last executing test programs: 5.685293585s ago: executing program 0 (id=531): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0xfffffffffffffffe, {0x3, 0x2, 0x3, 0x0, 0x200100, 0xfffffffe, {0x1, 0xfffffffffffffff1, 0x8009, 0x8, 0x100000000, 0xffffffff80000001, 0x0, 0xfffffffe, 0x4, 0x6000, 0xffffffff, r2, r3, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 5.489934478s ago: executing program 0 (id=535): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 4.314128884s ago: executing program 0 (id=546): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000100)=ANY=[], &(0x7f00000005c0)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) 2.502484408s ago: executing program 3 (id=579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0xc0105500, 0x0) sendfile(r0, r5, 0x0, 0xffffffff004) 1.471830531s ago: executing program 1 (id=595): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmmsg$unix(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x40408d0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) 1.325081123s ago: executing program 2 (id=598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x92}, 0x0) 1.305768496s ago: executing program 3 (id=599): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x8000, 0xffffffffffffffff, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.164405328s ago: executing program 0 (id=601): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 1.162739481s ago: executing program 2 (id=602): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x4}}, 0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @local}}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7}, 0x9c) 1.077828469s ago: executing program 3 (id=603): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x20008891}, 0x4054) 1.043844577s ago: executing program 1 (id=604): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x1, 0x4000000) 1.012931525s ago: executing program 4 (id=605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/56, @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 872.998062ms ago: executing program 2 (id=606): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newqdisc={0x24, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0xf, 0xc}, {0x0, 0x9}, {0xf, 0x8}}}, 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000002500010125bd7000fbfffffe0b00000008000300470000001f00"], 0x3c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) 781.494543ms ago: executing program 1 (id=607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0x41000, 0x8, 0xc, 0x3, 0xe4, 0x40, 0x9, 0x0, 0x2e, 0xd, 0x7}, {0x41000, 0x1, 0xf, 0x0, 0x40, 0x85, 0x9, 0x8, 0x58, 0x5, 0x3, 0x1}, {0x4000, 0x200000, 0xe, 0xe3, 0x3, 0x7, 0xfe, 0x9, 0xff, 0xab, 0x5, 0x81}, {0x1, 0x6000, 0x3, 0x5c, 0x4, 0x42, 0x9, 0x2, 0x6, 0x6, 0xe}, {0x0, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x1, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x1000, 0x1a, 0x7, 0xb1, 0x1, 0x1, 0xdd, 0x80, 0xf, 0x1, 0xb}, {0x40000, 0x8080000, 0x4, 0x5, 0x7, 0x2, 0x5, 0x0, 0x3, 0x82, 0xff}, {0x100000, 0x1000, 0x8, 0x13, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0xb}, {0xeeef0000, 0x2e}, {0x10000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42024, 0xf, 0x0, 0xf000, [0x6840000000000000, 0xd, 0x100005e, 0xff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 758.393538ms ago: executing program 3 (id=608): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000580)={0x38, 0x0, 0x5, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac05, 0xfac06, 0xfac08, 0x7d600]}], @NL80211_ATTR_SSID={0x5, 0x34, @random='v'}]}, 0x38}}, 0x810) 755.799727ms ago: executing program 4 (id=609): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20000084}, 0x40880) 739.77449ms ago: executing program 2 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001300)}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x4, 0x40002102, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 548.380235ms ago: executing program 4 (id=611): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) unshare(0x4000400) write$cgroup_type(r1, 0x0, 0x0) 546.756906ms ago: executing program 0 (id=612): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x42}, 0xfc40) unshare(0x2c020400) pipe(&(0x7f0000000480)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x10d00, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="840000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000084080000400012800e00010069703665727370616e0000002c00028014000700fe8000000000000000000000000000340600020000000000080005003c0000000400120008000a00", @ANYRES32, @ANYBLOB="0a000100000000ff001f"], 0x84}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x38) unshare(0x2a020400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz1\x00', 0x200002, 0x0) vmsplice(r7, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x9) 516.376716ms ago: executing program 3 (id=613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) socket(0x10, 0x803, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 467.970166ms ago: executing program 2 (id=614): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmmsg$unix(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x40408d0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) 436.510016ms ago: executing program 1 (id=615): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000200000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r9}, &(0x7f0000000440), &(0x7f0000000480)=r10}, 0x20) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) 372.847512ms ago: executing program 4 (id=616): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f030200000000000000070000", @ANYRES32, @ANYBLOB=' \x00'], 0x38}}, 0x40840) socket(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x81, @private1, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e22, 0xb, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000440)=',', 0x1}], 0x1}}], 0x2, 0x200040c0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xff, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x802, 0xbe75}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0xff000000], [0x0, 0x0, 0xffffff], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x80000000, 0x162a0916, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'dvmrp0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x85, 0x78}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 217.858414ms ago: executing program 0 (id=617): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000008400000000"], 0x18, 0x20000001}, 