last executing test programs: 5.630115917s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0xff, 0x0}}]}, &(0x7f0000000180)=0x10) 4.473587423s ago: executing program 1 (id=5): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)={'a', ' *:* ', 'w\x00'}, 0x8) 4.217754461s ago: executing program 1 (id=6): mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) syz_clone(0x2c9a4000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 3.633459771s ago: executing program 1 (id=7): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x1, {0xa, 0x4e23, 0x5, @mcast2, 0x100}}}, 0x80, 0x0}, 0x20000020) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 3.430367951s ago: executing program 2 (id=3): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 2.281485629s ago: executing program 2 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="20000000010a01a7de"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40050) 2.131152262s ago: executing program 0 (id=1): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000580)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1, '\x00', "d49d9d8f269504e8bf94a8320f48734acd712407a88253d128b877e6c0f6346a1e2b28fdb1c4819cd38254598cd27a092301f7acd908931e4f73739c2ce72a6179972b23cd945cfdd2c56ea82b495a043060f7d100beb4ff5b3a957abc7bce124cbb97cae75d3931b4f6ecce980283dda702e4a51523a1fcb65b9440f8575803000000072e8554b9963773256aff86b7d8fc302d2d29449449097241939e86e17690ef9b8cea71df8cbf197ac40cb5b6ca85d7cb311ab90711904813fe0c637136abb11eaff3d6498e5ffd629d81e64c426662c50efaa6fce59e81c4828fc6c8875e5adc2dace6d8a096a98608bcce167e0d00"}}, 0x110) 1.919546152s ago: executing program 1 (id=9): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1.865876032s ago: executing program 0 (id=10): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58010000100001002dbd700000000000fe880000000000000000000000000101fe88000000000000000000000000000100000000fffe00000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000ce9bab2388f442ab000400000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000008000000000100000000000000000000000000000002000000000000000000000002005f0000000000000000001c0017000000000026bd700026bd70002bbd70002bbdca00020000004c0014"], 0x158}}, 0x0) 1.699455951s ago: executing program 32 (id=9): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1.677104256s ago: executing program 0 (id=12): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close(0x3) 1.031865166s ago: executing program 0 (id=13): syz_clone(0x2c9a4000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 884.264473ms ago: executing program 0 (id=14): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000003800)=[{&(0x7f0000000100)="2e1221b23bb63f7f77d3df163e75963d86ddf06712e9000d2f8db0049d904972df48040000dbb8a10000", 0x2a}, {&(0x7f0000000240)="000001010000", 0x6}, {&(0x7f0000000080)="a43b2eaab400", 0x6}, {&(0x7f0000000280)="190000dca20b6c2755", 0x9}], 0x4) 788.287664ms ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0xc000) 545.404095ms ago: executing program 3 (id=15): ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x4800) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x881) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40605414, &(0x7f00000000c0)={0x4, 0x9dc7, 0x0, 0x0, 0xf}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008800}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=16): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0x80000000, 0xf, 0x8, 0x80, 0x2, 0x318, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0xbc5b, 0x80000001, 0x25, 0x11, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x2, 0x8, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x7fffffff, 0x6, 0x6, 0x2, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x9, 0x5, 0xfffffff7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xfffff001, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x5, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0xf94, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x3, 0x5, 0x1, 0x486, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d04, 0x6, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x3, 0x7f, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x69d9, 0xb, 0x5, 0x4, 0x6, 0x0, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb74, 0x101, 0x10000, 0x4, 0x7fff, 0x14000, 0x7f, 0x2, 0x5, 0x7, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7fffffff, 0x1, 0x98, 0xa1f, 0xf40, 0x2, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.0' (ED25519) to