last executing test programs: 13m9.518147567s ago: executing program 32 (id=575): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 12m39.61767312s ago: executing program 33 (id=621): r0 = getpid() setpriority(0x0, r0, 0x2a14b55) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000540)='numa_maps\x00') 10m32.798661811s ago: executing program 34 (id=1124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 9m56.572913851s ago: executing program 7 (id=1128): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 9m55.770906933s ago: executing program 7 (id=1264): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) pipe2(&(0x7f0000000440), 0x80000) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) 9m54.849816388s ago: executing program 5 (id=1267): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) lseek(r0, 0x0, 0x1) 9m54.838446334s ago: executing program 7 (id=1268): syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) epoll_create(0x3) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 9m54.129810402s ago: executing program 5 (id=1270): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = gettid() timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc176) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000240)) 9m53.785797873s ago: executing program 7 (id=1272): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c8, &(0x7f0000000cc0)="$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") mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty=0xe0000001}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x60241, 0x0) 9m50.808703745s ago: executing program 35 (id=1272): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c8, &(0x7f0000000cc0)="$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") mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty=0xe0000001}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x60241, 0x0) 9m50.733290912s ago: executing program 5 (id=1277): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1b) 9m50.222921701s ago: executing program 5 (id=1278): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) 9m49.421737589s ago: executing program 5 (id=1282): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, "00efff", 0x6, 0x3a, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0xb}, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 9m44.791769312s ago: executing program 5 (id=1297): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x7, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 9m42.432688035s ago: executing program 36 (id=1297): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x7, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 8m34.492023852s ago: executing program 8 (id=1524): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xc0a55000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x10004}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1000000}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004041}, 0x80000) 8m33.681095699s ago: executing program 8 (id=1529): setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x19, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 8m32.898612507s ago: executing program 8 (id=1534): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600), 0x0, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 8m32.198611899s ago: executing program 8 (id=1538): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r1, &(0x7f00000045c0)={0x2020}, 0x2020) 8m31.458109575s ago: executing program 8 (id=1543): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5) 8m30.998268966s ago: executing program 8 (id=1545): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 8m28.952357076s ago: executing program 37 (id=1545): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 8m0.250857835s ago: executing program 1 (id=1676): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b31880fa130c6c000", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x400000000003, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 7m58.803305717s ago: executing program 1 (id=1682): socket$inet6(0xa, 0x5, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) inotify_init1(0x800) umount2(&(0x7f0000000080)='./file0\x00', 0x8) 7m58.113183721s ago: executing program 1 (id=1685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000a020c13ac6371563ab6778fc5062af18", @ANYBLOB], 0x50) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m56.755839968s ago: executing program 1 (id=1690): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) 7m56.03958177s ago: executing program 1 (id=1694): socket$inet6(0xa, 0x5, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000005780)='./file0\x00', 0x9400002f) umount2(&(0x7f0000000080)='./file0\x00', 0x8) 7m55.416913681s ago: executing program 1 (id=1695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m53.5607275s ago: executing program 38 (id=1695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m44.412351718s ago: executing program 4 (id=3114): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) 1m43.796451007s ago: executing program 4 (id=3117): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000400)=""/48, 0xb09469065a0717bd) 1m42.876511614s ago: executing program 4 (id=3121): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8) 1m42.182858691s ago: executing program 4 (id=3125): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) 1m41.581966365s ago: executing program 4 (id=3129): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc005}, 0x4000890) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000040)) 1m40.748293945s ago: executing program 4 (id=3133): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x0, 0x702, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x69, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x26630, 0xe2d14c91c3a47acb}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m37.630357442s ago: executing program 39 (id=3133): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x0, 0x702, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x69, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x26630, 0xe2d14c91c3a47acb}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 15.587241469s ago: executing program 3 (id=3404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], 0xee00}, 0x1, 0x0, 0x0, 0x4}, 0x40016) 14.529370984s ago: executing program 3 (id=3408): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500feff1000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x4}, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x9647) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) sendmsg$nl_route(r2, 0x0, 0x0) 6.96073146s ago: executing program 0 (id=3432): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) 6.146130792s ago: executing program 0 (id=3434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074495470fb70190c190c75a854ff048fa800b6c3f9", 0x3d}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x7000}}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.143330454s ago: executing program 0 (id=3438): r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7, 0x0, 0x0, 0x35c}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 5.1428596s ago: executing program 2 (id=3439): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300)=@assoc_value, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x1009}, 0x8) 5.02593609s ago: executing program 6 (id=3440): socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 4.359967762s ago: executing program 2 (id=3442): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0) 4.23939122s ago: executing program 6 (id=3443): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0xff28) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x8045, 0x0, 0x15) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) 4.016546335s ago: executing program 3 (id=3444): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.938009022s ago: executing program 9 (id=3445): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$sock_inet_SIOCDARP(r1, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="01084415c302"}, 0xffffff6f, {0x2, 0x0, @broadcast}, 'team_slave_0\x00'}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) 3.689372385s ago: executing program 2 (id=3446): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000300)=[@in={0x2, 0x4e20, @local}], 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r5, r3, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r4}}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1c) 3.415146343s ago: executing program 0 (id=3447): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 3.302792917s ago: executing program 3 (id=3448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x7fffffff, @mcast1, 0x4}}, 0x0, 0x0, 0x49, 0x0, "b4cd56c3579496c7272eefc6d23d4b0667b6828fa8d6c277c8582381888b4417db0f93ae504a937aa462819bdbc9d6c4cdd4a6a361dc334933392c74770258a80ee4ef3c28a124ec3263a901065b57e0"}, 0xd8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xe7}}}}}}, 0x0) 3.220061839s ago: executing program 9 (id=3449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000040)="42ec6c4eba0e0db8912dde8ff2d341c9ca619478532a41947346bf7444594f32eca724f8c86d56198f179005ac933e00db06fbac2615dc68b01da4c312392a8002d3afa5172fe9", 0x47}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="2b1df7b330f50569a80a4483ac1e47aaba7e7694aadbab103a2a7c9129b8cf8b240246581d", 0x25}], 0x1}}], 0x2, 0x480c5) close_range(r0, 0xffffffffffffffff, 0x0) 2.796476723s ago: executing program 3 (id=3450): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x1c4, 0x65, 0x100, 0x170bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0x400, 0x0, 0x4, 0x9}, {0x9, 0x4, 0x10, 0x5}, {0xf7, 0x8, 0x0, 0x80000001}, {0x5, 0x5, 0x2, 0xd}, {0xa, 0x80, 0x2, 0x3}, {0x8, 0x5, 0x43, 0x6}, {0x0, 0xff, 0x2, 0x3}, {0x9b74, 0x0, 0x2, 0x7}]}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x138, 0x2, [@TCA_BPF_ACT={0xd0, 0x1, [@m_skbedit={0xcc, 0x11, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x80}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa1}]}, {0x6d, 0x6, "30cbb705b416ba0830f20a58294437adf387be2c5c0be289398c099b2e0fad0a4e749a52e1f5a75d291f8d128db69182792fc2d2dbf61c190aa5138085d5d1951d7457c5c0b4920793d96054893043f112825e710e6e179fa7d28f3c6acd5d743d405349005c0f6844"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x58, 0x1, [@m_connmark={0x54, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x21, 0x6, "0fdc401c94aa908312019756e78d106f29a8ecf9aef9b418e6eff93ef4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x80}, 0x8030) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.624097748s ago: executing program 9 (id=3451): r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8001}, 0x8) close(0x3) 2.481813055s ago: executing program 6 (id=3452): setuid(0xee01) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) 2.165763879s ago: executing program 2 (id=3453): socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.889702722s ago: executing program 3 (id=3454): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500feff1000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x4}, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x9647) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) sendmsg$nl_route(r2, 0x0, 0x0) 1.861713663s ago: executing program 9 (id=3455): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x94) 1.811301283s ago: executing program 6 (id=3456): syz_emit_ethernet(0x3f, &(0x7f0000000940)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x9, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[], "223427d5c9a46b9fa1"}}}}}, 0x0) 1.633309844s ago: executing program 0 (id=3457): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x40011161, 0x0) 1.380387161s ago: executing program 2 (id=3458): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x270}}, 0x0) 1.146073868s ago: executing program 9 (id=3459): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x1886, &(0x7f0000003580)=ANY=[], 0x0) 960.921456ms ago: executing program 6 (id=3460): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0xc) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) read$char_usb(r1, &(0x7f0000000140)=""/157, 0x9d) 628.147946ms ago: executing program 2 (id=3461): getpgid(0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x130800b, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 303.744554ms ago: executing program 9 (id=3462): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)=ANY=[], 0x0) 135.629374ms ago: executing program 0 (id=3463): memfd_create(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=3464): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x1c4, 0x65, 0x100, 0x170bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0x400, 0x0, 0x4, 0x9}, {0x9, 0x4, 0x10, 0x5}, {0xf7, 0x8, 0x0, 0x80000001}, {0x5, 0x5, 0x2, 0xd}, {0xa, 0x80, 0x2, 0x3}, {0x8, 0x5, 0x43, 0x6}, {0x0, 0xff, 0x2, 0x3}, {0x9b74, 0x0, 0x2, 0x7}]}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x138, 0x2, [@TCA_BPF_ACT={0xd0, 0x1, [@m_skbedit={0xcc, 0x11, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x80}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa1}]}, {0x6d, 0x6, "30cbb705b416ba0830f20a58294437adf387be2c5c0be289398c099b2e0fad0a4e749a52e1f5a75d291f8d128db69182792fc2d2dbf61c190aa5138085d5d1951d7457c5c0b4920793d96054893043f112825e710e6e179fa7d28f3c6acd5d743d405349005c0f6844"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x58, 0x1, [@m_connmark={0x54, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x21, 0x6, "0fdc401c94aa908312019756e78d106f29a8ecf9aef9b418e6eff93ef4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x80}, 0x8030) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): et, switching to perfect channel medium [ 371.309435][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.319530][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.000202][ T7288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.213839][ T7289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.357447][ T57] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.424791][ T57] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.472040][ T57] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.492280][ T57] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.892768][ T7297] loop3: detected capacity change from 0 to 128 [ 374.872609][ T7311] overlayfs: workdir and upperdir must reside under the same mount [ 378.240863][ T7333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.416647][ T7333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.724138][ T7340] loop3: detected capacity change from 0 to 128 [ 380.434434][ T7359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.010311][ T7369] tap0: tun_chr_ioctl cmd 1074025677 [ 381.025409][ T7369] tap0: linktype set to 1 [ 381.821811][ T7385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.974586][ T7387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.040350][ T7388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.407056][ T7405] overlayfs: failed to resolve './file1': -2 [ 385.760760][ T7434] overlayfs: failed to resolve './file1': -2 [ 386.126279][ T7437] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 386.148568][ T7437] overlayfs: failed to set xattr on upper [ 386.185608][ T7438] overlayfs: failed