last executing test programs: 4.418353811s ago: executing program 0 (id=1): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x1}, 0x50) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) unshare(0x6020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) fsopen(0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 2.885277959s ago: executing program 0 (id=5): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000007c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.153404697s ago: executing program 3 (id=4): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) mlockall(0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) 1.903803533s ago: executing program 3 (id=6): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 1.825276265s ago: executing program 2 (id=3): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x97}]}, 0x2c}}, 0x0) 1.60826609s ago: executing program 2 (id=7): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) cachestat(r0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x2080, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000440), &(0x7f0000000400)=0xfffffffffffffda9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x4002) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000240)=""/191) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x5, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x4, 0x200}]}}}}}}}, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100400008004d75006f00650000010c9078ac1414aae0000001071f86e0000001640101027f000001ac1414aa00000000e0000001ac1414bb006861b1774d337116ae9c9a8e4e56a64920d2aeaa49a4f4e5e1b2d675d2db3160f511c896b08c66674e6f208992f74eefa862bb05d29c7302c6a49041a258ffc97317ec61bdefbfb4238b9d1ad268975c44c710dcd283a7a710834ff77838227306659845ac73"], 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e3, 0xc) r5 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x2000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='dummy_hcd.0', 0xb) preadv(r5, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) r7 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x10001) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) 1.60808991s ago: executing program 1 (id=2): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1.048011544s ago: executing program 2 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000b, 0x32, r0, 0x91c6e000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000a40)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x0, 0x4, 0x0, 0x4a, 0x9, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c8e, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x2000007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffe, 0x2, 0x1, 0x3, 0x10, 0x4000100000001]}) 773.528771ms ago: executing program 2 (id=9): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x6, @private=0xa010100, 0x2}]}}}}}}}}, 0x0) 595.911305ms ago: executing program 1 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000030a010800000000000000000a00000708000540000000000900010073797a31000000000900030073797a30000000001c0008"], 0x78}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 382.588991ms ago: executing program 1 (id=11): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d00000004010500"], 0x254}}, 0x0) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000000000007d6c73db27a08975c65cdf3b611077c197f8a9a0a0bf93f74bd696070e4265c41f5fe3a512339be8457660b7e91def081da0ce64817224a9c12d93daedfc46c0a8a2334f180bec5485f103e5e3af1711aa29b5266c5f916d60513a91f62eebea94ee29c2719684a0a9ffc4bd3bd26d5b5b318ac46b15712f64bc2f3dd54cd4bd1d1f0121cb80177e9c8010530af01aa52cd509acdca5ab57dd8038ef16238788ff"], 0x34}}, 0x0) 103.894217ms ago: executing program 3 (id=12): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280), 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) sendmsg$NFT_BATCH(r2, 0x0, 0x4048010) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x65) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) 0s ago: executing program 2 (id=13): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x1}, 0x50) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) unshare(0x6020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) fsopen(0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 84.384787][ T5763] cgroup: Unknown subsys name 'net' [ 84.521696][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.212629][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.092677][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.101308][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.109206][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.123928][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.174610][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.182490][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.191324][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.199541][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.208270][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.216198][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.217921][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.226529][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.238999][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.247891][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.250994][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.259384][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.266028][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.273622][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.284598][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.292792][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.301376][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.309951][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.320472][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.335403][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.761598][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 88.951335][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.958694][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.966728][ T5787] bridge_slave_0: entered allmulticast mode [ 88.974306][ T5787] bridge_slave_0: entered promiscuous mode [ 88.988073][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.995745][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.003289][ T5787] bridge_slave_1: entered allmulticast mode [ 89.010795][ T5787] bridge_slave_1: entered promiscuous mode [ 89.018710][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 89.042778][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 89.109171][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.168721][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.226026][ T5787] team0: Port device