0x20008000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0x3a, "aeb3c46d23e3ea1ad2b85088bf1388abfad19fe4a68245e6ff9ced5c7f8f019616191689161eab1ab3caa7ce65a290192863a2fb1a5062f8b3a0"}, &(0x7f0000000340)=0x42) 205.993586ms ago: executing program 3 (id=618): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) 205.139064ms ago: executing program 1 (id=619): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/56, @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 149.944185ms ago: executing program 4 (id=620): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) 37.621555ms ago: executing program 4 (id=621): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000003, 0x12, r2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 37.279622ms ago: executing program 2 (id=622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, &(0x7f0000000180), &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r3, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 1 (id=623): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40d4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. [ 82.007940][ T5813] cgroup: Unknown subsys name 'net' [ 82.113952][ T5813] cgroup: Unknown subsys name 'cpuset' [ 82.123408][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.744096][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.024310][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.033052][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.051374][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.063887][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.071640][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.075136][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.081064][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.093792][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.102600][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.110754][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.118909][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.126633][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.134258][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.137120][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.148636][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.152405][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.164959][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.176001][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.185162][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.193300][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.200880][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.223006][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.230934][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.255171][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.263256][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.017557][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.052786][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 87.139388][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 87.154981][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 87.181473][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 87.470930][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.478142][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.486043][ T5843] bridge_slave_0: entered allmulticast mode [ 87.493755][ T5843] bridge_slave_0: entered promiscuous mode [ 87.502615][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.510003][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.517213][ T5844] bridge_slave_0: entered allmulticast mode [ 87.524785][ T5844] bridge_slave_0: entered promiscuous mode [ 87.581749][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.588977][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.598828][ T5843] bridge_slave_1: entered allmulticast mode [ 87.606244][ T5843] bridge_slave_1: entered promiscuous mode [ 87.613885][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.621360][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.629012][ T5844] bridge_slave_1: entered allmulticast mode [ 87.636579][ T5844] bridge_slave_1: entered promiscuous mode [ 87.665548][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.673404][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.680823][ T5846] bridge_slave_0: entered allmulticast mode [ 87.688136][ T5846] bridge_slave_0: entered promiscuous mode [ 87.716746][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.724056][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.731957][ T5842] bridge_slave_0: entered allmulticast mode [ 87.739259][ T5842] bridge_slave_0: entered promiscuous mode [ 87.746846][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.754256][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.761550][ T5845] bridge_slave_0: entered allmulticast mode [ 87.768955][ T5845] bridge_slave_0: entered promiscuous mode [ 87.777246][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.784565][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.792093][ T5845] bridge_slave_1: entered allmulticast mode [ 87.799734][ T5845] bridge_slave_1: entered promiscuous mode [ 87.806953][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.814234][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.821517][ T5846] bridge_slave_1: entered allmulticast mode [ 87.828837][ T5846] bridge_slave_1: entered promiscuous mode [ 87.858511][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.865771][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.873056][ T5842] bridge_slave_1: entered allmulticast mode [ 87.880478][ T5842] bridge_slave_1: entered promiscuous mode [ 87.923093][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.935520][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.947560][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.971205][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.004274][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.026745][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.040378][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.053784][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.066788][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.114078][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.136758][ T5843] team0: Port device team_slave_0 added [ 88.188216][ T5843] team0: Port device team_slave_1 added [ 88.206055][ T5844] team0: Port device team_slave_0 added [ 88.214179][ T5845] team0: Port device team_slave_0 added [ 88.231075][ T5836] Bluetooth: hci0: command tx timeout [ 88.238182][ T5842] team0: Port device team_slave_0 added [ 88.244179][ T5836] Bluetooth: hci3: command tx timeout [ 88.244386][ T5836] Bluetooth: hci1: command tx timeout [ 88.256387][ T5846] team0: Port device team_slave_0 added [ 88.265483][ T5846] team0: Port device team_slave_1 added [ 88.283621][ T5844] team0: Port device team_slave_1 added [ 88.291628][ T5845] team0: Port device team_slave_1 added [ 88.299085][ T5842] team0: Port device team_slave_1 added [ 88.314509][ T5836] Bluetooth: hci4: command tx timeout [ 88.314532][ T5830] Bluetooth: hci2: command tx timeout [ 88.332712][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.339711][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.366101][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.421056][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.428053][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.454154][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.512140][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.519143][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.545548][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.561031][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.568026][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.594172][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.606359][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.613573][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.640020][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.652238][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.659237][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.685695][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.698140][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.705345][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.731335][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.743087][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.750217][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.776407][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.788250][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.795698][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.822468][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.834181][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.841272][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.867238][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.938964][ T5843] hsr_slave_0: entered promiscuous mode [ 88.945651][ T5843] hsr_slave_1: entered promiscuous mode [ 89.048993][ T5846] hsr_slave_0: entered promiscuous mode [ 89.055664][ T5846] hsr_slave_1: entered promiscuous mode [ 89.062223][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 89.068057][ T5846] Cannot create hsr debugfs directory [ 89.088532][ T5842] hsr_slave_0: entered promiscuous mode [ 89.095537][ T5842] hsr_slave_1: entered promiscuous mode [ 89.102100][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 89.107864][ T5842] Cannot create hsr debugfs directory [ 89.119656][ T5844] hsr_slave_0: entered promiscuous mode [ 89.126773][ T5844] hsr_slave_1: entered promiscuous mode [ 89.133328][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 89.139096][ T5844] Cannot create hsr debugfs directory [ 89.204222][ T5845] hsr_slave_0: entered promiscuous mode [ 89.211075][ T5845] hsr_slave_1: entered promiscuous mode [ 89.217376][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 89.223477][ T5845] Cannot create hsr debugfs directory [ 89.795671][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.812567][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.824091][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.844264][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.913130][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.932574][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.945020][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.968422][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.053034][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.071565][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.083856][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.095539][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.228384][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.240697][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.253958][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.265260][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.307722][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.315194][ T5836] Bluetooth: hci1: command tx timeout [ 90.315219][ T5830] Bluetooth: hci0: command tx timeout [ 90.320770][ T5826] Bluetooth: hci3: command tx timeout [ 90.383425][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.390562][ T5830] Bluetooth: hci4: command tx timeout [ 90.396002][ T5830] Bluetooth: hci2: command tx timeout [ 90.408058][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.418730][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.437841][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.468340][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.517453][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.524769][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.538385][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.560232][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.567400][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.609256][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.673449][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.697711][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.725898][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.733114][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.754367][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.765860][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.773071][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.795959][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.803138][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.834592][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.841760][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.887820][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.914702][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.921873][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.933097][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.940415][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.989485][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.008260][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.045988][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.098802][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.157324][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.164510][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.199090][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.206286][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.224031][ T5843] veth0_vlan: entered promiscuous mode [ 91.236756][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.252000][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.270333][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.287055][ T5843] veth1_vlan: entered promiscuous mode [ 91.364778][ T5846] veth0_vlan: entered promiscuous mode [ 91.392060][ T5843] veth0_macvtap: entered promiscuous mode [ 91.436047][ T5843] veth1_macvtap: entered promiscuous mode [ 91.454406][ T5846] veth1_vlan: entered promiscuous mode [ 91.474496][ T5845] veth0_vlan: entered promiscuous mode [ 91.506279][ T5845] veth1_vlan: entered promiscuous mode [ 91.534770][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.547739][ T5842] veth0_vlan: entered promiscuous mode [ 91.562328][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.583024][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.594897][ T5842] veth1_vlan: entered promiscuous mode [ 91.633700][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.645361][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.664783][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.675280][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.707263][ T5846] veth0_macvtap: entered promiscuous mode [ 91.734699][ T5846] veth1_macvtap: entered promiscuous mode [ 91.758540][ T5844] veth0_vlan: entered promiscuous mode [ 91.780046][ T5844] veth1_vlan: entered promiscuous mode [ 91.787887][ T5845] veth0_macvtap: entered promiscuous mode [ 91.801652][ T5845] veth1_macvtap: entered promiscuous mode [ 91.821958][ T5842] veth0_macvtap: entered promiscuous mode [ 91.859678][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.877742][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.893833][ T5842] veth1_macvtap: entered promiscuous mode [ 91.915953][ T1641] cfg80211: failed to load regulatory.db [ 91.928596][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.956781][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.983888][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.996656][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.022455][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.034584][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.043844][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.067959][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.077212][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.086723][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.096026][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.103415][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.105115][ T5844] veth0_macvtap: entered promiscuous mode [ 92.127842][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.148483][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.167060][ T5844] veth1_macvtap: entered promiscuous mode [ 92.185692][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.199782][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.211726][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.222402][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.242592][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.253426][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.304212][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.321158][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.373653][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.393292][ T5830] Bluetooth: hci1: command tx timeout [ 92.394007][ T5836] Bluetooth: hci3: command tx timeout [ 92.398754][ T5830] Bluetooth: hci0: command tx timeout [ 92.442092][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.463941][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.473714][ T5830] Bluetooth: hci4: command tx timeout [ 92.482408][ T5830] Bluetooth: hci2: command tx timeout [ 92.511146][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.541816][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.554883][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.591169][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.601982][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.612299][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.709480][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.741657][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.753074][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.764428][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.920654][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.932955][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.965025][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.000401][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.196872][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.226470][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.316431][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.339693][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.348965][ T5933] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9'. [ 93.464347][ T5935] process 'syz.3.10' launched './file0' with NULL argv: empty string added [ 93.536394][ T5935] Invalid argument reading file caps for ./file0 [ 93.963385][ T5952] program syz.0.16 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.162646][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 94.225778][ T5958] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 94.517522][ T5830] Bluetooth: hci3: command tx timeout [ 94.517740][ T5836] Bluetooth: hci1: command tx timeout [ 94.524050][ T5830] Bluetooth: hci0: command tx timeout [ 94.551578][ T5830] Bluetooth: hci2: command tx timeout [ 94.557060][ T5830] Bluetooth: hci4: command tx timeout [ 96.478867][ T6014] vlan2: entered promiscuous mode [ 96.507475][ T6014] vlan2: entered allmulticast mode [ 96.549343][ T6014] hsr_slave_1: entered allmulticast mode [ 96.585965][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 96.649316][ T6023] mmap: syz.4.49 (6023) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.259566][ T6047] netlink: 'syz.4.60': attribute type 1 has an invalid length. [ 97.787727][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 98.013155][ T6078] netlink: 80 bytes leftover after parsing attributes in process `syz.0.75'. [ 98.036481][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 98.736430][ T6108] netlink: 'syz.1.89': attribute type 29 has an invalid length. [ 98.752672][ T6108] netlink: 'syz.1.89': attribute type 29 has an invalid length. [ 98.766298][ T6108] netlink: 'syz.1.89': attribute type 29 has an invalid length. [ 98.774859][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 99.011845][ T6109] hub 8-0:1.0: USB hub found [ 99.018083][ T6109] hub 8-0:1.0: 1 port detected [ 99.203173][ T6126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96'. [ 99.858384][ T6149] syz.1.106 uses obsolete (PF_INET,SOCK_PACKET) [ 100.648413][ T6187] netlink: 'syz.2.125': attribute type 266 has an invalid length. [ 101.364343][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 101.699381][ T6223] netlink: 11 bytes leftover after parsing attributes in process `syz.2.142'. [ 101.732554][ T6223] netlink: 11 bytes leftover after parsing attributes in process `syz.2.142'. [ 101.791492][ T6227] netlink: 132 bytes leftover after parsing attributes in process `syz.3.144'. [ 102.012527][ T6234] syzkaller1: entered promiscuous mode [ 102.018082][ T6234] syzkaller1: entered allmulticast mode [ 102.161018][ T5917] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 102.384010][ T5917] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 102.428561][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.453360][ T5917] usb 2-1: Product: syz [ 102.479997][ T5917] usb 2-1: Manufacturer: syz [ 102.500037][ T5917] usb 2-1: SerialNumber: syz [ 102.551427][ T5917] usb 2-1: config 0 descriptor?? [ 102.775561][ T5917] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 102.877071][ T6261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.158'. [ 103.789055][ T6289] Zero length message leads to an empty skb [ 103.908444][ T6293] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.204266][ T5917] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 104.241440][ T5917] usb 2-1: USB disconnect, device number 2 [ 104.620241][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.809773][ T5917] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.833091][ T5917] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 104.852666][ T5917] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.870385][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.893168][ T6312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 104.936544][ T5917] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.257565][ T6341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.195'. [ 105.323766][ T5917] usb 4-1: USB disconnect, device number 2 [ 105.493598][ T6352] xt_hashlimit: size too large, truncated to 1048576 [ 106.423863][ T6394] program syz.4.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.668178][ T6398] xt_hashlimit: size too large, truncated to 1048576 [ 107.444698][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 107.644582][ T6419] program syz.4.231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.855990][ T6425] netlink: 27 bytes leftover after parsing attributes in process `syz.4.234'. [ 108.546899][ T6445] program syz.4.244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.791339][ T6482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.953046][ T6486] netlink: 132 bytes leftover after parsing attributes in process `syz.3.262'. [ 113.070521][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 113.573193][ T6588] input: syz0 as /devices/virtual/input/input5 [ 113.831551][ T6382] Set syz1 is full, maxelem 65536 reached [ 114.439054][ T6616] tipc: Started in network mode [ 114.467671][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.318'. [ 114.470611][ T6616] tipc: Node identity , cluster identity 4711 [ 114.499670][ T6616] tipc: Failed to obtain node identity [ 114.505770][ T6616] tipc: Enabling of bearer rejected, failed to enable media [ 115.555355][ T6661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.440490][ T6693] syzkaller1: entered promiscuous mode [ 116.446033][ T6693] syzkaller1: entered allmulticast mode [ 116.484088][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.354'. [ 116.778715][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.359'. [ 118.638618][ T6779] xt_hashlimit: size too large, truncated to 1048576 [ 119.078867][ T6797] netlink: 132 bytes leftover after parsing attributes in process `syz.4.400'. [ 119.188575][ T6793] netlink: 277 bytes leftover after parsing attributes in process `syz.1.399'. [ 119.663117][ T6822] capability: warning: `syz.3.409' uses 32-bit capabilities (legacy support in use) [ 119.820007][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.832065][ T6828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.412'. [ 120.021923][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 120.040628][ T29] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 120.056521][ T29] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 120.075688][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 120.095537][ T29] usb 3-1: config 1 has no interface number 0 [ 120.113343][ T29] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.133216][ T29] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 120.146877][ T29] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 120.160561][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.207790][ T29] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 120.292336][ T6848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.421'. [ 120.406938][ T29] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 120.463035][ T5917] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 120.498453][ T5917] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.824903][ T29] usb 3-1: USB disconnect, device number 2 [ 120.851505][ T29] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 120.927175][ T6871] netlink: 48 bytes leftover after parsing attributes in process `syz.4.431'. [ 120.974941][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'. [ 121.064627][ T6871] hsr_slave_1 (unregistering): left promiscuous mode [ 121.468424][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 121.604532][ T6895] program syz.2.443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.794104][ T6905] netlink: 104 bytes leftover after parsing attributes in process `syz.0.448'. [ 121.835824][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'. [ 122.190323][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.394134][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 122.415178][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.460901][ T9] usb 5-1: Product: syz [ 122.465156][ T9] usb 5-1: Manufacturer: syz [ 122.478114][ T9] usb 5-1: SerialNumber: syz [ 122.496851][ T9] usb 5-1: config 0 descriptor?? [ 122.517096][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 002 [ 122.950963][ T5918] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.090179][ T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.120887][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 123.126384][ T9] i2c i2c-1: failure reading functionality [ 123.133496][ T5918] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.155201][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 123.160379][ T5918] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.176180][ T9] usb 5-1: USB disconnect, device number 2 [ 123.185575][ T5918] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 123.209898][ T5918] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 123.218312][ T5918] usb 3-1: Product: syz [ 123.231176][ T5918] usb 3-1: Manufacturer: syz [ 123.237004][ T5917] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.271030][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 123.281424][ T5918] hub 3-1:4.0: USB hub found [ 123.304703][ T29] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 123.316613][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.328840][ T29] usb 4-1: config 0 descriptor?? [ 123.344569][ T29] gspca_main: sq930x-2.14.0 probing 041e:403c [ 123.411892][ T5917] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 123.421720][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.440738][ T5917] usb 1-1: config 0 descriptor?? [ 123.453622][ T5917] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 123.468978][ T5918] hub 3-1:4.0: 3 ports detected [ 123.670071][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 123.687578][ T6944] input: syz0 as /devices/virtual/input/input8 [ 123.946199][ T6978] netlink: 'syz.1.484': attribute type 29 has an invalid length. [ 123.964293][ T5918] hub 3-1:4.0: set hub depth failed [ 123.971074][ T6978] netlink: 'syz.1.484': attribute type 29 has an invalid length. [ 123.983076][ T6978] netlink: 'syz.1.484': attribute type 29 has an invalid length. [ 124.001644][ T5918] usb 3-1: USB disconnect, device number 3 [ 124.099031][ T6983] netlink: 40 bytes leftover after parsing attributes in process `syz.4.486'. [ 124.190712][ T29] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 124.245252][ T6989] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 124.256166][ T29] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 124.271970][ T5917] gspca_sunplus: reg_w_riv err -71 [ 124.281140][ T5917] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 124.282874][ T29] usb 4-1: USB disconnect, device number 3 [ 124.310547][ T5917] usb 1-1: USB disconnect, device number 2 [ 124.559272][ T6997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.802245][ T7004] netlink: 'syz.3.497': attribute type 29 has an invalid length. [ 124.830158][ T7004] netlink: 'syz.3.497': attribute type 29 has an invalid length. [ 124.843403][ T7004] netlink: 'syz.3.497': attribute type 29 has an invalid length. [ 124.876006][ T7007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.498'. [ 125.011918][ T7015] netlink: 96 bytes leftover after parsing attributes in process `syz.1.502'. [ 125.161623][ T7020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.210431][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.382273][ T5918] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.389991][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 125.398392][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 125.419907][ T24] usb 1-1: config 0 has no interface number 0 [ 125.443321][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.462890][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 125.486029][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.502276][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.516068][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 125.548300][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.564555][ T5918] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 125.574392][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.587170][ T7034] netlink: 'syz.4.511': attribute type 29 has an invalid length. [ 125.598053][ T24] usb 1-1: config 0 descriptor?? [ 125.615968][ T7034] netlink: 'syz.4.511': attribute type 29 has an invalid length. [ 125.616737][ T5918] usb 3-1: Product: syz [ 125.651588][ T5918] usb 3-1: Manufacturer: syz [ 125.656270][ T5918] usb 3-1: SerialNumber: syz [ 125.664460][ T7034] netlink: 'syz.4.511': attribute type 29 has an invalid length. [ 125.667160][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 125.717423][ T7036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.512'. [ 125.909635][ T24] usb 1-1: USB disconnect, device number 3 [ 125.909861][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 125.949681][ T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 126.004201][ T7044] netlink: 96 bytes leftover after parsing attributes in process `syz.4.515'. [ 126.023134][ T5918] rtl8150 3-1:1.0: couldn't reset the device [ 126.040396][ T5918] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 126.066210][ T5918] usb 3-1: USB disconnect, device number 4 [ 126.277314][ T7053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.570760][ T7062] netlink: 'syz.2.523': attribute type 29 has an invalid length. [ 126.633074][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 126.635647][ T7065] netlink: 32 bytes leftover after parsing attributes in process `syz.0.524'. [ 126.947722][ T7082] dummy0: entered promiscuous mode [ 126.992348][ T7080] dummy0: left promiscuous mode [ 127.059630][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 127.281916][ T7097] netlink: 32 bytes leftover after parsing attributes in process `syz.2.539'. [ 127.499934][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.510015][ T7099] hsr_slave_0 (unregistering): left promiscuous mode [ 127.684801][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 127.696727][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.705478][ T24] usb 5-1: Product: syz [ 127.710324][ T24] usb 5-1: Manufacturer: syz [ 127.715094][ T24] usb 5-1: SerialNumber: syz [ 128.034323][ T24] rtl8150 5-1:1.0: couldn't reset the device [ 128.041350][ T24] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 128.065198][ T24] usb 5-1: USB disconnect, device number 3 [ 128.369973][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 