last executing test programs: 1m13.050089156s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4082, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) cachestat(r2, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x1) write$bt_hci(r2, &(0x7f0000000240)=ANY=[], 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendfile(r1, r1, 0x0, 0x5) 1m12.679003415s ago: executing program 1 (id=5): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002c40)={{{@in6=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000540)=0xe8) r2 = getegid() r3 = getpgrp(0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) sendmmsg$unix(r0, &(0x7f0000002e40)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000001c0)="9ce2b6064ec5fa8e733eadcd05232af58cee9d45caaa49d4b166ca33b83598eb7e0ca4ab1c509a25109616d1f910bb3f3651", 0x32}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000000640)="f3db85242201cdd139e193c0b442e3f83721577d8eae678dabfa6d64837b172b3cc6031c6b89616ebebb4066b201b0137a16f36ca1add1854348afb0d4b811dd98b214df4e0a2a25279d93e87b", 0x4d}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f00000006c0)="0ee09a96f1eb21c0e9e07fa3676c6969e2d9a0c6de049d0feab5dbcce8f492b400f37ce4d885df42b7754279745bacfdf1119a932da3d97f6313f38b1b340ba34e30e66f08869ff8aab4bb1a746fbe165a661e7b768fad1872a5cae066e29fad56af72772a2c6ed0b83769ca614cc769dd03f70bb54d4e11814e4c1f50595e90125440b3f13e99068d6d2f20375824bc33920adc76b898a9537983b166ad5c0efada1e1ebf19", 0xa6}, {&(0x7f0000000780)="99e2a310560311f73431946523be85f54e6ea2e7c96f35ca1080dc7d7b01120212181eae4ed5381fcf90bf18a89b1ce0e6a1d0aae310cf22533d7cab9791e0e4cd43cbdf3365e9dc619bc8a1a52a77d57ea48b039c1fe2c4e874c47596e574690d28ab31575e20807a595ee52bd77e404e8d91b25fc57f05fa7b4bdcae34ddfcdef5e67f1837aaecc35f602202d8e6ac03ec721c5c02bacd", 0x98}], 0x6, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, r6}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x78, 0x801}}], 0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080080003400000110000140000001000010000000000000000000084000a76ef2ccb60f7f550282ceb7f61c8d0ef771cbd186ea7b2d464b44f9898d29eb863887832812faa1ad5e116cbd35df9fb0753e414c80d6b18081728389a522abb2f5aff5d68e7c542dfec1c9407f2ab803834793ce3e3d44f3e5db593d3ac0d29738cee38935f6a24751854ff8bc29c8af7618f8f8d806ac60843579bcf44fd8071f4c743140e92f166fe73962d74f01abe38da67665540ffe096e6720b7567d7153d6ee477c4ef91657935cefc13f2351c0be7"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000580)={0x8e, 0x1e, 0x100000}, 0x20) fadvise64(r0, 0x92, 0x5, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0xa84bf5a6, 0x1, 0x32, 0xb}, 0x9c) sendto$inet6(r11, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e21, 0x4000, @local}, 0xffffffffffffff66) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x45, @ioapic={0xd000, 0xfffffbff, 0x2, 0x9, 0x0, [{0x3, 0x6}, {0x6, 0xf8, 0xb, '\x00', 0xda}, {0xff, 0x9, 0x3, '\x00', 0xe2}, {0x5, 0xe, 0x7, '\x00', 0x3}, {0x8, 0x2, 0x4, '\x00', 0x40}, {0x9, 0x5, 0xd, '\x00', 0xea}, {0x9, 0x68, 0x4, '\x00', 0xe}, {0x26, 0x8, 0xa0, '\x00', 0x56}, {0x3, 0x7, 0x4, '\x00', 0x4}, {0x13, 0x10, 0x9d, '\x00', 0x1}, {0x0, 0xc2, 0x38, '\x00', 0x6}, {0x5, 0x1, 0x5, '\x00', 0x4}, {0x7, 0x2, 0x1}, {0xe, 0x0, 0x8, '\x00', 0x8}, {0xa, 0xb, 0x9, '\x00', 0x7}, {0x7f, 0x2, 0x80, '\x00', 0x65}, {0x9c, 0x3, 0x8, '\x00', 0xe}, {0x6, 0x1, 0x6, '\x00', 0x3}, {0x1, 0x9, 0x1, '\x00', 0xb}, {0x4, 0x81, 0x9}, {0x2f, 0xf, 0x1c, '\x00', 0x2}, {0x6, 0x1, 0xf, '\x00', 0xfc}, {0xff, 0x1, 0x4, '\x00', 0x7}, {0x81, 0x3, 0x1, '\x00', 0x9}]}}) syz_usb_control_io(r10, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd00000a0000008d40000064c80f590018110000000000000000000000000000000000ff0200000000000000000000000000014e244e220018907804000000018000000200000000000000946590f3915ecf52aefd8ae13d906622d5ff524d07f1861bbef9e5e90cc6838c87b36aa2e07bec3cacee1755e3be45b1a5b0c0f6d893e693aceb78a20bcc0646e7d78c94cbdb36472ffc0ac4424c39128d9bec4ace4687325cf0754ac40d9c51433ce3d4f5de8c2c8cb05f9513a61a826f8df8bd8f1fa49810a907e1ed942eb158dd29fede7bb2e0f512787ee5d245614c17"], 0x4e) r12 = userfaultfd(0x80001) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r12, 0xc028aa05, &(0x7f00000000c0)={&(0x7f000037c000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000, 0x2}) 1m9.768669299s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 1m9.366695487s ago: executing program 1 (id=24): r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000400)={0xa, 0xffff, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x6b}, 0xc000040) 1m7.674001639s ago: executing program 1 (id=34): setrlimit(0x9, &(0x7f0000000000)) io_setup(0x20, &(0x7f0000001140)) 1m7.192421373s ago: executing program 32 (id=34): setrlimit(0x9, &(0x7f0000000000)) io_setup(0x20, &(0x7f0000001140)) 19.191490684s ago: executing program 4 (id=469): clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x203, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1003, 0x7, 0x2, 0x3, 0x0, 0x3}) 19.023420214s ago: executing program 4 (id=470): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000240)) 18.907644963s ago: executing program 4 (id=472): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 18.756339849s ago: executing program 0 (id=474): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 18.575321753s ago: executing program 0 (id=475): r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) lseek(r0, 0xfffffffffffffffe, 0x4) 18.352056497s ago: executing program 0 (id=476): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000f70000000100000008000100030000001c000480050003000100000005000300800000000500030007000000080002"], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 18.238069947s ago: executing program 0 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x84000, 0x0) 18.095889078s ago: executing program 0 (id=478): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x7, 0x6}) 17.996085732s ago: executing program 4 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 17.934575751s ago: executing program 4 (id=480): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000480)='Fs', 0x2}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x6, 0x1, [0x3]}, 0xa) 16.643672709s ago: executing program 4 (id=483): socket(0x11, 0x3, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x5412, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x100, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)={0x84, 0x4, 0x1, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2]}, 0x28) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x200) 16.144561202s ago: executing program 33 (id=483): socket(0x11, 0x3, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x5412, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x100, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)={0x84, 0x4, 0x1, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2]}, 0x28) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x200) 15.059430788s ago: executing program 0 (id=491): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 14.703469239s ago: executing program 34 (id=491): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 1.559947391s ago: executing program 2 (id=576): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, 0x0) 1.348333949s ago: executing program 2 (id=577): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 1.205170141s ago: executing program 3 (id=579): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r0) 1.104176385s ago: executing program 2 (id=580): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 884.246782ms ago: executing program 3 (id=581): fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 821.984934ms ago: executing program 3 (id=582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2702000000080009"], 0x1c}, 0x1, 0x2000000}, 0x40) 683.830975ms ago: executing program 3 (id=583): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) 468.076834ms ago: executing program 2 (id=584): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1}, {@in6=@loopback, 0x0, 0x32}, @in6=@private2, {}, {}, {0x0, 0xc08}}}, [@mark={0xc}]}, 0x104}}, 0x0) 413.493268ms ago: executing program 3 (id=585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x2000, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "77ed4f0e8cd8ca00fdf15e2c46a883743cbb36c7076c6912a317c3a3d81410d5", "56d53851e28619196e46347b8f01dde946cd156819a2b3366bdeb5cd2f520c5f85f0209a5c2d184b12df4aec0811d1fa", "5aa76fa35fa9fe32768b09a8fe73225656df2e40c50746e9917eb52d", {"fa3e8286a9722a59d23411479b3931cf", "6e9737710ea722122ee642c662d62639"}}}}}}}}, 0xc6) 289.491764ms ago: executing program 2 (id=586): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005640), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7040080000001e0000000c000600000000000000000024002f800c0002000200aaaaaaaaaaaa140003800500020003000000070001000100000008000300", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x24040080) 88.022595ms ago: executing program 2 (id=587): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x11}}], 0x1, 0x24008094) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 87.872037ms ago: executing program 3 (id=588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 0s ago: executing program 5 (id=485): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 84.625218][ T5854] cgroup: Unknown subsys name 'net' [ 84.735957][ T5854] cgroup: Unknown subsys name 'cpuset' [ 84.745882][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.464161][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.199070][ T5188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.216880][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.225171][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.233096][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.241802][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.251846][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.272004][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.292588][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.295108][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.300681][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.307861][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.322748][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.323092][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.330690][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.345483][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.345838][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.357260][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.367527][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.381364][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.393161][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.958143][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 90.072429][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 90.087898][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 90.158234][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 90.233020][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.241256][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.249259][ T5866] bridge_slave_0: entered allmulticast mode [ 90.257189][ T5866] bridge_slave_0: entered promiscuous mode [ 90.294707][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.301987][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.309188][ T5866] bridge_slave_1: entered allmulticast mode [ 90.317534][ T5866] bridge_slave_1: entered promiscuous mode [ 90.405631][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.413265][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.420445][ T5863] bridge_slave_0: entered allmulticast mode [ 90.428653][ T5863] bridge_slave_0: entered promiscuous mode [ 90.485507][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.492930][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.500136][ T5863] bridge_slave_1: entered allmulticast mode [ 90.508671][ T5863] bridge_slave_1: entered promiscuous mode [ 90.519409][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.536910][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.544730][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.552461][ T5868] bridge_slave_0: entered allmulticast mode [ 90.559766][ T5868] bridge_slave_0: entered promiscuous mode [ 90.583009][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.623184][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.630408][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.638123][ T5868] bridge_slave_1: entered allmulticast mode [ 90.646498][ T5868] bridge_slave_1: entered promiscuous mode [ 90.680226][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.687762][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.695287][ T5871] bridge_slave_0: entered allmulticast mode [ 90.702959][ T5871] bridge_slave_0: entered promiscuous mode [ 90.726319][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.739557][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.762938][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.770135][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.777969][ T5871] bridge_slave_1: entered allmulticast mode [ 90.785469][ T5871] bridge_slave_1: entered promiscuous mode [ 90.821114][ T5866] team0: Port device team_slave_0 added [ 90.844271][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.857398][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.887465][ T5863] team0: Port device team_slave_0 added [ 90.895095][ T5866] team0: Port device team_slave_1 added [ 90.929992][ T5863] team0: Port device team_slave_1 added [ 90.951133][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.965186][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.030087][ T5868] team0: Port device team_slave_0 added [ 91.051051][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.058595][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.085578][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.113923][ T5868] team0: Port device team_slave_1 added [ 91.122583][ T5871] team0: Port device team_slave_0 added [ 91.129302][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.136982][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.163155][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.176698][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.183783][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.209825][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.222245][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.229318][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.255486][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.282017][ T5871] team0: Port device team_slave_1 added [ 91.344307][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.351299][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.377858][ T51] Bluetooth: hci1: command tx timeout [ 91.383787][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.424669][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.432210][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.459008][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.461864][ T5870] Bluetooth: hci3: command tx timeout [ 91.469942][ T5188] Bluetooth: hci0: command tx timeout [ 91.475532][ T51] Bluetooth: hci2: command tx timeout [ 91.489868][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.497249][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.523504][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.535344][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.542800][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.568916][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.598282][ T5863] hsr_slave_0: entered promiscuous mode [ 91.606569][ T5863] hsr_slave_1: entered promiscuous mode [ 91.649018][ T5866] hsr_slave_0: entered promiscuous mode [ 91.655749][ T5866] hsr_slave_1: entered promiscuous mode [ 91.662666][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 91.668524][ T5866] Cannot create hsr debugfs directory [ 91.780578][ T5871] hsr_slave_0: entered promiscuous mode [ 91.787153][ T5871] hsr_slave_1: entered promiscuous mode [ 91.793612][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 91.799378][ T5871] Cannot create hsr debugfs directory [ 91.845641][ T5868] hsr_slave_0: entered promiscuous mode [ 91.853063][ T5868] hsr_slave_1: entered promiscuous mode [ 91.859277][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 91.865716][ T5868] Cannot create hsr debugfs directory [ 92.371162][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.392477][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.421243][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.447948][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.511259][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.555282][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.591289][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.624828][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.692450][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.725271][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.736941][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.765677][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.828874][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.839588][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.853112][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.867534][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.977399][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.019821][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.067172][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.074488][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.106775][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.113982][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.136831][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.203174][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.227618][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.259638][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.266816][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.288568][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.299527][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.306745][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.324394][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.353734][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.387653][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.394927][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.429712][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.446568][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.453843][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.468154][ T51] Bluetooth: hci1: command tx timeout [ 93.532658][ T51] Bluetooth: hci0: command tx timeout [ 93.538169][ T51] Bluetooth: hci2: command tx timeout [ 93.543841][ T5870] Bluetooth: hci3: command tx timeout [ 93.553068][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.560614][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.637413][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.644663][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.759281][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.925445][ T5863] veth0_vlan: entered promiscuous mode [ 93.948690][ T5863] veth1_vlan: entered promiscuous mode [ 94.034305][ T5863] veth0_macvtap: entered promiscuous mode [ 94.077979][ T5863] veth1_macvtap: entered promiscuous mode [ 94.149022][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.218636][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.262945][ T3571] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.292988][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.304699][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.323167][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.348995][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.380940][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.468634][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.479815][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.493974][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.568417][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.577039][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.595628][ T5866] veth0_vlan: entered promiscuous mode [ 94.637373][ T5868] veth0_vlan: entered promiscuous mode [ 94.673378][ T5866] veth1_vlan: entered promiscuous mode [ 94.690424][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.721348][ T5871] veth0_vlan: entered promiscuous mode [ 94.743902][ T5868] veth1_vlan: entered promiscuous mode [ 94.776496][ T5871] veth1_vlan: entered promiscuous mode [ 94.857212][ T5866] veth0_macvtap: entered promiscuous mode [ 94.897137][ T5866] veth1_macvtap: entered promiscuous mode [ 94.932846][ T5868] veth0_macvtap: entered promiscuous mode [ 94.948785][ T5871] veth0_macvtap: entered promiscuous mode [ 94.978151][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.989704][ T5871] veth1_macvtap: entered promiscuous mode [ 95.005765][ T5868] veth1_macvtap: entered promiscuous mode [ 95.027722][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.063586][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.095865][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.127175][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.159189][ T5959] netlink: 'syz.1.5': attribute type 33 has an invalid length. [ 95.168290][ T5959] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5'. [ 95.189149][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.201953][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.222414][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'. [ 95.232049][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'. [ 95.249792][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.282031][ T5959] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET) [ 95.317702][ T3538] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.330548][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.346480][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.354435][ T3538] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.363495][ T3538] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.389282][ T3538] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.422134][ T3538] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.437359][ T3538] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.448410][ T3538] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.466923][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.468981][ T3538] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.491340][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.532211][ T51] Bluetooth: hci1: command tx timeout [ 95.552133][ T892] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.581440][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.593356][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.614943][ T5870] Bluetooth: hci3: command tx timeout [ 95.620598][ T51] Bluetooth: hci2: command tx timeout [ 95.626327][ T5870] Bluetooth: hci0: command tx timeout [ 95.663655][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.689396][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.725048][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.733270][ T892] usb 2-1: Using ep0 maxpacket: 32 [ 95.748276][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.757696][ T892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.773648][ T892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.795499][ T892] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 95.808751][ T892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.825853][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.847372][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.862650][ T892] usb 2-1: config 0 descriptor?? [ 95.890578][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.917541][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.128698][ T5969] ======================================================= [ 96.128698][ T5969] WARNING: The mand mount option has been deprecated and [ 96.128698][ T5969] and is ignored by this kernel. Remove the mand [ 96.128698][ T5969] option from the mount to silence this warning. [ 96.128698][ T5969] ======================================================= [ 96.208460][ T5969] XFS (rnullb0): Invalid superblock magic number [ 96.302973][ T892] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 96.323437][ T5977] XFS (rnullb0): Invalid superblock magic number [ 96.488885][ T892] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 96.535567][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 96.687723][ T892] ft260 0003:0403:6030.0001: uart interface is not supported [ 96.705500][ T5995] capability: warning: `syz.3.11' uses 32-bit capabilities (legacy support in use) [ 96.913294][ T5952] usb 2-1: USB disconnect, device number 2 [ 96.963103][ T5931] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.122367][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 97.137585][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.177077][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.178141][ T6008] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.188199][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.229121][ T5931] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.245291][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.278454][ T5931] usb 4-1: config 0 descriptor?? [ 97.396777][ T44] cfg80211: failed to load regulatory.db [ 97.544801][ T6008] netlink: 124 bytes leftover after parsing attributes in process `syz.0.15'. [ 97.556717][ T6008] ISOFS: unsupported/invalid hardware sector size 4096 [ 97.568356][ T6008] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.611610][ T5870] Bluetooth: hci1: command tx timeout [ 97.685010][ T6020] process 'syz.2.17' launched './file0' with NULL argv: empty string added [ 97.697615][ T5870] Bluetooth: hci0: command tx timeout [ 97.697743][ T51] Bluetooth: hci3: command tx timeout [ 97.703441][ T5870] Bluetooth: hci2: command tx timeout [ 97.727337][ T5931] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 97.736157][ T5931] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 97.750056][ T5931] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 97.758595][ T5931] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 97.769361][ T5931] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 97.778469][ T5931] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 97.786362][ T5931] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 97.793704][ T5931] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 97.801173][ T5931] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 97.855963][ T5931] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input5 [ 98.875710][ T5931] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 99.906589][ T6038] tty tty4: ldisc open failed (-12), clearing slot 3 [ 100.049480][ T2155] usb 4-1: USB disconnect, device number 2 [ 100.370084][ T3538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.485836][ T3538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.595698][ T3538] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.848334][ T3538] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.047162][ T6080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.43'. [ 101.323512][ T3538] bridge_slave_1: left allmulticast mode [ 101.339998][ T3538] bridge_slave_1: left promiscuous mode [ 101.360026][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.417879][ T3538] bridge_slave_0: left allmulticast mode [ 101.432257][ T5188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.445185][ T5188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.455702][ T5188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.465229][ T5188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.473384][ T5188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.487173][ T3538] bridge_slave_0: left promiscuous mode [ 101.496187][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.588859][ T6094] netlink: 'syz.2.49': attribute type 18 has an invalid length. [ 102.126263][ T6109] Zero length message leads to an empty skb [ 102.406741][ T3538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.429255][ T3538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.451699][ T3538] bond0 (unregistering): Released all slaves [ 103.535141][ T51] Bluetooth: hci0: command tx timeout [ 103.691289][ T3538] hsr_slave_0: left promiscuous mode [ 103.741818][ T3538] hsr_slave_1: left promiscuous mode [ 103.770051][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.834586][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.862878][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.870331][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.946698][ T892] Process accounting resumed [ 103.980433][ T3538] veth1_macvtap: left promiscuous mode [ 103.999958][ T3538] veth0_macvtap: left promiscuous mode [ 104.011314][ T3538] veth1_vlan: left promiscuous mode [ 104.052264][ T3538] veth0_vlan: left promiscuous mode [ 104.941137][ T3538] team0 (unregistering): Port device team_slave_1 removed [ 104.976687][ T3538] team0 (unregistering): Port device team_slave_0 removed [ 105.381372][ T6185] tipc: Invalid UDP bearer configuration [ 105.381435][ T6185] tipc: Enabling of bearer rejected, failed to enable media [ 105.612639][ T51] Bluetooth: hci0: command tx timeout [ 105.644993][ T6194] usb usb1: check_ctrlrecip: process 6194 (syz.2.82) requesting ep 01 but needs 81 [ 105.989449][ T6088] chnl_net:caif_netlink_parms(): no params data found [ 106.497406][ T3538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.993958][ T3538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.031968][ T5188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.046277][ T5188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.054171][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.061353][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.070234][ T6088] bridge_slave_0: entered allmulticast mode [ 107.078308][ T6088] bridge_slave_0: entered promiscuous mode [ 107.088243][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.095523][ T5188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.103317][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.110699][ T6088] bridge_slave_1: entered allmulticast mode [ 107.119208][ T6088] bridge_slave_1: entered promiscuous mode [ 107.127187][ T5188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.164098][ T5188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.328364][ T3538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.367461][ T6088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.415091][ T6088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.527467][ T3538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.692240][ T5188] Bluetooth: hci0: command tx timeout [ 107.704884][ T6088] team0: Port device team_slave_0 added [ 107.734300][ T6088] team0: Port device team_slave_1 added [ 107.927527][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.946507][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.986031][ T6088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.038512][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.050976][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.104119][ T6088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.406814][ T3538] bridge_slave_1: left allmulticast mode [ 108.427848][ T3538] bridge_slave_1: left promiscuous mode [ 108.442537][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.483597][ T3538] bridge_slave_0: left allmulticast mode [ 108.489324][ T3538] bridge_slave_0: left promiscuous mode [ 108.550176][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.642845][ T6281] program syz.2.109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.787135][ T6285] netlink: 96 bytes leftover after parsing attributes in process `syz.2.111'. [ 108.803475][ T6285] netlink: 80 bytes leftover after parsing attributes in process `syz.2.111'. [ 108.974218][ T6288] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.103127][ T3538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.117546][ T3538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.128820][ T3538] bond0 (unregistering): Released all slaves [ 109.148410][ T6088] hsr_slave_0: entered promiscuous mode [ 109.155430][ T6088] hsr_slave_1: entered promiscuous mode [ 109.200271][ T6280] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.110'. [ 109.211725][ T5188] Bluetooth: hci2: command tx timeout [ 109.472784][ T6301] netlink: 48 bytes leftover after parsing attributes in process `syz.2.117'. [ 109.766130][ T6234] chnl_net:caif_netlink_parms(): no params data found [ 109.773080][ T5188] Bluetooth: hci0: command tx timeout [ 109.854194][ T6306] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 109.856218][ T892] IPVS: starting estimator thread 0... [ 109.972826][ T6311] IPVS: using max 26 ests per chain, 62400 per kthread [ 109.986291][ T3538] hsr_slave_0: left promiscuous mode [ 110.010707][ T3538] hsr_slave_1: left promiscuous mode [ 110.017765][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.026888][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.037723][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.056335][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.088695][ T3538] veth1_macvtap: left promiscuous mode [ 110.094488][ T3538] veth0_macvtap: left promiscuous mode [ 110.100474][ T3538] veth1_vlan: left promiscuous mode [ 110.110158][ T3538] veth0_vlan: left promiscuous mode [ 110.856523][ T3538] team0 (unregistering): Port device team_slave_1 removed [ 110.868087][ T30] audit: type=1326 audit(1754728248.936:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204eb8ebe9 code=0x7ffc0000 [ 110.909885][ T30] audit: type=1326 audit(1754728248.936:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204eb8ebe9 code=0x7ffc0000 [ 110.954845][ T30] audit: type=1326 audit(1754728248.936:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f204eb8ebe9 code=0x7ffc0000 [ 110.981008][ T30] audit: type=1326 audit(1754728248.936:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204eb8ebe9 code=0x7ffc0000 [ 111.004967][ T3538] team0 (unregistering): Port device team_slave_0 removed [ 111.051417][ T30] audit: type=1326 audit(1754728248.936:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204eb8ebe9 code=0x7ffc0000 [ 111.299316][ T5188] Bluetooth: hci2: command tx timeout [ 111.514640][ T6348] program syz.2.136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.970369][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.986079][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.005908][ T6234] bridge_slave_0: entered allmulticast mode [ 112.014433][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 112.014454][ T6234] bridge_slave_0: entered promiscuous mode [ 112.035266][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.052270][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.070247][ T6234] bridge_slave_1: entered allmulticast mode [ 112.085261][ T6234] bridge_slave_1: entered promiscuous mode [ 112.239154][ T6234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.265360][ T6234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.430952][ T6234] team0: Port device team_slave_0 added [ 112.463254][ T6234] team0: Port device team_slave_1 added [ 112.672413][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.679588][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.722081][ T6234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.753823][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.760833][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.839967][ T6234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.876779][ T6088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.896047][ T30] audit: type=1326 audit(1754728250.966:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8803f8ebe9 code=0x7ffc0000 [ 112.917013][ T6088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.935504][ T30] audit: type=1326 audit(1754728250.966:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8803f8ebe9 code=0x7ffc0000 [ 112.971241][ T6088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.976358][ T30] audit: type=1326 audit(1754728250.976:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f8803f8ebe9 code=0x7ffc0000 [ 113.067480][ T30] audit: type=1326 audit(1754728250.976:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8803f8ebe9 code=0x7ffc0000 [ 113.097586][ T6088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.203865][ T6234] hsr_slave_0: entered promiscuous mode [ 113.210936][ T6234] hsr_slave_1: entered promiscuous mode [ 113.233530][ T6234] debugfs: 'hsr0' already exists in 'hsr' [ 113.261798][ T6234] Cannot create hsr debugfs directory [ 113.373100][ T5188] Bluetooth: hci2: command tx timeout [ 113.870439][ T6088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.035139][ T6088] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.071771][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.079022][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.177890][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.185129][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.359043][ T6088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.389186][ T6088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.851785][ T6234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.907884][ T6234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.956228][ T6234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.012363][ T6234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.096372][ T6451] netlink: 168 bytes leftover after parsing attributes in process `syz.2.165'. [ 115.428825][ T6088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.451579][ T5188] Bluetooth: hci2: command tx timeout [ 115.655331][ T6234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.738458][ T6234] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.786551][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.793926][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.854011][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.861307][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.021422][ T6234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.369510][ T6088] veth0_vlan: entered promiscuous mode [ 116.421306][ T6088] veth1_vlan: entered promiscuous mode [ 116.620490][ T6088] veth0_macvtap: entered promiscuous mode [ 116.659292][ T6088] veth1_macvtap: entered promiscuous mode [ 116.720284][ T6500] netlink: 'syz.2.172': attribute type 17 has an invalid length. [ 116.790945][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.861672][ T6234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.870691][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.941022][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 116.961069][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.978220][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.001813][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.011339][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.150968][ T6234] veth0_vlan: entered promiscuous mode [ 117.185820][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.203374][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.230613][ T6234] veth1_vlan: entered promiscuous mode [ 117.303242][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.325887][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.407351][ T6234] veth0_macvtap: entered promiscuous mode [ 117.436704][ T6234] veth1_macvtap: entered promiscuous mode [ 117.453654][ T5911] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.508388][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.556003][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.615655][ T3538] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.631769][ T5911] usb 4-1: device descriptor read/64, error -71 [ 117.644326][ T3538] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.690986][ T3538] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.771293][ T3538] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.921704][ T5911] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.972016][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.993065][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.062219][ T5911] usb 4-1: device descriptor read/64, error -71 [ 118.100452][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.129172][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.179138][ T5911] usb usb4-port1: attempt power cycle [ 118.542347][ T5911] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.591228][ T5911] usb 4-1: device descriptor read/8, error -71 [ 118.831759][ T5911] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.865049][ T5911] usb 4-1: device descriptor read/8, error -71 [ 118.992290][ T5911] usb usb4-port1: unable to enumerate USB device [ 119.156653][ T6518] syz.4.36: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 119.197814][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.4.36 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 119.197843][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.197862][ T6518] Call Trace: [ 119.197870][ T6518] [ 119.197880][ T6518] dump_stack_lvl+0x189/0x250 [ 119.197931][ T6518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.197965][ T6518] ? __pfx__printk+0x10/0x10 [ 119.197998][ T6518] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 119.198033][ T6518] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 119.198067][ T6518] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 119.198104][ T6518] warn_alloc+0x214/0x310 [ 119.198138][ T6518] ? __pfx_warn_alloc+0x10/0x10 [ 119.198175][ T6518] ? __get_vm_area_node+0x28f/0x300 [ 119.198206][ T6518] ? hash_netiface_create+0x358/0xfe0 [ 119.198252][ T6518] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 119.198317][ T6518] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 119.198343][ T6518] ? hash_netiface_create+0x358/0xfe0 [ 119.198373][ T6518] ? __get_vm_area_node+0x28f/0x300 [ 119.198398][ T6518] ? hash_netiface_create+0x358/0xfe0 [ 119.198427][ T6518] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 119.198454][ T6518] ? hash_netiface_create+0x358/0xfe0 [ 119.198480][ T6518] ? do_syscall_64+0xfa/0x3b0 [ 119.198533][ T6518] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 119.198566][ T6518] ? rcu_is_watching+0x15/0xb0 [ 119.198598][ T6518] ? hash_netiface_create+0x358/0xfe0 [ 119.198625][ T6518] ? hash_netiface_create+0x358/0xfe0 [ 119.198650][ T6518] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 119.198676][ T6518] ? hash_netiface_create+0x358/0xfe0 [ 119.198704][ T6518] ? hash_netiface_create+0x2fe/0xfe0 [ 119.198737][ T6518] hash_netiface_create+0x358/0xfe0 [ 119.198781][ T6518] ? __nla_parse+0x40/0x60 [ 119.198817][ T6518] ? __pfx_hash_netiface_create+0x10/0x10 [ 119.198848][ T6518] ip_set_create+0xa97/0x1940 [ 119.198879][ T6518] ? ip_set_create+0x4a2/0x1940 [ 119.198921][ T6518] ? __pfx_ip_set_create+0x10/0x10 [ 119.198991][ T6518] nfnetlink_rcv_msg+0xb4d/0x1130 [ 119.199025][ T6518] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 119.199078][ T6518] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 119.199108][ T6518] ? kasan_save_free_info+0x46/0x50 [ 119.199195][ T6518] netlink_rcv_skb+0x208/0x470 [ 119.199238][ T6518] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 119.199273][ T6518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.199322][ T6518] ? bpf_lsm_capable+0x9/0x20 [ 119.199346][ T6518] ? security_capable+0x7e/0x2e0 [ 119.199385][ T6518] nfnetlink_rcv+0x26a/0x2520 [ 119.199419][ T6518] ? __dev_queue_xmit+0x1d79/0x3b50 [ 119.199460][ T6518] ? __dev_queue_xmit+0x27b/0x3b50 [ 119.199501][ T6518] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 119.199531][ T6518] ? __pfx___dev_queue_xmit+0x10/0x10 [ 119.199575][ T6518] ? ref_tracker_free+0x63a/0x7d0 [ 119.199607][ T6518] ? __asan_memcpy+0x40/0x70 [ 119.199639][ T6518] ? __pfx_ref_tracker_free+0x10/0x10 [ 119.199668][ T6518] ? __skb_clone+0x63/0x7a0 [ 119.199698][ T6518] ? __skb_clone+0x483/0x7a0 [ 119.199731][ T6518] ? skb_clone+0x246/0x3a0 [ 119.199761][ T6518] ? __netlink_deliver_tap+0x807/0x850 [ 119.199796][ T6518] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.199838][ T6518] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.199899][ T6518] netlink_unicast+0x82f/0x9e0 [ 119.199942][ T6518] ? __pfx_netlink_unicast+0x10/0x10 [ 119.199975][ T6518] ? netlink_sendmsg+0x642/0xb30 [ 119.199994][ T6518] ? skb_put+0x11b/0x210 [ 119.200020][ T6518] netlink_sendmsg+0x805/0xb30 [ 119.200052][ T6518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.200075][ T6518] ? aa_sock_msg_perm+0xf1/0x1d0 [ 119.200109][ T6518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.200140][ T6518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.200171][ T6518] __sock_sendmsg+0x21c/0x270 [ 119.200210][ T6518] ____sys_sendmsg+0x505/0x830 [ 119.200253][ T6518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.200289][ T6518] ? import_iovec+0x74/0xa0 [ 119.200321][ T6518] ___sys_sendmsg+0x21f/0x2a0 [ 119.200349][ T6518] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.200415][ T6518] ? __fget_files+0x2a/0x420 [ 119.200447][ T6518] ? __fget_files+0x3a0/0x420 [ 119.200492][ T6518] __x64_sys_sendmsg+0x19b/0x260 [ 119.200520][ T6518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.200557][ T6518] ? rcu_is_watching+0x15/0xb0 [ 119.200590][ T6518] ? do_syscall_64+0xbe/0x3b0 [ 119.200613][ T6518] do_syscall_64+0xfa/0x3b0 [ 119.200631][ T6518] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.200663][ T6518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.200698][ T6518] ? clear_bhb_loop+0x60/0xb0 [ 119.200725][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.200747][ T6518] RIP: 0033:0x7efcdaf8ebe9 [ 119.200777][ T6518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.200796][ T6518] RSP: 002b:00007efcdbdb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.200819][ T6518] RAX: ffffffffffffffda RBX: 00007efcdb1b5fa0 RCX: 00007efcdaf8ebe9 [ 119.200835][ T6518] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 119.200849][ T6518] RBP: 00007efcdb011e19 R08: 0000000000000000 R09: 0000000000000000 [ 119.200863][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.200875][ T6518] R13: 00007efcdb1b6038 R14: 00007efcdb1b5fa0 R15: 00007fff8aff14d8 [ 119.200909][ T6518] [ 119.201078][ T6518] Mem-Info: [ 119.773150][ T6518] active_anon:11149 inactive_anon:0 isolated_anon:0 [ 119.773150][ T6518] active_file:7487 inactive_file:39863 isolated_file:0 [ 119.773150][ T6518] unevictable:769 dirty:73 writeback:0 [ 119.773150][ T6518] slab_reclaimable:10299 slab_unreclaimable:92831 [ 119.773150][ T6518] mapped:29210 shmem:6732 pagetables:1261 [ 119.773150][ T6518] sec_pagetables:0 bounce:0 [ 119.773150][ T6518] kernel_misc_reclaimable:0 [ 119.773150][ T6518] free:1304776 free_pcp:15012 free_cma:0 [ 119.818763][ T6518] Node 0 active_anon:44596kB inactive_anon:0kB active_file:29948kB inactive_file:159252kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:116840kB dirty:292kB writeback:0kB shmem:25392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11592kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 119.857696][ T6518] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 119.899189][ T6518] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 119.930934][ T6518] lowmem_reserve[]: 0 2495 2497 2497 2497 [ 119.941771][ T6518] Node 0 DMA32 free:1317532kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46548kB inactive_anon:0kB active_file:31648kB inactive_file:158188kB unevictable:1540kB writepending:292kB present:3129332kB managed:2555812kB mlocked:4kB bounce:0kB free_pcp:36796kB local_pcp:16828kB free_cma:0kB [ 119.977307][ T6518] lowmem_reserve[]: 0 0 1 1 1 [ 119.982578][ T6518] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1064kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 120.012865][ T6518] lowmem_reserve[]: 0 0 0 0 0 [ 120.017759][ T6518] Node 1 Normal free:3885908kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20096kB local_pcp:12832kB free_cma:0kB [ 120.064485][ T6518] lowmem_reserve[]: 0 0 0 0 0 [ 120.069652][ T6518] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.089792][ T6518] Node 0 DMA32: 2*4kB (UE) 1*8kB (U) 2*16kB (UM) 2*32kB (UE) 0*64kB 2*128kB (UM) 3*256kB (UME) 3*512kB (UME) 0*1024kB 0*2048kB 321*4096kB (M) = 1317488kB [ 120.113317][ T6518] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 120.129596][ T6518] Node 1 Normal: 201*4kB (UME) 54*8kB (UME) 50*16kB (UME) 71*32kB (UME) 22*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3885908kB [ 120.175926][ T6518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.189953][ T6518] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.200257][ T6518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.210517][ T6518] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.276517][ T6518] 56605 total pagecache pages [ 120.298767][ T6518] 0 pages in swap cache [ 120.305831][ T6518] Free swap = 124996kB [ 120.310897][ T6518] Total swap = 124996kB [ 120.319180][ T6518] 2097051 pages RAM [ 120.328745][ T6552] sctp: [Deprecated]: syz.3.181 (pid 6552) Use of int in max_burst socket option. [ 120.328745][ T6552] Use struct sctp_assoc_value instead [ 120.344859][ T6518] 0 pages HighMem/MovableOnly [ 120.349583][ T6518] 426200 pages reserved [ 120.355324][ T6518] 0 pages cma reserved [ 121.556073][ T6564] netlink: 124 bytes leftover after parsing attributes in process `syz.3.185'. [ 121.582744][ T6564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.185'. [ 121.728425][ T6567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.186'. [ 122.247813][ T6581] netlink: 'syz.3.192': attribute type 10 has an invalid length. [ 122.306748][ T6581] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 122.318144][ T6584] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 123.124657][ T6606] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.202'. [ 123.305383][ T6612] netlink: 68 bytes leftover after parsing attributes in process `syz.0.207'. [ 123.363097][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 125.186175][ T6657] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.123057][ T6690] netlink: 48 bytes leftover after parsing attributes in process `syz.4.238'. [ 126.163446][ T30] audit: type=1326 audit(1754728264.226:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfef8ebe9 code=0x7ffc0000 [ 126.167157][ T6692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.240'. [ 126.240550][ T30] audit: type=1326 audit(1754728264.226:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfef8ebe9 code=0x7ffc0000 [ 126.332089][ T30] audit: type=1326 audit(1754728264.256:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f3dfef8ebe9 code=0x7ffc0000 [ 126.392342][ T6700] sctp: [Deprecated]: syz.0.242 (pid 6700) Use of int in maxseg socket option. [ 126.392342][ T6700] Use struct sctp_assoc_value instead [ 126.441614][ T30] audit: type=1326 audit(1754728264.256:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfef8ebe9 code=0x7ffc0000 [ 126.487447][ T30] audit: type=1326 audit(1754728264.256:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfef8ebe9 code=0x7ffc0000 [ 126.536764][ T30] audit: type=1326 audit(1754728264.256:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3dfef8ebe9 code=0x7ffc0000 [ 126.645090][ T30] audit: type=1326 audit(1754728264.256:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfef8ebe9 code=0x7ffc0000 [ 126.694314][ T30] audit: type=1326 audit(1754728264.256:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3dfef8ebe9 code=0x7ffc0000 [ 126.762556][ T30] audit: type=1326 audit(1754728264.256:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfef8ebe9 code=0x7ffc0000 [ 127.551211][ T6735] netlink: 7 bytes leftover after parsing attributes in process `syz.3.252'. [ 127.573124][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 128.138536][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 128.285089][ T30] audit: type=1326 audit(1754728266.356:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfef8ebe9 code=0x7ffc0000 [ 130.839929][ T6851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.293'. [ 131.250504][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 131.309172][ T6864] openvswitch: netlink: Flow key attr not present in new flow. [ 131.830811][ T6889] netlink: 168 bytes leftover after parsing attributes in process `syz.0.306'. [ 131.978586][ T6892] raw_sendmsg: syz.2.308 forgot to set AF_INET. Fix it! [ 132.142029][ T6900] netlink: 72 bytes leftover after parsing attributes in process `syz.2.311'. [ 132.181753][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 132.216552][ T6902] vxcan1 speed is unknown, defaulting to 1000 [ 132.238730][ T6907] netlink: 72 bytes leftover after parsing attributes in process `syz.2.311'. [ 132.259286][ T6902] vxcan1 speed is unknown, defaulting to 1000 [ 132.271792][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 132.284603][ T6902] vxcan1 speed is unknown, defaulting to 1000 [ 133.162529][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 133.212033][ T6930] openvswitch: netlink: Flow key attr not present in new flow. [ 133.246462][ T6902] infiniband syz2: set active [ 133.252889][ T892] vxcan1 speed is unknown, defaulting to 1000 [ 133.281774][ T6902] infiniband syz2: added vxcan1 [ 133.290053][ T6902] syz2: rxe_create_cq: returned err = -12 [ 133.326779][ T6902] infiniband syz2: Couldn't create ib_mad CQ [ 133.341873][ T6902] infiniband syz2: Couldn't open port 1 [ 133.482568][ T6902] RDS/IB: syz2: added [ 133.490493][ T6902] smc: adding ib device syz2 with port count 1 [ 133.510501][ T6902] smc: ib device syz2 port 1 has pnetid [ 133.521394][ T892] vxcan1 speed is unknown, defaulting to 1000 [ 133.542693][ T6902] vxcan1 speed is unknown, defaulting to 1000 [ 134.446953][ T6902] vxcan1 speed is unknown, defaulting to 1000 [ 135.087529][ T6970] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.331'. [ 135.294634][ T6975] program syz.0.332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.381839][ T6902] vxcan1 speed is unknown, defaulting to 1000 [ 135.891426][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 137.201064][ T6902] vxcan1 speed is unknown, defaulting to 1000 [ 137.337902][ T7014] program syz.2.343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.766984][ T7026] capability: warning: `syz.2.347' uses deprecated v2 capabilities in a way that may be insecure [ 138.337651][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.353316][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.495252][ T7050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'. [ 139.131031][ T7073] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 141.201905][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 141.201924][ T30] audit: type=1326 audit(1754728279.266:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf8ebe9 code=0x7ffc0000 [ 141.230606][ T7144] netlink: 56 bytes leftover after parsing attributes in process `syz.0.388'. [ 141.288216][ T7144] netlink: 380 bytes leftover after parsing attributes in process `syz.0.388'. [ 141.311295][ T30] audit: type=1326 audit(1754728279.266:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf8ebe9 code=0x7ffc0000 [ 141.361589][ T7144] netlink: 56 bytes leftover after parsing attributes in process `syz.0.388'. [ 141.389025][ T30] audit: type=1326 audit(1754728279.336:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7efcdaf8ebe9 code=0x7ffc0000 [ 141.480103][ T30] audit: type=1326 audit(1754728279.336:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf8ebe9 code=0x7ffc0000 [ 141.538787][ T30] audit: type=1326 audit(1754728279.336:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7efcdaf8ebe9 code=0x7ffc0000 [ 141.572278][ T30] audit: type=1326 audit(1754728279.336:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf8ebe9 code=0x7ffc0000 [ 141.739979][ T30] audit: type=1326 audit(1754728279.346:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7efcdaf8ebe9 code=0x7ffc0000 [ 141.798890][ T30] audit: type=1326 audit(1754728279.346:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf8ebe9 code=0x7ffc0000 [ 143.550226][ T7206] usb usb1: usbfs: process 7206 (syz.3.413) did not claim interface 0 before use [ 143.597240][ T30] audit: type=1326 audit(1754728281.646:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf8ebe9 code=0x7ffc0000 [ 143.682050][ T30] audit: type=1326 audit(1754728281.666:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.4.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf8ebe9 code=0x7ffc0000 [ 145.624604][ T7252] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 145.684876][ T7255] program syz.4.434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.235506][ T7278] netlink: 104 bytes leftover after parsing attributes in process `syz.0.443'. [ 146.296539][ T7281] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.263387][ T7284] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.321837][ T7284] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 147.432872][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'. [ 147.484765][ T7284] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 147.499269][ T7332] netlink: 52 bytes leftover after parsing attributes in process `syz.2.452'. [ 147.524674][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'. [ 147.574179][ T7284] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.601834][ T7284] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.643915][ T7284] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.742821][ T7284] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.748924][ T7284] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.799286][ T7284] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.882552][ T7284] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.894149][ T7284] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.992723][ T7284] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 148.415746][ T7352] syzkaller0: entered promiscuous mode [ 148.421580][ T7352] syzkaller0: entered allmulticast mode [ 148.462425][ T7361] usb usb8: usbfs: process 7361 (syz.3.465) did not claim interface 12 before use [ 148.573275][ T5188] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.626571][ T5188] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.771613][ T5188] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.944483][ T5188] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.654294][ T5188] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.977000][ T7376] vxcan1 speed is unknown, defaulting to 1000 [ 151.350311][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.394431][ T7394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.484'. [ 151.485322][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.644324][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.692350][ T5188] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.754434][ T7397] netlink: 184 bytes leftover after parsing attributes in process `syz.2.486'. [ 151.820667][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.078046][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.087504][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.096168][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.105742][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.114505][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.360875][ T12] bridge_slave_1: left allmulticast mode [ 152.382646][ T12] bridge_slave_1: left promiscuous mode [ 152.393123][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.450901][ T12] bridge_slave_0: left allmulticast mode [ 152.469120][ T12] bridge_slave_0: left promiscuous mode [ 152.483952][ T7409] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.489'. [ 152.501001][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.746999][ T5188] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.474475][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.487738][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.499621][ T12] bond0 (unregistering): Released all slaves [ 153.527911][ T7401] vxcan1 speed is unknown, defaulting to 1000 [ 