the list of known hosts. [ 88.895443][ T5594] cgroup: Unknown subsys name 'net' [ 89.136035][ T5594] cgroup: Unknown subsys name 'cpuset' [ 89.191434][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.257420][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.970719][ T821] cfg80211: failed to load regulatory.db [ 95.174221][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.199598][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.218142][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.219756][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.239234][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.242327][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.278814][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.284425][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.291748][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.310847][ T4922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.458246][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.483957][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.485060][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.486258][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.487554][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.554476][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.572752][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.575931][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.607609][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.608874][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.402388][ T5614] Bluetooth: hci1: command tx timeout [ 97.491565][ T5614] Bluetooth: hci0: command tx timeout [ 97.562153][ T5614] Bluetooth: hci3: command tx timeout [ 97.720958][ T5614] Bluetooth: hci2: command tx timeout [ 97.834807][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.836031][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.836892][ T5615] bridge_slave_0: entered allmulticast mode [ 97.839484][ T5615] bridge_slave_0: entered promiscuous mode [ 97.876407][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.876638][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.877152][ T5611] bridge_slave_0: entered allmulticast mode [ 97.879527][ T5611] bridge_slave_0: entered promiscuous mode [ 97.917949][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.918182][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.918643][ T5615] bridge_slave_1: entered allmulticast mode [ 97.928112][ T5615] bridge_slave_1: entered promiscuous mode [ 97.956282][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.956607][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.957149][ T5611] bridge_slave_1: entered allmulticast mode [ 97.959562][ T5611] bridge_slave_1: entered promiscuous mode [ 98.149040][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.196848][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.197308][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.197781][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.198057][ T5620] bridge_slave_0: entered allmulticast mode [ 98.202907][ T5620] bridge_slave_0: entered promiscuous mode [ 98.243144][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.243568][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.243797][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.243994][ T5621] bridge_slave_0: entered allmulticast mode [ 98.246360][ T5621] bridge_slave_0: entered promiscuous mode [ 98.275730][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.276900][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.278735][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.279544][ T5620] bridge_slave_1: entered allmulticast mode [ 98.292150][ T5620] bridge_slave_1: entered promiscuous mode [ 98.337919][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.338221][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.338439][ T5621] bridge_slave_1: entered allmulticast mode [ 98.345825][ T5621] bridge_slave_1: entered promiscuous mode [ 98.487877][ T5615] team0: Port device team_slave_0 added [ 98.521250][ T5611] team0: Port device team_slave_0 added [ 98.527092][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.541485][ T5615] team0: Port device team_slave_1 added [ 98.557051][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.570136][ T5611] team0: Port device team_slave_1 added [ 