last executing test programs: 6.909416787s ago: executing program 3 (id=31): socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 6.54972842s ago: executing program 3 (id=34): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={0x0, 0xfffffff0, 0x30}, 0xc) 6.274450359s ago: executing program 3 (id=36): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x200000000100, 0x0, 0x0, 0x200000000130, 0x200000000160], 0x0, 0x0, 0x0}, 0x108) 5.974134556s ago: executing program 3 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x28, r1, 0x5, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xc59}]}]}, 0x28}}, 0x0) 5.785251354s ago: executing program 3 (id=42): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) 2.27351945s ago: executing program 4 (id=77): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x484082, 0x0) poll(&(0x7f0000000240)=[{r2, 0x8022}, {r0, 0x2000}, {r1, 0x420}, {r1, 0x6241}, {r1, 0x609a}, {r0, 0x80}], 0x6, 0x7f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 2.12827349s ago: executing program 4 (id=81): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.521343377s ago: executing program 2 (id=86): set_mempolicy(0x8006, &(0x7f0000000340)=0xfff, 0x5) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 1.419351139s ago: executing program 1 (id=88): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1.340297571s ago: executing program 2 (id=89): socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 1.262650044s ago: executing program 1 (id=91): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x484082, 0x0) poll(&(0x7f0000000240)=[{r2, 0x8022}, {r0, 0x2000}, {r1, 0x420}, {r1, 0x6241}, {r1, 0x609a}, {r0, 0x80}], 0x6, 0x7f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) close_range(r0, 0xffffffffffffffff, 0x0) 1.253813609s ago: executing program 2 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x40}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x41}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 1.115145229s ago: executing program 4 (id=93): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 1.021225278s ago: executing program 1 (id=94): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000200050800900010064ac8e0b"], 0x48}}, 0x0) 967.009231ms ago: executing program 4 (id=95): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001400), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 966.219802ms ago: executing program 2 (id=97): bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="05", 0x1}, {&(0x7f0000000280)="e2", 0x1}], 0x2) 813.692796ms ago: executing program 2 (id=99): set_mempolicy(0x8006, &(0x7f0000000340)=0xfff, 0x5) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 799.017032ms ago: executing program 1 (id=100): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 631.188548ms ago: executing program 0 (id=101): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 573.851081ms ago: executing program 1 (id=102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000140)="ffffffffffff00112233445588640b81bdc2b2abd27c", 0x16) 535.159463ms ago: executing program 2 (id=103): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 534.936538ms ago: executing program 4 (id=104): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x484082, 0x0) poll(&(0x7f0000000240)=[{r2, 0x8022}, {r0, 0x2000}, {r1, 0x420}, {r1, 0x6241}, {r1, 0x609a}, {r0, 0x80}], 0x6, 0x7f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) close_range(r0, 0xffffffffffffffff, 0x0) 532.954113ms ago: executing program 0 (id=105): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x5c, r0, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) 401.412647ms ago: executing program 0 (id=106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @timestamp={0x8, 0xa, 0x10000, 0xffffffff}]}}}}}}}, 0x0) 305.49571ms ago: executing program 0 (id=107): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 268.888682ms ago: executing program 4 (id=108): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 226.38535ms ago: executing program 1 (id=109): bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="05", 0x1}, {&(0x7f0000000280)="e2", 0x1}], 0x2) 176.81926ms ago: executing program 0 (id=110): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000200050800900010064ac8e0b1a000000"], 0x48}}, 0x0) 85.349151ms ago: executing program 3 (id=111): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x190, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3e8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'syz_tun\x00', 0x2}, 0x18) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x1, 0x1, 0x1, 0x1000}, 0x3, [0xfa, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200a, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x7, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffff]}, 0x45c) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r3, 0x5, 0x0, &(0x7f0000000080)=0x272) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000100)={{}, 0x1, 0x1, 0x1}, 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 0s ago: executing program 0 (id=112): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={0x0, 0xfffffff0, 0x30}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 87.569297][ T5603] cgroup: Unknown subsys name 'net' [ 87.668485][ T5603] cgroup: Unknown subsys name 'cpuset' [ 87.672539][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.504435][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.144242][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.146855][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.148451][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.155260][ T4933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.169402][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.202578][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.203068][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.205110][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.219471][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.228773][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.230609][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.233116][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.233291][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.234734][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.235024][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.235381][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.242987][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.251439][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.252707][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.269384][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.287513][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.321959][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.334701][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.353586][ T4933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.370130][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.467070][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.467963][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.468419][ T5635] bridge_slave_0: entered allmulticast mode [ 93.470575][ T5635] bridge_slave_0: entered promiscuous mode [ 93.529895][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.530083][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.530519][ T5635] bridge_slave_1: entered allmulticast mode [ 93.532928][ T5635] bridge_slave_1: entered promiscuous mode [ 93.666106][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.693501][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.693681][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.693810][ T5631] bridge_slave_0: entered allmulticast mode [ 93.695526][ T5631] bridge_slave_0: entered promiscuous mode [ 93.735082][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.767485][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.767621][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.767764][ T5631] bridge_slave_1: entered allmulticast mode [ 93.769927][ T5631] bridge_slave_1: entered promiscuous mode [ 93.835628][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.835797][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.835903][ T5634] bridge_slave_0: entered allmulticast mode [ 93.837528][ T5634] bridge_slave_0: entered promiscuous mode [ 93.873866][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.873975][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.874114][ T5636] bridge_slave_0: entered allmulticast mode [ 93.875900][ T5636] bridge_slave_0: entered promiscuous mode [ 93.921151][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.921332][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.921473][ T5634] bridge_slave_1: entered allmulticast mode [ 93.923077][ T5634] bridge_slave_1: entered promiscuous mode [ 93.949978][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.953208][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.953348][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.954200][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.954601][ T5636] bridge_slave_1: entered allmulticast mode [ 93.960741][ T5636] bridge_slave_1: entered promiscuous mode [ 94.002383][ T5635] team0: Port device team_slave_0 added [ 94.057424][ T5635] team0: Port device team_slave_1 added [ 94.123890][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.126089][ T5631] team0: Port device team_slave_0 added [ 94.129752][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.130000][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.130107][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.130245][ T5633] bridge_slave_0: entered allmulticast mode [ 94.131950][ T5633] bridge_slave_0: entered promiscuous mode [ 94.191418][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.202705][ T5631] team0: Port device team_slave_1 added [ 94.209480][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.209859][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.209948][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.210098][ T5633] bridge_slave_1: entered allmulticast mode [ 94.211710][ T5633] bridge_slave_1: entered promiscuous mode [ 94.221064][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.221115][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.221200][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.313532][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.313550][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.313574][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.411219][ T5636] team0: Port device team_slave_0 added [ 94.424614][ T5627] Bluetooth: hci4: command tx timeout [ 94.424868][ T5627] Bluetooth: hci3: command tx timeout [ 94.424879][ T4933] Bluetooth: hci1: command tx timeout [ 94.425046][ T5627] Bluetooth: hci0: command tx timeout [ 94.430467][ T5634] team0: Port device team_slave_0 added [ 94.431268][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.431284][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.431311][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.433997][ T5622] Bluetooth: hci2: command tx timeout [ 94.439440][ T5634] team0: Port device team_slave_1 added [ 94.450224][ T5636] team0: Port device team_slave_1 added [ 94.478025][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.483596][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.483647][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.483722][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.600503][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.637518][ T5635] hsr_slave_0: entered promiscuous mode [ 94.638552][ T5635] hsr_slave_1: entered promiscuous mode [ 