last executing test programs: 8.484330048s ago: executing program 0 (id=1): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) epoll_create1(0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe80000000000000000000"], 0x0) mknod$loop(0x0, 0x6000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r5, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x8, 0x20, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) getsockname(r5, 0x0, &(0x7f0000000180)) 8.343436925s ago: executing program 2 (id=3): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x8b, 0x100000500) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 6.952547437s ago: executing program 0 (id=6): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='F'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000400000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 6.914094879s ago: executing program 2 (id=7): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x4, 0x75, 0x20d}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) removexattr(0x0, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000300)={'aio_aio12_8\x00', [0x2f04, 0x5, 0xd09d, 0xfff7ffff, 0x2d6, 0xfffffffe, 0x20000044, 0x6, 0xffd, 0x9, 0xc, 0x1001, 0x9, 0x3, 0xfffc, 0x5, 0x8, 0x4000000b, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x9, 0x4000d, 0x7, 0x3, 0x4, 0x5, 0x70f]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) sendto$inet6(r1, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000002c0)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xf, @empty, 0x2}, {0xa, 0x4e23, 0x0, @remote, 0x3}, r5, 0x7}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) 5.049591959s ago: executing program 2 (id=8): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)="3d1a0ee017344a06f7855d97dd078eb036225fbda00e1a79d93932a57b2f1d41a83399f06e48d289fe247c115c802f344ba1886015bf1123730296471706714e374ce3f5820a3a188d34b78b5b3cbd89fd674a0fb050b8108522d3ecc3f19ead563d4779962cf8620d2e68f13fd41f631bc170e8253a71578a8a65e1841ec7565bc8e1c2b8c3b7f30a159bb373868d333a5fc9912db1f9f497ad0079177a34bb9518606be7b2931e9365aa479447438465d8268585fb858b54df69a13244ef4d04", 0xc1}, {0x0}], 0x2) 5.042782826s ago: executing program 0 (id=9): syz_emit_vhci(&(0x7f0000002200)=ANY=[@ANYBLOB="040e0c032a20fd"], 0xf) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 4.815024462s ago: executing program 2 (id=10): fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 4.814835888s ago: executing program 0 (id=11): syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.515529425s ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x4}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb7, 0x9, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0xfe, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x6}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x1}, {0x8, 0x2, 0xfa, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0x3}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0xe, 0x4, '\x00', 0xff}]}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7fffffff, 0xfffffffffffffffe, 0xffffffffffff242b, 0x0, 0x0, 0x0, 0x651, 0xffffffffffffffff, 0x1000000000000, 0x0, 0x7fffffff, 0x0, 0x4, 0xb, 0x0, 0xcc6, 0xffffffffffffffff, 0x1, 0x80008, 0x0, 0x1000000, 0x3, 0x0, 0x0, 0x3, 0x7}) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x2}}], 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000080)={0xd, 0x18, 0x3, 0x0, 0x0, 0x1000}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f00000001c0)={0x0, 0x28, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) 4.479501241s ago: executing program 1 (id=2): r0 = syz_open_dev$video4linux(&(0x7f0000000780), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) syz_socket_connect_nvme_tcp() ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, {0x280, 0x86, 0xd1, 0x1}}) 3.866947732s ago: executing program 3 (id=4): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a00)='1', 0x1}], 0x1}}], 0x1, 0x4084) 3.750664514s ago: executing program 1 (id=12): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/305], 0x184}, 0x1, 0x0, 0x0, 0x44}, 0x4810) r4 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r4, 0x107, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0xc8101, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r5, 0xffffffffffffffff}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffc) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r8, 0x80e85411, &(0x7f0000000340)) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) close_range(r2, r6, 0x0) 3.364486654s ago: executing program 3 (id=13): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) epoll_create1(0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe80000000000000000000"], 0x0) mknod$loop(0x0, 0x6000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r6, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x8, 0x20, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 3.203653099s ago: executing program 4 (id=14): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) epoll_create1(0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe80000000000000000000"], 0x0) mknod$loop(0x0, 0x6000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r5, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x8, 0x20, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) getsockname(r5, 0x0, &(0x7f0000000180)) 1.578592736s ago: executing program 0 (id=15): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.248595036s ago: executing program 3 (id=16): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="1b", 0x40000}], 0x1}}], 0x1, 0x0) 0s ago: executing program 4 (id=17): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 90.723199][ T5784] cgroup: Unknown subsys name 'net' [ 90.964283][ T5784] cgroup: Unknown subsys name 'cpuset' [ 91.019060][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.023509][ T31] cfg80211: failed to load regulatory.db [ 93.132317][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.667084][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.670484][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.684238][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.684704][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.686089][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.687266][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.694534][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.697942][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.702277][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.710749][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.719287][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.727331][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.742296][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.746962][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.748162][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.749133][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.752827][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.758524][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.776537][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.796564][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.834690][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.860039][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.871232][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.929091][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.930138][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.884816][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 97.010325][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 97.034574][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 97.399622][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 97.405659][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 97.821160][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.822080][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.822836][ T5796] bridge_slave_0: entered allmulticast mode [ 97.825167][ T5796] bridge_slave_0: entered promiscuous mode [ 97.859972][ T5116] Bluetooth: hci1: command tx timeout [ 97.868409][ T5116] Bluetooth: hci2: command tx timeout [ 97.868426][ T61] Bluetooth: hci3: command tx timeout [ 97.938468][ T5116] Bluetooth: hci4: command tx timeout [ 97.938474][ T61] Bluetooth: hci0: command tx timeout [ 98.066562][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.066706][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.066877][ T5796] bridge_slave_1: entered allmulticast mode [ 98.080543][ T5796] bridge_slave_1: entered promiscuous mode [ 98.369471][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.369628][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.369769][ T5795] bridge_slave_0: entered allmulticast mode [ 98.371697][ T5795] bridge_slave_0: entered promiscuous mode [ 98.374356][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.374568][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.374754][ T5797] bridge_slave_0: entered allmulticast mode [ 98.376795][ T5797] bridge_slave_0: entered promiscuous mode [ 98.519312][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.519450][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.519626][ T5795] bridge_slave_1: entered allmulticast mode [ 98.521765][ T5795] bridge_slave_1: entered promiscuous mode [ 98.523178][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.523294][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.523418][ T5797] bridge_slave_1: entered allmulticast mode [ 98.525250][ T5797] bridge_slave_1: entered promiscuous mode [ 98.723472][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.052736][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.299649][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.299853][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.300047][ T5799] bridge_slave_0: entered allmulticast mode [ 99.302212][ T5799] bridge_slave_0: entered promiscuous mode [ 