98.583372][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.617725][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.745005][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.745019][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.745039][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.798515][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.798557][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.798578][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.823516][ T5620] team0: Port device team_slave_0 added [ 98.836986][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.837029][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.837101][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.890305][ T5621] team0: Port device team_slave_0 added [ 98.899419][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.899432][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.899453][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.918123][ T5620] team0: Port device team_slave_1 added [ 98.965786][ T5621] team0: Port device team_slave_1 added [ 99.067522][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.067535][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.067555][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.123489][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.123503][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.123523][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.175921][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.175934][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.175956][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.232478][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.232491][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.232511][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.304511][ T5615] hsr_slave_0: entered promiscuous mode [ 99.306325][ T5615] hsr_slave_1: entered promiscuous mode [ 99.480697][ T5614] Bluetooth: hci1: command tx timeout [ 99.560720][ T5614] Bluetooth: hci0: command tx timeout [ 99.589486][ T5611] hsr_slave_0: entered promiscuous mode [ 99.597473][ T5611] hsr_slave_1: entered promiscuous mode [ 99.598861][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 99.598948][ T5611] Cannot create hsr debugfs directory [ 99.640639][ T5614] Bluetooth: hci3: command tx timeout [ 99.785501][ T5620] hsr_slave_0: entered promiscuous mode [ 99.787389][ T5620] hsr_slave_1: entered promiscuous mode [ 99.788737][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 99.788762][ T5620] Cannot create hsr debugfs directory [ 99.804394][ T5614] Bluetooth: hci2: command tx timeout [ 99.845827][ T5621] hsr_slave_0: entered promiscuous mode [ 99.847420][ T5621] hsr_slave_1: entered promiscuous mode [ 99.848684][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 99.848731][ T5621] Cannot create hsr debugfs directory [ 100.706425][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.757726][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.777748][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.827897][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.867798][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.899582][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.912321][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.948996][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.067225][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.105195][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.118277][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.159132][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.181610][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.217135][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.245542][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.278427][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.442371][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.477552][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.492933][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.535162][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.554253][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.570739][ T5614] Bluetooth: hci1: command tx timeout [ 101.597202][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.632838][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.641006][ T5614] Bluetooth: hci0: command tx timeout [ 101.678701][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.721196][ T5614] Bluetooth: