last executing test programs: 1.343253513s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/virtio/drivers/virtio_net/uevent\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/virtio/devices\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net\x00', 0x0, 0x0) write(r0, &(0x7f0000000200)='add\x00', 0x4) 1.336563961s ago: executing program 4 (id=5): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="040000000000", 0x6) write(r0, &(0x7f0000000080)="09000000010001", 0x7) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="041817aaaaaaaaaa10112233445566778899aabbccddeeff0005"], 0x1a) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04080400c80002"], 0x7) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0701081400c80010"], 0xa) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c8000b000700070001030029100101"], 0x10) 1.270207119s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tahvo 0x02\x00', 0xb) 1.233345491s ago: executing program 4 (id=11): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='sysfs\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers/aiptek/1-1:17.0/ytilt\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/128, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1:17.0/ytilt\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/128, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/drivers/aiptek/1-1:1.0/ytilt\x00', 0x0, 0x0) read(r2, &(0x7f0000000900)=""/128, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/usb/devices/1-1:1.0/ytilt\x00', 0x0, 0x0) read(r3, &(0x7f0000000b00)=""/128, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/usb/drivers/aiptek/2-1:17.0/ytilt\x00', 0x0, 0x0) read(r4, &(0x7f0000000d00)=""/128, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/usb/devices/2-1:17.0/ytilt\x00', 0x0, 0x0) read(r5, &(0x7f0000000f00)=""/128, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/usb/drivers/aiptek/2-1:1.0/ytilt\x00', 0x0, 0x0) read(r6, &(0x7f0000001100)=""/128, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/usb/devices/2-1:1.0/ytilt\x00', 0x0, 0x0) read(r7, &(0x7f0000001300)=""/128, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/bus/usb/drivers/aiptek/3-1:17.0/ytilt\x00', 0x0, 0x0) read(r8, &(0x7f0000001500)=""/128, 0x80) r9 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./sys/bus/usb/devices/3-1:17.0/ytilt\x00', 0x0, 0x0) read(r9, &(0x7f0000001700)=""/128, 0x80) r10 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./sys/bus/usb/drivers/aiptek/3-1:1.0/ytilt\x00', 0x0, 0x0) read(r10, &(0x7f0000001900)=""/128, 0x80) r11 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/usb/devices/3-1:1.0/ytilt\x00', 0x0, 0x0) read(r11, &(0x7f0000001b00)=""/128, 0x80) 1.225502082s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='sys/module/firmware_class/parameters/path\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='.\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='dvb-usb-vp702x-02.fw\x00', 0x42, 0x1ff) close(r1) syz_usb_connect(0x3, 0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002ff000040d31307320001010200010902200001010080fa0904000002ff0000000705020200020007058202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000400), 0x0, 0x2) ioctl$FE_READ_BER(r2, 0x80046f46, &(0x7f0000000500)) 835.696832ms ago: executing program 3 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/devices/PNP0B00:00\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='oxu210hp-hcd\x00', 0xd) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/rtc_cmos\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f00000001c0)='unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='PNP0B00:00\x00', 0xb) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/oxu210hp-hcd\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000280)='bind\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='PNP0B00:00\x00', 0xb) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/serial8250\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000340)='unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000380)='serial8250\x00', 0xb) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/platform/devices/serial8250\x00', 0x0, 0x0) r9 = openat(r8, &(0x7f0000000400)='driver_override\x00', 0x1, 0x0) write(r9, &(0x7f0000000440)='oxu210hp-hcd\x00', 0xd) write(r5, &(0x7f0000000480)='serial8250\x00', 0xb) 750.481283ms ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/ksm/smart_scan\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r0) 730.508519ms ago: executing program 3 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb0/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb0/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb0\n', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) 576.359946ms ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/eth0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/enp0s2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/net/enp0s3\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/devices/0000:00:03.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/devices/0000:00:1f.2\x00', 0x0, 0x0) 514.148462ms ago: executing program 0 (id=22): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000200)='\v\x00\x00\x00', 0x4) 514.026921ms ago: executing program 0 (id=23): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 250.109618ms ago: executing program 1 (id=27): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305029afe00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502fe9a00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 204.838995ms ago: executing program 1 (id=28): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305029afe00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 175.845905ms ago: executing program 1 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:05.0\x00', &(0x7f0000000000)=""/256, 0x100) readlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:06.0\x00', &(0x7f0000000000)=""/256, 