to clone upperpath [ 386.192285][ T7437] overlayfs: ...falling back to redirect_dir=nofollow. [ 386.230706][ T7437] overlayfs: ...falling back to index=off. [ 386.257868][ T7437] overlayfs: ...falling back to uuid=null. [ 386.301617][ T7437] overlayfs: overlapping lowerdir path [ 388.715231][ T7465] overlayfs: failed to resolve './file1': -2 [ 388.916828][ T7469] overlayfs: overlapping lowerdir path [ 388.947106][ T7470] overlayfs: failed to clone upperpath [ 390.492862][ T7484] loop4: detected capacity change from 0 to 256 [ 390.528560][ T7484] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 393.998158][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.004971][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.655495][ T7502] overlayfs: failed to clone upperpath [ 394.805678][ T57] bridge_slave_1: left allmulticast mode [ 394.812271][ T57] bridge_slave_1: left promiscuous mode [ 394.854876][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.924441][ T57] bridge_slave_0: left allmulticast mode [ 394.951433][ T57] bridge_slave_0: left promiscuous mode [ 394.984853][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.466065][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.520606][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.546607][ T57] bond0 (unregistering): Released all slaves [ 396.122969][ T57] hsr_slave_0: left promiscuous mode [ 396.164029][ T57] hsr_slave_1: left promiscuous mode [ 398.510678][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 398.525417][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 398.539668][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 398.571648][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 398.589781][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 400.250649][ T7547] overlayfs: failed to clone upperpath [ 400.703790][ T5773] Bluetooth: hci1: command tx timeout [ 402.111659][ T7558] overlayfs: failed to clone upperpath [ 402.775989][ T5773] Bluetooth: hci1: command tx timeout [ 403.574097][ T7530] chnl_net:caif_netlink_parms(): no params data found [ 404.858713][ T5773] Bluetooth: hci1: command tx timeout [ 405.675209][ T7596] overlayfs: failed to resolve './file1': -2 [ 405.940290][ T7530] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.964004][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.994054][ T7530] bridge_slave_0: entered allmulticast mode [ 406.021401][ T7530] bridge_slave_0: entered promiscuous mode [ 406.107297][ T7530] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.144218][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.151985][ T7530] bridge_slave_1: entered allmulticast mode [ 406.277686][ T7530] bridge_slave_1: entered promiscuous mode [ 406.840338][ T7530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.934858][ T5773] Bluetooth: hci1: command tx timeout [ 407.052999][ T7530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.254904][ T7614] loop3: detected capacity change from 0 to 256 [ 407.304135][ T7614] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 407.404935][ T7614] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.619302][ T7530] team0: Port device team_slave_0 added [ 407.650682][ T7618] loop1: detected capacity change from 0 to 256 [ 407.693241][ T7530] team0: Port device team_slave_1 added [ 408.075258][ T7618] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 408.135308][ T7618] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 408.172729][ T7618] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 408.246270][ T7530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.263759][ T29] audit: type=1800 audit(1772096765.261:5): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.607" name="file1" dev="loop1" ino=1048626 res=0 errno=0 [ 408.307510][ T7530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.487612][ T7530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.654166][ T7530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.715102][ T7530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.937713][ T7530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.144933][ T7627] fuse: Bad value for 'fd' [ 409.781897][ T7530] hsr_slave_0: entered promiscuous mode [ 409.830096][ T7530] hsr_slave_1: entered promiscuous mode [ 411.960088][ T7663] fuse: Bad value for 'fd' [ 412.574149][ T7530] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 412.681949][ T7530] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 412.792696][ T7530] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 412.897449][ T7530] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 413.426116][ T7679] overlayfs: failed to resolve './file0': -2 [ 415.397409][ T7701] fuse: Bad value for 'fd' [ 415.498829][ T7530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.661701][ T7530] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.782166][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.789842][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.945443][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.953047][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.832429][ T7530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.591900][ T7530] veth0_vlan: entered promiscuous mode [ 422.774068][ T7530] veth1_vlan: entered promiscuous mode [ 423.386130][ T7530] veth0_macvtap: entered promiscuous mode [ 423.509708][ T7530] veth1_macvtap: entered promiscuous mode [ 423.597586][ T7798] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 423.819591][ T7530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.114566][ T7530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.306985][ T6271] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.331259][ T6271] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.458331][ T6271] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.489245][ T6271] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.570152][ T7806] syzkaller0: entered promiscuous mode [ 424.583620][ T7806] syzkaller0: entered allmulticast mode [ 424.683947][ T7811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.815239][ T7811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.104153][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.134519][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.147173][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.170879][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.208202][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.435632][ T7862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.577712][ T7862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.295708][ T5773] Bluetooth: hci5: command tx timeout [ 430.363834][ T7856] chnl_net:caif_netlink_parms(): no params data found [ 431.708297][ T7906] overlayfs: failed to clone upperpath [ 431.749525][ T7906] overlayfs: failed to clone upperpath [ 432.060796][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.060901][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.381298][ T5773] Bluetooth: hci5: command tx timeout [ 432.544146][ T7856] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.572756][ T7856] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.590017][ T7913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.614338][ T7856] bridge_slave_0: entered allmulticast mode [ 432.661520][ T7856] bridge_slave_0: entered promiscuous mode [ 432.719522][ T7856] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.749308][ T7913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.764140][ T7856] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.782760][ T7856] bridge_slave_1: entered allmulticast mode [ 432.824592][ T7856] bridge_slave_1: entered promiscuous mode [ 432.963918][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.006518][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.173175][ T7856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.249977][ T7856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.538837][ T7856] team0: Port device team_slave_0 added [ 433.621065][ T7856] team0: Port device team_slave_1 added [ 434.149565][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.175706][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.337694][ T7856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.458961][ T5773] Bluetooth: hci5: command tx timeout [ 434.562900][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.609446][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.768812][ T7856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.252261][ T7949] fuse: Bad value for 'fd' [ 435.690298][ T7856] hsr_slave_0: entered promiscuous mode [ 435.744797][ T7856] hsr_slave_1: entered promiscuous mode [ 435.808967][ T7856] debugfs: 'hsr0' already exists in 'hsr' [ 435.823781][ T7856] Cannot create hsr debugfs directory [ 435.995334][ T7958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.183124][ T7959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.322576][ T7956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.536315][ T5773] Bluetooth: hci5: command tx timeout [ 436.814566][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 437.278214][ T7974] hsr_slave_1 (unregistering): left promiscuous mode [ 438.502330][ T7993] overlayfs: workdir and upperdir must reside under the same mount [ 438.550580][ T7996] fuse: Bad value for 'fd' [ 438.646169][ T7856] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 438.772969][ T7856] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 438.891511][ T7856] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 438.969444][ T7856] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 439.745292][ T8008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.928790][ T8008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.362377][ T7856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.679068][ T7856] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.716976][ T8035] fuse: Bad value for 'fd' [ 441.817734][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.825479][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.950419][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.958126][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.084039][ T8053] overlayfs: failed to resolve './file1': -2 [ 444.206202][ T8066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.353987][ T8066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.748737][ T8081] overlayfs: failed to resolve './bus': -2 [ 444.804956][ T8082] overlayfs: failed to resolve './bus': -2 [ 445.645302][ T8089] fuse: Bad value for 'fd' [ 446.018121][ T7856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.768056][ T8103] overlayfs: failed to resolve './file1': -2 [ 447.208036][ T8111] netlink: 59 bytes leftover after parsing attributes in process `syz.3.738'. [ 447.810134][ T8119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.877422][ T8122] overlayfs: failed to resolve './bus': -2 [ 447.931762][ T8119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.949194][ T8122] overlayfs: failed to resolve './bus': -2 [ 449.660395][ T7856] veth0_vlan: entered promiscuous mode [ 449.809722][ T7856] veth1_vlan: entered promiscuous mode [ 450.477064][ T7856] veth0_macvtap: entered promiscuous mode [ 450.628595][ T7856] veth1_macvtap: entered promiscuous mode [ 450.981878][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.205024][ T8163] netlink: 59 bytes leftover after parsing attributes in process `syz.0.751'. [ 451.224088][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.385188][ T1079] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.438467][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.479279][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.542867][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.153616][ T8173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.250426][ T8173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.467347][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.474225][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.556329][ T8219] netlink: 51 bytes leftover after parsing attributes in process `syz.1.764'. [ 459.449143][ T8263] netlink: 51 bytes leftover after parsing attributes in process `syz.1.777'. [ 460.854968][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.888312][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.283127][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.294119][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.945959][ T8295] netlink: 51 bytes leftover after parsing attributes in process `syz.3.789'. [ 463.648831][ T8303] overlayfs: failed to resolve './bus': -2 [ 464.876005][ T8314] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.883858][ T8314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.893007][ T8314] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.900855][ T8314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.168564][ T8314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.044604][ T8322] netlink: 51 bytes leftover after parsing attributes in process `syz.0.804'. [ 467.044359][ T8336] overlayfs: failed to resolve './bus': -2 [ 468.878265][ T8356] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 469.075931][ T8359] loop3: detected capacity change from 0 to 256 [ 469.831695][ T8367] overlayfs: failed to resolve './bus': -2 [ 470.862367][ T8378] fuse: Bad value for 'fd' [ 475.109028][ T8425] loop5: detected capacity change from 0 to 8192 [ 478.360146][ T8478] fuse: Bad value for 'fd' [ 479.048115][ T8484] fuse: Unknown parameter 'grou00000000000000000000' [ 481.647569][ T8520] fuse: Bad value for 'fd' [ 484.638089][ T8557] fuse: Bad value for 'fd' [ 485.704494][ T8569] overlayfs: missing 'lowerdir' [ 487.144955][ T8585] syzkaller0: entered promiscuous mode [ 487.180055][ T8585] syzkaller0: entered allmulticast mode [ 490.560592][ T8636] overlayfs: missing 'lowerdir' [ 493.913462][ C1] hrtimer: interrupt took 248070 ns [ 493.930425][ T29] audit: type=1326 audit(1772096850.941:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.1.926" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f87f6c code=0x0 [ 495.130938][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.139636][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.694689][ T1079] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.746321][ T1079] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.805194][ T1079] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.881816][ T1079] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.145393][ T8715] fuse: Unknown parameter 'group_id00000000000000000000' [ 499.010445][ T8727] fuse: Bad value for 'fd' [ 500.868516][ T8746] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 500.946316][ T8746] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 501.021533][ T8747] fuse: Unknown parameter 'group_id00000000000000000000' [ 501.795476][ T8756] fuse: Bad value for 'fd' [ 501.896809][ T8760] fuse: Unknown parameter 'grou00000000000000000000' [ 502.066759][ T8762] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 503.642830][ T8783] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 503.690802][ T8783] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 503.737436][ T8785] overlayfs: failed to clone upperpath [ 503.868896][ T8786] fuse: Bad value for 'user_id' [ 503.894422][ T8786] fuse: Bad value for 'user_id' [ 504.445935][ T8793] fuse: Bad value for 'fd' [ 506.384949][ T8813] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 506.443849][ T8813] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 506.562777][ T8817] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 506.653617][ T8817] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 506.673794][ T8820] overlayfs: failed to clone upperpath [ 506.759506][ T8822] fuse: Bad value for 'user_id' [ 506.776282][ T8822] fuse: Bad value for 'user_id' [ 507.390712][ T8828] fuse: Bad value for 'fd' [ 508.080551][ T8832] loop6: detected capacity change from 0 to 128 [ 509.544216][ T8839] syzkaller0: entered promiscuous mode [ 509.549948][ T8839] syzkaller0: entered allmulticast mode [ 510.163073][ T8852] loop6: detected capacity change from 0 to 128 [ 510.361025][ T8852] syz.6.989: attempt to access beyond end of device [ 510.361025][ T8852] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 510.797543][ T8856] overlayfs: missing 'lowerdir' [ 510.847314][ T8857] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 510.895334][ T8857] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 511.625106][ T8862] fuse: Bad value for 'user_id' [ 511.641179][ T8862] fuse: Bad value for 'user_id' [ 512.420854][ T8871] netlink: 20 bytes leftover after parsing attributes in process `syz.6.996'. [ 513.549033][ T8886] syzkaller0: entered promiscuous mode [ 513.555308][ T8886] syzkaller0: entered allmulticast mode [ 514.025016][ T8889] overlayfs: missing 'lowerdir' [ 514.201088][ T8892] overlayfs: missing 'lowerdir' [ 515.702604][ T8910] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1011'. [ 516.601805][ T8918] syzkaller0: entered promiscuous mode [ 516.633597][ T8918] syzkaller0: entered allmulticast mode [ 516.792988][ T8923] overlayfs: missing 'lowerdir' [ 516.891597][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.899077][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 517.059182][ T8925] overlayfs: missing 'lowerdir' [ 519.511022][ T8961] overlayfs: missing 'lowerdir' [ 519.572834][ T8964] overlayfs: missing 'workdir' [ 522.043034][ T8996] fuse: Unknown parameter 'group_id00000000000000000000' [ 522.918316][ T9005] overlayfs: missing 'workdir' [ 522.976740][ T9006] overlayfs: missing 'workdir' [ 523.065861][ T9008] fuse: Bad value for 'group_id' [ 523.113107][ T9008] fuse: Bad value for 'group_id' [ 524.053597][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 524.394377][ T2969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.630387][ T2969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.016818][ T2969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.244913][ T2969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.293090][ T9029] fuse: Bad value for 'user_id' [ 525.306449][ T9029] fuse: Bad value for 'user_id' [ 526.347270][ T2969] bridge_slave_1: left allmulticast mode [ 526.387271][ T2969] bridge_slave_1: left promiscuous mode [ 526.424644][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.449848][ T2969] bridge_slave_0: left allmulticast mode [ 526.487855][ T2969] bridge_slave_0: left promiscuous mode [ 526.517611][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.940156][ T9045] overlayfs: missing 'workdir' [ 528.502642][ T2969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.697166][ T2969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.805446][ T2969] bond0 (unregistering): Released all slaves [ 528.833672][ T9055] overlayfs: missing 'workdir' [ 529.094453][ T9058] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 530.432574][ T9061] syzkaller0: entered promiscuous mode [ 530.457004][ T9061] syzkaller0: entered allmulticast mode [ 531.298375][ T9077] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 531.323773][ T2969] hsr_slave_0: left promiscuous mode [ 531.338040][ T9077] block device autoloading is deprecated and will be removed. [ 531.369087][ T2969] hsr_slave_1: left promiscuous mode [ 531.459212][ T2969] veth1_macvtap: left promiscuous mode [ 531.478660][ T2969] veth0_macvtap: left promiscuous mode [ 531.502666][ T2969] veth1_vlan: left promiscuous mode [ 531.532648][ T2969] veth0_vlan: left promiscuous mode [ 537.660507][ T9142] overlayfs: failed to clone upperpath [ 537.750044][ T9143] overlayfs: failed to clone upperpath [ 538.575561][ T9159] overlayfs: failed to clone upperpath [ 538.778330][ T9158] syzkaller0: entered promiscuous mode [ 538.803655][ T9158] syzkaller0: entered allmulticast mode [ 542.849011][ T9204] loop6: detected capacity change from 0 to 164 [ 542.923383][ T9204] rock: directory entry would overflow storage [ 542.929779][ T9204] rock: sig=0x66, size=4, remaining=3 [ 543.063041][ T9204] rock: directory entry would overflow storage [ 543.163629][ T9204] rock: sig=0x66, size=4, remaining=3 [ 546.641997][ T9238] syzkaller0: entered promiscuous mode [ 546.699266][ T9238] syzkaller0: entered allmulticast mode [ 548.515561][ T9259] loop6: detected capacity change from 0 to 128 [ 550.596070][ T1138] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.882300][ T1138] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.171787][ T1138] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.357975][ T1138] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.114602][ T1138] bridge_slave_1: left allmulticast mode [ 552.120496][ T1138] bridge_slave_1: left promiscuous mode [ 552.174924][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.239414][ T1138] bridge_slave_0: left allmulticast mode [ 552.278231][ T1138] bridge_slave_0: left promiscuous mode [ 552.299173][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.078774][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.135342][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.176330][ T1138] bond0 (unregistering): Released all slaves [ 554.442607][ T9322] syzkaller0: entered promiscuous mode [ 554.462571][ T9322] syzkaller0: entered allmulticast mode [ 554.559857][ T1138] hsr_slave_0: left promiscuous mode [ 554.580650][ T1138] hsr_slave_1: left promiscuous mode [ 554.603865][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.623868][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.655318][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.682191][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.768132][ T1138] veth1_macvtap: left promiscuous mode [ 554.796350][ T1138] veth0_macvtap: left promiscuous mode [ 554.802039][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 554.816492][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 554.829231][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 554.834376][ T1138] veth1_vlan: left promiscuous mode [ 554.851204][ T1138] veth0_vlan: left promiscuous mode [ 554.862919][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 554.881255][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 556.185492][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 556.310998][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 557.013548][ T5773] Bluetooth: hci4: command tx timeout [ 559.103156][ T5773] Bluetooth: hci4: command tx timeout [ 559.737388][ T9338] chnl_net:caif_netlink_parms(): no params data found [ 560.665286][ T29] audit: type=1800 audit(1772096917.681:7): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1157" name="file1" dev="overlay" ino=490 res=0 errno=0 [ 561.131675][ T9408] syzkaller0: entered promiscuous mode [ 561.163524][ T9408] syzkaller0: entered allmulticast mode [ 561.175912][ T5773] Bluetooth: hci4: command tx timeout [ 