94.698372][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.698390][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.698413][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.700296][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.700311][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.700334][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.702392][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.702406][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.702429][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.723835][ T5633] team0: Port device team_slave_0 added [ 94.731889][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.731935][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.732075][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.888873][ T5633] team0: Port device team_slave_1 added [ 94.949179][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.949197][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.949221][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.966889][ T5631] hsr_slave_0: entered promiscuous mode [ 94.970413][ T5631] hsr_slave_1: entered promiscuous mode [ 94.972817][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 94.973100][ T5631] Cannot create hsr debugfs directory [ 95.060590][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.060608][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.060632][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.136917][ T5634] hsr_slave_0: entered promiscuous mode [ 95.137867][ T5634] hsr_slave_1: entered promiscuous mode [ 95.138435][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 95.138456][ T5634] Cannot create hsr debugfs directory [ 95.185455][ T5636] hsr_slave_0: entered promiscuous mode [ 95.186321][ T5636] hsr_slave_1: entered promiscuous mode [ 95.186884][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 95.186915][ T5636] Cannot create hsr debugfs directory [ 95.402091][ T5633] hsr_slave_0: entered promiscuous mode [ 95.403170][ T5633] hsr_slave_1: entered promiscuous mode [ 95.409706][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 95.409725][ T5633] Cannot create hsr debugfs directory [ 95.817377][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.830453][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.851628][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.864196][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.865393][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.870672][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.908687][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.921542][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.998980][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.012418][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.028258][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.040596][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.041942][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.060089][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.061194][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.080195][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.215135][ T5636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.219787][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.222951][ T5636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.247963][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.248944][ T5636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.271154][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.272723][ T5636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.289972][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.385052][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.426894][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.432122][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.448521][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.452119][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.452963][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.480803][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.497443][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.503582][ T5622] Bluetooth: hci1: command tx timeout [ 96.503623][ T5622] Bluetooth: hci3: command tx timeout [ 96.503651][ T5622] Bluetooth: hci4: command tx timeout [ 96.516034][ T5627] Bluetooth: hci2: command tx timeout [ 96.516158][ T5627] Bluetooth: hci0: command tx timeout [ 96.529458][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.597430][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.638539][ T1366] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.638670][ T1366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.691161][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.691245][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.720665][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.730759][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.756024][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.759763][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.760656][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.767130][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.771478][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.802497][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.817515][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.910914][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.951967][ T1366] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.952641][ T1366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.990072][ T1366] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.990170][ T1366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.038503][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.131282][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.168944][ T3394] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.169051][ T3394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.193211][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.215101][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.240827][ T1366] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.240932][ T1366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.337201][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.367636][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.394866][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.394944][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.414765][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.426867][ T3394] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.427008][ T3394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.448340][ T5635] veth0_vlan: entered promiscuous mode [ 97.498869][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.525222][ T5635] veth1_vlan: entered promiscuous mode [ 97.544708][ T1366] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.544788][ T1366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.599486][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.599571][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.679228][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.725235][ T5634] veth0_vlan: entered promiscuous mode [ 97.747942][ T5635] veth0_macvtap: entered promiscuous mode [ 97.781177][ T5635] veth1_macvtap: entered promiscuous mode [ 97.800554][ T5634] veth1_vlan: entered promiscuous mode [ 97.841839][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.872061][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.912418][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.976479][ T5634] veth0_macvtap: entered promiscuous mode [ 97.982442][ T5636] veth0_vlan: entered promiscuous mode [ 98.015804][ T5634] veth1_macvtap: entered promiscuous mode [ 98.032339][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.046215][ T5636] veth1_vlan: entered promiscuous mode [ 98.102790][ T5631] veth0_vlan: entered promiscuous mode [ 98.144695][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.171224][ T5631] veth1_vlan: entered promiscuous mode [ 98.190403][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.254435][ T1112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.288476][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.288500][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.314992][ T5636] veth0_macvtap: entered promiscuous mode [ 98.359707][ T5636] veth1_macvtap: entered promiscuous mode [ 98.440485][ T5633] veth0_vlan: entered promiscuous mode [ 98.452967][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.463305][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.463328][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.501449][ T5631] veth0_macvtap: entered promiscuous mode [ 98.556294][ T5631] veth1_macvtap: entered promiscuous mode [ 98.572120][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.585405][ T5622] Bluetooth: hci0: command tx timeout [ 98.585438][ T5622] Bluetooth: hci2: command tx timeout [ 98.585458][ T5622] Bluetooth: hci4: command tx timeout [ 98.585477][ T5622] Bluetooth: hci3: command tx timeout [ 98.585497][ T5622] Bluetooth: hci1: command tx timeout [ 98.585818][ T1366] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.667530][ T5635] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.673835][ T1366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.673858][ T1366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.719031][ T5633] veth1_vlan: entered promiscuous mode [ 98.740234][ T5635] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 98.740777][ T5635] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 98.741084][ T5635] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 98.741568][ T5635] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 98.811351][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.881013][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.899731][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.899755][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.946525][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.994873][ T1112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.995165][ T1112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.023097][ T5633] veth0_macvtap: entered promiscuous mode [ 99.034657][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.034715][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.034755][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.034795][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.034835][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.034874][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.034913][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.034952][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.034991][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.035030][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.035069][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.152751][ T5633] veth1_macvtap: entered promiscuous mode [ 99.262930][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.262952][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.496158][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.516042][ T1366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.516067][ T1366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.604823][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.605853][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.605872][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.740222][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.740248][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.833742][ T1112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.834092][ T1112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.834895][ T1112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.896397][ T5724] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.138585][ T5728] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1'. [ 100.229792][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.229817][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.324888][ T1366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.475633][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.475669][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.664060][ T5627] Bluetooth: hci1: command tx timeout [ 100.664098][ T5627] Bluetooth: hci3: command tx timeout [ 100.664116][ T5622] Bluetooth: hci4: command tx timeout [ 100.664143][ T5622] Bluetooth: hci2: command tx timeout [ 100.664164][ T5622] Bluetooth: hci0: command tx timeout [ 100.740819][ T30] cfg80211: failed to load regulatory.db [ 101.656020][ T5736] psmouse serio2: Failed to reset mouse on : -5 [ 101.723821][ T5678] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.879094][ T5678] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.902217][ T5678] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.902256][ T5678] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.902299][ T5678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.965121][ T5758] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.009179][ T5678] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.385425][ T5788] Zero length message leads to an empty skb [ 102.581785][ T5792] mmap: syz.1.9 (5792) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.623323][ T5678] usb 4-1: USB disconnect, device number 2 [ 103.174444][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 103.203030][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.391644][ T5797] bridge_slave_1 (unregistering): left allmulticast mode [ 103.391679][ T5797] bridge_slave_1 (unregistering): left promiscuous mode [ 103.392745][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.490652][ T5801] netlink: zone id is out of range [ 103.490674][ T5801] netlink: zone id is out of range [ 103.490685][ T5801] netlink: zone id is out of range [ 103.490694][ T5801] netlink: zone id is out of range [ 103.490703][ T5801] netlink: zone id is out of range [ 103.490711][ T5801] netlink: zone id is out of range [ 103.490964][ T5801] netlink: zone id is out of range [ 103.490975][ T5801] netlink: zone id is out of range [ 103.490984][ T5801] netlink: zone id is out of range [ 103.491004][ T5801] netlink: zone id is out of range [ 104.606244][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 104.640995][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 104.660284][ T5823] netlink: 104 bytes leftover after parsing attributes in process `syz.2.22'. [ 104.660303][ T5823] netlink: 104 bytes leftover after parsing attributes in process `syz.2.22'. [ 105.213539][ T5736] misc userio: Buffer overflowed, userio client isn't keeping up [ 106.396692][ T5847] input: syz0 as /devices/virtual/input/input6 [ 106.659436][ T5736] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 107.023483][ T5736] psmouse serio2: Failed to enable mouse on [ 107.346755][ T5872] bond0: (slave bond_slave_1): Releasing backup interface [ 107.860576][ T5895] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 108.554327][ T50] psmouse serio3: Failed to reset mouse on : -5 [ 110.685140][ T5950] binder: 5949:5950 ioctl c0306201 80000080 returned -14 [ 110.705887][ T5950] binder: 5949:5950 ioctl c0306201 800003c0 returned -14 [ 110.728958][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.58'. [ 110.765787][ T5955] binder: 5949:5955 unknown command 0 [ 110.765817][ T5955] binder: 5949:5955 ioctl c0306201 80000000 returned -22 [ 111.160289][ T31] audit: type=1326 audit(1790722098.271:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f150ec code=0x7ffc0000 [ 111.161036][ T31] audit: type=1326 audit(1790722098.271:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f150ec code=0x7ffc0000 [ 111.184979][ T31] audit: type=1326 audit(1790722098.281:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f150ec code=0x7ffc0000 [ 111.186076][ T31] audit: type=1326 audit(1790722098.281:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f150ec code=0x7ffc0000 [ 111.186735][ T31] audit: type=1326 audit(1790722098.281:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f150ec code=0x7ffc0000 [ 111.187451][ T31] audit: type=1326 audit(1790722098.281:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f150ec code=0x7ffc0000 [ 111.188132][ T31] audit: type=1326 audit(1790722098.281:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f150ec code=0x7ffc0000 [ 111.188356][ T31] audit: type=1326 audit(1790722098.301:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7f150ec code=0x7ffc0000 [ 111.188959][ T31] audit: type=1326 audit(1790722098.301:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f150ec code=0x7ffc0000 [ 111.189484][ T31] audit: type=1326 audit(1790722098.301:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f150ec code=0x7ffc0000 [ 111.430603][ T5977] capability: warning: `syz.0.69' uses 32-bit capabilities (legacy support in use) [ 111.483086][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.70'. [ 111.620317][ T5983] netlink: 68 bytes leftover after parsing attributes in process `syz.2.71'. [ 111.877187][ T5627] Bluetooth: hci1: unexpected event 0x08 length: 7 > 4 [ 112.008513][ T6010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.83'. [ 112.118397][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 112.118634][ T6014] netlink: 'syz.1.84': attribute type 30 has an invalid length. [ 112.173630][ T50] misc userio: Buffer overflowed, userio client isn't keeping up [ 112.173730][ T5786] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.173782][ T5786] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.173820][ T5786] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.173858][ T5786] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.105659][ T6056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.94'. [ 113.110625][ T5627] Bluetooth: hci1: ISO packet too small [ 113.239853][ T6061] syz_tun: entered allmulticast mode [ 113.270229][ T6060] syz_tun: left allmulticast mode [ 113.318787][ T6065] tipc: Started in network