hci3: command tx timeout [ 101.880921][ T5614] Bluetooth: hci2: command tx timeout [ 101.885313][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.925228][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.936437][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.977802][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.990128][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.030165][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.049452][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.090256][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.166187][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.310854][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.347283][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.379552][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.382784][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.466500][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.467105][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.559461][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.628299][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.628454][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.662690][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.708261][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.708404][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.803999][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.859149][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.859303][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.886850][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.968749][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.968987][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.103655][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.209659][ T1531] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.210053][ T1531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.291038][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.291196][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.641001][ T5614] Bluetooth: hci1: command tx timeout [ 103.720717][ T5614] Bluetooth: hci0: command tx timeout [ 103.800663][ T5614] Bluetooth: hci3: command tx timeout [ 103.961884][ T5614] Bluetooth: hci2: command tx timeout [ 104.207882][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.518874][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.628580][ T5615] veth0_vlan: entered promiscuous mode [ 104.674297][ T5615] veth1_vlan: entered promiscuous mode [ 104.899007][ T5615] veth0_macvtap: entered promiscuous mode [ 104.913629][ T5620] veth0_vlan: entered promiscuous mode [ 104.920314][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.957540][ T5615] veth1_macvtap: entered promiscuous mode [ 105.033449][ T5620] veth1_vlan: entered promiscuous mode [ 105.098844][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.144113][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.147896][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.216273][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.253638][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.258907][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.303731][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.384479][ T5620] veth0_macvtap: entered promiscuous mode [ 105.409505][ T5611] veth0_vlan: entered promiscuous mode [ 105.516956][ T5620] veth1_macvtap: entered promiscuous mode [ 105.574618][ T5611] veth1_vlan: entered promiscuous mode [ 105.769212][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.820960][ T5621] veth0_vlan: entered promiscuous mode [ 105.839268][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.860281][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.860303][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.939406][ T829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.981323][ T829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.983489][ T5621] veth1_vlan: entered promiscuous mode [ 106.009761][ T829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.034401][ T829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.035417][ T5611] veth0_macvtap: entered promiscuous mode [ 106.079781][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.079803][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.126524][ T5611] veth1_macvtap: entered promiscuous mode [ 