last executing test programs: 5.157666121s ago: executing program 3 (id=21): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007ed, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 5.113923792s ago: executing program 3 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='/proc/self\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000740)={0x9, 0x87d, &(0x7f00000005c0)="afac0c6784a2bbe878b97862e2539299c9ccffecf7f32c4edde57eef041fa990eeb6aa30f01c2cd5af32073f42c6b1cf3a438a5abd0d129b87638950b00a3e7620744c40f9c0329c1abf14c1e4d0472495b6979785ac5e3b474937f67d8cf6b5923384efc46e41e63cf1f36263f87631bfb1ecbd04140d6a36eb1653359ac00f55065897ddbb0d9f73b729b45fcaec2ed081aabe2edb44c8fd3f3022542a38219ad00e4644bae1e700c9293d937179171684f05d048c0915ed", 0x0, 0xb9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x101280, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a0000000109021200010000"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x1, 0xeeee8000, 0xc, 0x2, 0x4, 0xa, 0x0, 0xa, 0x0, 0x1, 0xc, 0x3}, {0x4000, 0x10000, 0xe, 0x13, 0x1, 0x8, 0x3, 0xa, 0xfe, 0x6, 0x2}, {0x5000, 0x54000, 0x4, 0xf, 0x5, 0x3, 0x26, 0x6, 0x3, 0x6, 0x5}, {0x3000, 0x0, 0x3, 0x4, 0x7f, 0x6, 0x2, 0x7f, 0x9, 0x22, 0x1, 0x6}, {0x26000, 0x30000, 0x0, 0xd, 0x5b, 0x2d, 0x5, 0xc, 0xfe, 0x0, 0xf8, 0xc}, {0x70000, 0x12000, 0x19, 0xbd, 0x6, 0x10, 0x11, 0x1, 0xbf, 0x18, 0x9, 0xf}, {0xa000, 0x8000000, 0xc, 0x1, 0x0, 0xf, 0x10, 0x3, 0x0, 0x0, 0x3, 0x8}, {0xdddd0000, 0x60000, 0xa, 0x4, 0x7, 0x6, 0x4, 0xf9, 0x1, 0x8, 0x89, 0xfa}, {0x50000, 0xedd8}, {0xffff1000, 0x17}, 0x5, 0x0, 0x1000, 0x0, 0x8000000100400002, 0x18000, 0xdddd1000, [0x8, 0x5, 0x400000000800000d, 0x7]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.996337598s ago: executing program 2 (id=39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) 2.911383917s ago: executing program 2 (id=42): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) 2.137924109s ago: executing program 0 (id=48): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000040)="0400", 0x2, 0x0, 0x0, 0x0) 2.086910775s ago: executing program 2 (id=50): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) 1.918151297s ago: executing program 0 (id=51): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007ed, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.819256245s ago: executing program 2 (id=52): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.664198324s ago: executing program 3 (id=54): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) fsopen(0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.450063403s ago: executing program 1 (id=56): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) 1.371672869s ago: executing program 1 (id=57): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xd000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0xffff1000, 0xf000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x107000}) 1.288325686s ago: executing program 0 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 1.118107745s ago: executing program 3 (id=59): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) 1.097017189s ago: executing program 0 (id=60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) 966.411446ms ago: executing program 0 (id=61): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000040)="0400", 0x2, 0x0, 0x0, 0x0) 785.580303ms ago: executing program 2 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 784.78237ms ago: executing program 0 (id=63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='/proc/self\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000740)={0x9, 0x87d, &(0x7f00000005c0)="afac0c6784a2bbe878b97862e2539299c9ccffecf7f32c4edde57eef041fa990eeb6aa30f01c2cd5af32073f42c6b1cf3a438a5abd0d129b87638950b00a3e7620744c40f9c0329c1abf14c1e4d0472495b6979785ac5e3b474937f67d8cf6b5923384efc46e41e63cf1f36263f87631bfb1ecbd04140d6a36eb1653359ac00f55065897ddbb0d9f73b729b45fcaec2ed081aabe2edb44c8fd3f3022542a38219ad00e4644bae1e700c9293d937179171684f05d048c0915ed", 0x0, 0xb9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x101280, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a0000000109021200010000"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 738.460062ms ago: executing program 1 (id=64): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40040e0}, 0x20004800) 591.16644ms ago: executing program 1 (id=65): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) 579.084445ms ago: executing program 2 (id=66): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007ed, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 431.162223ms ago: executing program 1 (id=67): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0) 281.903128ms ago: executing program 1 (id=68): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, 0x0) socket(0x2, 0x80805, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "bc86299ab62e97b6", "2125e44cdf02000000000000003297f0", "8fc203e0", "c40330604dc13bd4"}, 0x28) 61.945675ms ago: executing program 3 (id=69): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, 0x0, 0x0) 0s ago: executing program 3 (id=70): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. [ 85.810124][ T5593] cgroup: Unknown subsys name 'net' [ 86.051197][ T5593] cgroup: Unknown subsys name 'cpuset' [ 86.106748][ T5593] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.124972][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.649582][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.667317][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.701547][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.719051][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.719655][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.720540][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.742543][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.752057][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.752904][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.758965][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.774223][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.809747][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.810641][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.833105][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.857154][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.857557][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.859384][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.870333][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.878621][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.891544][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.745453][ T822] cfg80211: failed to load regulatory.db [ 92.977887][ T61] Bluetooth: hci2: command tx timeout [ 92.977976][ T5623] Bluetooth: hci1: command tx timeout [ 92.978012][ T61] Bluetooth: hci3: command tx timeout [ 92.978102][ T5623] Bluetooth: hci0: command tx timeout [ 93.084739][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.085829][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.091435][ T5608] bridge_slave_0: entered allmulticast mode [ 93.101263][ T5608] bridge_slave_0: entered promiscuous mode [ 93.150671][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.151031][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.151300][ T5606] bridge_slave_0: entered allmulticast mode [ 93.154229][ T5606] bridge_slave_0: entered promiscuous mode [ 93.188378][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.190544][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.190815][ T5608] bridge_slave_1: entered allmulticast mode [ 93.193408][ T5608] bridge_slave_1: entered promiscuous mode [ 93.232712][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.233043][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.251035][ T5609] bridge_slave_0: entered allmulticast mode [ 93.253332][ T5609] bridge_slave_0: entered promiscuous mode [ 93.255504][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.255817][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.256086][ T5606] bridge_slave_1: entered allmulticast mode [ 93.266549][ T5606] bridge_slave_1: entered promiscuous mode [ 93.310050][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.310300][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.310494][ T5607] bridge_slave_0: entered allmulticast mode [ 93.312925][ T5607] bridge_slave_0: entered promiscuous mode [ 93.356569][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.356777][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.356958][ T5609] bridge_slave_1: entered allmulticast mode [ 93.359299][ T5609] bridge_slave_1: entered promiscuous mode [ 93.397967][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.398272][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.398790][ T5607] bridge_slave_1: entered allmulticast mode [ 93.401102][ T5607] bridge_slave_1: entered promiscuous mode [ 93.463122][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.493054][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.520458][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.548220][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.552947][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.588567][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.618897][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.648492][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.691373][ T5608] team0: Port device team_slave_0 added [ 93.718287][ T5606] team0: Port device team_slave_0 added [ 93.743081][ T5608] team0: Port device team_slave_1 added [ 93.770314][ T5606] team0: Port device team_slave_1 added [ 93.773678][ T5609] team0: Port device team_slave_0 added [ 93.802807][ T5607] team0: Port device team_slave_0 added [ 93.825753][ T5609] team0: Port device team_slave_1 added [ 93.851227][ T5607] team0: Port device team_slave_1 added [ 93.901376][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.901406][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.901425][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.953976][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.953989][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.954009][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.005237][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.005248][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.005266][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.057556][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.057577][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.057606][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.060783][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.060794][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.060814][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.114233][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.114279][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.114334][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.189670][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.189721][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.189803][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.243573][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.243585][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.243605][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.406543][ T5608] hsr_slave_0: entered promiscuous mode [ 94.408149][ T5608] hsr_slave_1: entered promiscuous mode [ 94.445825][ T5606] hsr_slave_0: entered promiscuous mode [ 94.452185][ T5606] hsr_slave_1: entered promiscuous mode [ 94.453628][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 94.453710][ T5606] Cannot create hsr debugfs directory [ 94.514494][ T5609] hsr_slave_0: entered promiscuous mode [ 94.516010][ T5609] hsr_slave_1: entered promiscuous mode [ 94.522255][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 94.522316][ T5609] Cannot create hsr debugfs directory [ 94.844974][ T5607] hsr_slave_0: entered promiscuous mode [ 94.854933][ T5607] hsr_slave_1: entered promiscuous mode [ 94.857794][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 94.857891][ T5607] Cannot create hsr debugfs directory [ 95.056577][ T5623] Bluetooth: hci3: command tx timeout [ 95.056594][ T5616] Bluetooth: hci1: command tx timeout [ 95.056607][ T5623] Bluetooth: hci2: command tx timeout [ 95.056616][ T5616] Bluetooth: hci0: command tx timeout [ 