mode [ 113.318833][ T6065] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 113.320450][ T6065] tipc: Enabling of bearer rejected, failed to enable media [ 113.486223][ T50] input: PS/2 Generic Mouse as /devices/serio3/input/input7 [ 113.615211][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'. [ 113.723511][ T50] psmouse serio3: Failed to enable mouse on [ 113.821938][ T6086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.108'. [ 113.835453][ T6084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.110'. [ 113.858062][ T6086] syz.4.108 uses obsolete (PF_INET,SOCK_PACKET) [ 113.949556][ T4933] Bluetooth: hci1: command 0x2016 tx timeout [ 113.952559][ T4933] ------------[ cut here ]------------ [ 113.952576][ T4933] refcnt < 0 [ 113.952591][ T4933] WARNING: net/bluetooth/hci_conn.c:641 at hci_conn_timeout+0xff/0x2c0, CPU#0: kworker/u9:1/4933 [ 113.979403][ T4933] Modules linked in: [ 113.983517][ T4933] CPU: 0 UID: 0 PID: 4933 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 113.993062][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.003317][ T4933] Workqueue: hci1 hci_conn_timeout [ 114.008579][ T4933] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 114.015143][ T4933] Code: 48 89 df e8 a3 f7 09 00 eb 07 e8 4c de ee f6 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 d7 9e fe ff e8 32 de ee f6 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 114.036049][ T4933] RSP: 0000:ffffc90005e27ab0 EFLAGS: 00010293 [ 114.042200][ T4933] RAX: ffffffff8ad90cfe RBX: ffff8880260ac000 RCX: ffff888035545dc0 [ 114.051070][ T4933] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 114.059130][ T4933] RBP: 00000000ffffffff R08: ffff8880260ac013 R09: 1ffff11004c15802 [ 114.067195][ T4933] R10: dffffc0000000000 R11: ffffed1004c15803 R12: dffffc0000000000 [ 114.075271][ T4933] R13: ffffffff818fa5fa R14: ffff8880260aca50 R15: ffff8880260ac010 [ 114.083299][ T4933] FS: 0000000000000000(0000) GS:ffff888124cc8000(0000) knlGS:0000000000000000 [ 114.092403][ T4933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.099106][ T4933] CR2: 00000000f73d6288 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 114.113028][ T4933] Call Trace: [ 114.120034][ T4933] [ 114.123043][ T4933] process_scheduled_works+0xc3d/0x1630 [ 114.129533][ T4933] ? __pfx_process_scheduled_works+0x10/0x10 [ 114.135663][ T4933] ? assign_work+0x3cf/0x5d0 [ 114.140333][ T4933] worker_thread+0xa47/0xfb0 [ 114.145258][ T4933] kthread+0x38b/0x480 [ 114.149385][ T4933] ? __pfx_worker_thread+0x10/0x10 [ 114.154619][ T4933] ? __pfx_kthread+0x10/0x10 [ 114.159263][ T4933] ret_from_fork+0x514/0xb70 [ 114.163962][ T4933] ? __pfx_ret_from_fork+0x10/0x10 [ 114.169126][ T4933] ? __switch_to+0xc89/0x1420 [ 114.174117][ T4933] ? __pfx_kthread+0x10/0x10 [ 114.178763][ T4933] ret_from_fork_asm+0x1a/0x30 [ 114.183653][ T4933] [ 114.186726][ T4933] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 114.194043][ T4933] CPU: 0 UID: 0 PID: 4933 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 114.203549][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.213652][ T4933] Workqueue: hci1 hci_conn_timeout [ 114.218867][ T4933] Call Trace: [ 114.222248][ T4933] [ 114.225243][ T4933] vpanic+0x56d/0xa60 [ 114.229293][ T4933] ? __pfx__printk+0x10/0x10 [ 114.233952][ T4933] ? __pfx_vpanic+0x10/0x10 [ 114.238584][ T4933] ? is_bpf_text_address+0x292/0x2b0 [ 114.243919][ T4933] ? is_bpf_text_address+0x26/0x2b0 [ 114.249280][ T4933] panic+0xc5/0xd0 [ 114.253073][ T4933] ? __pfx_panic+0x10/0x10 [ 114.257570][ T4933] ? ret_from_fork_asm+0x1a/0x30 [ 114.262587][ T4933] __warn+0x315/0x4c0 [ 114.266642][ T4933] ? hci_conn_timeout+0xff/0x2c0 [ 114.271635][ T4933] ? hci_conn_timeout+0xff/0x2c0 [ 114.276842][ T4933] __report_bug+0x276/0x570 [ 114.281411][ T4933] ? hci_conn_timeout+0xff/0x2c0 [ 114.286414][ T4933] ? __pfx___report_bug+0x10/0x10 [ 114.291494][ T4933] ? add_lock_to_list+0xc7/0x100 [ 114.296491][ T4933] ? lockdep_unlock+0x5c/0xd0 [ 114.301215][ T4933] ? __lock_acquire+0x1511/0x2de0 [ 114.306303][ T4933] ? hci_conn_timeout+0xff/0x2c0 [ 114.311301][ T4933] report_bug+0x16b/0x220 [ 114.315705][ T4933] ? hci_conn_timeout+0xff/0x2c0 [ 114.320693][ T4933] ? hci_conn_timeout+0x101/0x2c0 [ 114.325795][ T4933] handle_bug+0x9c/0x200 [ 114.330107][ T4933] exc_invalid_op+0x1a/0x50 [ 114.334664][ T4933] asm_exc_invalid_op+0x1a/0x20 [ 114.339673][ T4933] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 114.345362][ T4933] Code: 48 89 df e8 a3 f7 09 00 eb 07 e8 4c de ee f6 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 d7 9e fe ff e8 32 de ee f6 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 114.365058][ T4933] RSP: 0000:ffffc90005e27ab0 EFLAGS: 00010293 [ 114.371201][ T4933] RAX: ffffffff8ad90cfe RBX: ffff8880260ac000 RCX: ffff888035545dc0 [ 114.379398][ T4933] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 114.387416][ T4933] RBP: 00000000ffffffff R08: ffff8880260ac013 R09: 1ffff11004c15802 [ 114.395528][ T4933] R10: dffffc0000000000 R11: ffffed1004c15803 R12: dffffc0000000000 [ 114.403550][ T4933] R13: ffffffff818fa5fa R14: ffff8880260aca50 R15: ffff8880260ac010 [ 114.411575][ T4933] ? process_scheduled_works+0x97a/0x1630 [ 114.417544][ T4933] ? hci_conn_timeout+0xfe/0x2c0 [ 114.422551][ T4933] process_scheduled_works+0xc3d/0x1630 [ 114.428197][ T4933] ? __pfx_process_scheduled_works+0x10/0x10 [ 114.434244][ T4933] ? assign_work+0x3cf/0x5d0 [ 114.438887][ T4933] worker_thread+0xa47/0xfb0 [ 114.443646][ T4933] kthread+0x38b/0x480 [ 114.447763][ T4933] ? __pfx_worker_thread+0x10/0x10 [ 114.453267][ T4933] ? __pfx_kthread+0x10/0x10 [ 114.457898][ T4933] ret_from_fork+0x514/0xb70 [ 114.462528][ T4933] ? __pfx_ret_from_fork+0x10/0x10 [ 114.467676][ T4933] ? __switch_to+0xc89/0x1420 [ 114.472392][ T4933] ? __pfx_kthread+0x10/0x10 [ 114.477013][ T4933] ret_from_fork_asm+0x1a/0x30 [ 114.481850][ T4933] [ 114.485512][ T4933] Kernel Offset: disabled [ 114.490054][ T4933] Rebooting in 86400 seconds..