] cpu_startup_entry+0x43/0x60 [ 92.230813][ T0] rest_init+0x2de/0x300 [ 92.230835][ T0] start_kernel+0x392/0x3e0 [ 92.230857][ T0] x86_64_start_reservations+0x24/0x30 [ 92.230873][ T0] x86_64_start_kernel+0x143/0x1c0 [ 92.230888][ T0] common_startup_64+0x13e/0x157 [ 92.230921][ T0] [ 92.230928][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 92.230938][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 92.230954][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.230961][ T0] Call Trace: [ 92.230967][ T0] [ 92.230972][ T0] vpanic+0x56c/0xa60 [ 92.230992][ T0] ? __pfx__printk+0x10/0x10 [ 92.231010][ T0] ? __pfx_vpanic+0x10/0x10 [ 92.231028][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 92.231043][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 92.231060][ T0] panic+0xc5/0xd0 [ 92.231074][ T0] ? __pfx_panic+0x10/0x10 [ 92.231092][ T0] ? common_startup_64+0x13e/0x157 [ 92.231109][ T0] __warn+0x315/0x4c0 [ 92.231123][ T0] ? update_curr_idle+0x1cf/0x260 [ 92.231138][ T0] ? update_curr_idle+0x1cf/0x260 [ 92.231153][ T0] __report_bug+0x339/0x540 [ 92.231170][ T0] ? update_curr_idle+0x1cf/0x260 [ 92.231184][ T0] ? __pfx___report_bug+0x10/0x10 [ 92.231201][ T0] ? pick_task_fair+0x21a/0x1410 [ 92.231219][ T0] ? update_curr_idle+0x1cf/0x260 [ 92.231234][ T0] report_bug+0x16a/0x220 [ 92.231252][ T0] ? update_curr_idle+0x1cf/0x260 [ 92.231266][ T0] ? update_curr_idle+0x1d1/0x260 [ 92.231280][ T0] handle_bug+0x9c/0x200 [ 92.231295][ T0] exc_invalid_op+0x1a/0x50 [ 92.231309][ T0] asm_exc_invalid_op+0x1a/0x20 [ 92.231320][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 92.231335][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 3a 98 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 4c [ 92.231343][ T0] RSP: 0018:ffffffff8e007b98 EFLAGS: 00010097 [ 92.231355][ T0] RAX: 0000000000000000 RBX: ffff8880b863ba40 RCX: 0000000000000002 [ 92.231362][ T0] RDX: ffff888032bfdd00 RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80 [ 92.231369][ T0] RBP: ffffffff8e007dd0 R08: ffff8880b873c91f R09: 0000000000000000 [ 92.231376][ T0] R10: ffff8880b873c910 R11: ffffffff819a0020 R12: dffffc0000000000 [ 92.231383][ T0] R13: ffffffff8dc14a58 R14: ffffffff8e0fef40 R15: ffff8880b863c620 [ 92.231392][ T0] ? __pfx_put_prev_task_idle+0x10/0x10 [ 92.231411][ T0] ? update_curr_idle+0xab/0x260 [ 92.231426][ T0] put_prev_task_idle+0xd/0x20 [ 92.231441][ T0] __schedule+0x3da0/0x5550 [ 92.231464][ T0] ? __pfx___schedule+0x10/0x10 [ 92.231474][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 92.231491][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 92.231508][ T0] schedule_idle+0x51/0x90 [ 92.231519][ T0] do_idle+0x4a6/0x540 [ 92.231534][ T0] ? __pfx_do_idle+0x10/0x10 [ 92.231552][ T0] cpu_startup_entry+0x43/0x60 [ 92.231566][ T0] rest_init+0x2de/0x300 [ 92.231582][ T0] start_kernel+0x392/0x3e0 [ 92.231596][ T0] x86_64_start_reservations+0x24/0x30 [ 92.231606][ T0] x86_64_start_kernel+0x143/0x1c0 [ 92.231617][ T0] common_startup_64+0x13e/0x157 [ 92.231639][ T0] [ 93.303438][ T0] Shutting down cpus with NMI [ 93.303939][ T0] Kernel Offset: disabled