last executing test programs: 3.40121215s ago: executing program 0 (id=1): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x8c, 0x38, 0xc7, 0x20, 0xa5c, 0xd458, 0x8fda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9, 0x40, 0x1, "", [{{0x9, 0x4, 0xcc, 0x2, 0x0, 0xff, 0x1, 0x1, 0x2}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x30, &(0x7f00000005c0)={0x5, 0xf, 0x30, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x86, 0x0, 0x140}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8a, 0x0, 0x8f, 0x9, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "7416fc1449db1cf6614fd9eb22cc5e01"}]}}) 2.803837383s ago: executing program 2 (id=3): socket$netlink(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x1) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000280)={&(0x7f0000305000/0x3000)=nil, 0x3000}) 1.781750844s ago: executing program 2 (id=5): socket$inet6(0xa, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)={{0xcc, 0x3, 0x6, 0x33, 0x2c1, 0x7fff, 0x38a, 0x7fffffff}}, 0x20) 1.029826157s ago: executing program 0 (id=6): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000000c0)=@IORING_OP_NOP128={0x3f, 0x1c, 0x0, 0xffffffffffffffff, 0xfffff7ffffffffff, 0x81, 0xfff, 0x3a, 0x1, {0x8}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 912.522263ms ago: executing program 2 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000480)={0x6, 0x0, @ioapic={0xeeef0000, 0xcb, 0x4, 0x400, 0x0, [{0xfa, 0xad, 0x6, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0x9e}, {0x1, 0x1, 0x3}, {0x8, 0x3, 0x3, '\x00', 0x2}, {0xfd, 0xa, 0x8, '\x00', 0x1}, {0x59, 0x7, 0xf, '\x00', 0x6}, {0xc, 0x8, 0x0, '\x00', 0x1}, {0x3, 0xa5, 0x8, '\x00', 0xd}, {0x4, 0xf, 0x5, '\x00', 0x3}, {0x3, 0x1, 0x3}, {0x7, 0x71, 0x4, '\x00', 0x8}, {0x9, 0x3, 0xb, '\x00', 0x16}, {0x4, 0x9, 0x7f}, {0x8, 0xd, 0xa, '\x00', 0x1}, {0x4b, 0x8, 0x1, '\x00', 0xf8}, {0x0, 0x13, 0x0, '\x00', 0x1}, {0x3, 0xb8, 0xff, '\x00', 0x7e}, {0x3, 0x8, 0x73, '\x00', 0xff}, {0x4, 0xe8, 0x3, '\x00', 0x80}, {0x3, 0x8a, 0xd3, '\x00', 0x4}, {0xfc, 0x6d, 0xf9, '\x00', 0x8}, {0xff, 0x2, 0x1, '\x00', 0x26}, {0xc, 0xce, 0x0, '\x00', 0x2}, {0x5, 0x8, 0x8}]}}) 797.478182ms ago: executing program 3 (id=4): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x1dcc}, 0x8) 649.606417ms ago: executing program 0 (id=8): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c022000060603090507"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) 407.770935ms ago: executing program 1 (id=2): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000001600)={0x1, @output={0x1000, 0x0, {0x7}, 0x0, 0xffff}}) 286.672791ms ago: executing program 3 (id=9): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_buf(r1, 0x118, 0x2, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 64.543473ms ago: executing program 2 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c"], 0xfc}}, 0x4) 0s ago: executing program 1 (id=11): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x28000600) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x11, 0x0, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. [ 91.344689][ T5597] cgroup: Unknown subsys name 'net' [ 91.586108][ T5597] cgroup: Unknown subsys name 'cpuset' [ 91.640950][ T5597] cgroup: Unknown subsys name 'rlimit' [ 91.933044][ T9] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 93.761689][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.512987][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.561415][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.567063][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.568559][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.570115][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.575727][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.610275][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.612765][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.614943][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.617328][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.634011][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.666993][ T4926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.670085][ T4926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.672310][ T4926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.673073][ T4926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.800023][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.820722][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.822173][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.827798][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.835374][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.772462][ T5619] Bluetooth: hci0: command tx timeout [ 98.772659][ T5624] Bluetooth: hci2: command tx timeout [ 98.850552][ T5624] Bluetooth: hci1: command tx timeout [ 98.930420][ T5624] Bluetooth: hci3: command tx timeout [ 99.163091][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.164116][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.164547][ T5617] bridge_slave_0: entered allmulticast mode [ 99.167158][ T5617] bridge_slave_0: entered promiscuous mode [ 99.226926][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.227156][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.227345][ T5615] bridge_slave_0: entered allmulticast mode [ 99.229746][ T5615] bridge_slave_0: entered promiscuous mode [ 99.261529][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.261792][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.262013][ T5617] bridge_slave_1: entered allmulticast mode [ 99.264427][ T5617] bridge_slave_1: entered promiscuous mode [ 99.265891][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.266121][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.266311][ T5616] bridge_slave_0: entered allmulticast mode [ 99.268754][ T5616] bridge_slave_0: entered promiscuous mode [ 