last executing test programs: 31.707818389s ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c25"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xe, 0x0, 0x0, [{}]}]}}, &(0x7f00000000c0)=""/140, 0x32, 0x8c, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 30.034894331s ago: executing program 3 (id=5): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 25.781125948s ago: executing program 3 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000001940)=""/4111, 0x100f}, {&(0x7f0000000700)=""/192, 0xc0}, {&(0x7f0000003cc0)=""/204, 0xcc}], 0x5}, 0x9}], 0x7, 0x10122, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) accept4(r0, 0x0, &(0x7f00000000c0), 0x0) 18.521982181s ago: executing program 0 (id=17): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000010c0)={@private1, 0x9, 0x2, 0x3, 0x1, 0x0, 0xfffd}, 0x20) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)) syz_clone(0xc2b44080, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 9.875658478s ago: executing program 32 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000001940)=""/4111, 0x100f}, {&(0x7f0000000700)=""/192, 0xc0}, {&(0x7f0000003cc0)=""/204, 0xcc}], 0x5}, 0x9}], 0x7, 0x10122, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) accept4(r0, 0x0, &(0x7f00000000c0), 0x0) 9.770437999s ago: executing program 2 (id=27): syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) 7.98375352s ago: executing program 2 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x701, 0x0, 0xffffffff, {0xa}}, 0x14}}, 0x20008080) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x108, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_devices(r5, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x24c3) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 6.509247729s ago: executing program 2 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, 0x0, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}]]}, 0x34}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r6 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x1) ftruncate(r6, 0x800799c) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000000)) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendfile(r8, r6, 0x0, 0xf000) pread64(r5, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 5.199111157s ago: executing program 2 (id=32): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002"], 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10000, 0x0, 0x4}, &(0x7f0000001340)=0x0, &(0x7f0000000140)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_io_uring_submit(r5, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x12, 0x1}) io_uring_enter(r1, 0x47fb, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 4.28599957s ago: executing program 2 (id=35): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, 0x0) 4.137056422s ago: executing program 0 (id=36): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000740)={0x204, 0x1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xd) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') lseek(r1, 0x1000034, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.975110742s ago: executing program 1 (id=37): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}}, 0xc000) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000002400)=[{0xc50, 0x1, 0x8, "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"}], 0xc50}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.434714132s ago: executing program 1 (id=38): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x1a, &(0x7f00000000c0)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0xaa, 0x59d81d89cb2273ec, 'c', "bcfb58", 0x17}}}}}, 0x0) 2.787665313s ago: executing program 1 (id=39): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x7f7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2.353188143s ago: executing program 0 (id=40): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xf8, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9", 0xe3}], 0x1}}], 0x3, 0x2090) sendto$inet(r0, &(0x7f0000000d40)="3d12c01caa0fbe8a17e7b733cef070bf8ae0fc7b2f48", 0x16, 0x0, 0x0, 0x0) 2.223119279s ago: executing program 1 (id=41): syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[], 0xfa, 0x155, &(0x7f0000000340)="$eJzskT9LQlEYxp/jvV41Mg0MKiiChsQwb1dsa9BIcrADhUtToCcSNEUh3LLmhj6AS0uTOERjQ9FkeSHsMzS6BUGLce4faW1/f8u953mf87zvOWd324wiDCiw2alV6w3RbIrSygHPZw/vHx5npO5THQOq9YY0l+zVUxo4lV8VGF3a8kvQA6AiNoq1SkkDkAaiADIyo+yFDts7JbWIHyflith0tOgqPp1WwnA1DdDmYPmSjraoApmQrek/wPgWWJN5s5jkfQFodbzO3PHY3ZKSdk/R6qz3uq/7g34uHlsW10Z2wbqBgpDzMln/SPTj74led2gOxhc8z82kYWwldUXXU0P+Nsil2jdQ96bPgSMGBP7kaTKjAFwxoMOArpU3enZ7c3/IFwkAnrMwwGSFBWXP9jevuu+gWJXi8byXudsmPwRBEARBEARBEATxX34DAAD//4EIV14=") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getdents64(r0, &(0x7f0000000840)=""/4089, 0xff9) 2.040171786s ago: executing program 0 (id=42): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x1, 0x4, 0x8, 0x4, {0x0, 0x2710}, {0x0, 0xd, 0xf8, 0x2, 0x6, 0x0, "3b051c46"}, 0x1, 0x2, {0x0}, 0x3fe}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 1.800305081s ago: executing program 1 (id=43): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = getpid() syz_pidfd_open(r1, 0x0) pidfd_getfd(r0, r0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r2, 0x0, r2) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 1.543163004s ago: executing program 0 (id=44): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 