95.670449][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.720822][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.735294][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.773985][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.790303][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.821675][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.850297][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.891855][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.008420][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.053593][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.061795][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.090460][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.094313][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.131693][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.163984][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.190990][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.351120][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.382676][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.389074][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.432472][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.445355][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.473595][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.504409][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.531543][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.675780][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.714405][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.724502][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.752240][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.770210][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.804831][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.824747][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.853021][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.909051][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.015610][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.084096][ T1533] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.084567][ T1533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.136906][ T5616] Bluetooth: hci3: command tx timeout [ 97.136943][ T5616] Bluetooth: hci0: command tx timeout [ 97.136959][ T5616] Bluetooth: hci1: command tx timeout [ 97.137573][ T61] Bluetooth: hci2: command tx timeout [ 97.144946][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.145109][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.202671][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.309774][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.360817][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.360987][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.385389][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.420236][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.420798][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.534204][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.600764][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.633367][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.633992][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.701690][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.701835][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.844200][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.921397][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.921554][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.988221][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.988431][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.795053][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.108997][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.152442][ T5608] veth0_vlan: entered promiscuous mode [ 99.219591][ T61] Bluetooth: hci2: command tx timeout [ 99.219624][ T61] Bluetooth: hci1: command tx timeout [ 99.219647][ T61] Bluetooth: hci0: command tx timeout [ 99.219670][ T61] Bluetooth: hci3: command tx timeout [ 99.261427][ T5608] veth1_vlan: entered promiscuous mode [ 99.553209][ T5609] veth0_vlan: entered promiscuous mode [ 99.556685][ T5608] veth0_macvtap: entered promiscuous mode [ 99.581617][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.613247][ T5608] veth1_macvtap: entered promiscuous mode [ 99.654004][ T5609] veth1_vlan: entered promiscuous mode [ 99.671953][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.739609][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.770186][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.830795][ T157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.855391][ T157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.884895][ T157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.903282][ T157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.905980][ T5606] veth0_vlan: entered promiscuous mode [ 99.925419][ T5609] veth0_macvtap: entered promiscuous mode [ 100.017046][ T5609] veth1_macvtap: entered promiscuous mode [ 100.140554][ T5606] veth1_vlan: entered promiscuous mode [ 100.169167][ T5607] veth0_vlan: entered promiscuous mode [ 100.399286][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.402481][ T5607] veth1_vlan: entered promiscuous mode [ 100.463659][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.496056][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.496082][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.536618][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.559479][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.581738][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.604833][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.631854][ T5606] veth0_macvtap: entered promiscuous mode [ 100.721376][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.721397][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.722218][ T5606] veth1_macvtap: entered promiscuous mode [ 101.000450][ T5607] veth0_macvtap: entered promiscuous mode [ 101.173817][ T5607] veth1_macvtap: entered promiscuous mode [ 101.205221][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.274326][ T122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.274346][ T122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.299927][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.354646][ T157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.374349][ T157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.413875][ T157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.439222][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.470295][ T157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.594697][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.711845][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.711869][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.804556][ T157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.820767][ T157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.821789][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.822055][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.997267][ T122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.997287][ T122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.017553][ T5705] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 103.067314][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 103.264918][ T5705] usb 4-1: device descriptor read/64, error -32 [ 103.399719][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.399739][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.662366][ T5705] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 103.811975][ T3222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.811995][ T3222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.816607][ T5705] usb 4-1: device descriptor read/64, error -71 [ 103.911821][ T5770] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.936391][ T5705] usb usb4-port1: attempt power cycle [ 104.274162][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.274177][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.334655][ T5595] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.368501][ T5705] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 104.392959][ T5705] usb 4-1: device descriptor read/8, error -71 [ 104.627738][ T5705] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 104.634122][ T5595] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.634148][ T5595] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.634185][ T5595] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 104.634206][ T5595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.693909][ T5705] usb 4-1: device descriptor read/8, error -71 [ 104.802309][ T5705] usb usb4-port1: unable to enumerate USB device [ 104.859594][ T5595] usb 2-1: config 0 descriptor?? [ 107.210203][ T5705] usb 2-1: USB disconnect, device number 2 [ 108.133471][ T39] audit: type=1326 audit(1782138127.425:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.1.14" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61fd3cce59 code=0x0 [ 109.301943][ T32] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.462238][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.462261][ T32] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.462293][ T32] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 109.462315][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.529719][ T32] usb 4-1: config 0 descriptor?? [ 110.251003][ T5830] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.372171][ T5856] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET) [ 111.978378][ T5619] usb 4-1: USB disconnect, device number 6 [ 113.568248][ T5705] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.729682][ T5705] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.729710][ T5705] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 113.729750][ T5705] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 113.729776][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.822911][ T5705] usb 1-1: config 0 descriptor?? [ 114.021757][ T0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 114.021779][ T0] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 114.021806][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.021825][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.021835][ T0] RIP: 0010:__schedule+0x4030/0x5550 [ 114.021859][ T0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 114.021873][ T0] RSP: 0018:ffffffff8e007be0 EFLAGS: 00010003 [ 114.021888][ T0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 114.021899][ T0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 114.021910][ T0] RBP: ffffffff8e007dd0 R08: 0000000000000003 R09: 0000000000000004 [ 114.021920][ T0] R10: dffffc0000000000 R11: fffffbfff1c00f2c R12: ffff8880b863c658 [ 114.021933][ T0] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 114.021945][ T0] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 114.021958][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.021969][ T0] CR2: 00007fafbf4e7263 CR3: 0000000041a00000 CR4: 00000000003526f0 [ 114.021984][ T0] Call Trace: [ 114.021993][ T0] [ 114.022009][ T0] ? irqentry_exit+0x1c1/0x8c0 [ 114.022032][ T0] ? __pfx___schedule+0x10/0x10 [ 114.022049][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 114.022072][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 114.022097][ T0] schedule_idle+0x51/0x90 [ 114.022115][ T0] do_idle+0x4a6/0x540 [ 114.022139][ T0] ? __pfx_do_idle+0x10/0x10 [ 114.022165][ T0] cpu_startup_entry+0x43/0x60 [ 114.022200][ T0] rest_init+0x2de/0x300 [ 114.022223][ T0] start_kernel+0x392/0x3e0 [ 114.022247][ T0] x86_64_start_reservations+0x24/0x30 [ 114.022269][ T0] x86_64_start_kernel+0x143/0x1c0 [ 114.022285][ T0] common_startup_64+0x13e/0x157 [ 114.022316][ T0] [ 114.022321][ T0] Modules linked in: [ 114.022335][ T0] ---[ end trace 0000000000000000 ]--- [ 114.022349][ T0] RIP: 0010:__schedule+0x4030/0x5550 [ 114.022366][ T0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 114.022379][ T0] RSP: 0018:ffffffff8e007be0 EFLAGS: 00010003 [ 114.022391][ T0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 114.022401][ T0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 114.022411][ T0] RBP: ffffffff8e007dd0 R08: 0000000000000003 R09: 0000000000000004 [ 114.022420][ T0] R10: dffffc0000000000 R11: fffffbfff1c00f2c R12: ffff8880b863c658 [ 114.022432][ T0] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 114.022443][ T0] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 114.022455][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.022465][ T0] CR2: 00007fafbf4e7263 CR3: 0000000041a00000 CR4: 00000000003526f0 [ 114.022480][ T0] Kernel panic - not syncing: Fatal exception [ 115.168570][ T0] Shutting down cpus with NMI [ 115.169222][ T0] Kernel Offset: disabled