99.337124][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.337454][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.337731][ T5615] bridge_slave_1: entered allmulticast mode [ 99.340183][ T5615] bridge_slave_1: entered promiscuous mode [ 99.383883][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.384116][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.384310][ T5616] bridge_slave_1: entered allmulticast mode [ 99.386794][ T5616] bridge_slave_1: entered promiscuous mode [ 99.388026][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.388260][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.388452][ T5618] bridge_slave_0: entered allmulticast mode [ 99.405289][ T5618] bridge_slave_0: entered promiscuous mode [ 99.493422][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.493657][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.493857][ T5618] bridge_slave_1: entered allmulticast mode [ 99.497845][ T5618] bridge_slave_1: entered promiscuous mode [ 99.545304][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.624553][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.629407][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.649089][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.685423][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.718149][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.738249][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.803758][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.833915][ T5617] team0: Port device team_slave_0 added [ 99.880052][ T5615] team0: Port device team_slave_0 added [ 99.889298][ T5617] team0: Port device team_slave_1 added [ 99.897769][ T5616] team0: Port device team_slave_0 added [ 99.932191][ T5615] team0: Port device team_slave_1 added [ 99.958770][ T5616] team0: Port device team_slave_1 added [ 99.969077][ T5618] team0: Port device team_slave_0 added [ 100.044453][ T5618] team0: Port device team_slave_1 added [ 100.069301][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.069315][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.069335][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.150888][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.150908][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.150975][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.153275][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.153287][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.153307][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.155354][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.155365][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.155385][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.239610][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.239653][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.239743][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.330023][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.330068][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.330165][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.351417][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.351492][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.351574][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.436465][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.436478][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.436498][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.598910][ T5617] hsr_slave_0: entered promiscuous mode [ 100.603018][ T5617] hsr_slave_1: entered promiscuous mode [ 100.653245][ T5615] hsr_slave_0: entered promiscuous mode [ 100.654793][ T5615] hsr_slave_1: entered promiscuous mode [ 100.656240][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 100.656327][ T5615] Cannot create hsr debugfs directory [ 100.850637][ T5619] Bluetooth: hci0: command tx timeout [ 100.850719][ T5624] Bluetooth: hci2: command tx timeout [ 100.901269][ T5616] hsr_slave_0: entered promiscuous mode [ 100.902913][ T5616] hsr_slave_1: entered promiscuous mode [ 100.904163][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 100.904189][ T5616] Cannot create hsr debugfs directory [ 100.932116][ T5624] Bluetooth: hci1: command tx timeout [ 100.958148][ T5618] hsr_slave_0: entered promiscuous mode [ 100.959964][ T5618] hsr_slave_1: entered promiscuous mode [ 100.965883][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 100.965969][ T5618] Cannot create hsr debugfs directory [ 101.010485][ T5624] Bluetooth: hci3: command tx timeout [ 101.852822][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.898876][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.911291][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.958637][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.977066][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.018256][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.051859][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.095711][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.241004][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.278131][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.289739][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.324436][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.367215][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.388351][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.413022][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.446306][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.583981][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.618626][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.637182][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.676263][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.703550][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.749640][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.789913][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.826392][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.931706][ T5624] Bluetooth: hci0: command tx timeout [ 102.931738][ T5624] Bluetooth: hci2: command tx timeout [ 103.004019][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.011942][ T5619] Bluetooth: hci1: command tx timeout [ 103.046779][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.059527][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.090670][ T5619] Bluetooth: hci3: command tx timeout [ 103.111927][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.128348][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.156405][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.177365][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.216630][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.365736][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.475696][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.485811][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.541465][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.541723][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.608377][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.608536][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.654397][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.709234][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.727660][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.727845][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.794343][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.794479][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.909107][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.948706][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.969893][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.970064][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.029882][ T1436] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.030061][ T1436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.154309][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.234123][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.234302][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.355970][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.360035][ T3311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.010428][ T5619] Bluetooth: hci2: command tx timeout [ 105.010460][ T5619] Bluetooth: hci0: command tx timeout [ 105.095454][ T5624] Bluetooth: hci1: command tx timeout [ 105.171569][ T5624] Bluetooth: hci3: command tx timeout [ 105.367355][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.545749][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.846184][ T5617] veth0_vlan: entered promiscuous mode [ 105.944019][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.948731][ T5617] veth1_vlan: entered promiscuous mode [ 105.987412][ T5615] veth0_vlan: entered promiscuous mode [ 106.073145][ T5615] veth1_vlan: entered promiscuous mode [ 106.140007][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.218080][ T5617] veth0_macvtap: entered promiscuous mode [ 106.263277][ T5617] veth1_macvtap: entered promiscuous mode [ 106.299908][ T5616] veth0_vlan: entered promiscuous mode [ 106.321127][ T5615] veth0_macvtap: entered promiscuous mode [ 106.361931][ T5615] veth1_macvtap: entered promiscuous mode [ 106.395127][ T5616] veth1_vlan: entered promiscuous mode [ 106.426187][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.489656][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.516120][ T5618] veth0_vlan: entered promiscuous mode [ 106.525516][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.559262][ T1440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.579445][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.598022][ T1440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.618391][ T1440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.635671][ T1440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.652964][ T5618] veth1_vlan: entered promiscuous mode [ 106.667799][ T1440] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.723538][ T1440] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.756579][ T1440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.783877][ T1440] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.825979][ T5616] veth0_macvtap: entered promiscuous mode [ 106.977364][ T5616] veth1_macvtap: entered promiscuous mode [ 107.364083][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.364105][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.418599][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.459437][ T5618] veth0_macvtap: entered promiscuous mode [ 107.492666][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.523180][ T5618] veth1_macvtap: entered promiscuous mode [ 107.529617][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.529634][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.602796][ T165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.610108][ T165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.648392][ T165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.667033][ T165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.686707][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.686724][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.838879][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.862973][ T3311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.862994][ T3311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.955576][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.243165][ T1436] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.318002][ T1436] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.341216][ T1436] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.387577][ T1436] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.949721][ T5727] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.014297][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.014319][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.240468][ T5727] usb 1-1: Using ep0 maxpacket: 32 [ 109.307617][ T5727] usb 1-1: config 5 has an invalid interface number: 204 but max is 0 [ 109.307647][ T5727] usb 1-1: config 5 has no interface number 0 [ 109.307682][ T5727] usb 1-1: config 5 interface 204 has no altsetting 0 [ 109.339860][ T5727] usb 1-1: New USB device found, idVendor=0a5c, idProduct=d458, bcdDevice=8f.da [ 109.339889][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.339911][ T5727] usb 1-1: Product: syz [ 109.339926][ T5727] usb 1-1: Manufacturer: syz [ 109.339941][ T5727] usb 1-1: SerialNumber: syz [ 109.394642][ T1436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.394675][ T1436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.687297][ T1440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.687318][ T1440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.219263][ T5727] usb 1-1: USB disconnect, device number 2 [ 110.602453][ T1436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.602473][ T1436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.603032][ T5777] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.223294][ T823] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 111.292450][ T5785] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 111.457358][ T0] ------------[ cut here ]------------ [ 111.457370][ T0] rq->clock_update_flags < RQCF_ACT_SKIP [ 111.457382][ T0] WARNING: kernel/sched/sched.h:1792 at update_curr_idle+0x1cf/0x260, CPU#1: swapper/1/0 [ 111.457426][ T0] Modules linked in: [ 111.457456][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 111.457476][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.457491][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 111.457519][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 3a 98 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 4c [ 111.457534][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 111.457548][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 111.457559][ T0] RDX: ffff88802db89f00 RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80 [ 111.457572][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 111.457584][ T0] R10: ffff8880b873c910 R11: ffffffff819a0020 R12: dffffc0000000000 [ 111.457597][ T0] R13: ffffffff8dc14a58 R14: ffff88801e295d00 R15: ffff8880b873c620 [ 111.457610][ T0] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 111.457624][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.457636][ T0] CR2: 0000001b33d23ffc CR3: 000000003159e000 CR4: 00000000003526f0 [ 111.457651][ T0] Call Trace: [ 111.457661][ T0] [ 111.457672][ T0] put_prev_task_idle+0xd/0x20 [ 111.457698][ T0] __schedule+0x3da0/0x5550 [ 111.457737][ T0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.457759][ T0] ? __pfx___schedule+0x10/0x10 [ 111.457791][ T0] schedule_idle+0x51/0x90 [ 111.457811][ T0] do_idle+0x4a6/0x540 [ 111.457837][ T0] ? __pfx_do_idle+0x10/0x10 [ 111.457864][ T0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 111.457896][ T0] cpu_startup_entry+0x43/0x60 [ 111.457922][ T0] start_secondary+0x101/0x110 [ 111.457942][ T0] common_startup_64+0x13e/0x157 [ 111.457982][ T0] [ 111.457991][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.458003][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 111.458022][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.458032][ T0] Call Trace: [ 111.458038][ T0] [ 111.458044][ T0] vpanic+0x56c/0xa60 [ 111.458071][ T0] ? __pfx__printk+0x10/0x10 [ 111.458089][ T0] ? __pfx_vpanic+0x10/0x10 [ 111.458113][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 111.458144][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 111.458176][ T0] panic+0xc5/0xd0 [ 111.458206][ T0] ? __pfx_panic+0x10/0x10 [ 111.458238][ T0] ? common_startup_64+0x13e/0x157 [ 111.458269][ T0] __warn+0x315/0x4c0 [ 111.458294][ T0] ? update_curr_idle+0x1cf/0x260 [ 111.458321][ T0] ? update_curr_idle+0x1cf/0x260 [ 111.458348][ T0] __report_bug+0x339/0x540 [ 111.458376][ T0] ? update_curr_idle+0x1cf/0x260 [ 111.458404][ T0] ? __pfx___report_bug+0x10/0x10 [ 111.458434][ T0] ? pick_task_fair+0x21a/0x1410 [ 111.458464][ T0] ? update_curr_idle+0x1cf/0x260 [ 111.458490][ T0] report_bug+0x16a/0x220 [ 111.458513][ T0] ? update_curr_idle+0x1cf/0x260 [ 111.458537][ T0] ? update_curr_idle+0x1d1/0x260 [ 111.458563][ T0] handle_bug+0x9c/0x200 [ 111.458589][ T0] exc_invalid_op+0x1a/0x50 [ 111.458614][ T0] asm_exc_invalid_op+0x1a/0x20 [ 111.458631][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 111.458657][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 3a 98 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 4c [ 111.458671][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 111.458685][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 111.458697][ T0] RDX: ffff88802db89f00 RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80 [ 111.458710][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 111.458722][ T0] R10: ffff8880b873c910 R11: ffffffff819a0020 R12: dffffc0000000000 [ 111.458735][ T0] R13: ffffffff8dc14a58 R14: ffff88801e295d00 R15: ffff8880b873c620 [ 111.458751][ T0] ? __pfx_put_prev_task_idle+0x10/0x10 [ 111.458784][ T0] ? update_curr_idle+0xab/0x260 [ 111.458812][ T0] put_prev_task_idle+0xd/0x20 [ 111.458837][ T0] __schedule+0x3da0/0x5550 [ 111.458875][ T0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.458903][ T0] ? __pfx___schedule+0x10/0x10 [ 111.458934][ T0] schedule_idle+0x51/0x90 [ 111.458954][ T0] do_idle+0x4a6/0x540 [ 111.458981][ T0] ? __pfx_do_idle+0x10/0x10 [ 111.459008][ T0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 111.459033][ T0] cpu_startup_entry+0x43/0x60 [ 111.459058][ T0] start_secondary+0x101/0x110 [ 111.459078][ T0] common_startup_64+0x13e/0x157 [ 111.459117][ T0] [ 112.565688][ T0] Shutting down cpus with NMI [ 112.566334][ T0] Kernel Offset: disabled