325.14614ms ago: executing program 1 (id=45): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x801) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000800) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x2c, 0x2c, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="552004f1"]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xb, 0x1, 0x0, 0x1, [@generic="ba6afcaa46c873"]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 214.317279ms ago: executing program 0 (id=46): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x800401, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffb6, 0x7fffffff}, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) 0s ago: executing program 2 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 82.683417][ T5756] cgroup: Unknown subsys name 'net' [ 82.830914][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.958685][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.956265][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.963929][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.971967][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.987425][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.997210][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.009783][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.017853][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.027250][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.039275][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.050423][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.061042][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.072182][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.083850][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.097140][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.119950][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.129997][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.172812][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.183299][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.192126][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.200661][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.209088][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.224393][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.245049][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.255360][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.058818][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 88.181492][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 88.201267][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 88.255684][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.267406][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.277846][ T5772] bridge_slave_0: entered allmulticast mode [ 88.291893][ T5772] bridge_slave_0: entered promiscuous mode [ 88.323351][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 88.346074][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.354476][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.365567][ T5772] bridge_slave_1: entered allmulticast mode [ 88.377065][ T5772] bridge_slave_1: entered promiscuous mode [ 88.477397][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.531372][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.607380][ T5772] team0: Port device team_slave_0 added [ 88.665682][ T5772] team0: Port device team_slave_1 added [ 88.717195][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.729413][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.740327][ T5767] bridge_slave_0: entered allmulticast mode [ 88.751979][ T5767] bridge_slave_0: entered promiscuous mode [ 88.761678][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.773173][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.782752][ T5769] bridge_slave_0: entered allmulticast mode [ 88.792550][ T5769] bridge_slave_0: entered promiscuous mode [ 88.803939][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.814952][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.852624][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.897486][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.906916][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.916129][ T5767] bridge_slave_1: entered allmulticast mode [ 88.924219][ T5767] bridge_slave_1: entered promiscuous mode [ 88.947971][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.957957][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.969654][ T5769] bridge_slave_1: entered allmulticast mode [ 88.979892][ T5769] bridge_slave_1: entered promiscuous mode [ 88.993098][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.001916][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.034954][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.058228][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.068741][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.077160][ T5778] bridge_slave_0: entered allmulticast mode [ 89.087980][ T5778] bridge_slave_0: entered promiscuous mode [ 89.104343][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.113808][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.125242][ T5778] bridge_slave_1: entered allmulticast mode [ 89.135070][ T5778] bridge_slave_1: entered promiscuous mode [ 89.193549][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.208043][ T51] Bluetooth: hci0: command tx