99.303913][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.304041][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.304214][ T5798] bridge_slave_0: entered allmulticast mode [ 99.306400][ T5798] bridge_slave_0: entered promiscuous mode [ 99.424817][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.433168][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.435067][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.435372][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.435884][ T5799] bridge_slave_1: entered allmulticast mode [ 99.448542][ T5799] bridge_slave_1: entered promiscuous mode [ 99.454184][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.454596][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.455079][ T5798] bridge_slave_1: entered allmulticast mode [ 99.465728][ T5798] bridge_slave_1: entered promiscuous mode [ 99.582602][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.585125][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.741639][ T5796] team0: Port device team_slave_0 added [ 99.938513][ T61] Bluetooth: hci3: command tx timeout [ 99.938550][ T61] Bluetooth: hci2: command tx timeout [ 99.938569][ T61] Bluetooth: hci1: command tx timeout [ 99.981597][ T5796] team0: Port device team_slave_1 added [ 100.019846][ T5116] Bluetooth: hci4: command tx timeout [ 100.019860][ T61] Bluetooth: hci0: command tx timeout [ 100.202945][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.282765][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.285123][ T5795] team0: Port device team_slave_0 added [ 100.431521][ T5797] team0: Port device team_slave_0 added [ 100.434473][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.512524][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.514642][ T5795] team0: Port device team_slave_1 added [ 100.517565][ T5797] team0: Port device team_slave_1 added [ 100.640538][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.640552][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.640571][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.940057][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.940077][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.940173][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.181703][ T5799] team0: Port device team_slave_0 added [ 101.199049][ T5798] team0: Port device team_slave_0 added [ 101.200115][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.200130][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.200166][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.201501][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.201515][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.201551][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.204222][ T5799] team0: Port device team_slave_1 added [ 101.320601][ T5798] team0: Port device team_slave_1 added [ 101.321676][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.321693][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.321723][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.323442][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.323458][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.323487][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.929893][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.929912][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.929941][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.020996][ T5116] Bluetooth: hci1: command tx timeout [ 102.021037][ T5116] Bluetooth: hci2: command tx timeout [ 102.021072][ T5116] Bluetooth: hci3: command tx timeout [ 102.070204][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.070232][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.070260][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.075754][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.075768][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.075787][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.098330][ T61] Bluetooth: hci0: command tx timeout [ 102.100767][ T61] Bluetooth: hci4: command tx timeout [ 102.118962][ T5796] hsr_slave_0: entered promiscuous mode [ 102.123745][ T5796] hsr_slave_1: entered promiscuous mode [ 102.135081][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.135124][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.135199][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.539565][ T5795] hsr_slave_0: entered promiscuous mode [ 102.540935][ T5795] hsr_slave_1: entered promiscuous mode [ 102.541806][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 102.541898][ T5795] Cannot create hsr debugfs directory [ 102.615310][ T5797] hsr_slave_0: entered promiscuous mode [ 102.616352][ T5797] hsr_slave_1: entered promiscuous mode [ 102.617102][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 102.617120][ T5797] Cannot create hsr debugfs directory [ 103.175475][ T5798] hsr_slave_0: entered promiscuous mode [ 103.176764][ T5798] hsr_slave_1: entered promiscuous mode [ 103.177468][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 