562.068689][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.093041][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.152348][ T9338] bridge_slave_0: entered allmulticast mode [ 562.201473][ T9338] bridge_slave_0: entered promiscuous mode [ 562.308946][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.373820][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.412112][ T9338] bridge_slave_1: entered allmulticast mode [ 562.466207][ T9338] bridge_slave_1: entered promiscuous mode [ 563.173787][ T9338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.253553][ T5773] Bluetooth: hci4: command tx timeout [ 563.274995][ T9338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.739227][ T9338] team0: Port device team_slave_0 added [ 563.789331][ T9443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1168'. [ 563.855646][ T9338] team0: Port device team_slave_1 added [ 564.357801][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.408297][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.498582][ T9338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.599947][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.643894][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.763534][ T9338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.986532][ T9457] fuse: Unknown parameter 'user_i00000000000000000000' [ 565.384053][ T9338] hsr_slave_0: entered promiscuous mode [ 565.455945][ T9338] hsr_slave_1: entered promiscuous mode [ 565.483011][ T9338] debugfs: 'hsr0' already exists in 'hsr' [ 565.505362][ T9338] Cannot create hsr debugfs directory [ 568.267519][ T9338] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 568.375916][ T9338] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 568.528390][ T9338] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 568.637081][ T9338] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 570.015002][ T9505] fuse: Unknown parameter 'user_id00000000000000000000' [ 570.359781][ T9338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.686795][ T9338] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.780534][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.788148][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.980351][ T227] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.988089][ T227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.952487][ T9338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.991770][ T29] audit: type=1326 audit(1772096933.001:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1203" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x0 [ 577.331539][ T9338] veth0_vlan: entered promiscuous mode [ 577.473110][ T9338] veth1_vlan: entered promiscuous mode [ 578.158396][ T9338] veth0_macvtap: entered promiscuous mode [ 578.305652][ T9338] veth1_macvtap: entered promiscuous mode [ 578.323657][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.330529][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.672236][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.970976][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.135435][ T106] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.188727][ T106] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.257889][ T106] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.300419][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.401449][ T9633] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 583.709129][ T9682] overlayfs: failed to clone lowerpath [ 584.717246][ T9692] overlayfs: failed to resolve './file0': -2 [ 585.532358][ T9703] loop3: detected capacity change from 0 to 164 [ 587.725377][ T9732] overlayfs: failed to resolve './file0': -2 [ 588.218877][ T9738] process 'syz.3.1254' launched './file0' with NULL argv: empty string added [ 588.247763][ T227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.319010][ T227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.729995][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.801448][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.595788][ T9757] binfmt_misc: register: failed to install interpreter file ./file0 [ 590.101755][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1128'. [ 591.211000][ T9776] overlayfs: failed to resolve './file0': -2 [ 592.008271][ T9782] fuse: Unknown parameter 'user_id00000000000000000000' [ 592.554828][ T2969] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.821613][ T2969] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.092539][ T2969] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.301660][ T2969] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.001893][ T2969] bridge_slave_1: left allmulticast mode [ 594.013603][ T2969] bridge_slave_1: left promiscuous mode [ 594.020328][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.084535][ T2969] bridge_slave_0: left allmulticast mode [ 594.090423][ T2969] bridge_slave_0: left promiscuous mode [ 594.118947][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.240883][ T2969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.276517][ T2969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.306043][ T2969] bond0 (unregistering): Released all slaves [ 595.657444][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 596.794356][ T2969] hsr_slave_0: left promiscuous mode [ 596.827856][ T9826] fuse: Unknown parameter 'user_id00000000000000000000' [ 596.888361][ T2969] hsr_slave_1: left promiscuous mode [ 596.941870][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.993713][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.064543][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.072152][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.216383][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 597.238022][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 597.260677][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 597.280133][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 597.292493][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 597.375426][ T2969] veth1_macvtap: left promiscuous mode [ 597.386268][ T2969] veth0_macvtap: left promiscuous mode [ 597.392206][ T2969] veth1_vlan: left promiscuous mode [ 597.398279][ T2969] veth0_vlan: left promiscuous mode [ 599.420323][ T49] Bluetooth: hci4: command tx timeout [ 599.885100][ T2969] team0 (unregistering): Port device team_slave_1 removed [ 600.045827][ T2969] team0 (unregistering): Port device team_slave_0 removed [ 600.268826][ T9868] fuse: Bad value for 'fd' [ 600.738636][ T9860] overlayfs: failed to clone upperpath [ 601.507741][ T49] Bluetooth: hci4: command tx timeout [ 602.176428][ T9886] loop1: detected capacity change from 0 to 128 [ 602.194287][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1299'. [ 602.528259][ T9888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 602.655459][ T9889] sit2: entered promiscuous mode [ 602.693746][ T9889] sit2: entered allmulticast mode [ 602.742951][ T9889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 602.765006][ T9889] bond1: (slave sit2): The slave device specified does not support setting the MAC address [ 602.816704][ T9889] bond1: (slave sit2): Error -95 calling set_mac_address [ 603.227457][ T2969] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.379309][ T2969] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.573562][ T49] Bluetooth: hci4: command tx timeout [ 603.620826][ T2969] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.829923][ T2969] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.353992][ T9828] chnl_net:caif_netlink_parms(): no params data found [ 604.891606][ T9910] fuse: Bad value for 'fd' [ 605.078444][ T9914] overlayfs: missing 