0x100) readlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:07.0\x00', &(0x7f0000000000)=""/256, 0x100) readlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:08.0\x00', &(0x7f0000000000)=""/256, 0x100) readlinkat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:09.0\x00', &(0x7f0000000000)=""/256, 0x100) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:0a.0\x00', &(0x7f0000000000)=""/256, 0x100) 143.088317ms ago: executing program 3 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/devices/PNP0B00:00\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='oxu210hp-hcd\x00', 0xd) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/rtc_cmos\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f00000001c0)='unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='PNP0B00:00\x00', 0xb) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/oxu210hp-hcd\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000280)='bind\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='PNP0B00:00\x00', 0xb) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/serial8250\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000340)='unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000380)='serial8250\x00', 0xb) 101.005943ms ago: executing program 1 (id=31): r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x0, {}, 0x0, 0x4}) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000100), 0x0, 0x1) write(r1, &(0x7f0000000200)="474000100000b00d0001c100000001e020a2c380ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0xbc) 100.819243ms ago: executing program 0 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1, 0x0) 100.420487ms ago: executing program 3 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200), 0x1000) 22.123366ms ago: executing program 0 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000), 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/ib0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/infiniband\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/mlx4_core\x00', 0x0, 0x0) 21.966751ms ago: executing program 1 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/drivers/virtio-pci\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/4096, 0x1000) 21.900373ms ago: executing program 3 (id=36): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl(r2, 0x8914, &(0x7f0000000200)="63616e300000000000000000000000000100"/40) write(r0, &(0x7f0000000300)='e1a\r', 0x4) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 13.563814ms ago: executing program 0 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/seg6_flowlabel\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000018000104000000000000000002180000fe03000100000000080001000a00000008000400010000000600150005000000240016002000010001000000000204000000000000000000000000000000000000000001"], 0x58}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f00000001c0)='hello\x00', 0x6, 0x0, &(0x7f0000000400)={0x2, 0x1f90}, 0x10) 0s ago: executing program 1 (id=38): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502fe9a00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) kernel console output (not intermixed with test programs): [ 7.919722][ T4400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7.924341][ T4400] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 7.956060][ T13] gve 0000:00:00.0 enp0s0: Device link is up. OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. syzkaller login: [ 28.242668][ T4699] cgroup: Unknown subsys name 'net' [ 28.392724][ T4699] cgroup: Unknown subsys name 'cpuset' [ 28.394895][ T4699] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.504860][ T4699] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.320730][ T4711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.323015][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.324904][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.335294][ T4717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.337035][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.337607][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.337904][ T4724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.338285][ T4724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.338507][ T4724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.339089][ T4712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.340637][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.342064][ T4712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.348615][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.349451][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.349671][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.351811][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.355347][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.355722][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.356000][ T4724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.358887][ T4724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.363372][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.363641][ T4724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.366780][ T4725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.368565][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.370267][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.655972][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.657596][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.658983][ T4722] bridge_slave_0: entered allmulticast mode [ 29.660618][ T4722] bridge_slave_0: entered promiscuous mode [ 29.662542][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.662582][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.662649][ T4722] bridge_slave_1: entered allmulticast mode [ 29.663108][ T4722] bridge_slave_1: entered promiscuous mode [ 29.685436][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.699969][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.717944][ T4722] team0: Port device team_slave_0 added [ 29.748349][ T4722] team0: Port device team_slave_1 added [ 29.758033][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.758063][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.758090][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.778124][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.778157][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.778180][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.807725][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.807793][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.807849][ T4713] bridge_slave_0: entered allmulticast mode [ 29.808544][ T4713] bridge_slave_0: entered promiscuous mode [ 29.826421][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.826494][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.826554][ T4713] bridge_slave_1: entered allmulticast mode [ 29.826988][ T4713] bridge_slave_1: entered promiscuous mode [ 29.844718][ T4722] hsr_slave_0: entered promiscuous mode [ 29.845080][ T4722] hsr_slave_1: entered promiscuous mode [ 29.864452][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.864555][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.864607][ T4709] bridge_slave_0: entered allmulticast mode [ 29.865011][ T4709] bridge_slave_0: entered promiscuous mode [ 29.866973][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.867955][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.877424][ T4713] team0: Port device team_slave_0 added [ 29.880478][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.880517][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.880613][ T4709] bridge_slave_1: entered allmulticast mode [ 29.881035][ T4709] bridge_slave_1: entered promiscuous mode [ 29.891698][ T4713] team0: Port device team_slave_1 added [ 29.899678][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.902744][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.902804][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.902835][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.902892][ T4710] bridge_slave_0: entered allmulticast mode [ 29.903309][ T4710] bridge_slave_0: entered promiscuous mode [ 29.904543][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.904606][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.904657][ T4710] bridge_slave_1: entered allmulticast mode [ 29.905116][ T4710] bridge_slave_1: entered promiscuous mode [ 29.908901][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.908910][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.908923][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.909453][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.909459][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.909471][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.919248][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.919275][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.919359][ T4721] bridge_slave_0: entered allmulticast mode [ 29.919753][ T4721] bridge_slave_0: entered promiscuous mode [ 29.943177][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.943260][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.943315][ T4721] bridge_slave_1: entered allmulticast mode [ 29.943734][ T4721] bridge_slave_1: entered promiscuous mode [ 29.955895][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.958446][ T4709] team0: Port device team_slave_0 added [ 29.959205][ T4709] team0: Port device team_slave_1 added [ 29.969776][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.971097][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.971658][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.976784][ T4713] hsr_slave_0: entered promiscuous mode [ 29.977124][ T4713] hsr_slave_1: entered promiscuous mode [ 29.977330][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 29.977363][ T4713] Cannot create hsr debugfs directory [ 29.978477][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.979344][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.980303][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.987340][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.987362][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.987497][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.007630][ T4721] team0: Port device team_slave_0 added [ 30.015510][ T4710] team0: Port device team_slave_0 added [ 30.017486][ T4721] team0: Port device team_slave_1 added [ 30.027514][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.028927][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.029779][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.034941][ T4710] team0: Port device team_slave_1 added [ 30.046085][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.047360][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.051672][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.058520][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.059890][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.061302][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.062994][ T4709] hsr_slave_0: entered promiscuous mode [ 30.063275][ T4709] hsr_slave_1: entered promiscuous mode [ 30.063463][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.063473][ T4709] Cannot create hsr debugfs directory [ 30.064054][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.064061][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.064075][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.083709][ T4710] hsr_slave_0: entered promiscuous mode [ 30.085290][ T4710] hsr_slave_1: entered promiscuous mode [ 30.085502][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.085513][ T4710] Cannot create hsr debugfs directory [ 30.122506][ T4721] hsr_slave_0: entered promiscuous mode [ 30.122819][ T4721] hsr_slave_1: entered promiscuous mode [ 30.122986][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 30.122995][ T4721] Cannot create hsr debugfs directory [ 30.142707][ T4722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.145869][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.146503][ T4722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.148014][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.159691][ T4722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.162252][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.162569][ T4722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.164381][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.220017][ T4713] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.222868][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.224607][ T4713] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.226870][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.227182][ T4713] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.229967][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.232500][ T4713] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.235043][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.236665][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.236719][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.236876][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.236905][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.253688][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.253731][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.253817][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.253855][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.260522][ T4710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.265255][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.265798][ T4710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.267576][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.277150][ T4710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.278277][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.278567][ T4710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.280615][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.295140][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.298692][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.307022][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.316423][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.316474][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.316563][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.316601][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.321255][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.324009][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.324322][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.326040][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.327779][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.329932][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.340866][ T1914] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.342885][ T1914] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.345580][ T1914] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.346976][ T1914] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.350081][ T1914] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.352281][ T1914] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.357393][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.359709][ T1914] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.359759][ T1914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.370340][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.375350][ T4721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.377676][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.380735][ T4721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.383175][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.387930][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.393021][ T1914] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.393056][ T1914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.393448][ T1914] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.393466][ T1914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.401838][ T4721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.404070][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.405676][ T4721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.407799][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.425028][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.425069][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.449795][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.473894][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.487564][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.493667][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.493708][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.505295][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.510143][ T1875] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.510201][ T1875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.525143][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.528602][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.543167][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.543216][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.552937][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.556479][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.556531][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.572078][ T1875] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.572124][ T1875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.584980][ T4721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.587096][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.627641][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.627692][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.644979][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.670201][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.690109][ T4722] veth0_vlan: entered promiscuous mode [ 30.700361][ T4722] veth1_vlan: entered promiscuous mode [ 30.711577][ T4722] veth0_macvtap: entered promiscuous mode [ 30.713974][ T4722] veth1_macvtap: entered promiscuous mode [ 30.717238][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.722673][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.737431][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.782700][ T1875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.782917][ T1875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.782988][ T1875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.783133][ T1875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.807083][ T1914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.807115][ T1914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.824570][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.833703][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.833734][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.855297][ T4710] veth0_vlan: entered promiscuous mode [ 30.867399][ T4710] veth1_vlan: entered promiscuous mode [ 30.877755][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.879560][ T4710] veth0_macvtap: entered promiscuous mode [ 30.885410][ T4710] veth1_macvtap: entered promiscuous mode [ 30.897441][ T4722] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.917654][ T4713] veth0_vlan: entered promiscuous mode [ 30.926715][ T4713] veth1_vlan: entered promiscuous mode [ 30.937482][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.939434][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.944358][ T4721] veth0_vlan: entered promiscuous mode [ 30.947914][ T4721] veth1_vlan: entered promiscuous mode [ 30.953373][ T4713] veth0_macvtap: entered promiscuous mode [ 30.955648][ T4713] veth1_macvtap: entered promiscuous mode [ 30.960351][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.976967][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.980615][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.984634][ T1875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.984737][ T1875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.984805][ T1875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.984862][ T1875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.006578][ T4721] veth0_macvtap: entered promiscuous mode [ 31.023182][ T4721] veth1_macvtap: entered promiscuous mode [ 31.036293][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.040901][ T4709] veth0_vlan: entered promiscuous mode [ 31.050899][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.063725][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.063749][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.072672][ T1875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.072721][ T1875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.072749][ T1875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.072772][ T1875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.082218][ T4709] veth1_vlan: entered promiscuous mode [ 31.103801][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.103835][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.121360][ T1875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.121896][ T1875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.121963][ T1875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.122013][ T1875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.123493][ T4709] veth0_macvtap: entered promiscuous mode [ 31.125027][ T4709] veth1_macvtap: entered promiscuous mode [ 31.128438][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.129462][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.131372][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.131648][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.132991][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.140075][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.143921][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.156482][ T1875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.156615][ T1875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.163685][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.163702][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.178953][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.178984][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.195323][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.196941][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.207524][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.207553][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.225113][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.290901][ T4903] Bluetooth: MGMT ver 1.23 [ 31.320130][ T4910] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 31.322121][ T4910] retu-mfd 0-0002: probe with driver retu-mfd failed with error -5 [ 31.322481][ T4910] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 31.330643][ T4905] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 31.365475][ T4914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.368601][ T4914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.373620][ T4711] Bluetooth: hci0: command tx timeout [ 31.378664][ T4916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.378866][ T4916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.398889][ T4919] 0x000000000000-0x000000010000 : "" [ 31.405428][ T4911] nvmet: adding nsid 1 to subsystem testsubsys [ 31.407130][ T4919] ftl_cs: FTL header not found. [ 31.448057][ T1875] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 31.452411][ T4724] Bluetooth: hci3: command tx timeout [ 31.452525][ T4724] Bluetooth: hci1: command tx timeout [ 31.452654][ T4711] Bluetooth: hci4: command tx timeout [ 31.458562][ T12] nvmet_fc: {0:0}: Association created [ 31.460103][ T12] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:609aba9f-bb4b-4419-9f45-2fa2c1175b1a. [ 31.466211][ T4920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.472194][ T1875] nvme nvme1: NVME-FC{0}: controller connect complete [ 31.473577][ T4911] nvme nvme1: NVME-FC{0}: new ctrl: NQN "testsubsys", hostnqn: nqn.2014-08.org.nvmexpress:uuid:609aba9f-bb4b-4419-9f45-2fa2c1175b1a [ 31.520497][ T4920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.545907][ T4813] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 31.545944][ T4813] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 31.575932][ T4920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.651617][ T3081] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 31.675150][ T4933] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 31.750747][ T4935] printk: console [ttyS0] disabled [ 31.763094][ T1875] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 31.808453][ T4935] oxu210hp-hcd serial8250: error -ENXIO: IRQ index 0 not found [ 31.850246][ T4939] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 31.870763][ T12] nvmet: connect request for invalid subsystem testsubsys! [ 31.871064][ T4939] nvme nvme2: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 31.873029][ T12] wlan1: authentication with 08:02:11:00:00:00 timed out [ 32.101866][ T4947] lo speed is unknown, defaulting to 1000 [ 32.102860][ T4947] lo speed is unknown, defaulting to 1000 [ 32.103349][ T4947] lo speed is unknown, defaulting to 1000 [ 32.137304][ T4947] infiniband syz0: set active [ 32.137615][ T4471] lo speed is unknown, defaulting to 1000 [ 32.137689][ T4947] infiniband syz0: added lo [ 32.147788][ T4947] RDS/IB: syz0: added [ 32.148125][ T4947] smc: adding ib device syz0 with port count 1 [ 32.148151][ T4947] smc: ib device syz0 port 1 has no pnetid [ 32.148548][ T4471] lo speed is unknown, defaulting to 1000 [ 32.149771][ T4947] lo speed is unknown, defaulting to 1000 [ 32.186920][ T4947] lo speed is unknown, defaulting to 1000 [ 32.233009][ T4947] lo speed is unknown, defaulting to 1000 [ 32.290343][ T4947] lo speed is unknown, defaulting to 1000 [ 32.347351][ T4947] lo speed is unknown, defaulting to 1000 [ 32.610409][ T4977] can0: slcan on pts0. [ 32.616117][ C0] ------------[ cut here ]------------ [ 32.616132][ C0] WARNING: ./include/linux/skbuff.h:3003 at __netif_receive_skb_core+0x260/0x2b60, CPU#0: kworker/u8:12/3081 [ 32.619034][ C0] Modules linked in: [ 32.619654][ C0] CPU: 0 UID: 0 PID: 3081 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT [ 32.621139][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.622941][ C0] Workqueue: events_unbound flush_to_ldisc [ 32.624024][ C0] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 32.625456][ C0] pc : __netif_receive_skb_core+0x260/0x2b60 [ 32.626578][ C0] lr : __netif_receive_skb_core+0x25c/0x2b60 [ 32.627688][ C0] sp : ffff80008ec37880 [ 32.628426][ C0] x29: ffff80008ec37ac0 x28: ffff700011d86f30 x27: dfff800000000000 [ 32.629812][ C0] x26: 1ffff00011d1bfc0 x25: ffff0000f7910000 x24: ffff80008ec37980 [ 32.631246][ C0] x23: ffff0000ce61d880 x22: 0000000000000000 x21: 0000000000000000 [ 32.632719][ C0] x20: 000000000000ffff x19: ffff0000d634d780 x18: 00000000ffffffff [ 32.634256][ C0] x17: ffff800125154000 x16: ffff80008ec30000 x15: ffff800084ca2bec [ 32.635742][ C0] x14: ffff80008b0df2b0 x13: 0000000000000009 x12: 0000000000000000 [ 32.637254][ C0] x11: 0000000009528823 x10: 0000000000000003 x9 : 0000000000000101 [ 32.638748][ C0] x8 : 0000000000000000 x7 : ffff800084d0f334 x6 : 0000000000000000 [ 32.640262][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800084d05aac [ 32.641758][ C0] x2 : 000000000000ffff x1 : ffff0000ce61d880 x0 : 0000000000000000 [ 32.643203][ C0] Call trace: [ 32.643802][ C0] __netif_receive_skb_core+0x260/0x2b60 (P) [ 32.644888][ C0] __netif_receive_skb_one_core+0x70/0x110 [ 32.645923][ C0] __netif_receive_skb+0x34/0x128 [ 32.646837][ C0] process_backlog+0x5f4/0x16f8 [ 32.647708][ C0] __napi_poll+0xb4/0x328 [ 32.648491][ C0] net_rx_action+0x5b0/0xc14 [ 32.649346][ C0] handle_softirqs+0x2ec/0xd98 [ 32.650240][ C0] __do_softirq+0x14/0x20 [ 32.651083][ C0] ____do_softirq+0x14/0x20 [ 32.651966][ C0] call_on_irq_stack+0x30/0x48 [ 32.652809][ C0] do_softirq_own_stack+0x20/0x2c [ 32.653677][ C0] do_softirq+0x90/0xf8 [ 32.654417][ C0] __local_bh_enable_ip+0x240/0x35c [ 32.655335][ C0] netif_rx+0xb4/0xd4 [ 32.656013][ C0] slcan_receive_buf+0x12f8/0x1a68 [ 32.656918][ C0] tty_ldisc_receive_buf+0x12c/0x15c [ 32.657861][ C0] tty_port_default_receive_buf+0x74/0xac [ 32.658893][ C0] flush_to_ldisc+0x1d8/0x578 [ 32.659735][ C0] process_scheduled_works+0x91c/0x1250 [ 32.660718][ C0] worker_thread+0x798/0xbd0 [ 32.661537][ C0] kthread+0x304/0x3d4 [ 32.662278][ C0] ret_from_fork+0x10/0x20 [ 32.663081][ C0] irq event stamp: 37325 [ 32.663834][ C0] hardirqs last enabled at (37324): [] _raw_spin_unlock_irq+0x30/0x80 [ 32.665608][ C0] hardirqs last disabled at (37325): [] el1_brk64+0x20/0x54 [ 32.667221][ C0] softirqs last enabled at (37318): [] netif_rx+0xac/0xd4 [ 32.668843][ C0] softirqs last disabled at (37319): [] __do_softirq+0x14/0x20 [ 32.670469][ C0] ---[ end trace 0000000000000000 ]--- [ 32.814148][ T4976] can0 (unregistered): slcan off pts0. [ 33.371535][ T4711] Bluetooth: hci2: command tx timeout [ 33.451230][ T4711] Bluetooth: hci0: command tx timeout [ 33.531273][ T4711] Bluetooth: hci4: command tx timeout [ 33.531313][ T4711] Bluetooth: hci1: command tx timeout [ 33.531347][ T4711] Bluetooth: hci3: command tx timeout [ 35.461387][ T4712] Bluetooth: hci2: command tx timeout [ 35.531403][ T4712] Bluetooth: hci0: command tx timeout [ 35.611403][ T4712] Bluetooth: hci3: command tx timeout [ 35.611599][ T4712] Bluetooth: hci1: command tx timeout [ 35.611627][ T4712] Bluetooth: hci4: command tx timeout [ 37.541245][ T4711] Bluetooth: hci2: command 0x0419 tx timeout [ 37.611704][ T4711] Bluetooth: hci0: command tx timeout [ 37.691263][ T4711] Bluetooth: hci3: command tx timeout [ 37.691277][ T4712] Bluetooth: hci4: command tx timeout [ 37.691623][ T4725] Bluetooth: hci1: command tx timeout [ 39.611258][ T4711] Bluetooth: hci2: command 0x0419 tx timeout