103.177486][ T5798] Cannot create hsr debugfs directory [ 103.204114][ T5799] hsr_slave_0: entered promiscuous mode [ 103.205519][ T5799] hsr_slave_1: entered promiscuous mode [ 103.206288][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 103.206313][ T5799] Cannot create hsr debugfs directory [ 104.098591][ T5116] Bluetooth: hci2: command tx timeout [ 104.098598][ T61] Bluetooth: hci3: command tx timeout [ 104.098631][ T5116] Bluetooth: hci1: command tx timeout [ 104.180023][ T5116] Bluetooth: hci4: command tx timeout [ 104.180034][ T5805] Bluetooth: hci0: command tx timeout [ 104.636982][ T5796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.681985][ T5796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.715073][ T5796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.768635][ T5796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.874924][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.917025][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.941904][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.991487][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.139766][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.177072][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.207058][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.261980][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.415214][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.452332][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.493536][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.553838][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.724100][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.775018][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.807738][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.810200][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.855704][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.954886][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.973020][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.006385][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.008079][ T4518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.063879][ T1409] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.064169][ T1409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.103780][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.141178][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.157327][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.157503][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.211561][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.211684][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.286651][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.334897][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.335058][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.357955][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.392127][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.392252][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.504545][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.525016][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.574596][ T1409] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.578489][ T1409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.644066][ T1409] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.644218][ T1409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.722444][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.767823][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.768057][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.847087][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.847239][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.016855][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.195754][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.326456][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.573726][ T5797] veth0_vlan: entered promiscuous mode [ 107.625697][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.653841][ T5797] veth1_vlan: entered promiscuous mode [ 107.718134][ T5795] veth0_vlan: entered promiscuous mode [ 107.782887][ T5795] veth1_vlan: entered promiscuous mode [ 107.877706][ T5797] veth0_macvtap: entered promiscuous mode [ 107.902479][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.903028][ T5798] veth0_vlan: entered promiscuous mode [ 107.906401][ T5797] veth1_macvtap: entered promiscuous mode [ 107.984320][ T5795] veth0_macvtap: entered promiscuous mode [ 107.987245][ T5798] veth1_vlan: entered promiscuous mode [ 108.015766][ T5796] veth0_vlan: entered promiscuous mode [ 108.027385][ T5795] veth1_macvtap: entered promiscuous mode [ 108.051686][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.079068][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.085024][ T5796] veth1_vlan: entered promiscuous mode [ 