team_slave_0 added [ 89.232316][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 89.260290][ T5787] team0: Port device team_slave_1 added [ 89.347500][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.355325][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.362762][ T5776] bridge_slave_0: entered allmulticast mode [ 89.370782][ T5776] bridge_slave_0: entered promiscuous mode [ 89.379082][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.386374][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.394004][ T5776] bridge_slave_1: entered allmulticast mode [ 89.401031][ T5776] bridge_slave_1: entered promiscuous mode [ 89.420424][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.427676][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.435936][ T5774] bridge_slave_0: entered allmulticast mode [ 89.443497][ T5774] bridge_slave_0: entered promiscuous mode [ 89.452492][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.459716][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.486043][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.515134][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.522376][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.530042][ T5774] bridge_slave_1: entered allmulticast mode [ 89.537768][ T5774] bridge_slave_1: entered promiscuous mode [ 89.555412][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.562416][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.591677][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.664492][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.678000][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.690067][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.703273][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.722511][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.729926][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.740435][ T5775] bridge_slave_0: entered allmulticast mode [ 89.747689][ T5775] bridge_slave_0: entered promiscuous mode [ 89.809750][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.817091][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.827738][ T5775] bridge_slave_1: entered allmulticast mode [ 89.835043][ T5775] bridge_slave_1: entered promiscuous mode [ 89.853576][ T5776] team0: Port device team_slave_0 added [ 89.886521][ T5776] team0: Port device team_slave_1 added [ 89.899485][ T5774] team0: Port device team_slave_0 added [ 89.911694][ T5787] hsr_slave_0: entered promiscuous mode [ 89.918917][ T5787] hsr_slave_1: entered promiscuous mode [ 89.950161][ T5774] team0: Port device team_slave_1 added [ 89.981929][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.007784][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.018126][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.025659][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.051924][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.078050][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.085649][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.112567][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.148223][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.157437][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.184033][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.209667][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.216810][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.245934][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.260158][ T5775] team0: Port device team_slave_0 added [ 90.270163][ T5775] team0: Port device team_slave_1 added [ 90.336616][ T5776] hsr_slave_0: entered promiscuous mode [ 90.343326][ T5776] hsr_slave_1: entered promiscuous mode [ 90.349659][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.356356][ T5085] Bluetooth: hci3: command tx timeout [ 90.359328][ T5778] Bluetooth: hci2: command tx timeout [ 90.363385][ T5790] Bluetooth: hci0: command tx timeout [ 90.370433][ T5776] Cannot create hsr debugfs directory [ 90.427679][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.435415][ T5790] Bluetooth: hci1: command tx timeout [ 90.441239][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.467918][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.481427][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.488772][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.515004][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.542352][ T5774] hsr_slave_0: entered promiscuous mode [ 90.557070][ T5774] hsr_slave_1: entered promiscuous mode [ 90.564113][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.571869][ T5774] Cannot create hsr debugfs directory [ 90.769071][ T5775] hsr_slave_0: entered promiscuous mode [ 90.776377][ T5775] hsr_slave_1: entered promiscuous mode [ 90.782704][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.790491][ T5775] Cannot create hsr debugfs directory [ 91.080683][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.111164][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.125096][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.137696][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.224740][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.238902][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.249474][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.267332][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.357910][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.384190][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.424718][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.440132][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.517047][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.530242][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.554837][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.568063][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.588145][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.638567][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.672774][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.680274][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.705730][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.712981][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.800939][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.866938][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.880312][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.912332][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.919596][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.962859][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.970292][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.997890][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.011473][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.078250][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.085492][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.107096][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.114336][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.135218][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.208585][ T9] cfg80211: failed to load regulatory.db [ 92.215065][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.247320][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.254597][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.275321][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.282739][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.433784][ T5790] Bluetooth: hci0: command tx timeout [ 92.439275][ T5790] Bluetooth: hci3: command tx timeout [ 92.445234][ T5085] Bluetooth: hci2: command tx timeout [ 92.513416][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.514709][ T5790] Bluetooth: hci1: command tx timeout [ 92.691784][ T5787] veth0_vlan: entered promiscuous mode [ 92.727422][ T5787] veth1_vlan: entered promiscuous mode [ 92.842704][ T5787] veth0_macvtap: entered promiscuous mode [ 92.862152][ T5787] veth1_macvtap: entered promiscuous mode [ 92.891560][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.908251][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.948636][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.980962][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.008570][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.018895][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.028786][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.043229][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.151251][ T5774] veth0_vlan: entered promiscuous mode [ 93.186705][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.216236][ T5774] veth1_vlan: entered promiscuous mode [ 93.260350][ T5776] veth0_vlan: entered promiscuous mode [ 93.324319][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.332382][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.399364][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.409299][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.421850][ T5776] veth1_vlan: entered promiscuous mode [ 93.440597][ T5774] veth0_macvtap: entered promiscuous mode [ 93.476203][ T5775] veth0_vlan: entered promiscuous mode [ 93.490527][ T5774] veth1_macvtap: entered promiscuous mode [ 93.569136][ T5775] veth1_vlan: entered promiscuous mode [ 93.591140][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.606028][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.625415][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.673313][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.685514][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.697978][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.711793][ T5776] veth0_macvtap: entered promiscuous mode [ 93.759670][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.776065][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.796363][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.831901][ T5847] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 93.838715][ T5847] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 93.859932][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.876004][ T5847] vhci_hcd vhci_hcd.0: Device attached [ 94.025261][ T5776] veth1_macvtap: entered promiscuous mode [ 94.323487][ T5824] usb 34-1: SetAddress Request (2) to port 0 [ 94.378931][ T5824] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 94.513482][ T5790] Bluetooth: hci3: command tx timeout [ 94.519061][ T5790] Bluetooth: hci2: command tx timeout [ 94.524653][ T5085] Bluetooth: hci0: command tx timeout [ 94.537447][ T5848] vhci_hcd: connection reset by peer [ 94.555562][ T12] vhci_hcd: stop threads [ 94.586003][ T12] vhci_hcd: release socket [ 94.593187][ T5790] Bluetooth: hci1: command tx timeout [ 94.614837][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.637551][ T12] vhci_hcd: disconnect device [ 94.670708][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.708586][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.765146][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.825391][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.098401][ T5775] veth0_macvtap: entered promiscuous mode [ 95.109650][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.162973][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.177557][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.189489][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.206655][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.228855][ T5775] veth1_macvtap: entered promiscuous mode [ 95.239105][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.257327][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.267149][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.276229][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.322748][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.336292][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.346950][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.360811][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.373407][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.381022][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.391270][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.404747][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.417770][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.473498][ T5843] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.500072][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.510778][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.522600][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.534310][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.544220][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.555222][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.567410][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.588116][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.598052][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.635496][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.646985][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.656785][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.667614][ T5843] usb 1-1: no configurations [ 95.673897][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.682686][ T5843] usb 1-1: can't read configurations, error -22 [ 95.752521][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.778445][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.845366][ T5843] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.857734][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.900465][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.027688][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.047465][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.079216][ T5843] usb 1-1: no configurations [ 96.086899][ T5843] usb 1-1: can't read configurations, error -22 [ 96.104118][ T5843] usb usb1-port1: attempt power cycle [ 96.150424][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.190928][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.492251][ T5864] dummy_hcd dummy_hcd.0: remove, state 1 [ 96.499234][ T5864] usb usb1: USB disconnect, device number 1 [ 96.533231][ T5843] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.593531][ T5085] Bluetooth: hci2: command tx timeout [ 96.593540][ T5778] Bluetooth: hci0: command tx timeout [ 96.604901][ T5790] Bluetooth: hci3: command tx timeout [ 96.674791][ T5790] Bluetooth: hci1: command tx timeout [ 96.774576][ T5843] usb 1-1: device not accepting address 4, error -108 [ 96.818141][ T5864] dummy_hcd dummy_hcd.0: stopped [ 96.830562][ T5864] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 97.731466][ T5878] batman_adv: batadv0: Adding interface: veth0 [ 97.744654][ T5878] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.801761][ T5878] batman_adv: batadv0: Interface activated: veth0 [ 97.833279][ T5879] batman_adv: batadv0: Interface deactivated: veth0 [ 97.844199][ T5879] batman_adv: batadv0: Removing interface: veth0 [ 97.878336][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.905700][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.948726][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.963097][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.367536][ T5852] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 98.379412][ T5852] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 98.387880][ T5852] CPU: 0 PID: 5852 Comm: syz.0.5 Not tainted syzkaller #0 [ 98.395033][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.405210][ T5852] RIP: 0010:set_link_state+0x27/0x1000 [ 98.410747][ T5852] Code: 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 00 49 cb fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 1b cc 23 fb 49 8b 0e 4d 8d a6 93 00 [ 98.430412][ T5852] RSP: 0018:ffffc90004a57718 EFLAGS: 00010046 [ 98.436528][ T5852] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802405da00 [ 98.444537][ T5852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.452550][ T5852] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 98.460553][ T5852] R10: dffffc0000000000 R11: fffff5200094aecc R12: 0000000000000a02 [ 98.468560][ T5852] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.476575][ T5852] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 98.485542][ T5852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.492164][ T5852] CR2: 00007fb85ce09070 CR3: 000000007b5c1000 CR4: 00000000003506f0 [ 98.500181][ T5852] Call Trace: [ 98.503499][ T5852] [ 98.506465][ T5852] ? mutex_lock_nested+0x20/0x20 [ 98.511451][ T5852] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 98.517396][ T5852] dummy_pullup+0xc1/0x120 [ 98.521866][ T5852] ? dummy_set_selfpowered+0x150/0x150 [ 98.527402][ T5852] usb_gadget_disconnect_locked+0x120/0x440 [ 98.533354][ T5852] gadget_unbind_driver+0xc2/0x3e0 [ 98.538554][ T5852] ? gadget_bind_driver+0x770/0x770 [ 98.543804][ T5852] device_release_driver_internal+0x408/0x6f0 [ 98.549931][ T5852] driver_detach+0x1f3/0x2d0 [ 98.554582][ T5852] bus_remove_driver+0x221/0x2f0 [ 98.559686][ T5852] usb_gadget_unregister_driver+0x4e/0x70 [ 98.565461][ T5852] raw_release+0xda/0x260 [ 98.569838][ T5852] ? raw_open+0x520/0x520 [ 98.574209][ T5852] __fput+0x221/0x940 [ 98.578238][ T5852] task_work_run+0x1d4/0x260 [ 98.582889][ T5852] ? task_work_cancel+0x220/0x220 [ 98.587972][ T5852] do_exit+0x986/0x2530 [ 98.592192][ T5852] ? put_task_struct+0xc0/0xc0 [ 98.597012][ T5852] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 98.603068][ T5852] ? get_signal+0x100e/0x1390 [ 98.607783][ T5852] ? lock_chain_count+0x20/0x20 [ 98.612691][ T5852] ? _raw_spin_lock_irq+0xbb/0xf0 [ 98.617788][ T5852] do_group_exit+0x22d/0x2f0 [ 98.622533][ T5852] ? lockdep_hardirqs_on+0x98/0x150 [ 98.627836][ T5852] get_signal+0x12a6/0x1390 [ 98.632417][ T5852] arch_do_signal_or_restart+0xc2/0x7b0 [ 98.638022][ T5852] ? __ia32_sys_get_robust_list+0x110/0x110 [ 98.644047][ T5852] ? get_sigframe_size+0x20/0x20 [ 98.649050][ T5852] ? exit_to_user_mode_loop+0x3b/0x110 [ 98.654573][ T5852] exit_to_user_mode_loop+0x70/0x110 [ 98.660000][ T5852] exit_to_user_mode_prepare+0xee/0x180 [ 98.665598][ T5852] syscall_exit_to_user_mode+0x1a/0x50 [ 98.671194][ T5852] do_syscall_64+0x61/0xb0 [ 98.675675][ T5852] ? clear_bhb_loop+0x40/0x90 [ 98.680453][ T5852] ? clear_bhb_loop+0x40/0x90 [ 98.685197][ T5852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.691237][ T5852] RIP: 0033:0x7f3fd459e0d9 [ 98.695723][ T5852] Code: Unable to access opcode bytes at 0x7f3fd459e0af. [ 98.702805][ T5852] RSP: 002b:00007ffea218c428 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 98.711288][ T5852] RAX: fffffffffffffdfc RBX: 00000000000173a6 RCX: 00007f3fd459e0d9 [ 98.719304][ T5852] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3fd4825fac [ 98.727325][ T5852] RBP: 0000000000000bea R08: 0000000000745d1e R09: 0000000000000000 [ 98.735336][ T5852] R10: 00007ffea218c530 R11: 0000000000000246 R12: 00007ffea218c550 [ 98.743354][ T5852] R13: 00007f3fd4825fac R14: 0000000000017f90 R15: 00007ffea218c530 [ 98.751381][ T5852] [ 98.754435][ T5852] Modules linked in: [ 98.758385][ T5852] ---[ end trace 0000000000000000 ]--- [ 98.763874][ T5852] RIP: 0010:set_link_state+0x27/0x1000 [ 98.769391][ T5852] Code: 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 00 49 cb fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 1b cc 23 fb 49 8b 0e 4d 8d a6 93 00 [ 98.789050][ T5852] RSP: 0018:ffffc90004a57718 EFLAGS: 00010046 [ 98.795163][ T5852] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802405da00 [ 98.803172][ T5852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.811180][ T5852] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 98.819226][ T5852] R10: dffffc0000000000 R11: fffff5200094aecc R12: 0000000000000a02 [ 98.827240][ T5852] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.835253][ T5852] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 98.844223][ T5852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.850966][ T5852] CR2: 00007fb85ce09070 CR3: 000000007b5c1000 CR4: 00000000003506f0 [ 98.859006][ T5852] Kernel panic - not syncing: Fatal exception [ 98.865228][ T5852] Kernel Offset: disabled [ 98.869577][ T5852] Rebooting in 86400 seconds..