128.514526][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.607717][ T7127] syzkaller1: entered promiscuous mode [ 128.614461][ T7127] syzkaller1: entered allmulticast mode [ 128.710999][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 128.730266][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.742598][ T24] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 128.751958][ T24] usb 1-1: config 127 has no interface number 0 [ 128.759770][ T7130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.775242][ T24] usb 1-1: config 127 interface 124 has no altsetting 0 [ 128.795884][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 128.809912][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.839930][ T24] usb 1-1: Product: syz [ 128.854514][ T24] usb 1-1: Manufacturer: syz [ 128.859194][ T24] usb 1-1: SerialNumber: syz [ 129.161184][ T7142] __nla_validate_parse: 1 callbacks suppressed [ 129.161205][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 129.407632][ T7153] netlink: 132 bytes leftover after parsing attributes in process `syz.2.565'. [ 129.444829][ T7156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.566'. [ 129.746249][ T24] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 129.962706][ T24] usb 1-1: device firmware changed [ 130.013785][ T24] usb 1-1: USB disconnect, device number 4 [ 130.105916][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'. [ 130.125587][ T7181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.578'. [ 130.254849][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.449954][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 130.490677][ T24] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 130.501771][ T24] usb 1-1: config 127 has no interface number 0 [ 130.508169][ T24] usb 1-1: config 127 interface 124 has no altsetting 0 [ 130.530596][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 130.550861][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.570288][ T24] usb 1-1: Product: syz [ 130.579923][ T24] usb 1-1: Manufacturer: syz [ 130.589010][ T24] usb 1-1: SerialNumber: syz [ 131.034698][ T7216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.593'. [ 131.407862][ T7235] xt_hashlimit: size too large, truncated to 1048576 [ 131.539304][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 131.565604][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 131.601548][ T7243] netlink: 132 bytes leftover after parsing attributes in process `syz.1.604'. [ 131.610924][ T24] usb 1-1: USB disconnect, device number 5 [ 131.729592][ T7247] validate_nla: 4 callbacks suppressed [ 131.729617][ T7247] netlink: 'syz.2.606': attribute type 9 has an invalid length. [ 131.939089][ T7249] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.091109][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.613'. [ 132.210367][ T7270] xt_hashlimit: size too large, truncated to 1048576 [ 132.217411][ T7270] xt_hashlimit: max too large, truncated to 1048576 [ 132.527965][ T7282] input: syz0 as /devices/virtual/input/input9 [ 132.566551][ T7284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.599409][ T7286] ------------[ cut here ]------------ [ 132.605549][ T7286] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 132.618011][ T7286] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#0: syz.2.622/7286 [ 132.627925][ T7286] Modules linked in: [ 132.633554][ T7286] CPU: 0 UID: 0 PID: 7286 Comm: syz.2.622 Not tainted syzkaller #0 PREEMPT(full) [ 132.642886][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.653192][ T7286] RIP: 0010:u32_change+0x1daf/0x2720 [ 132.658550][ T7286] Code: 3d 2a 42 43 06 01 75 33 e8 3e 57 0d f8 eb 50 e8 37 57 0d f8 48 8d 3d 20 75 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 00 97 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 12 57 0d f8 eb 24 e8 0b 57 0d f8 [ 132.678493][ T7286] RSP: 0018:ffffc90002eb6fc0 EFLAGS: 00010283 [ 132.684776][ T7286] RAX: ffffffff89b85689 RBX: ffff8880276e4400 RCX: 0000000000000010 [ 132.692879][ T7286] RDX: ffffffff8ce19700 RSI: 0000000000000020 RDI: ffffffff9020cbb0 [ 132.701100][ T7286] RBP: ffffc90002eb7178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 132.709131][ T7286] R10: dffffc0000000000 R11: fffffbfff20236d7 R12: ffff888034a234e8 [ 132.717552][ T7286] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 132.726082][ T7286] FS: 00007fcdc36226c0(0000) GS:ffff88812545a000(0000) knlGS:0000000000000000 [ 132.735328][ T7286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.742027][ T7286] CR2: 0000000000000008 CR3: 00000000779a8000 CR4: 00000000003526f0 [ 132.750133][ T7286] Call Trace: [ 132.753465][ T7286] [ 132.756471][ T7286] ? __pfx_u32_change+0x10/0x10 [ 132.761462][ T7286] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 132.767197][ T7286] tc_new_tfilter+0xff8/0x1780 [ 132.772220][ T7286] ? __pfx_tc_new_tfilter+0x10/0x10 [ 132.777517][ T7286] ? __pfx_tc_new_tfilter+0x10/0x10 [ 132.782847][ T7286] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 132.787858][ T7286] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 132.793242][ T7286] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.798774][ T7286] ? ref_tracker_free+0x693/0x840 [ 132.803948][ T7286] ? __copy_skb_header+0xa3/0x4a0 [ 132.809041][ T7286] ? __pfx_ref_tracker_free+0x10/0x10 [ 132.814787][ T7286] ? __skb_clone+0x63/0x7a0 [ 132.819364][ T7286] netlink_rcv_skb+0x232/0x4b0 [ 132.824446][ T7286] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.830043][ T7286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.835421][ T7286] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.840813][ T7286] netlink_unicast+0x80f/0x9b0 [ 132.845653][ T7286] ? __pfx_netlink_unicast+0x10/0x10 [ 132.851088][ T7286] ? netlink_sendmsg+0x650/0xb40 [ 132.856084][ T7286] ? skb_put+0x11b/0x210 [ 132.860434][ T7286] netlink_sendmsg+0x813/0xb40 [ 132.865290][ T7286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.870807][ T7286] ? aa_sock_msg_perm+0xf1/0x1b0 [ 132.875825][ T7286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.881254][ T7286] ____sys_sendmsg+0x972/0x9f0 [ 132.886105][ T7286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.891534][ T7286] ? import_iovec+0x73/0xa0 [ 132.896102][ T7286] ___sys_sendmsg+0x2a5/0x360 [ 132.896385][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.900926][ T7286] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.908583][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.912629][ T7286] ? preempt_schedule_common+0x82/0xd0 [ 132.924834][ T7286] ? preempt_schedule_thunk+0x16/0x30 [ 132.930362][ T7286] ? __fget_files+0x2a/0x420 [ 132.935104][ T7286] ? __fget_files+0x3a0/0x420 [ 132.939978][ T7286] __sys_sendmmsg+0x27c/0x4e0 [ 132.946648][ T7286] ? __pfx___sys_sendmmsg+0x10/0x10 [ 132.952858][ T7286] ? do_futex+0x395/0x420 [ 132.957492][ T7286] ? rcu_is_watching+0x15/0xb0 [ 132.962415][ T7286] __x64_sys_sendmmsg+0xa0/0xc0 [ 132.967337][ T7286] do_syscall_64+0x14d/0xf80 [ 132.972083][ T7286] ? trace_irq_disable+0x3b/0x150 [ 132.977283][ T7286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.983488][ T7286] ? clear_bhb_loop+0x40/0x90 [ 132.988234][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.994276][ T7286] RIP: 0033:0x7fcdc279c799 [ 132.998768][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.018781][ T7286] RSP: 002b:00007fcdc3622028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.027519][ T7286] RAX: ffffffffffffffda RBX: 00007fcdc2a15fa0 RCX: 00007fcdc279c799 [ 133.035890][ T7286] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 133.044290][ T7286] RBP: 00007fcdc2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 133.052429][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.060505][ T7286] R13: 00007fcdc2a16038 R14: 00007fcdc2a15fa0 R15: 00007fcdc2b3fa48 [ 133.068556][ T7286] [ 133.071821][ T7286] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 133.079146][ T7286] CPU: 0 UID: 0 PID: 7286 Comm: syz.2.622 Not tainted syzkaller #0 PREEMPT(full) [ 133.088387][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.098488][ T7286] Call Trace: [ 133.101810][ T7286] [ 133.104778][ T7286] vpanic+0x56c/0xa60 [ 133.108814][ T7286] ? __pfx__printk+0x10/0x10 [ 133.113458][ T7286] ? __pfx_vpanic+0x10/0x10 [ 133.118020][ T7286] ? is_bpf_text_address+0x292/0x2b0 [ 133.123444][ T7286] ? is_bpf_text_address+0x26/0x2b0 [ 133.128698][ T7286] panic+0xc5/0xd0 [ 133.132465][ T7286] ? __pfx_panic+0x10/0x10 [ 133.136938][ T7286] __warn+0x315/0x4f0 [ 133.140984][ T7286] ? u32_change+0x1da0/0x2720 [ 133.145692][ T7286] ? u32_change+0x1da0/0x2720 [ 133.150412][ T7286] __report_bug+0x29a/0x540 [ 133.154937][ T7286] ? ___sys_sendmsg+0x2a5/0x360 [ 133.159818][ T7286] ? __sys_sendmmsg+0x27c/0x4e0 [ 133.164701][ T7286] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 133.169756][ T7286] ? u32_change+0x1da0/0x2720 [ 133.174463][ T7286] ? __pfx___report_bug+0x10/0x10 [ 133.179525][ T7286] report_bug_entry+0x19a/0x290 [ 133.184403][ T7286] ? u32_change+0x1daf/0x2720 [ 133.189109][ T7286] ? u32_change+0x1db4/0x2720 [ 133.193818][ T7286] handle_bug+0xce/0x200 [ 133.198106][ T7286] exc_invalid_op+0x1a/0x50 [ 133.202647][ T7286] asm_exc_invalid_op+0x1a/0x20 [ 133.207516][ T7286] RIP: 0010:u32_change+0x1daf/0x2720 [ 133.212829][ T7286] Code: 3d 2a 42 43 06 01 75 33 e8 3e 57 0d f8 eb 50 e8 37 57 0d f8 48 8d 3d 20 75 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 00 97 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 12 57 0d f8 eb 24 e8 0b 57 0d f8 [ 133.232485][ T7286] RSP: 0018:ffffc90002eb6fc0 EFLAGS: 00010283 [ 133.238589][ T7286] RAX: ffffffff89b85689 RBX: ffff8880276e4400 RCX: 0000000000000010 [ 133.246582][ T7286] RDX: ffffffff8ce19700 RSI: 0000000000000020 RDI: ffffffff9020cbb0 [ 133.254576][ T7286] RBP: ffffc90002eb7178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 133.262574][ T7286] R10: dffffc0000000000 R11: fffffbfff20236d7 R12: ffff888034a234e8 [ 133.270566][ T7286] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 133.278570][ T7286] ? u32_change+0x1d99/0x2720 [ 133.283331][ T7286] ? __pfx_u32_change+0x10/0x10 [ 133.288211][ T7286] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 133.293890][ T7286] tc_new_tfilter+0xff8/0x1780 [ 133.298731][ T7286] ? __pfx_tc_new_tfilter+0x10/0x10 [ 133.303984][ T7286] ? __pfx_tc_new_tfilter+0x10/0x10 [ 133.309223][ T7286] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 133.314199][ T7286] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 133.319333][ T7286] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.324816][ T7286] ? ref_tracker_free+0x693/0x840 [ 133.329890][ T7286] ? __copy_skb_header+0xa3/0x4a0 [ 133.334956][ T7286] ? __pfx_ref_tracker_free+0x10/0x10 [ 133.340381][ T7286] ? __skb_clone+0x63/0x7a0 [ 133.344925][ T7286] netlink_rcv_skb+0x232/0x4b0 [ 133.349763][ T7286] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.355257][ T7286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.360586][ T7286] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.365855][ T7286] netlink_unicast+0x80f/0x9b0 [ 133.370670][ T7286] ? __pfx_netlink_unicast+0x10/0x10 [ 133.375996][ T7286] ? netlink_sendmsg+0x650/0xb40 [ 133.380961][ T7286] ? skb_put+0x11b/0x210 [ 133.385238][ T7286] netlink_sendmsg+0x813/0xb40 [ 133.390033][ T7286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.395354][ T7286] ? aa_sock_msg_perm+0xf1/0x1b0 [ 133.400327][ T7286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.405744][ T7286] ____sys_sendmsg+0x972/0x9f0 [ 133.410549][ T7286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.415870][ T7286] ? import_iovec+0x73/0xa0 [ 133.420401][ T7286] ___sys_sendmsg+0x2a5/0x360 [ 133.425152][ T7286] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.430825][ T7286] ? preempt_schedule_common+0x82/0xd0 [ 133.436321][ T7286] ? preempt_schedule_thunk+0x16/0x30 [ 133.442102][ T7286] ? __fget_files+0x2a/0x420 [ 133.446726][ T7286] ? __fget_files+0x3a0/0x420 [ 133.451470][ T7286] __sys_sendmmsg+0x27c/0x4e0 [ 133.456187][ T7286] ? __pfx___sys_sendmmsg+0x10/0x10 [ 133.461413][ T7286] ? do_futex+0x395/0x420 [ 133.465791][ T7286] ? rcu_is_watching+0x15/0xb0 [ 133.470592][ T7286] __x64_sys_sendmmsg+0xa0/0xc0 [ 133.475469][ T7286] do_syscall_64+0x14d/0xf80 [ 133.480305][ T7286] ? trace_irq_disable+0x3b/0x150 [ 133.485375][ T7286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.491482][ T7286] ? clear_bhb_loop+0x40/0x90 [ 133.496215][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.502134][ T7286] RIP: 0033:0x7fcdc279c799 [ 133.506579][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.526218][ T7286] RSP: 002b:00007fcdc3622028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.534658][ T7286] RAX: ffffffffffffffda RBX: 00007fcdc2a15fa0 RCX: 00007fcdc279c799 [ 133.542657][ T7286] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 133.550659][ T7286] RBP: 00007fcdc2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 133.558653][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.566654][ T7286] R13: 00007fcdc2a16038 R14: 00007fcdc2a15fa0 R15: 00007fcdc2b3fa48 [ 133.574679][ T7286] [ 133.578356][ T7286] Kernel Offset: disabled [ 133.582693][ T7286] Rebooting in 86400 seconds..