153.641944][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.669046][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.677913][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.686230][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.702130][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.771873][ T5188] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.916222][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 154.108844][ T7432] netlink: 224 bytes leftover after parsing attributes in process `syz.2.495'. [ 154.133995][ T7432] ksmbd: Unknown IPC event: 4, ignore. [ 154.177904][ T5188] Bluetooth: hci0: command tx timeout [ 154.268944][ T7425] vxcan1 speed is unknown, defaulting to 1000 [ 154.687872][ T7444] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.498'. [ 155.062029][ T7456] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 155.606674][ T12] hsr_slave_0: left promiscuous mode [ 155.623208][ T12] hsr_slave_1: left promiscuous mode [ 155.640733][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.657827][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.668962][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.680032][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.714600][ T12] veth1_macvtap: left promiscuous mode [ 155.720222][ T12] veth0_macvtap: left promiscuous mode [ 155.726659][ T12] veth1_vlan: left promiscuous mode [ 155.732179][ T12] veth0_vlan: left promiscuous mode [ 155.771777][ T5188] Bluetooth: hci2: command tx timeout [ 156.190745][ T12] team0 (unregistering): Port device team_slave_1 removed [ 156.228667][ T12] team0 (unregistering): Port device team_slave_0 removed [ 156.254163][ T5188] Bluetooth: hci0: command tx timeout [ 156.872764][ T7401] chnl_net:caif_netlink_parms(): no params data found [ 157.204748][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'. [ 157.574118][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.600045][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.632595][ T7401] bridge_slave_0: entered allmulticast mode [ 157.679248][ T7401] bridge_slave_0: entered promiscuous mode [ 157.765885][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.776875][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.787424][ T7401] bridge_slave_1: entered allmulticast mode [ 157.799811][ T7401] bridge_slave_1: entered promiscuous mode [ 157.852171][ T5188] Bluetooth: hci2: command tx timeout [ 158.039323][ T7401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.142293][ T7425] chnl_net:caif_netlink_parms(): no params data found [ 158.195836][ T7401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.332781][ T5188] Bluetooth: hci0: command tx timeout [ 158.359497][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.519399][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.549966][ T7401] team0: Port device team_slave_0 added [ 158.589082][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 158.589101][ T30] audit: type=1326 audit(1754728552.657:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204eb8ebe9 code=0x7ffc0000 [ 158.621387][ T30] audit: type=1326 audit(1754728552.657:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204eb8ebe9 code=0x7ffc0000 [ 158.646571][ T30] audit: type=1326 audit(1754728552.687:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f204eb8ebe9 code=0x7ffc0000 [ 158.671382][ T30] audit: type=1326 audit(1754728552.687:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204eb8ebe9 code=0x7ffc0000 [ 158.706623][ T30] audit: type=1326 audit(1754728552.687:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204eb8ebe9 code=0x7ffc0000 [ 158.759016][ T7401] team0: Port device team_slave_1 added [ 158.796522][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.902810][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.941713][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.964270][ T7425] bridge_slave_0: entered allmulticast mode [ 158.993512][ T7425] bridge_slave_0: entered promiscuous mode [ 159.010802][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.021339][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.054459][ T7401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.073987][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.081161][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.110416][ T7401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.139633][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.166424][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.173819][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.181086][ T7425] bridge_slave_1: entered allmulticast mode [ 159.190177][ T7425] bridge_slave_1: entered promiscuous mode [ 159.300101][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'. [ 159.471713][ T7401] hsr_slave_0: entered promiscuous mode [ 159.478542][ T7401] hsr_slave_1: entered promiscuous mode [ 159.511388][ T7425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.538939][ T7425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.829181][ T7425] team0: Port device team_slave_0 added [ 159.878808][ T7567] sg_write: process 364 (syz.3.533) changed security contexts after opening file descriptor, this is not allowed. [ 159.932017][ T5188] Bluetooth: hci2: command tx timeout [ 159.966901][ T7425] team0: Port device team_slave_1 added [ 160.156553][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.171186][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.198153][ T7425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.229364][ T12] bridge_slave_1: left allmulticast mode [ 160.235652][ T12] bridge_slave_1: left promiscuous mode [ 160.242082][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.257402][ T12] bridge_slave_0: left allmulticast mode [ 160.263768][ T12] bridge_slave_0: left promiscuous mode [ 160.269595][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.411817][ T5188] Bluetooth: hci0: command tx timeout [ 160.789397][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.808020][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.823276][ T12] bond0 (unregistering): Released all slaves [ 160.886059][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.922260][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.977132][ T7425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.279871][ T7425] hsr_slave_0: entered promiscuous mode [ 161.287848][ T7425] hsr_slave_1: entered promiscuous mode [ 161.307736][ T7425] debugfs: 'hsr0' already exists in 'hsr' [ 161.313751][ T7425] Cannot create hsr debugfs directory [ 162.012811][ T5188] Bluetooth: hci2: command tx timeout [ 162.200729][ T12] hsr_slave_0: left promiscuous mode [ 162.237788][ T12] hsr_slave_1: left promiscuous mode [ 162.248990][ T7616] netlink: 14 bytes leftover after parsing attributes in process `syz.3.547'. [ 162.249753][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.272470][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.287091][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.300659][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.368319][ T12] veth1_macvtap: left promiscuous mode [ 162.376324][ T12] veth0_macvtap: left promiscuous mode [ 162.386564][ T12] veth1_vlan: left promiscuous mode [ 162.392124][ T12] veth0_vlan: left promiscuous mode [ 162.758267][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 162.777132][ T7630] openvswitch: netlink: Flow key attr not present in new flow. [ 162.985239][ T7635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.552'. [ 163.160503][ T12] team0 (unregistering): Port device team_slave_1 removed [ 163.201196][ T12] team0 (unregistering): Port device team_slave_0 removed [ 163.730956][ T7616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.745393][ T7616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.756515][ T7616] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 163.768094][ T7616] bond0 (unregistering): Released all slaves [ 163.843751][ T7401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.882432][ T7401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.950894][ T7401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.953159][ T2155] kernel write not supported for file /408/clear_refs (pid: 2155 comm: kworker/1:2) [ 164.047576][ T7401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.246469][ T7425] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.260265][ T7425] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.377991][ T7401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.393230][ T7425] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.440117][ T7401] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.480682][ T7425] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.493223][ T7658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.560'. [ 164.516256][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.523525][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.609060][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.616369][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.741355][ T7401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.925469][ T7425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.978051][ T7425] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.017400][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.024659][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.110878][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.118148][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.369572][ T7693] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.568'. [ 165.409876][ T7693] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.568'. [ 165.438446][ T7401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.448601][ T7693] netlink: 508 bytes leftover after parsing attributes in process `syz.3.568'. [ 165.660466][ T7705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.570'. [ 165.928000][ T7425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.388067][ T7401] veth0_vlan: entered promiscuous mode [ 166.437645][ T7401] veth1_vlan: entered promiscuous mode [ 166.619550][ T7401] veth0_macvtap: entered promiscuous mode [ 166.658664][ T7401] veth1_macvtap: entered promiscuous