106.499501][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.726021][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.732745][ T5621] veth0_macvtap: entered promiscuous mode [ 106.827343][ T5621] veth1_macvtap: entered promiscuous mode [ 106.880245][ T1531] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.095388][ T1531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.098265][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.098284][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.099593][ T1531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.137687][ T1531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.279471][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.314273][ T5765] ======================================================= [ 108.314273][ T5765] WARNING: The mand mount option has been deprecated and [ 108.314273][ T5765] and is ignored by this kernel. Remove the mand [ 108.314273][ T5765] option from the mount to silence this warning. [ 108.314273][ T5765] ======================================================= [ 108.385932][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.385952][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.505355][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.668857][ T829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.702262][ T829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.703491][ T829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.712994][ T829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.928619][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.928641][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.477577][ T829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.477600][ T829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.890621][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.890642][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.214953][ T5773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 110.804396][ T829] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.924105][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.924124][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.034672][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.073545][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.074406][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.075932][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.076976][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.490338][ T829] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.989390][ T829] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.397554][ T5627] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.585812][ T829] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.691025][ T5627] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 112.691062][ T5627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.791155][ T1009] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.847580][ T5627] usb 4-1: config 0 descriptor?? [ 112.935517][ T5627] ------------[ cut here ]------------ [ 112.935551][ T5627] workqueue: ath6kl_wq is using neither WQ_PERCPU or WQ_UNBOUND. Setting WQ_PERCPU. [ 112.935569][ T5627] WARNING: kernel/workqueue.c:5856 at __alloc_workqueue+0x1d02/0x2070, CPU#1: kworker/1:4/5627 [ 112.935614][ T5627] Modules linked in: [ 112.935654][ T5627] CPU: 1 UID: 0 PID: 5627 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.935680][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.935696][ T5627] Workqueue: usb_hub_wq hub_event [ 112.935730][ T5627] RIP: 0010:__alloc_workqueue+0x1d07/0x2070 [ 112.935758][ T5627] Code: e9 36 f9 ff ff e8 89 8a 37 00 e9 05 fb ff ff e8 7f 8a 37 00 e9 92 fb ff ff e8 75 8a 37 00 48 8d 3d ee ff 43 0e 48 8b 74 24 20 <67> 48 0f b9 3a 81 cd 00 01 00 00 e9 88 e5 ff ff e8 54 8a 37 00 48 [ 112.935777][ T5627] RSP: 0018:ffffc900050b6bc8 EFLAGS: 00010283 [ 112.935798][ T5627] RAX: ffffffff818e412b RBX: 0000000000000000 RCX: 0000000000100000 [ 112.935815][ T5627] RDX: ffffc90018e59000 RSI: ffff888056830168 RDI: ffffffff8fd24120 [ 112.935833][ T5627] RBP: 0000000000000000 R08: ffff88803daa8000 R09: 0000000000000002 [ 112.935848][ T5627] R10: 0000000000000100 R11: 0000000000000102 R12: dffffc0000000000 [ 112.935864][ T5627] R13: ffff888056830000 R14: ffffc900050b6ce0 R15: 0000000000000000 [ 112.935881][ T5627] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 112.935900][ T5627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.935916][ T5627] CR2: 000055caeb08ff20 CR3: 