last executing test programs: 11.39461724s ago: executing program 3 (id=6): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000'], 0x2a, 0x0) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r5) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc080}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc054) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_open_procfs$userns(r1, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) 10.038465694s ago: executing program 3 (id=7): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) syz_open_procfs(r1, &(0x7f0000000540)='fd/3\x00') 9.702091623s ago: executing program 3 (id=8): r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, 0x0) getsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SCSI_IOCTL_PROBE_HOST(r6, 0x5385, &(0x7f0000000300)={0x98, ""/152}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0xc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r8, 0x0, 0x1) sendmsg$nl_generic(r7, 0x0, 0x0) 7.039657745s ago: executing program 3 (id=12): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 6.459077385s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010003000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x20008040) 5.672223759s ago: executing program 1 (id=2): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900099a453001f", 0x7, 0x20004080, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) epoll_create(0xc) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r7, &(0x7f0000000600), 0xfec8) recvmmsg(r7, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x1, 0xcb, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 5.267558904s ago: executing program 4 (id=16): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 4.811752205s ago: executing program 0 (id=17): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x2, 0x316}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff42, &(0x7f00000000c0)=ANY=[]) 3.69857341s ago: executing program 4 (id=18): r0 = memfd_secret(0x0) flistxattr(r0, 0x0, 0x0) 3.698138542s ago: executing program 2 (id=19): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeea}, 0x5}], 0x1, 0x12062, 0x0) 3.69772371s ago: executing program 1 (id=20): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000180)=@random={'trusted.', 't\x00'}, &(0x7f0000000300)=""/131, 0x83) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000a80)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x7, 0xff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x1}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_x25_SIOCDELRT(r6, 0x890c, &(0x7f0000000640)={@null, 0x7, 'geneve1\x00'}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000801, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r8, &(0x7f0000000000)={0xf, 0x2d, 0x0, 0x3a, 0x2, 0x2c}, 0x48) 2.754562029s ago: executing program 4 (id=21): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbcf30003000000000000000000000000fc5800000000e2ffffffffffffff0000e2fd0010000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c0000000000000000000000000000000000200000000000000000000000000002000000000000f0cb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f000000000000010004030000000044000500fe880000000000000000000000000101000000003c0000000a0000000000000000000000000000000000000106000000010100000500"/180], 0xfc}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="140000000000000029000000340000"], 0x18}, 0x48814) 2.751843128s ago: executing program 2 (id=22): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001"], 0x7c}, 0x1, 0x0, 0x0, 0x5850}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015", 0x1f}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) 2.712545585s ago: executing program 3 (id=23): syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100010038d408f01002204ddc0102030109022d00f4da06800809045f40030a0000400905ff0f"], 0x0) 2.64536737s ago: executing program 1 (id=24): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) 2.499005343s ago: executing program 4 (id=25): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x1b0, 0x2e8, 0x1b0, 0x3d8, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x4}, {0xffff, 0x2}, {0xffffffffffffffff, 0x0, 0x4}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00, 0x0, 0xff, 0xff], [0xffffff00, 0x0, 0x0, 0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x9, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@private2, 0x27, 0x28, 0x1}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], 'nr0\x00', 'syzkaller0\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x6, 0x4, 0xd}}}, {{@ipv6={@mcast2, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xff, 0xff], 'pim6reg1\x00', 'geneve1\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 2.347424678s ago: executing program 2 (id=26): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) 2.039524114s ago: executing program 1 (id=27): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x1002) 1.485847992s ago: executing program 4 (id=28): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4ea1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x10000016}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.357649011s ago: executing program 2 (id=29): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 1.131875313s ago: executing program 1 (id=30): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 767.119053ms ago: executing program 2 (id=31): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="14a10d128059", 0x6}], 0x1) 579.315983ms ago: executing program 0 (id=32): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) 469.252133ms ago: executing program 3 (id=33): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 406.177512ms ago: executing program 4 (id=34): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000180)=@random={'trusted.', 't\x00'}, &(0x7f0000000300)=""/131, 0x83) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000a80)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x7, 0xff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x1}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_x25_SIOCDELRT(r6, 0x890c, &(0x7f0000000640)={@null, 0x7, 'geneve1\x00'}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000801, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r8, &(0x7f0000000000)={0xf, 0x2d, 0x0, 0x3a, 0x2, 0x2c}, 0x48) 43.116904ms ago: executing program 0 (id=35): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0xff76}]}}]}, 0x3c}}, 0x4000010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 75.159019][ T5595] cgroup: Unknown subsys name 'net' [ 75.400964][ T5595] cgroup: Unknown subsys name 'cpuset' [ 75.456215][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.067116][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.470602][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.493132][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.519323][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.542345][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.547429][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.550634][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.554905][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.555855][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.556661][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.557508][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.559231][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.561399][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.562501][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.563984][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.568254][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.577033][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.590347][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.592411][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.593511][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.594751][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.676111][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.686740][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.695398][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.699534][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.719477][ T4929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.659406][ T60] Bluetooth: hci1: command tx timeout [ 81.659416][ T4929] Bluetooth: hci3: command tx timeout [ 81.748195][ T60] Bluetooth: hci2: command tx timeout [ 81.815477][ T60] Bluetooth: hci4: command tx timeout [ 81.816675][ T60] Bluetooth: hci0: command tx timeout [ 82.264907][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.273350][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.273532][ T5609] bridge_slave_0: entered allmulticast mode [ 82.275712][ T5609] bridge_slave_0: entered promiscuous mode [ 82.285506][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.285791][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.286329][ T5610] bridge_slave_0: entered allmulticast mode [ 82.290749][ T5610] bridge_slave_0: entered promiscuous mode [ 82.319984][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.320247][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.320776][ T5607] bridge_slave_0: entered allmulticast mode [ 82.325082][ T5607] bridge_slave_0: entered promiscuous mode [ 82.359860][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.360072][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.360432][ T5609] bridge_slave_1: entered allmulticast mode [ 82.364326][ T5609] bridge_slave_1: entered promiscuous mode [ 82.367488][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.367778][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.368030][ T5610] bridge_slave_1: entered allmulticast mode [ 82.370980][ T5610] bridge_slave_1: entered promiscuous mode [ 82.394737][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.395003][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.395254][ T5607] bridge_slave_1: entered allmulticast mode [ 82.406018][ T5607] bridge_slave_1: entered promiscuous mode [ 82.409862][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.410129][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.410360][ T5608] bridge_slave_0: entered allmulticast mode [ 82.415009][ T5608] bridge_slave_0: entered promiscuous mode [ 82.468565][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.469114][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.469344][ T5611] bridge_slave_0: entered allmulticast mode [ 82.474715][ T5611] bridge_slave_0: entered promiscuous mode [ 82.510037][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.510327][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.510493][ T5608] bridge_slave_1: entered allmulticast mode [ 82.512375][ T5608] bridge_slave_1: entered promiscuous mode [ 82.555848][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.556121][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.556374][ T5611] bridge_slave_1: entered allmulticast mode [ 82.558147][ T5611] bridge_slave_1: entered promiscuous mode [ 