timeout [ 89.232770][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.255046][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.275426][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.288606][ T51] Bluetooth: hci1: command tx timeout [ 89.288631][ T5773] Bluetooth: hci2: command tx timeout [ 89.363632][ T5769] team0: Port device team_slave_0 added [ 89.372724][ T51] Bluetooth: hci3: command tx timeout [ 89.411093][ T5769] team0: Port device team_slave_1 added [ 89.423198][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.442006][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.505438][ T5772] hsr_slave_0: entered promiscuous mode [ 89.514909][ T5772] hsr_slave_1: entered promiscuous mode [ 89.540243][ T5767] team0: Port device team_slave_0 added [ 89.578161][ T5767] team0: Port device team_slave_1 added [ 89.592990][ T5778] team0: Port device team_slave_0 added [ 89.602542][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.612804][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.645562][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.687320][ T5778] team0: Port device team_slave_1 added [ 89.696564][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.704053][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.732443][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.775393][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.785177][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.816700][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.870004][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.878283][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.909756][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.927254][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.937303][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.965981][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.995221][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.003663][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.033363][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.093700][ T5769] hsr_slave_0: entered promiscuous mode [ 90.101462][ T5769] hsr_slave_1: entered promiscuous mode [ 90.109051][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.120767][ T5769] Cannot create hsr debugfs directory [ 90.228564][ T5767] hsr_slave_0: entered promiscuous mode [ 90.236380][ T5767] hsr_slave_1: entered promiscuous mode [ 90.249889][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.257688][ T5767] Cannot create hsr debugfs directory [ 90.290231][ T5778] hsr_slave_0: entered promiscuous mode [ 90.297763][ T5778] hsr_slave_1: entered promiscuous mode [ 90.305475][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.314075][ T5778] Cannot create hsr debugfs directory [ 90.801322][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.824147][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.846611][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.860183][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.973264][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.996266][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.029891][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.056498][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.129834][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.148502][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.190978][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.205698][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.269043][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.281759][ T51] Bluetooth: hci0: command tx timeout [ 91.296519][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.330337][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.344060][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.360528][ T51] Bluetooth: hci1: command tx timeout [ 91.369315][ T51] Bluetooth: hci2: command tx timeout [ 91.439393][ T51] Bluetooth: hci3: command tx timeout [ 91.534317][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.584598][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.645837][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.653622][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.676379][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.685039][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.708199][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.737227][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.794380][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.838502][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.868168][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.903541][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.912096][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.928271][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.938729][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.970140][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.978678][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.022951][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.040882][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.050782][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.125772][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.135545][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.223514][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.232550][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.265477][ T5767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.278344][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.345304][ T789] cfg80211: failed to load regulatory.db [ 92.508388][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.655134][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.835595][ T5772] veth0_vlan: entered promiscuous mode [ 92.908548][ T5772] veth1_vlan: entered promiscuous mode [ 93.015668][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.115491][ T5772] veth0_macvtap: entered promiscuous mode [ 93.157584][ T5772] veth1_macvtap: entered promiscuous mode [ 93.198926][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.245313][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.276056][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.291915][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.303051][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.313544][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.326160][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.360878][ T51] Bluetooth: hci0: command tx timeout [ 93.401971][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.416868][ T5767] veth0_vlan: entered promiscuous mode [ 93.440417][ T51] Bluetooth: hci2: command tx timeout [ 93.447605][ T51] Bluetooth: hci1: command tx timeout [ 93.504636][ T5767] veth1_vlan: entered promiscuous mode [ 93.521382][ T51] Bluetooth: hci3: command tx timeout [ 93.566044][ T5778] veth0_vlan: entered promiscuous mode [ 93.646086][ T5778] veth1_vlan: entered promiscuous mode [ 93.653627][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.674927][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.735204][ T5769] veth0_vlan: entered promiscuous mode [ 93.745150][ T5767] veth0_macvtap: entered promiscuous mode [ 93.776632][ T5767] veth1_macvtap: entered promiscuous mode [ 93.803578][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.821713][ T5769] veth1_vlan: entered promiscuous mode [ 93.830605][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.880927][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.894302][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.910493][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.944484][ T5778] veth0_macvtap: entered promiscuous mode [ 93.968410][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.986350][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.999027][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.058212][ T5778] veth1_macvtap: entered promiscuous mode [ 94.081883][ T5769] veth0_macvtap: entered promiscuous mode [ 94.114286][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.149992][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.176592][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.195131][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.220584][ T5769] veth1_macvtap: entered promiscuous mode [ 94.322770][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.364297][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.384797][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.398494][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.431603][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.503040][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.524046][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.536571][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.554028][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.567622][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.582816][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.861871][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.457175][ T51] Bluetooth: hci0: command tx timeout [ 95.474404][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.505270][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.518594][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.535412][ T51] Bluetooth: hci1: command tx timeout [ 95.542166][ T5773] Bluetooth: hci2: command tx timeout [ 95.550289][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.567759][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.585039][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.609397][ T51] Bluetooth: hci3: command tx timeout [ 95.618239][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.634986][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.668318][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.698553][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.717278][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.733052][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.752574][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.770372][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.806115][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.831239][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.902771][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.915097][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.929585][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.942355][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.975245][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.000035][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.098135][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.115707][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.210545][ T789] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.293801][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.339594][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.393924][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.422682][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.453939][ T789] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.481795][ T789] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 96.525328][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.546335][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.574482][ T789] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.591427][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.606604][ T789] usb 4-1: Product: syz [ 96.614866][ T789] usb 4-1: Manufacturer: syz [ 96.620763][ T789] usb 4-1: SerialNumber: syz [ 96.717474][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.757049][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.932918][ T5842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.950228][ T5838] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.990269][ T5842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.207501][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 97.309023][ T789] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 97.329207][ T789] usb 4-1: USB disconnect, device number 2 [ 97.398321][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.299456][ T789] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.424719][ T5838] usb 3-1: config 0 has no interfaces? [ 98.524462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 98.570213][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 98.592169][ T5858] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.649816][ T5838] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 98.806410][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.833998][ T5859] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 98.846836][ T5859] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.860245][ T5859] vhci_hcd vhci_hcd.0: Device attached [ 98.948720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.961978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.975067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.988622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.039494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.062971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.074727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.168183][ T5838] usb 3-1: Product: syz [ 99.294179][ T5838] usb 3-1: Manufacturer: syz [ 99.418949][ T5838] usb 3-1: SerialNumber: syz [ 99.567122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 99.629720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.911182][ T5838] usb 3-1: config 0 descriptor?? [ 99.980171][ T789] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 99.993058][ T789] usb 4-1: can't read configurations, error -71 [ 100.013920][ T5838] usb 3-1: can't set config #0, error -71 [ 100.053046][ T5865] binder: 5864:5865 ioctl 4018620d 0 returned -22 [ 100.070899][ T5860] vhci_hcd: connection closed [ 100.073433][ T138] vhci_hcd: stop threads [ 100.105834][ T5810] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 100.131049][ T5838] usb 3-1: USB disconnect, device number 2 [ 100.182016][ T138] vhci_hcd: release socket [ 100.281766][ T138] vhci_hcd: disconnect device [ 102.577375][ T5872] syzkaller0: entered promiscuous mode [ 102.600919][ T5880] capability: warning: `syz.2.11' uses deprecated v2 capabilities in a way that may be insecure [ 102.615544][ T5872] syzkaller0: entered allmulticast mode [ 102.648403][ T5880] syz.2.11[5880]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 102.657685][ T5881] input: syz0 as /devices/virtual/input/input5 [ 102.697177][ T5880] loop2: detected capacity change from 0 to 512 [ 102.697682][ T5883] netlink: 'syz.0.12': attribute type 39 has an invalid length. [ 102.750135][ T5880] ======================================================= [ 102.750135][ T5880] WARNING: The mand mount option has been deprecated and [ 102.750135][ T5880] and is ignored by this kernel. Remove the mand [ 102.750135][ T5880] option from the mount to silence this warning. [ 102.750135][ T5880] ======================================================= [ 102.798919][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.982381][ T5880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.015857][ T5880] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.174674][ T5890] random: crng reseeded on system resumption [ 104.776267][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.300885][ T5894] loop0: detected capacity change from 0 to 4096 [ 105.560297][ T5810] vhci_hcd: vhci_device speed not set [ 110.222667][ T5942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'. [ 114.461747][ T28] audit: type=1326 audit(1773289286.891:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eab9c799 code=0x7ffc0000 [ 114.490410][ T28] audit: type=1326 audit(1773289286.911:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eab9c799 code=0x7ffc0000 [ 114.542313][ T28] audit: type=1326 audit(1773289286.961:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f76eab9c799 code=0x7ffc0000 [ 114.570555][ T28] audit: type=1326 audit(1773289286.961:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76eab9c502 