108.126648][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.147138][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.154201][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.174836][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.193467][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.214166][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.285387][ T5799] veth0_vlan: entered promiscuous mode [ 108.303157][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.305126][ T5798] veth0_macvtap: entered promiscuous mode [ 108.342856][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.361843][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.376720][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.398129][ T5798] veth1_macvtap: entered promiscuous mode [ 108.469471][ T5799] veth1_vlan: entered promiscuous mode [ 108.494736][ T5796] veth0_macvtap: entered promiscuous mode [ 108.615522][ T5796] veth1_macvtap: entered promiscuous mode [ 108.731545][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.746477][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.746500][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.788630][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.825612][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.861224][ T1353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.884361][ T1353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.885142][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.885160][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.914145][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.914762][ T1353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.957611][ T1353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.970200][ T5799] veth0_macvtap: entered promiscuous mode [ 109.030251][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.030303][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.062164][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.094499][ T5799] veth1_macvtap: entered promiscuous mode [ 109.105280][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.121835][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.167239][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.196265][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.196289][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.379030][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.387226][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.517122][ T4518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.538079][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.538103][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.578348][ T4518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.598944][ T4518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.599625][ T4518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.400349][ T37] audit: type=1326 audit(1767447047.228:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2674f749 code=0x7ffc0000 [ 110.442163][ T37] audit: type=1326 audit(1767447047.228:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2674f749 code=0x7ffc0000 [ 110.443302][ T37] audit: type=1326 audit(1767447047.228:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2674f749 code=0x7ffc0000 [ 110.447229][ T37] audit: type=1326 audit(1767447047.228:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d2674f749 code=0x7ffc0000 [ 110.447632][ T37] audit: type=1326 audit(1767447047.248:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2674f749 code=0x7ffc0000 [ 110.448003][ T37] audit: type=1326 audit(1767447047.248:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2674f749 code=0x7ffc0000 [ 110.628335][ T37] audit: type=1326 audit(1767447047.248:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2674f749 code=0x7ffc0000 [ 110.628400][ T37] audit: type=1326 audit(1767447047.248:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d2674df90 code=0x7ffc0000 [ 110.628448][ T37] audit: type=1326 audit(1767447047.268:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7d26750f77 code=0x7ffc0000 [ 110.628494][ T37] audit: type=1326 audit(1767447047.268:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d2674f749 code=0x7ffc0000 [ 110.917254][ T1353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.917276][ T1353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.478228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.478275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.479338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.479386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.479430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.479469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.479980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.480494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.480543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.480581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.733708][ T5924] warning: `syz.0.