82.608374][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.613084][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.640973][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.668170][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.671285][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.706099][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.710213][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.753948][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.778787][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.823424][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.866042][ T5609] team0: Port device team_slave_0 added [ 82.868879][ T5610] team0: Port device team_slave_0 added [ 82.889132][ T5607] team0: Port device team_slave_0 added [ 82.912376][ T5609] team0: Port device team_slave_1 added [ 82.914758][ T5610] team0: Port device team_slave_1 added [ 82.934754][ T5607] team0: Port device team_slave_1 added [ 82.941941][ T5608] team0: Port device team_slave_0 added [ 82.980518][ T5611] team0: Port device team_slave_0 added [ 82.999776][ T5608] team0: Port device team_slave_1 added [ 83.029718][ T5611] team0: Port device team_slave_1 added [ 83.063257][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.063274][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.063297][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.077239][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.077257][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.077280][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.116646][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.116663][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.116687][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.183473][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.183491][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.183516][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.186765][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.186777][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.186812][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.214617][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.214633][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.214656][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.220359][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.220375][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.220399][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.256363][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.256380][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.256404][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.272689][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.272706][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.272730][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.289342][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.289359][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.289383][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.518963][ T5609] hsr_slave_0: entered promiscuous mode [ 83.520336][ T5609] hsr_slave_1: entered promiscuous mode [ 83.544600][ T5610] hsr_slave_0: entered promiscuous mode [ 83.546126][ T5610] hsr_slave_1: entered promiscuous mode [ 83.547890][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 83.548003][ T5610] Cannot create hsr debugfs directory [ 83.559191][ T5607] hsr_slave_0: entered promiscuous mode [ 83.560974][ T5607] hsr_slave_1: entered promiscuous mode [ 83.563204][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 83.563226][ T5607] Cannot create hsr debugfs directory [ 83.614187][ T5608] hsr_slave_0: entered promiscuous mode [ 83.615655][ T5608] hsr_slave_1: entered promiscuous mode [ 83.617518][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 83.617540][ T5608] Cannot create hsr debugfs directory [ 83.735466][ T60] Bluetooth: hci3: command tx timeout [ 83.735496][ T4929] Bluetooth: hci1: command tx timeout [ 83.815491][ T60] Bluetooth: hci2: command tx timeout [ 83.895588][ T60] Bluetooth: hci0: command tx timeout [ 83.895596][ T4929] Bluetooth: hci4: command tx timeout [ 84.172889][ T5611] hsr_slave_0: entered promiscuous mode [ 84.174082][ T5611] hsr_slave_1: entered promiscuous mode [ 84.174961][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 84.174983][ T5611] Cannot create hsr debugfs directory [ 84.963858][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.023393][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.034816][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.070021][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.073291][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.111094][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.133777][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.170368][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.379674][ T5608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.422692][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.429274][ T5608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.473269][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.479119][ T5608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.511090][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.534471][ T5608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.562133][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.673616][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.700352][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.708120][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.748926][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.753248][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.776799][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.802711][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.815733][ T4929] Bluetooth: hci3: command tx timeout [ 85.826134][ T4929] Bluetooth: hci1: command tx timeout [ 85.839358][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.897072][ T4929] Bluetooth: hci2: command tx timeout [ 85.955652][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.975607][ T4929] Bluetooth: hci0: command tx timeout [ 85.976024][ T4929] Bluetooth: hci4: command tx timeout [ 86.071180][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.100624][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.119820][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.163334][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.173374][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.202504][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.231070][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.235149][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.279029][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.371565][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.371733][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.469543][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.469882][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.494416][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.519185][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.532820][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.560368][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.573037][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.599318][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.611132][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.640461][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.694394][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.834930][ T37] cfg80211: failed to load regulatory.db [ 86.877547][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.970997][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.972636][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.972904][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.063872][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.064032][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.163807][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.246477][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.246629][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.309172][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.309283][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.373779][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.573681][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.604493][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.697455][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.697629][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.791232][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.791384][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.865854][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.887043][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.896524][ T60] Bluetooth: hci3: command tx timeout [ 87.896580][ T4929] Bluetooth: hci1: command tx timeout [ 87.939936][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.940075][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.977118][ T4929] Bluetooth: hci2: command tx timeout [ 88.022462][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.022619][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.056720][ T60] Bluetooth: hci0: command tx timeout [ 88.056764][ T4929] Bluetooth: hci4: command tx timeout [ 88.517229][ T5609] veth0_vlan: entered promiscuous mode [ 88.634771][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.693733][ T5609] veth1_vlan: entered promiscuous mode [ 89.054168][ T5609] veth0_macvtap: entered promiscuous mode [ 89.132280][ T5609] veth1_macvtap: entered promiscuous mode [ 89.379940][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.413775][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.467189][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.560007][ T163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.603663][ T163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.612875][ T163] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.625541][ T163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.663660][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.757391][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.055234][ T5608] veth0_vlan: entered promiscuous mode [ 90.116063][ T5607] veth0_vlan: entered promiscuous mode [ 90.207374][ T5608] veth1_vlan: entered promiscuous mode [ 90.243913][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.243932][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.281247][ T5607] veth1_vlan: entered promiscuous mode [ 90.350051][ T5610] veth0_vlan: entered promiscuous mode [ 90.405220][ T5611] veth0_vlan: entered promiscuous mode [ 90.417543][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.417561][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.453634][ T5610] veth1_vlan: entered promiscuous mode [ 90.521060][ T5611] veth1_vlan: entered promiscuous mode [ 90.546370][ T5608] veth0_macvtap: entered promiscuous mode [ 90.585731][ T5608] veth1_macvtap: entered promiscuous mode [ 90.602258][ T5607] veth0_macvtap: entered promiscuous mode [ 90.654793][ T5607] veth1_macvtap: entered promiscuous mode [ 90.771556][ T5610] veth0_macvtap: entered promiscuous mode [ 90.786487][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.833331][ T5610] veth1_macvtap: entered promiscuous mode [ 90.870630][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.872368][ T5611] veth0_macvtap: entered promiscuous mode [ 90.921318][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.964212][ T5806] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.999646][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.002890][ T5611] veth1_macvtap: entered promiscuous mode [ 91.026138][ T163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.047750][ T163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.060161][ T163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.081474][ T163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.099972][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.104832][ T163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.118487][ T163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.159699][ T163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.173559][ T163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.178315][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.384694][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.411056][ T1130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.449692][ T1130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.694900][ T5811] Zero length message leads to an empty skb [ 92.351433][ T1285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.428435][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.467132][ T141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.669389][ T163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.997772][ T163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.001640][ T163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.024185][ T163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.118716][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.118733][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.529084][ T5721] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 93.712234][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.712254][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.855611][ T5721] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.855637][ T5721] usb 4-1: config 0 has no interface number 0 [ 93.855679][ T5721] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 93.855705][ T5721] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 93.855745][ T5721] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.855766][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.998970][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.998989][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.005120][ T5721] usb 4-1: config 0 descriptor?? [ 94.075629][ T5819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.184572][ T5721] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 94.388995][ T1285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.389013][ T1285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.703382][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 94.756532][ T5721] usb 4-1: USB disconnect, device number 2 [ 94.994085][ T5824] capability: warning: `syz.4.5' uses 32-bit capabilities (legacy support in use) [ 95.132555][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.132574][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.275483][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.275503][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.491420][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.491438][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.711693][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.711712][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.871808][ T5839] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.13'. [ 95.896216][ T5721] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.099478][ T5721] usb 4-1: Using ep0 maxpacket: 32 [ 96.120199][ T5721] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 96.120224][ T5721] usb 4-1: config 0 has no interface number 0 [ 96.120267][ T5721] usb 4-1: config 0 interface 12 has no altsetting 0 [ 96.139978][ T5721] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 96.140009][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.140029][ T5721] usb 4-1: Product: syz [ 96.140043][ T5721] usb 4-1: Manufacturer: syz [ 96.140056][ T5721] usb 4-1: SerialNumber: syz [ 96.251862][ T5721] usb 4-1: config 0 descriptor?? [ 97.316361][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.581762][ T5846] macvlan2: entered allmulticast mode [ 97.581782][ T5846] veth1_vlan: entered allmulticast mode [ 98.812474][ T5721] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 98.812529][ T5721] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 98.812546][ T5721] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 98.812652][ T5721] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 98.965447][ T5721] usb 4-1: USB disconnect, device number 3 [ 99.208024][ T5862] Bluetooth: MGMT ver 1.23 [ 99.515915][ T5714] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.553565][ T5869] kernel profiling enabled (shift: 15) [ 99.765400][ T5714] usb 1-1: Using ep0 maxpacket: 32 [ 99.770218][ T5714] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 99.770247][ T5714] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 99.770267][ T5714] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 99.770288][ T5714] usb 1-1: config 1 has no interface number 0 [ 99.770340][ T5714] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.770365][ T5714] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 99.770405][ T5714] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 99.770427][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.112408][ T5874] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.22'. [ 100.170501][ T5714] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 100.205105][ T5714] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 100.585450][ T32] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.752720][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 100.763286][ T32] usb 4-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 100.763314][ T32] usb 4-1: config 218 has an invalid descriptor of length 0, skipping remainder of the config [ 100.763333][ T32] usb 4-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 100.763352][ T32] usb 4-1: config 218 has no interface number 0 [ 100.763395][ T32] usb 4-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.763420][ T32] usb 4-1: config 218 interface 95 altsetting 64 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.763445][ T32] usb 4-1: config 218 interface 95 altsetting 64 endpoint 0x8F has invalid wMaxPacketSize 0 [ 100.763465][ T32] usb 4-1: config 218 interface 95 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 100.763477][ T32] usb 4-1: config 218 interface 95 has no altsetting 0 [ 100.812790][ T32] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 100.812819][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.812837][ T32] usb 4-1: Product: syz [ 100.812851][ T32] usb 4-1: Manufacturer: syz [ 100.812863][ T32] usb 4-1: SerialNumber: syz [ 101.348110][ T5721] usb 1-1: USB disconnect, device number 2 [ 101.372186][ T5714] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 101.479114][ T5721] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 101.783429][ T5891] loop2: detected capacity change from 0 to 7 [ 101.871866][ T32] usb 4-1: USB disconnect, device number 4 [ 102.115811][ T5891] Dev loop2: unable to read RDB block 7 [ 102.115854][ T5891] loop2: unable to read partition table [ 102.116031][ T5891] loop2: partition table beyond EOD, truncated [ 102.116072][ T5891] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.364835][ T5899] ALSA: mixer_oss: invalid OSS volume '¡€Y' [ 102.759576][ T5896] ------------[ cut here ]------------ [ 102.759589][ T5896] debug_locks && !(!get_current()->pi_blocked_on) [ 102.759604][ T5896] WARNING: kernel/locking/spinlock_rt.c:40 at rt_spin_lock+0x31c/0x400, CPU#0: syz.1.30/5896 [ 102.759658][ T5896] Modules linked in: [ 102.759687][ T5896] CPU: 0 UID: 0 PID: 5896 Comm: syz.1.30 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 102.759735][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.759752][ T5896] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 102.759777][ T5896] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d0 71 01 00 cc e8 5a e2 09 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 3e e2 09 f6 [ 102.759794][ T5896] RSP: 0018:ffffc9000647f580 EFLAGS: 00010282 [ 102.759812][ T5896] RAX: 1ffff11004ebd167 RBX: 1ffff92000c8feb4 RCX: 0000000000000046 [ 102.759828][ T5896] RDX: 0000000000000000 RSI: ffffffff8d881ae1 RDI: ffffffff8ba85f60 [ 102.759842][ T5896] RBP: ffffc9000647f630 R08: ffffffff822392e4 R09: ffff88813fe33758 [ 102.759858][ T5896] R10: dffffc0000000000 R11: fffffbfff1f14edf R12: ffff8880275e8b38 [ 102.759873][ T5896] R13: dffffc0000000000 R14: ffff88813fe33700 R15: ffffc9000647f5c0 [ 102.759889][ T5896] FS: 00007fcbd354e6c0(0000) GS:ffff888125f2d000(0000) knlGS:0000000000000000 [ 102.759907][ T5896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.759921][ T5896] CR2: 00007f7b0efb5418 CR3: 0000000037bfe000 CR4: 00000000003526f0 [ 102.759939][ T5896] Call Trace: [ 102.759947][ T5896] [ 102.759959][ T5896] ? __pfx_rt_spin_lock+0x10/0x10 [ 102.759984][ T5896] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 102.760013][ T5896] ? lockdep_hardirqs_on+0x7a/0x110 [ 102.760041][ T5896] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 102.760073][ T5896] get_from_partial_node+0x54/0x480 [ 102.760098][ T5896] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 102.760130][ T5896] ___slab_alloc+0xc2/0x920 [ 102.760151][ T5896] ? __migrate_enable+0x58/0xa0 [ 102.760182][ T5896] ? fill_pool+0x156/0x580 [ 102.760208][ T5896] kmem_cache_alloc_noprof+0xea/0x680 [ 102.760234][ T5896] ? fill_pool+0x156/0x580 [ 102.760258][ T5896] fill_pool+0x156/0x580 [ 102.760276][ T5896] ? debug_objects_fill_pool+0x6f/0xd0 [ 102.760298][ T5896] ? debug_objects_fill_pool+0x6f/0xd0 [ 102.760319][ T5896] ? __pfx_fill_pool+0x10/0x10 [ 102.760344][ T5896] ? debug_objects_fill_pool+0x6f/0xd0 [ 102.760362][ T5896] ? debug_objects_fill_pool+0x6f/0xd0 [ 102.760402][ T5896] debug_objects_fill_pool+0x97/0xd0 [ 102.760422][ T5896] debug_object_assert_init+0x65/0x300 [ 102.760453][ T5896] hrtimer_start_range_ns+0x3f/0xef0 [ 102.760484][ T5896] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.760516][ T5896] futex_lock_pi+0x8df/0xb10 [ 102.760554][ T5896] ? __pfx_futex_lock_pi+0x10/0x10 [ 102.760583][ T5896] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 102.760607][ T5896] ? __lock_acquire+0x6b5/0x2d10 [ 102.760666][ T5896] ? __pfx_futex_wake_mark+0x10/0x10 [ 102.760715][ T5896] do_futex+0x292/0x420 [ 102.760741][ T5896] ? __pfx_do_futex+0x10/0x10 [ 102.760771][ T5896] __se_sys_futex+0x3a8/0x450 [ 102.760799][ T5896] ? __pfx___se_sys_futex+0x10/0x10 [ 102.760820][ T5896] ? rcu_is_watching+0x15/0xb0 [ 102.760847][ T5896] ? __x64_sys_futex+0x21/0xf0 [ 102.760868][ T5896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.760890][ T5896] do_syscall_64+0x15f/0xf80 [ 102.760920][ T5896] ? clear_bhb_loop+0x40/0x90 [ 102.760945][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.760965][ T5896] RIP: 0033:0x7fcbd52fcdd9 [ 102.760989][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.761005][ T5896] RSP: 002b:00007fcbd354e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.761025][ T5896] RAX: ffffffffffffffda RBX: 00007fcbd5575fa0 RCX: 00007fcbd52fcdd9 [ 102.761040][ T5896] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000020000000cffc [ 102.761053][ T5896] RBP: 00007fcbd5392d69 R08: 0000000000000000 R09: 0000000000000002 [ 102.761066][ T5896] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.761080][ T5896] R13: 00007fcbd5576038 R14: 00007fcbd5575fa0 R15: 00007ffc044ae928 [ 102.761112][ T5896] [ 102.761123][ T5896] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.761138][ T5896] CPU: 0 UID: 0 PID: 5896 Comm: syz.1.30 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 102.761160][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.761171][ T5896] Call Trace: [ 102.761179][ T5896] [ 102.761187][ T5896] vpanic+0x56c/0xa60 [ 102.761217][ T5896] ? __pfx__printk+0x10/0x10 [ 102.761236][ T5896] ? __pfx_vpanic+0x10/0x10 [ 102.761261][ T5896] ? is_bpf_text_address+0x292/0x2b0 [ 102.761291][ T5896] ? is_bpf_text_address+0x26/0x2b0 [ 102.761330][ T5896] panic+0xc5/0xd0 [ 102.761357][ T5896] ? __pfx_panic+0x10/0x10 [ 102.761400][ T5896] __warn+0x315/0x4c0 [ 102.761426][ T5896] ? rt_spin_lock+0x31c/0x400 [ 102.761449][ T5896] ? rt_spin_lock+0x31c/0x400 [ 102.761472][ T5896] __report_bug+0x29a/0x540 [ 102.761505][ T5896] ? rt_spin_lock+0x31c/0x400 [ 102.761528][ T5896] ? __pfx___report_bug+0x10/0x10 [ 102.761554][ T5896] ? __lock_acquire+0x6b5/0x2d10 [ 102.761589][ T5896] ? __lock_acquire+0x6b5/0x2d10 [ 102.761627][ T5896] ? __lock_acquire+0x6b5/0x2d10 [ 102.761658][ T5896] ? rt_spin_lock+0x31c/0x400 [ 102.761680][ T5896] report_bug+0x16a/0x220 [ 102.761707][ T5896] ? rt_spin_lock+0x31c/0x400 [ 102.761727][ T5896] ? rt_spin_lock+0x31e/0x400 [ 102.761748][ T5896] handle_bug+0x9c/0x200 [ 102.761767][ T5896] exc_invalid_op+0x1a/0x50 [ 102.761786][ T5896] asm_exc_invalid_op+0x1a/0x20 [ 102.761805][ T5896] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 102.761827][ T5896] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d0 71 01 00 cc e8 5a e2 09 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 3e e2 09 f6 [ 102.761844][ T5896] RSP: 0018:ffffc9000647f580 EFLAGS: 00010282 [ 102.761860][ T5896] RAX: 1ffff11004ebd167 RBX: 1ffff92000c8feb4 RCX: 0000000000000046 [ 102.761875][ T5896] RDX: 0000000000000000 RSI: ffffffff8d881ae1 RDI: ffffffff8ba85f60 [ 102.761889][ T5896] RBP: ffffc9000647f630 R08: ffffffff822392e4 R09: ffff88813fe33758 [ 102.761904][ T5896] R10: dffffc0000000000 R11: fffffbfff1f14edf R12: ffff8880275e8b38 [ 102.761920][ T5896] R13: dffffc0000000000 R14: ffff88813fe33700 R15: ffffc9000647f5c0 [ 102.761942][ T5896] ? get_from_partial_node+0x54/0x480 [ 102.761975][ T5896] ? __pfx_rt_spin_lock+0x10/0x10 [ 102.761997][ T5896] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 102.762025][ T5896] ? lockdep_hardirqs_on+0x7a/0x110 [ 102.762052][ T5896] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 102.762083][ T5896] get_from_partial_node+0x54/0x480 [ 102.762107][ T5896] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 102.762138][ T5896] ___slab_alloc+0xc2/0x920 [ 102.762159][ T5896] ? __migrate_enable+0x58/0xa0 [ 102.762190][ T5896] ? fill_pool+0x156/0x580 [ 102.762215][ T5896] kmem_cache_alloc_noprof+0xea/0x680 [ 102.762240][ T5896] ? fill_pool+0x156/0x580 [ 102.762263][ T5896] fill_pool+0x156/0x580 [ 102.762282][ T5896] ? debug_objects_fill_pool+0x6f/0xd0 [ 102.762303][ T5896] ? debug_objects_fill_pool+0x6f/0xd0 [ 102.762323][ T5896] ? __pfx_fill_pool+0x10/0x10 [ 102.762348][ T5896] ? debug_objects_fill_pool+0x6f/0xd0 [ 102.762366][ T5896] ? debug_objects_fill_pool+0x6f/0xd0 [ 102.762387][ T5896] debug_objects_fill_pool+0x97/0xd0 [ 102.762406][ T5896] debug_object_assert_init+0x65/0x300 [ 102.762437][ T5896] hrtimer_start_range_ns+0x3f/0xef0 [ 102.762468][ T5896] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.762499][ T5896] futex_lock_pi+0x8df/0xb10 [ 102.762535][ T5896] ? __pfx_futex_lock_pi+0x10/0x10 [ 102.762564][ T5896] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 102.762588][ T5896] ? __lock_acquire+0x6b5/0x2d10 [ 102.762644][ T5896] ? __pfx_futex_wake_mark+0x10/0x10 [ 102.762692][ T5896] do_futex+0x292/0x420 [ 102.762718][ T5896] ? __pfx_do_futex+0x10/0x10 [ 102.762747][ T5896] __se_sys_futex+0x3a8/0x450 [ 102.762775][ T5896] ? __pfx___se_sys_futex+0x10/0x10 [ 102.762796][ T5896] ? rcu_is_watching+0x15/0xb0 [ 102.762822][ T5896] ? __x64_sys_futex+0x21/0xf0 [ 102.762843][ T5896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.762864][ T5896] do_syscall_64+0x15f/0xf80 [ 102.762894][ T5896] ? clear_bhb_loop+0x40/0x90 [ 102.762919][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.762939][ T5896] RIP: 0033:0x7fcbd52fcdd9 [ 102.762956][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.762976][ T5896] RSP: 002b:00007fcbd354e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.762995][ T5896] RAX: ffffffffffffffda RBX: 00007fcbd5575fa0 RCX: 00007fcbd52fcdd9 [ 102.763010][ T5896] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000020000000cffc [ 102.763023][ T5896] RBP: 00007fcbd5392d69 R08: 0000000000000000 R09: 0000000000000002 [ 102.763035][ T5896] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.763048][ T5896] R13: 00007fcbd5576038 R14: 00007fcbd5575fa0 R15: 00007ffc044ae928 [ 102.763080][ T5896] [ 102.763684][ T5896] Kernel Offset: disabled