code=0x7ffc0000 [ 114.621264][ T5949] loop1: detected capacity change from 0 to 512 [ 114.773725][ T28] audit: type=1326 audit(1773289286.961:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f76eab5cfce code=0x7ffc0000 [ 114.875119][ T5953] loop2: detected capacity change from 0 to 2048 [ 115.120193][ T5949] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 115.282600][ T5953] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.574286][ T28] audit: type=1326 audit(1773289287.001:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f76eab9c5c7 code=0x7ffc0000 [ 115.838949][ T28] audit: type=1326 audit(1773289287.031:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76eab5cfce code=0x7ffc0000 [ 115.949106][ T5851] udevd[5851]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 116.013374][ T28] audit: type=1326 audit(1773289287.041:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76eab9c42b code=0x7ffc0000 [ 116.048635][ T5851] udevd[5851]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 116.078588][ T5949] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 116.119362][ T28] audit: type=1326 audit(1773289287.161:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f76eab5cfce code=0x7ffc0000 [ 116.151467][ T5949] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.24: Failed to acquire dquot type 1 [ 116.276515][ T5959] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 116.284658][ T5959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.301224][ T5949] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.24: corrupted inode contents [ 116.330026][ T5959] vhci_hcd vhci_hcd.0: Device attached [ 116.350551][ T5949] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #16: comm syz.1.24: mark_inode_dirty error [ 116.381224][ T5949] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.24: corrupted inode contents [ 116.418150][ T5949] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.24: mark_inode_dirty error [ 116.467918][ T5949] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.24: corrupted inode contents [ 116.499423][ T5959] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 116.510451][ T5959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.527535][ T5949] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 116.568367][ T5959] vhci_hcd vhci_hcd.0: Device attached [ 116.578090][ T5949] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.24: corrupted inode contents [ 116.594212][ T5964] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 116.599738][ T789] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 116.603408][ T5964] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 116.636525][ T5966] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 116.646662][ T5966] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.669716][ T5964] vhci_hcd vhci_hcd.0: Device attached [ 116.678882][ T5949] EXT4-fs error (device loop1): ext4_truncate:4294: inode #16: comm syz.1.24: mark_inode_dirty error [ 116.709243][ T5959] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(7) [ 116.718733][ T5959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.746532][ T5949] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 116.785582][ T5964] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 116.808780][ T5964] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 116.822455][ T5949] EXT4-fs (loop1): 1 truncate cleaned up [ 116.852848][ T5949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.906620][ T5966] vhci_hcd vhci_hcd.0: Device attached [ 116.911508][ T5959] vhci_hcd vhci_hcd.0: Device attached [ 116.917842][ T5949] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.999434][ T5972] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(19) [ 117.008073][ T5972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.084606][ T5959] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 117.130028][ T5972] vhci_hcd vhci_hcd.0: Device attached [ 117.165590][ T5967] vhci_hcd: connection closed [ 117.174947][ T5962] vhci_hcd: connection closed [ 117.176149][ T5965] vhci_hcd: connection closed [ 117.181573][ T5960] vhci_hcd: connection reset by peer [ 117.200888][ T5970] vhci_hcd: connection closed [ 117.209264][ T5897] vhci_hcd: stop threads [ 117.235711][ T5897] vhci_hcd: release socket [ 117.242440][ T5897] vhci_hcd: disconnect device [ 117.253285][ T5897] vhci_hcd: stop threads [ 117.258271][ T5897] vhci_hcd: release socket [ 117.276955][ T5897] vhci_hcd: disconnect device [ 117.302242][ T5897] vhci_hcd: stop threads [ 117.313317][ T5897] vhci_hcd: release socket [ 117.348534][ T5897] vhci_hcd: disconnect device [ 117.369648][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.385459][ T5973] vhci_hcd: connection closed [ 117.388709][ T5897] vhci_hcd: stop threads [ 117.391358][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.405937][ T5897] vhci_hcd: release socket [ 117.409871][ T5897] vhci_hcd: disconnect device [ 117.448048][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.467726][ T5897] vhci_hcd: stop threads [ 117.473567][ T5897] vhci_hcd: release socket [ 117.479166][ T5897] vhci_hcd: disconnect device [ 117.486107][ T5897] vhci_hcd: stop threads [ 117.495999][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.508163][ T5897] vhci_hcd: release socket [ 117.515248][ T5897] vhci_hcd: disconnect device [ 117.523402][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.534687][ T5773] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.557162][ T5773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.734288][ T5978] loop1: detected capacity change from 0 to 128 [ 117.818437][ T5978] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.852444][ T5978] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.619031][ T5978] fscrypt: Error allocating hmac(sha512): -2 [ 119.328333][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.680003][ T5773] Bluetooth: hci4: command tx timeout [ 119.919615][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.760864][ T5773] Bluetooth: hci4: command tx timeout [ 121.864569][ T6018] Zero length message leads to an empty skb [ 121.879523][ T789] vhci_hcd: vhci_device speed not set [ 121.989484][ T5809] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.027690][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 123.036290][ T5809] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 123.059632][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.079265][ T5809] usb 3-1: Product: syz [ 123.085566][ T5809] usb 3-1: Manufacturer: syz [ 123.114389][ T5809] usb 3-1: SerialNumber: syz [ 123.145093][ T5809] usb 3-1: config 0 descriptor?? [ 123.175036][ T5809] hub 3-1:0.0: bad descriptor, ignoring hub [ 123.199243][ T5809] hub: probe of 3-1:0.0 failed with error -5 [ 123.271816][ T5772] syz-executor (5772) used greatest stack depth: 19920 bytes left [ 123.287927][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.296506][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.304356][ T5975] bridge_slave_0: entered allmulticast mode [ 123.312668][ T5975] bridge_slave_0: entered promiscuous mode [ 123.323279][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.331251][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.340859][ T5975] bridge_slave_1: entered allmulticast mode [ 123.350899][ T5975] bridge_slave_1: entered promiscuous mode [ 123.405403][ T5809] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 123.455712][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.494890][ T5809] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 123.534816][ T5809] usb 3-1: media controller created [ 123.641879][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.665628][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.751951][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.813040][ T6034] loop1: detected capacity change from 0 to 8 [ 123.840292][ T5773] Bluetooth: hci4: command tx timeout [ 123.871796][ T6034] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 123.886886][ T5809] DVB: Unable to find symbol dib7000p_attach() [ 123.921434][ T5809] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 123.938939][ T5848] udevd[5848]: incorrect cramfs checksum on /dev/loop1 [ 124.059777][ T5975] team0: Port device team_slave_0 added [ 124.090475][ T5975] team0: Port device team_slave_1 added [ 124.306253][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.322653][ T5809] rc_core: IR keymap rc-dib0700-rc5 not found [ 124.343463][ T5809] Registered IR keymap rc-empty [ 124.350959][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.387044][ T5809] dvb-usb: could not initialize remote control. [ 124.396715][ T5809] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 124.579500][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.713333][ T5809] usb 3-1: USB disconnect, device number 3 [ 125.290535][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.43'. [ 125.301160][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.43'. [ 125.329646][ T6045] team0: entered promiscuous mode [ 125.335668][ T6045] team_slave_0: entered promiscuous mode [ 125.346472][ T6045] team_slave_1: entered promiscuous mode [ 125.359024][ T6045] bond0: entered promiscuous mode [ 125.366357][ T6045] bond_slave_0: entered promiscuous mode [ 125.375606][ T6045] bond_slave_1: entered promiscuous mode [ 125.388602][ T6045] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 125.415576][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.479301][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.570347][ T5809] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 125.586654][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.906275][ T5975] hsr_slave_0: entered promiscuous mode [ 125.919536][ T5773] Bluetooth: hci4: command tx timeout [ 125.977334][ T5975] hsr_slave_1: entered promiscuous mode [ 125.998625][ T6058] ------------[ cut here ]------------ [ 126.008008][ T6058] WARNING: CPU: 1 PID: 6058 at security/landlock/fs.c:748 collect_domain_accesses+0x7b6/0x820 [ 126.024979][ T6058] Modules linked in: [ 126.031883][ T6058] CPU: 1 PID: 6058 Comm: syz.2.47 Not tainted syzkaller #0 [ 126.042998][ T6058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.057391][ T6058] RIP: 0010:collect_domain_accesses+0x7b6/0x820 [ 126.067357][ T6058] Code: e8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 df 6b 98 fd 31 ed eb dd e8 d6 6b 98 fd 0f 0b 40 b5 01 eb da e8 ca 6b 98 fd <0f> 0b eb e7 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0e f9 ff ff 48 89 [ 126.091621][ T6058] RSP: 0018:ffffc90005997ab0 EFLAGS: 00010283 [ 126.099619][ T6058] RAX: ffffffff83eeb096 RBX: ffff88805d93ca48 RCX: 0000000000080000 [ 126.110173][ T6058] RDX: ffffc900051b2000 RSI: 000000000000050f RDI: 0000000000000510 [ 126.119638][ T6058] RBP: 1ffff11005d7f715 