mode [ 166.734791][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.798087][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.872686][ T3538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.899796][ T3538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.981846][ T3538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.019489][ T3538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.210545][ T7425] veth0_vlan: entered promiscuous mode [ 167.259978][ T7425] veth1_vlan: entered promiscuous mode [ 167.344178][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.365394][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.463330][ T7425] veth0_macvtap: entered promiscuous mode [ 167.518123][ T7425] veth1_macvtap: entered promiscuous mode [ 167.551167][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.565644][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.596494][ T7767] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 167.661428][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.723886][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.796671][ T7771] ------------[ cut here ]------------ [ 167.802638][ T7771] 'send_pkt()' returns 0, but 65536 expected [ 167.829182][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.840701][ T7771] WARNING: net/vmw_vsock/virtio_transport_common.c:428 at virtio_transport_send_pkt_info+0xd11/0xf00, CPU#1: syz.2.587/7771 [ 167.853903][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.854690][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.855877][ T3538] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.863592][ T7771] Modules linked in: [ 167.863659][ T7771] CPU: 1 UID: 0 PID: 7771 Comm: syz.2.587 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 167.863690][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.863706][ T7771] RIP: 0010:virtio_transport_send_pkt_info+0xd11/0xf00 [ 167.863749][ T7771] Code: 0f 0b 90 bd f2 ff ff ff eb bc e8 0a bb 5d f6 c6 05 c7 7a 6c 04 01 90 48 c7 c7 c0 67 da 8c 44 89 f6 4c 89 ea e8 60 51 21 f6 90 <0f> 0b 90 90 e9 e1 fe ff ff e8 e1 ba 5d f6 90 0f 0b 90 e9 c5 f7 ff [ 167.863771][ T7771] RSP: 0018:ffffc90003087530 EFLAGS: 00010246 [ 167.863795][ T7771] RAX: 2e1af04d27bf7c00 RBX: 0000000000010000 RCX: 0000000000080000 [ 167.863813][ T7771] RDX: ffffc9000c2c3000 RSI: 000000000000abb7 RDI: 000000000000abb8 [ 167.863831][ T7771] RBP: ffffffff8fc8be10 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 167.863852][ T7771] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 167.863871][ T7771] R13: 0000000000010000 R14: 0000000000000000 R15: ffff88805ce32da4 [ 167.863888][ T7771] FS: 00007f204f9116c0(0000) GS:ffff8881258db000(0000) knlGS:0000000000000000 [ 167.863908][ T7771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 167.863925][ T7771] CR2: 0000200000001000 CR3: 000000007b4c4000 CR4: 00000000003526f0 [ 167.863948][ T7771] Call Trace: [ 168.009636][ T7771] [ 168.012790][ T7771] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.018080][ T7771] virtio_transport_seqpacket_enqueue+0x143/0x1c0 [ 168.024699][ T7771] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 168.031771][ T7771] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 168.038163][ T7771] ? do_raw_spin_unlock+0x122/0x240 [ 168.043519][ T7771] ? remove_wait_queue+0x33/0x120 [ 168.049272][ T7771] vsock_connectible_sendmsg+0xac7/0x1050 [ 168.055325][ T7771] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 168.061626][ T7771] ? __pfx_aa_sk_perm+0x10/0x10 [ 168.066548][ T7771] ? __pfx_woken_wake_function+0x10/0x10 [ 168.072331][ T7771] ? aa_sock_msg_perm+0xf1/0x1d0 [ 168.077358][ T7771] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.082776][ T7771] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 168.089025][ T7771] __sock_sendmsg+0x21c/0x270 [ 168.093925][ T7771] ____sys_sendmsg+0x52d/0x830 [ 168.099009][ T7771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.104765][ T7771] ? import_iovec+0x74/0xa0 [ 168.109354][ T7771] ___sys_sendmsg+0x21f/0x2a0 [ 168.114278][ T7771] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.119579][ T7771] ? __fget_files+0x2a/0x420 [ 168.124314][ T7771] ? __fget_files+0x3a0/0x420 [ 168.129059][ T7771] __sys_sendmmsg+0x227/0x430 [ 168.133868][ T7771] ? __pfx___sys_sendmmsg+0x10/0x10 [ 168.139115][ T7771] ? do_futex+0x395/0x420 [ 168.143602][ T7771] ? rcu_is_watching+0x15/0xb0 [ 168.148476][ T7771] __x64_sys_sendmmsg+0xa0/0xc0 [ 168.153463][ T7771] do_syscall_64+0xfa/0x3b0 [ 168.158025][ T7771] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.163361][ T7771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.169481][ T7771] ? clear_bhb_loop+0x60/0xb0 [ 168.174367][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.180311][ T7771] RIP: 0033:0x7f204eb8ebe9 [ 168.184840][ T7771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.204786][ T7771] RSP: 002b:00007f204f911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 168.213565][ T7771] RAX: ffffffffffffffda RBX: 00007f204edb5fa0 RCX: 00007f204eb8ebe9 [ 168.221685][ T7771] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 168.229726][ T7771] RBP: 00007f204ec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 168.237820][ T7771] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 168.245913][ T7771] R13: 00007f204edb6038 R14: 00007f204edb5fa0 R15: 00007ffe028441f8 [ 168.254226][ T7771] [ 168.257413][ T7771] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 168.264752][ T7771] CPU: 1 UID: 0 PID: 7771 Comm: syz.2.587 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) [ 168.275814][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.285912][ T7771] Call Trace: [ 168.289218][ T7771] [ 168.292160][ T7771] dump_stack_lvl+0x99/0x250 [ 168.296790][ T7771] ? __asan_memcpy+0x40/0x70 [ 168.301411][ T7771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.306731][ T7771] ? __pfx__printk+0x10/0x10 [ 168.311389][ T7771] vpanic+0x281/0x750 [ 168.315485][ T7771] ? __pfx__printk+0x10/0x10 [ 168.320108][ T7771] ? __pfx_vpanic+0x10/0x10 [ 168.324628][ T7771] ? is_bpf_text_address+0x292/0x2b0 [ 168.330012][ T7771] ? is_bpf_text_address+0x26/0x2b0 [ 168.335236][ T7771] panic+0xb9/0xc0 [ 168.338975][ T7771] ? __pfx_panic+0x10/0x10 [ 168.343429][ T7771] __warn+0x334/0x4c0 [ 168.347428][ T7771] ? virtio_transport_send_pkt_info+0xd11/0xf00 [ 168.353722][ T7771] ? virtio_transport_send_pkt_info+0xd11/0xf00 [ 168.359989][ T7771] report_bug+0x2be/0x4f0 [ 168.364339][ T7771] ? virtio_transport_send_pkt_info+0xd11/0xf00 [ 168.370601][ T7771] ? virtio_transport_send_pkt_info+0xd11/0xf00 [ 168.376865][ T7771] ? virtio_transport_send_pkt_info+0xd13/0xf00 [ 168.383123][ T7771] handle_bug+0x84/0x160 [ 168.387402][ T7771] exc_invalid_op+0x1a/0x50 [ 168.391942][ T7771] asm_exc_invalid_op+0x1a/0x20 [ 168.396895][ T7771] RIP: 0010:virtio_transport_send_pkt_info+0xd11/0xf00 [ 168.403854][ T7771] Code: 0f 0b 90 bd f2 ff ff ff eb bc e8 0a bb 5d f6 c6 05 c7 7a 6c 04 01 90 48 c7 c7 c0 67 da 8c 44 89 f6 4c 89 ea e8 60 51 21 f6 90 <0f> 0b 90 90 e9 e1 fe ff ff e8 e1 ba 5d f6 90 0f 0b 90 e9 c5 f7 ff [ 168.423484][ T7771] RSP: 0018:ffffc90003087530 EFLAGS: 00010246 [ 168.429578][ T7771] RAX: 2e1af04d27bf7c00 RBX: 0000000000010000 RCX: 0000000000080000 [ 168.437562][ T7771] RDX: ffffc9000c2c3000 RSI: 000000000000abb7 RDI: 000000000000abb8 [ 168.445546][ T7771] RBP: ffffffff8fc8be10 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 168.453530][ T7771] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 168.461518][ T7771] R13: 0000000000010000 R14: 0000000000000000 R15: ffff88805ce32da4 [ 168.469522][ T7771] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.474763][ T7771] virtio_transport_seqpacket_enqueue+0x143/0x1c0 [ 168.481200][ T7771] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 168.488157][ T7771] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 168.494505][ T7771] ? do_raw_spin_unlock+0x122/0x240 [ 168.499745][ T7771] ? remove_wait_queue+0x33/0x120 [ 168.504798][ T7771] vsock_connectible_sendmsg+0xac7/0x1050 [ 168.510556][ T7771] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 168.516745][ T7771] ? __pfx_aa_sk_perm+0x10/0x10 [ 168.521624][ T7771] ? __pfx_woken_wake_function+0x10/0x10 [ 168.527273][ T7771] ? aa_sock_msg_perm+0xf1/0x1d0 [ 168.532230][ T7771] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.537552][ T7771] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 168.543728][ T7771] __sock_sendmsg+0x21c/0x270 [ 168.548436][ T7771] ____sys_sendmsg+0x52d/0x830 [ 168.553242][ T7771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.558555][ T7771] ? import_iovec+0x74/0xa0 [ 168.563078][ T7771] ___sys_sendmsg+0x21f/0x2a0 [ 168.567775][ T7771] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.573013][ T7771] ? __fget_files+0x2a/0x420 [ 168.577622][ T7771] ? __fget_files+0x3a0/0x420 [ 168.582325][ T7771] __sys_sendmmsg+0x227/0x430 [ 168.587027][ T7771] ? __pfx___sys_sendmmsg+0x10/0x10 [ 168.592241][ T7771] ? do_futex+0x395/0x420 [ 168.596605][ T7771] ? rcu_is_watching+0x15/0xb0 [ 168.601391][ T7771] __x64_sys_sendmmsg+0xa0/0xc0 [ 168.606355][ T7771] do_syscall_64+0xfa/0x3b0 [ 168.610869][ T7771] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.616104][ T7771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.622200][ T7771] ? clear_bhb_loop+0x60/0xb0 [ 168.626896][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.632800][ T7771] RIP: 0033:0x7f204eb8ebe9 [ 168.637253][ T7771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.656882][ T7771] RSP: 002b:00007f204f911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 168.665400][ T7771] RAX: ffffffffffffffda RBX: 00007f204edb5fa0 RCX: 00007f204eb8ebe9 [ 168.673413][ T7771] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 168.681401][ T7771] RBP: 00007f204ec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 168.689381][ T7771] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 168.697450][ T7771] R13: 00007f204edb6038 R14: 00007f204edb5fa0 R15: 00007ffe028441f8 [ 168.705539][ T7771] [ 168.708715][ T7771] Kernel Offset: disabled [ 168.713106][ T7771] Rebooting in 86400 seconds..