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.823071][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.823092][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.965361][ T5805] Bluetooth: hci2: unexpected cc 0x202a length: 9 > 2 [ 112.965568][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.965586][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.141904][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.141926][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.375013][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.375036][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.502603][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.673638][ T5943] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.748578][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.793824][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 113.793857][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 113.793879][ T10] usb 1-1: Product: syz [ 113.793894][ T10] usb 1-1: Manufacturer: syz [ 113.793909][ T10] usb 1-1: SerialNumber: syz [ 114.329969][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 114.387146][ T10] usb 1-1: USB disconnect, device number 2 [ 114.404227][ T10] usblp0: removed [ 115.125218][ T41] wlan1: Trigger new scan to find an IBSS to join [ 115.981127][ T37] kauditd_printk_skb: 61 callbacks suppressed [ 115.981149][ T37] audit: type=1326 audit(1767447052.448:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c824ef749 code=0x7ffc0000 [ 115.981204][ T37] audit: type=1326 audit(1767447052.458:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c824ef749 code=0x7ffc0000 [ 115.981251][ T37] audit: type=1326 audit(1767447052.458:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c824ef749 code=0x7ffc0000 [ 115.981296][ T37] audit: type=1326 audit(1767447052.458:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9c824ef749 code=0x7ffc0000 [ 115.981328][ T37] audit: type=1326 audit(1767447052.498:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c824ef749 code=0x7ffc0000 [ 115.981359][ T37] audit: type=1326 audit(1767447052.498:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c824ef749 code=0x7ffc0000 [ 115.981390][ T37] audit: type=1326 audit(1767447052.498:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c824ef749 code=0x7ffc0000 [ 115.981422][ T37] audit: type=1326 audit(1767447052.498:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f9c824ef749 code=0x7ffc0000 [ 115.981453][ T37] audit: type=1326 audit(1767447052.508:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c824ef749 code=0x7ffc0000 [ 115.981483][ T37] audit: type=1326 audit(1767447052.508:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c824ef749 code=0x7ffc0000 [ 117.846481][ T5954] syz.1.12 (5954) used greatest stack depth: 17888 bytes left [ 118.249037][ T5946] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.426349][ T5946] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.486115][ T5946] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 118.486310][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 118.486331][ T5946] usb 1-1: Product: syz [ 118.486346][ T5946] usb 1-1: Manufacturer: syz [ 118.486360][ T5946] usb 1-1: SerialNumber: syz [ 118.880117][ T5946] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 119.111384][ T5803] usb 1-1: USB disconnect, device number 3 [ 119.231275][ T5803] usblp0: removed [ 119.987587][ T5970] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 119.987610][ T5970] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5970, name: syz.3.16 [ 119.987623][ T5970] preempt_count: 2, expected: 0 [ 119.987630][ T5970] RCU nest depth: 1, expected: 1 [ 119.987641][ T5970] 3 locks held by syz.3.16/5970: [ 119.987650][ T5970] #0: ffff888060a38358 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connectible_sendmsg+0x189/0x1040 [ 119.987714][ T5970] #1: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x510 [ 119.987754][ T5970] #2: ffff8880b883fe88 (&s->lock_key#14){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13e0 [ 119.987796][ T5970] Preemption disabled at: [ 119.987800][ T5970] [] get_page_from_freelist+0xa33/0x2960 [ 119.987841][ T5970] CPU: 0 UID: 0 PID: 5970 Comm: syz.3.16 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 119.987862][ T5970] Tainted: [L]=SOFTLOCKUP [ 119.987868][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.987883][ T5970] Call Trace: [ 119.987892][ T5970] [ 119.987898][ T5970] dump_stack_lvl+0xe8/0x150 [ 119.987925][ T5970] __might_resched+0x32a/0x480 [ 119.987942][ T5970] ? get_page_from_freelist+0xa33/0x2960 [ 119.987961][ T5970] rt_spin_lock+0xc7/0x3e0 [ 119.987984][ T5970] ? __pfx_rt_spin_lock+0x10/0x10 [ 119.988004][ T5970] ? __lock_acquire+0x6b6/0x2cf0 [ 119.988027][ T5970] ? __lock_acquire+0x6b6/0x2cf0 [ 119.988051][ T5970] ___slab_alloc+0x12f/0x13e0 [ 119.988070][ T5970] ? unwind_next_frame+0xa5/0x23d0 [ 119.988089][ T5970] ? lock_acquire+0x107/0x340 [ 119.988108][ T5970] ? __bpf_stream_push_str+0xa8/0x2b0 [ 119.988128][ T5970] __slab_alloc+0xc6/0x1f0 [ 119.988143][ T5970] ? __bpf_stream_push_str+0xa8/0x2b0 [ 119.988189][ T5970] kmalloc_nolock_noprof+0x1be/0x440 [ 119.988219][ T5970] ? __bpf_stream_push_str+0xa8/0x2b0 [ 119.988250][ T5970] __bpf_stream_push_str+0xa8/0x2b0 [ 119.988264][ T5970] ? __asan_memcpy+0x40/0x70 [ 119.988286][ T5970] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 119.988309][ T5970] bpf_stream_stage_printk+0x14e/0x1c0 [ 119.988323][ T5970] ? __pfx_find_from_stack_cb+0x10/0x10 [ 119.988342][ T5970] ? arch_bpf_stack_walk+0x112/0x170 [ 119.988369][ T5970] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 119.988396][ T5970] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 119.988413][ T5970] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 119.988427][ T5970] ? irqentry_exit+0x5dd/0x660 [ 119.988442][ T5970] ? trace_irq_disable+0x37/0x100 [ 119.988461][ T5970] ? read_tsc+0x9/0x20 [ 119.988478][ T5970] bpf_check_timed_may_goto+0xaa/0xb0 [ 119.988505][ T5970] arch_bpf_timed_may_goto+0x21/0x40 [ 119.988524][ T5970] bpf_prog_262a74d054ad2993+0x53/0x5f [ 119.988544][ T5970] bpf_trace_run9+0x2de/0x510 [ 119.988563][ T5970] ? bpf_trace_run9+0x1ec/0x510 [ 119.988585][ T5970] ? __pfx_bpf_trace_run9+0x10/0x10 [ 119.988606][ T5970] ? _copy_from_iter+0x215/0x1630 [ 119.988639][ T5970] ? __pfx__copy_from_iter+0x10/0x10 [ 119.988668][ T5970] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 119.988694][ T5970] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 119.988727][ T5970] ? skb_copy_datagram_from_iter_full+0x122/0x170 [ 119.988764][ T5970] virtio_transport_alloc_skb+0x10af/0x1110 [ 119.988798][ T5970] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 119.988821][ T5970] ? __local_bh_enable_ip+0x1af/0x2c0 [ 119.988841][ T5970] ? lockdep_hardirqs_on+0x7b/0x110 [ 119.988860][ T5970] virtio_transport_send_pkt_info+0x694/0x10b0 [ 119.988883][ T5970] ? virtio_transport_send_pkt_info+0x1ea/0x10b0 [ 119.988912][ T5970] ? virtio_transport_seqpacket_enqueue+0xba/0x1f0 [ 119.988933][ T5970] virtio_transport_seqpacket_enqueue+0x166/0x1f0 [ 119.988952][ T5970] ? reacquire_held_locks+0x104/0x190 [ 119.988977][ T5970] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 119.989000][ T5970] ? rt_spin_unlock+0x150/0x200 [ 119.989025][ T5970] ? rt_spin_unlock+0x161/0x200 [ 119.989048][ T5970] vsock_connectible_sendmsg+0xabf/0x1040 [ 119.989086][ T5970] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 119.989113][ T5970] ? __pfx_woken_wake_function+0x10/0x10 [ 119.989141][ T5970] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.989162][ T5970] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 119.989187][ T5970] __sock_sendmsg+0x21c/0x270 [ 119.989214][ T5970] ____sys_sendmsg+0x534/0x810 [ 119.989238][ T5970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.989265][ T5970] ? import_iovec+0x74/0xa0 [ 119.989282][ T5970] ___sys_sendmsg+0x21f/0x2a0 [ 119.989303][ T5970] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.989351][ T5970] ? __fget_files+0x2a/0x420 [ 119.989366][ T5970] ? __fget_files+0x3a6/0x420 [ 119.989411][ T5970] __sys_sendmmsg+0x22d/0x430 [ 119.989436][ T5970] ? __pfx___sys_sendmmsg+0x10/0x10 [ 119.989477][ T5970] ? preempt_schedule_thunk+0x16/0x30 [ 119.989503][ T5970] __x64_sys_sendmmsg+0xa0/0xc0 [ 119.989525][ T5970] do_syscall_64+0xec/0xf80 [ 119.989539][ T5970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.989555][ T5970] ? clear_bhb_loop+0x60/0xb0 [ 119.989574][ T5970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.989593][ T5970] RIP: 0033:0x7f9c824ef749 [ 119.989608][ T5970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.989621][ T5970] RSP: 002b:00007f9c8074e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.989637][ T5970] RAX: ffffffffffffffda RBX: 00007f9c82745fa0 RCX: 00007f9c824ef749 [ 119.989649][ T5970] RDX: 0000000000000001 RSI: 0000200000000b40 RDI: 0000000000000003 [ 119.989659][ T5970] RBP: 00007f9c82573f91 R08: 0000000000000000 R09: 0000000000000000 [ 119.989668][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.989677][ T5970] R13: 00007f9c82746038 R14: 00007f9c82745fa0 R15: 00007fff6fc6d298 [ 119.989702][ T5970] [ 121.253339][ T5970] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 121.253357][ T5970] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5970, name: syz.3.16 [ 121.253370][ T5970] preempt_count: 2, expected: 0 [ 121.253377][ T5970] RCU nest depth: 1, expected: 1 [ 121.253385][ T5970] 3 locks held by syz.3.16/5970: [ 121.253393][ T5970] #0: ffff888060a38358 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connectible_sendmsg+0x189/0x1040 [ 121.253447][ T5970] #1: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x510 [ 121.253491][ T5970] #2: ffff8880b893fe88 (&s->lock_key#14){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13e0 [ 121.253564][ T5970] Preemption disabled at: [ 121.253570][ T5970] [] get_page_from_freelist+0xa33/0x2960 [ 121.253622][ T5970] CPU: 1 UID: 0 PID: 5970 Comm: syz.3.16 Tainted: G W L syzkaller #0 PREEMPT_{RT,(full)} [ 121.253658][ T5970] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 121.253665][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.253674][ T5970] Call Trace: [ 121.253681][ T5970] [ 121.253688][ T5970] dump_stack_lvl+0xe8/0x150 [ 121.253718][ T5970] __might_resched+0x32a/0x480 [ 121.253737][ T5970] ? get_page_from_freelist+0xa33/0x2960 [ 121.253755][ T5970] rt_spin_lock+0xc7/0x3e0 [ 121.253779][ T5970] ? __pfx_rt_spin_lock+0x10/0x10 [ 121.253799][ T5970] ? __lock_acquire+0x6b6/0x2cf0 [ 121.253823][ T5970] ? __lock_acquire+0x6b6/0x2cf0 [ 121.253846][ T5970] ___slab_alloc+0x12f/0x13e0 [ 121.253866][ T5970] ? unwind_next_frame+0xa5/0x23d0 [ 121.253885][ T5970] ? lock_acquire+0x107/0x340 [ 121.253904][ T5970] ? __bpf_stream_push_str+0xa8/0x2b0 [ 121.253923][ T5970] __slab_alloc+0xc6/0x1f0 [ 121.253939][ T5970] ? __bpf_stream_push_str+0xa8/0x2b0 [ 121.253956][ T5970] kmalloc_nolock_noprof+0x1be/0x440 [ 121.253978][ T5970] ? __bpf_stream_push_str+0xa8/0x2b0 [ 121.253996][ T5970] __bpf_stream_push_str+0xa8/0x2b0 [ 121.254010][ T5970] ? __asan_memcpy+0x40/0x70 [ 121.254031][ T5970] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 121.254054][ T5970] bpf_stream_stage_printk+0x14e/0x1c0 [ 121.254068][ T5970] ? __pfx_find_from_stack_cb+0x10/0x10 [ 121.254087][ T5970] ? arch_bpf_stack_walk+0x112/0x170 [ 121.254113][ T5970] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 121.254141][ T5970] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 121.254157][ T5970] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 121.254181][ T5970] ? irqentry_exit+0x5dd/0x660 [ 121.254196][ T5970] ? trace_irq_disable+0x37/0x100 [ 121.254216][ T5970] ? read_tsc+0x9/0x20 [ 121.254234][ T5970] bpf_check_timed_may_goto+0xaa/0xb0 [ 121.254261][ T5970] arch_bpf_timed_may_goto+0x21/0x40 [ 121.254280][ T5970] bpf_prog_262a74d054ad2993+0x53/0x5f [ 121.254296][ T5970] bpf_trace_run9+0x2de/0x510 [ 121.254315][ T5970] ? bpf_trace_run9+0x1ec/0x510 [ 121.254332][ T5970] ? __pfx_bpf_trace_run9+0x10/0x10 [ 121.254348][ T5970] ? _copy_from_iter+0x215/0x1630 [ 121.254379][ T5970] ? __pfx__copy_from_iter+0x10/0x10 [ 121.254407][ T5970] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 121.254434][ T5970] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 121.254473][ T5970] ? skb_copy_datagram_from_iter_full+0x122/0x170 [ 121.254510][ T5970] virtio_transport_alloc_skb+0x10af/0x1110 [ 121.254545][ T5970] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 121.254566][ T5970] ? queue_work_on+0x159/0x1c0 [ 121.254588][ T5970] ? vsock_loopback_send_pkt+0x40/0x120 [ 121.254613][ T5970] virtio_transport_send_pkt_info+0x694/0x10b0 [ 121.254647][ T5970] ? virtio_transport_seqpacket_enqueue+0xba/0x1f0 [ 121.254692][ T5970] virtio_transport_seqpacket_enqueue+0x166/0x1f0 [ 121.254718][ T5970] ? reacquire_held_locks+0x104/0x190 [ 121.254754][ T5970] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 121.254787][ T5970] ? rt_spin_unlock+0x150/0x200 [ 121.254822][ T5970] ? rt_spin_unlock+0x161/0x200 [ 121.254851][ T5970] vsock_connectible_sendmsg+0xabf/0x1040 [ 121.254890][ T5970] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 121.254917][ T5970] ? __pfx_woken_wake_function+0x10/0x10 [ 121.254945][ T5970] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 121.254965][ T5970] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 121.254991][ T5970] __sock_sendmsg+0x21c/0x270 [ 121.255018][ T5970] ____sys_sendmsg+0x534/0x810 [ 121.255043][ T5970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.255070][ T5970] ? import_iovec+0x74/0xa0 [ 121.255088][ T5970] ___sys_sendmsg+0x21f/0x2a0 [ 121.255109][ T5970] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.255157][ T5970] ? __fget_files+0x2a/0x420 [ 121.255173][ T5970] ? __fget_files+0x3a6/0x420 [ 121.255197][ T5970] __sys_sendmmsg+0x22d/0x430 [ 121.255249][ T5970] ? __pfx___sys_sendmmsg+0x10/0x10 [ 121.255306][ T5970] ? preempt_schedule_thunk+0x16/0x30 [ 121.255349][ T5970] __x64_sys_sendmmsg+0xa0/0xc0 [ 121.255372][ T5970] do_syscall_64+0xec/0xf80 [ 121.255387][ T5970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.255403][ T5970] ? clear_bhb_loop+0x60/0xb0 [ 121.255422][ T5970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.255437][ T5970] RIP: 0033:0x7f9c824ef749 [ 121.255452][ T5970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.255471][ T5970] RSP: 002b:00007f9c8074e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 121.255488][ T5970] RAX: ffffffffffffffda RBX: 00007f9c82745fa0 RCX: 00007f9c824ef749 [ 121.255499][ T5970] RDX: 0000000000000001 RSI: 0000200000000b40 RDI: 0000000000000003 [ 121.255509][ T5970] RBP: 00007f9c82573f91 R08: 0000000000000000 R09: 0000000000000000 [ 121.255518][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.255532][ T5970] R13: 00007f9c82746038 R14: 00007f9c82745fa0 R15: 00007fff6fc6d298 [ 121.255557][ T5970] [ 121.418493][ T12] wlan1: Trigger new scan to find an IBSS to join [ 122.711797][ T1409] wlan1: Creating new IBSS network, BSSID be:3f:32:c4:d4:ab