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 126.130435][ T6058] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: 0000000000000001 [ 126.140830][ T6058] R13: 0000000000000000 R14: ffff88805d93ca48 R15: 0000000000002004 [ 126.151624][ T6058] FS: 00007fae4c6ae6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 126.161841][ T6058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.169830][ T6058] CR2: 000000110c242e6f CR3: 000000002fb11000 CR4: 00000000003506e0 [ 126.179773][ T6058] Call Trace: [ 126.184393][ T6058] [ 126.188337][ T6058] current_check_refer_path+0x566/0xc50 [ 126.197542][ T6058] ? hook_file_truncate+0xc0/0xc0 [ 126.204983][ T6058] ? _raw_spin_unlock+0x28/0x40 [ 126.211426][ T6058] ? d_set_d_op+0x25f/0x370 [ 126.217226][ T6058] security_path_rename+0x16c/0x200 [ 126.224438][ T6058] do_renameat2+0x6be/0xce0 [ 126.230782][ T6058] ? __lock_acquire+0x7d40/0x7d40 [ 126.236888][ T6058] ? fsnotify_move+0x4e0/0x4e0 [ 126.247270][ T6058] ? __check_object_size+0x506/0xa20 [ 126.254947][ T6058] ? getname_flags+0x20a/0x500 [ 126.262010][ T6058] __x64_sys_renameat2+0xd2/0xe0 [ 126.269265][ T6058] do_syscall_64+0x55/0xa0 [ 126.276320][ T6058] ? clear_bhb_loop+0x40/0x90 [ 126.282385][ T6058] ? clear_bhb_loop+0x40/0x90 [ 126.288229][ T6058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.297580][ T6058] RIP: 0033:0x7fae4b79c799 [ 126.303164][ T6058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.328910][ T6058] RSP: 002b:00007fae4c6ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 126.338352][ T6058] RAX: ffffffffffffffda RBX: 00007fae4ba15fa0 RCX: 00007fae4b79c799 [ 126.351002][ T6058] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 126.362888][ T6058] RBP: 00007fae4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 126.372765][ T6058] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 126.382853][ T6058] R13: 00007fae4ba16038 R14: 00007fae4ba15fa0 R15: 00007ffee4a7a518 [ 126.393508][ T6058] [ 126.397391][ T6058] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.405350][ T6058] CPU: 1 PID: 6058 Comm: syz.2.47 Not tainted syzkaller #0 [ 126.416473][ T6058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.430297][ T6058] Call Trace: [ 126.433907][ T6058] [ 126.439535][ T6058] dump_stack_lvl+0x18c/0x250 [ 126.445319][ T6058] ? show_regs_print_info+0x20/0x20 [ 126.452895][ T6058] ? load_image+0x400/0x400 [ 126.458481][ T6058] panic+0x2dc/0x730 [ 126.463683][ T6058] ? bpf_jit_dump+0xd0/0xd0 [ 126.470984][ T6058] __warn+0x2e0/0x470 [ 126.476274][ T6058] ? collect_domain_accesses+0x7b6/0x820 [ 126.484025][ T6058] ? collect_domain_accesses+0x7b6/0x820 [ 126.491026][ T6058] report_bug+0x2be/0x4f0 [ 126.496950][ T6058] ? collect_domain_accesses+0x7b6/0x820 [ 126.503771][ T6058] ? collect_domain_accesses+0x7b6/0x820 [ 126.511298][ T6058] ? collect_domain_accesses+0x7b8/0x820 [ 126.518654][ T6058] handle_bug+0xcf/0x120 [ 126.523773][ T6058] exc_invalid_op+0x1a/0x50 [ 126.530217][ T6058] asm_exc_invalid_op+0x1a/0x20 [ 126.536038][ T6058] RIP: 0010:collect_domain_accesses+0x7b6/0x820 [ 126.545887][ T6058] Code: e8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 df 6b 98 fd 31 ed eb dd e8 d6 6b 98 fd 0f 0b 40 b5 01 eb da e8 ca 6b 98 fd <0f> 0b eb e7 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0e f9 ff ff 48 89 [ 126.570510][ T6058] RSP: 0018:ffffc90005997ab0 EFLAGS: 00010283 [ 126.578308][ T6058] RAX: ffffffff83eeb096 RBX: ffff88805d93ca48 RCX: 0000000000080000 [ 126.589522][ T6058] RDX: ffffc900051b2000 RSI: 000000000000050f RDI: 0000000000000510 [ 126.602090][ T6058] RBP: 1ffff11005d7f715 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 126.614055][ T6058] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: 0000000000000001 [ 126.624707][ T6058] R13: 0000000000000000 R14: ffff88805d93ca48 R15: 0000000000002004 [ 126.635529][ T6058] ? collect_domain_accesses+0x7b6/0x820 [ 126.643373][ T6058] current_check_refer_path+0x566/0xc50 [ 126.649939][ T6058] ? hook_file_truncate+0xc0/0xc0 [ 126.657079][ T6058] ? _raw_spin_unlock+0x28/0x40 [ 126.663580][ T6058] ? d_set_d_op+0x25f/0x370 [ 126.669506][ T6058] security_path_rename+0x16c/0x200 [ 126.675331][ T6058] do_renameat2+0x6be/0xce0 [ 126.681570][ T6058] ? __lock_acquire+0x7d40/0x7d40 [ 126.690801][ T6058] ? fsnotify_move+0x4e0/0x4e0 [ 126.697011][ T6058] ? __check_object_size+0x506/0xa20 [ 126.704838][ T6058] ? getname_flags+0x20a/0x500 [ 126.710947][ T6058] __x64_sys_renameat2+0xd2/0xe0 [ 126.718321][ T6058] do_syscall_64+0x55/0xa0 [ 126.723360][ T6058] ? clear_bhb_loop+0x40/0x90 [ 126.728559][ T6058] ? clear_bhb_loop+0x40/0x90 [ 126.734571][ T6058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.742606][ T6058] RIP: 0033:0x7fae4b79c799 [ 126.748889][ T6058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.772559][ T6058] RSP: 002b:00007fae4c6ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 126.783345][ T6058] RAX: ffffffffffffffda RBX: 00007fae4ba15fa0 RCX: 00007fae4b79c799 [ 126.793855][ T6058] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 126.803350][ T6058] RBP: 00007fae4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 126.814693][ T6058] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 126.824182][ T6058] R13: 00007fae4ba16038 R14: 00007fae4ba15fa0 R15: 00007ffee4a7a518 [ 126.835218][ T6058] [ 126.839884][ T6058] Kernel Offset: disabled [ 126.845318][ T6058] Rebooting in 86400 seconds..