00000000381ec000 CR4: 00000000003526f0 [ 112.935936][ T5627] Call Trace: [ 112.935950][ T5627] [ 112.935980][ T5627] alloc_workqueue_noprof+0xe3/0x210 [ 112.936017][ T5627] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 112.936623][ T5627] ? __kmalloc_cache_noprof+0x3d0/0x6d0 [ 112.936658][ T5627] ? ath6kl_usb_probe+0x8e/0x1580 [ 112.936705][ T5627] ath6kl_usb_probe+0xaa/0x1580 [ 112.936747][ T5627] ? usb_unlocked_disable_lpm+0x8c/0xb0 [ 112.936785][ T5627] usb_probe_interface+0x659/0xc70 [ 112.936831][ T5627] ? __pfx_usb_probe_interface+0x10/0x10 [ 112.936862][ T5627] really_probe+0x267/0xaf0 [ 112.936903][ T5627] __driver_probe_device+0x1e2/0x350 [ 112.936939][ T5627] driver_probe_device+0x4f/0x240 [ 112.936976][ T5627] __device_attach_driver+0x270/0x410 [ 112.937013][ T5627] bus_for_each_drv+0x25b/0x2f0 [ 112.937038][ T5627] ? __pfx___device_attach_driver+0x10/0x10 [ 112.937071][ T5627] ? __pfx_bus_for_each_drv+0x10/0x10 [ 112.937095][ T5627] ? rt_spin_unlock+0x160/0x200 [ 112.937127][ T5627] __device_attach+0x2c8/0x450 [ 112.937161][ T5627] ? __pfx___device_attach+0x10/0x10 [ 112.937193][ T5627] ? rt_spin_unlock+0x160/0x200 [ 112.937225][ T5627] device_initial_probe+0xa1/0xd0 [ 112.937258][ T5627] bus_probe_device+0x12d/0x220 [ 112.937287][ T5627] device_add+0x7ec/0xb90 [ 112.937320][ T5627] usb_set_configuration+0x1a87/0x2110 [ 112.937383][ T5627] usb_generic_driver_probe+0x8d/0x150 [ 112.937416][ T5627] usb_probe_device+0x1c4/0x3b0 [ 112.937452][ T5627] ? __pfx_usb_probe_device+0x10/0x10 [ 112.937481][ T5627] really_probe+0x267/0xaf0 [ 112.937530][ T5627] __driver_probe_device+0x1e2/0x350 [ 112.937565][ T5627] driver_probe_device+0x4f/0x240 [ 112.937603][ T5627] __device_attach_driver+0x270/0x410 [ 112.937641][ T5627] bus_for_each_drv+0x25b/0x2f0 [ 112.937665][ T5627] ? __pfx___device_attach_driver+0x10/0x10 [ 112.937700][ T5627] ? __pfx_bus_for_each_drv+0x10/0x10 [ 112.937724][ T5627] ? rt_spin_unlock+0x160/0x200 [ 112.937756][ T5627] __device_attach+0x2c8/0x450 [ 112.937789][ T5627] ? __pfx___device_attach+0x10/0x10 [ 112.937820][ T5627] ? rt_spin_unlock+0x160/0x200 [ 112.937848][ T5627] device_initial_probe+0xa1/0xd0 [ 112.937881][ T5627] bus_probe_device+0x12d/0x220 [ 112.937908][ T5627] device_add+0x7ec/0xb90 [ 112.937940][ T5627] usb_new_device+0x9f8/0x16e0 [ 112.937977][ T5627] ? __pfx_usb_new_device+0x10/0x10 [ 112.938013][ T5627] hub_event+0x2a49/0x4f60 [ 112.938095][ T5627] ? __pfx_hub_event+0x10/0x10 [ 112.938123][ T5627] ? process_one_work+0x8be/0x1630 [ 112.938170][ T5627] ? process_one_work+0x8be/0x1630 [ 112.938203][ T5627] process_one_work+0x98b/0x1630 [ 112.938260][ T5627] ? __pfx_process_one_work+0x10/0x10 [ 112.938293][ T5627] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.938339][ T5627] worker_thread+0xb49/0x1140 [ 112.938386][ T5627] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.938432][ T5627] kthread+0x388/0x470 [ 112.938458][ T5627] ? __pfx_worker_thread+0x10/0x10 [ 112.938501][ T5627] ? __pfx_kthread+0x10/0x10 [ 112.938531][ T5627] ret_from_fork+0x514/0xb70 [ 112.938563][ T5627] ? __pfx_ret_from_fork+0x10/0x10 [ 112.938592][ T5627] ? __switch_to+0xc79/0x1410 [ 112.938619][ T5627] ? __pfx_kthread+0x10/0x10 [ 112.938650][ T5627] ret_from_fork_asm+0x1a/0x30 [ 112.938702][ T5627] [ 112.938714][ T5627] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.938732][ T5627] CPU: 1 UID: 0 PID: 5627 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.938757][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.938773][ T5627] Workqueue: usb_hub_wq hub_event [ 112.938801][ T5627] Call Trace: [ 112.938811][ T5627] [ 112.938820][ T5627] vpanic+0x56c/0xa60 [ 112.938856][ T5627] ? __pfx__printk+0x10/0x10 [ 112.938879][ T5627] ? __pfx_vpanic+0x10/0x10 [ 112.938909][ T5627] ? is_bpf_text_address+0x292/0x2b0 [ 112.938941][ T5627] ? is_bpf_text_address+0x26/0x2b0 [ 112.938984][ T5627] panic+0xc5/0xd0 [ 112.939019][ T5627] ? __pfx_panic+0x10/0x10 [ 112.939064][ T5627] ? ret_from_fork_asm+0x1a/0x30 [ 112.939102][ T5627] __warn+0x315/0x4c0 [ 112.939135][ T5627] ? __alloc_workqueue+0x1d02/0x2070 [ 112.939165][ T5627] ? __alloc_workqueue+0x1d02/0x2070 [ 112.939194][ T5627] __report_bug+0x339/0x540 [ 112.939224][ T5627] ? __device_attach+0x2c8/0x450 [ 112.939253][ T5627] ? device_initial_probe+0xa1/0xd0 [ 112.939280][ T5627] ? bus_probe_device+0x12d/0x220 [ 112.939325][ T5627] ? __alloc_workqueue+0x1d02/0x2070 [ 112.939355][ T5627] ? __pfx___report_bug+0x10/0x10 [ 112.939382][ T5627] ? device_add+0x7ec/0xb90 [ 112.939432][ T5627] report_bug_entry+0x19a/0x290 [ 112.939464][ T5627] ? __alloc_workqueue+0x1d07/0x2070 [ 112.939497][ T5627] ? __alloc_workqueue+0x1d0c/0x2070 [ 112.939525][ T5627] handle_bug+0xce/0x200 [ 112.939560][ T5627] exc_invalid_op+0x1a/0x50 [ 112.939595][ T5627] asm_exc_invalid_op+0x1a/0x20 [ 112.939618][ T5627] RIP: 0010:__alloc_workqueue+0x1d07/0x2070 [ 112.939646][ T5627] Code: e9 36 f9 ff ff e8 89 8a 37 00 e9 05 fb ff ff e8 7f 8a 37 00 e9 92 fb ff ff e8 75 8a 37 00 48 8d 3d ee ff 43 0e 48 8b 74 24 20 <67> 48 0f b9 3a 81 cd 00 01 00 00 e9 88 e5 ff ff e8 54 8a 37 00 48 [ 112.939664][ T5627] RSP: 0018:ffffc900050b6bc8 EFLAGS: 00010283 [ 112.939684][ T5627] RAX: ffffffff818e412b RBX: 0000000000000000 RCX: 0000000000100000 [ 112.939699][ T5627] RDX: ffffc90018e59000 RSI: ffff888056830168 RDI: ffffffff8fd24120 [ 112.939715][ T5627] RBP: 0000000000000000 R08: ffff88803daa8000 R09: 0000000000000002 [ 112.939729][ T5627] R10: 0000000000000100 R11: 0000000000000102 R12: dffffc0000000000 [ 112.939746][ T5627] R13: ffff888056830000 R14: ffffc900050b6ce0 R15: 0000000000000000 [ 112.939772][ T5627] ? __alloc_workqueue+0x1cfb/0x2070 [ 112.939808][ T5627] ? __alloc_workqueue+0x1cfb/0x2070 [ 112.939854][ T5627] alloc_workqueue_noprof+0xe3/0x210 [ 112.939890][ T5627] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 112.939916][ T5627] ? __kmalloc_cache_noprof+0x3d0/0x6d0 [ 112.939943][ T5627] ? ath6kl_usb_probe+0x8e/0x1580 [ 112.939988][ T5627] ath6kl_usb_probe+0xaa/0x1580 [ 112.940031][ T5627] ? usb_unlocked_disable_lpm+0x8c/0xb0 [ 112.940069][ T5627] usb_probe_interface+0x659/0xc70 [ 112.940115][ T5627] ? __pfx_usb_probe_interface+0x10/0x10 [ 112.940145][ T5627] really_probe+0x267/0xaf0 [ 112.940194][ T5627] __driver_probe_device+0x1e2/0x350 [ 112.940245][ T5627] driver_probe_device+0x4f/0x240 [ 112.940280][ T5627] __device_attach_driver+0x270/0x410 [ 112.940317][ T5627] bus_for_each_drv+0x25b/0x2f0 [ 112.940341][ T5627] ? __pfx___device_attach_driver+0x10/0x10 [ 112.940374][ T5627] ? __pfx_bus_for_each_drv+0x10/0x10 [ 112.940397][ T5627] ? rt_spin_unlock+0x160/0x200 [ 112.940426][ T5627] __device_attach+0x2c8/0x450 [ 112.940501][ T5627] ? __pfx___device_attach+0x10/0x10 [ 112.940533][ T5627] ? rt_spin_unlock+0x160/0x200 [ 112.940563][ T5627] device_initial_probe+0xa1/0xd0 [ 112.940596][ T5627] bus_probe_device+0x12d/0x220 [ 112.940623][ T5627] device_add+0x7ec/0xb90 [ 112.940655][ T5627] usb_set_configuration+0x1a87/0x2110 [ 112.940725][ T5627] usb_generic_driver_probe+0x8d/0x150 [ 112.940755][ T5627] usb_probe_device+0x1c4/0x3b0 [ 112.940789][ T5627] ? __pfx_usb_probe_device+0x10/0x10 [ 112.940815][ T5627] really_probe+0x267/0xaf0 [ 112.940852][ T5627] __driver_probe_device+0x1e2/0x350 [ 112.940905][ T5627] driver_probe_device+0x4f/0x240 [ 112.940938][ T5627] __device_attach_driver+0x270/0x410 [ 112.940976][ T5627] bus_for_each_drv+0x25b/0x2f0 [ 112.941000][ T5627] ? __pfx___device_attach_driver+0x10/0x10 [ 112.941031][ T5627] ? __pfx_bus_for_each_drv+0x10/0x10 [ 112.941055][ T5627] ? rt_spin_unlock+0x160/0x200 [ 112.941087][ T5627] __device_attach+0x2c8/0x450 [ 112.941119][ T5627] ? __pfx___device_attach+0x10/0x10 [ 112.941150][ T5627] ? rt_spin_unlock+0x160/0x200 [ 112.941181][ T5627] device_initial_probe+0xa1/0xd0 [ 112.941216][ T5627] bus_probe_device+0x12d/0x220 [ 112.941244][ T5627] device_add+0x7ec/0xb90 [ 112.941276][ T5627] usb_new_device+0x9f8/0x16e0 [ 112.941314][ T5627] ? __pfx_usb_new_device+0x10/0x10 [ 112.941346][ T5627] hub_event+0x2a49/0x4f60 [ 112.941410][ T5627] ? __pfx_hub_event+0x10/0x10 [ 112.941452][ T5627] ? process_one_work+0x8be/0x1630 [ 112.941496][ T5627] ? process_one_work+0x8be/0x1630 [ 112.941539][ T5627] process_one_work+0x98b/0x1630 [ 112.941586][ T5627] ? __pfx_process_one_work+0x10/0x10 [ 112.941612][ T5627] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.941647][ T5627] worker_thread+0xb49/0x1140 [ 112.941685][ T5627] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.941720][ T5627] kthread+0x388/0x470 [ 112.941741][ T5627] ? __pfx_worker_thread+0x10/0x10 [ 112.941768][ T5627] ? __pfx_kthread+0x10/0x10 [ 112.941791][ T5627] ret_from_fork+0x514/0xb70 [ 112.941816][ T5627] ? __pfx_ret_from_fork+0x10/0x10 [ 112.941838][ T5627] ? __switch_to+0xc79/0x1410 [ 112.941859][ T5627] ? __pfx_kthread+0x10/0x10 [ 112.941881][ T5627] ret_from_fork_asm+0x1a/0x30 [ 112.941920][ T5627] [ 112.942517][ T5627] Kernel Offset: disabled