'lowerdir' [ 605.454008][ T2969] bridge_slave_1: left allmulticast mode [ 605.459920][ T2969] bridge_slave_1: left promiscuous mode [ 605.548549][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.653953][ T49] Bluetooth: hci4: command tx timeout [ 605.719718][ T2969] bridge_slave_0: left allmulticast mode [ 605.734156][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 605.749212][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 605.764516][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 605.772402][ T2969] bridge_slave_0: left promiscuous mode [ 605.795433][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 605.814968][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.846507][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 606.086359][ T9924] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 606.115237][ T9924] overlayfs: failed to set xattr on upper [ 606.121281][ T9924] overlayfs: ...falling back to redirect_dir=nofollow. [ 606.159598][ T9924] overlayfs: ...falling back to index=off. [ 606.179286][ T9924] overlayfs: ...falling back to uuid=null. [ 607.364183][ T9944] block device autoloading is deprecated and will be removed. [ 607.556071][ T2969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.627595][ T2969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.675737][ T2969] bond0 (unregistering): Released all slaves [ 607.903647][ T5773] Bluetooth: hci1: command tx timeout [ 609.340868][ T9828] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.374831][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.383154][ T9828] bridge_slave_0: entered allmulticast mode [ 609.404106][ T9828] bridge_slave_0: entered promiscuous mode [ 609.560860][ T2969] hsr_slave_0: left promiscuous mode [ 609.602611][ T2969] hsr_slave_1: left promiscuous mode [ 609.643407][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.660291][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.686282][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.703725][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.780448][ T2969] veth1_macvtap: left promiscuous mode [ 609.790942][ T2969] veth0_macvtap: left promiscuous mode [ 609.800162][ T2969] veth1_vlan: left promiscuous mode [ 609.806510][ T2969] veth0_vlan: left promiscuous mode [ 609.974134][ T5773] Bluetooth: hci1: command tx timeout [ 611.717302][ T2969] team0 (unregistering): Port device team_slave_1 removed [ 611.805578][ T2969] team0 (unregistering): Port device team_slave_0 removed [ 611.890985][ T9989] overlayfs: failed to clone upperpath [ 611.915272][ T9989] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 611.934300][ T9989] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 612.053950][ T5773] Bluetooth: hci1: command tx timeout [ 612.490841][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.525095][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.532866][ T9828] bridge_slave_1: entered allmulticast mode [ 612.574615][ T9828] bridge_slave_1: entered promiscuous mode [ 612.686851][ T9994] overlayfs: failed to clone lowerpath [ 612.901436][ T9828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.039793][ T9828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.732966][ T9828] team0: Port device team_slave_0 added [ 613.808692][ T9828] team0: Port device team_slave_1 added [ 614.133937][ T5773] Bluetooth: hci1: command tx timeout [ 614.177589][ T9828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.246488][ T9828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.286394][ T9828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.351159][ T9919] chnl_net:caif_netlink_parms(): no params data found [ 614.427960][ T9828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.493385][ T9828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.586389][ T9828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.639868][T10015] overlayfs: failed to clone upperpath [ 614.699286][T10015] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 614.719570][T10015] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 615.530203][ T9828] hsr_slave_0: entered promiscuous mode [ 615.590854][ T9828] hsr_slave_1: entered promiscuous mode [ 615.719509][T10029] loop3: detected capacity change from 0 to 764 [ 615.808992][T10029] rock: directory entry would overflow storage [ 615.857846][T10029] rock: sig=0x5245, size=8, remaining=5 [ 616.161790][T10035] ucma_write: process 741 (syz.1.1342) changed security contexts after opening file descriptor, this is not allowed. [ 616.507231][T10027] overlayfs: failed to clone upperpath [ 617.193927][ T9919] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.221812][ T9919] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.240651][ T9919] bridge_slave_0: entered allmulticast mode [ 617.257260][ T9919] bridge_slave_0: entered promiscuous mode [ 617.461405][ T9919] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.482910][ T9919] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.507974][ T9919] bridge_slave_1: entered allmulticast mode [ 617.543934][ T9919] bridge_slave_1: entered promiscuous mode [ 618.119062][ T9919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.360835][ T9919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.995258][ T9919] team0: Port device team_slave_0 added [ 619.202568][ T9919] team0: Port device team_slave_1 added [ 619.306554][T10068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 619.314243][T10068] IPv6: NLM_F_CREATE should be set when creating new route [ 619.830986][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.839771][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.141263][T10086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1354'. [ 621.277594][ T9919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.303777][ T9919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.370433][ T9919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.412935][ T1079] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.429743][ T9919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.438013][ T9919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.498362][ T9919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.566491][ T9828] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 621.648685][ T1079] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.693727][ T1079] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.828303][ T9828] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 621.930646][ T9828] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 622.073797][ T1079] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.119828][ T9828] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 622.325985][T10099] netlink: 'syz.0.1357': attribute type 4 has an invalid length. [ 622.602890][ T9919] hsr_slave_0: entered promiscuous mode [ 622.629344][ T9919] hsr_slave_1: entered promiscuous mode [ 622.674258][ T9919] debugfs: 'hsr0' already exists in 'hsr' [ 622.680477][ T9919] Cannot create hsr debugfs directory [ 624.981020][T10122] fuse: Bad value for 'fd' [ 625.124135][ T9919] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 625.214976][ T9919] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 625.379839][ T9828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.447004][ T9919] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 625.593673][ T9919] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 625.886245][T10128] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1365'. [ 625.909214][ T9828] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.148849][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.156711][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.377989][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.385851][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.953867][T10154] netlink: 'syz.0.1370': attribute type 27 has an invalid length. [ 628.596250][ T9919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.993774][ T9919] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.137010][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.144720][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.288840][T10168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1374'. [ 629.388311][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.396090][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.290192][ T9828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.768045][T10206] overlayfs: failed to clone lowerpath [ 632.522096][ T9919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.783830][T10222] overlayfs: failed to clone upperpath [ 633.534804][T10228] netlink: 'syz.3.1385': attribute type 27 has an invalid length. [ 634.068820][ T9828] veth0_vlan: entered promiscuous mode [ 634.218028][ T9828] veth1_vlan: entered promiscuous mode [ 634.535848][T10241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 634.543406][T10241] IPv6: NLM_F_CREATE should be set when creating new route [ 635.009337][T10248] fuse: Unknown parameter 'fd0x0000000000000003' [ 635.309498][T10244] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.318159][T10244] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.405614][ T1079] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.461128][ T1079] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.550596][ T9828] veth0_macvtap: entered promiscuous mode [ 637.600170][ T1079] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.632775][ T1079] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.770626][ T9828] veth1_macvtap: entered promiscuous mode [ 638.096693][T10277] overlayfs: failed to clone upperpath [ 638.139352][T10277] overlayfs: missing 'workdir' [ 638.157119][ T9828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.318035][ T9828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.498796][ T34] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.543666][ T34] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.552715][ T34] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.709896][ T9919] veth0_vlan: entered promiscuous mode [ 638.735735][ T34] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.871004][T10286] fuse: Unknown parameter 'fd0x0000000000000003' [ 638.942289][ T9919] veth1_vlan: entered promiscuous mode [ 639.405245][ T9919] veth0_macvtap: entered promiscuous mode [ 639.559310][ T9919] veth1_macvtap: entered promiscuous mode [ 639.753090][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.761338][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 639.988756][ T9919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.192968][ T9919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.438898][ T1079] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.484801][ T6271] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.538774][ T1079] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.577206][ T1079] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.106622][T10314] overlayfs: failed to clone upperpath [ 641.161699][T10314] overlayfs: failed to clone upperpath [ 644.177148][T10362] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 646.655738][ T227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.703506][ T227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.098960][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.165967][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.448456][T10412] fuse: Unknown parameter '0x0000000000000003' [ 648.971219][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.000602][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.372036][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.402862][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.650960][T10457] fuse: Unknown parameter '0x0000000000000003' [ 652.222298][T10467] loop9: detected capacity change from 0 to 736 [ 652.304209][T10467] iso9660: Bad value for 'mode' [ 652.849009][T10463] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.859245][T10463] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.284096][T10463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.402900][T10463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.549010][T10512] fuse: Unknown parameter '0x0000000000000003' [ 655.748335][ T227] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.824152][ T227] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.885879][ T227] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.934003][ T227] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.723003][T10540] fuse: Unknown parameter '0x0000000000000003' [ 658.448387][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1468'. [ 658.857772][T10549] bond2: entered promiscuous mode [ 658.901971][T10549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 659.092381][T10552] macvlan2: entered promiscuous mode [ 659.153538][T10552] macvlan2: entered allmulticast mode [ 659.234543][T10552] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 662.166847][T10588] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.176996][T10588] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.148078][T10588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.305160][T10588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.868024][T10603] loop3: detected capacity change from 0 to 764 [ 663.951092][T10603] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 664.041894][T10603] Symlink component flag not implemented [ 664.074262][T10603] Symlink component flag not implemented (7) [ 664.940059][ T2969] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.982292][ T2969] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.053457][ T2969] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.084646][ T2969] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.126113][T10626] bridge_slave_0: left allmulticast mode [ 666.151883][T10626] bridge_slave_0: left promiscuous mode [ 666.163589][T10626] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.315412][T10626] bridge_slave_1: left allmulticast mode [ 666.363506][T10626] bridge_slave_1: left promiscuous mode [ 666.410021][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.509616][T10626] bond0: (slave bond_slave_0): Releasing backup interface [ 666.563745][T10626] bond0: (slave bond_slave_1): Releasing backup interface [ 666.623700][T10626] team0: Port device team_slave_0 removed [ 666.733048][T10626] team0: Port device team_slave_1 removed [ 666.780432][T10626] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 668.224164][T10663] 9p: Bad value for 'wfdno' [ 668.993616][T10676] loop8: detected capacity change from 0 to 128 [ 673.278082][T10737] overlayfs: failed to clone upperpath [ 674.287576][T10756] fuse: Bad value for 'fd' [ 678.574598][T10816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 678.587666][T10816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 678.605079][T10816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 678.630322][T10816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 678.654847][T10816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 678.816300][T10822] 9p: Bad value for 'rfdno' [ 680.102028][T10844] capability: warning: `syz.0.1563' uses 32-bit capabilities (legacy support in use) [ 680.737923][T10816] Bluetooth: hci4: command tx timeout [ 681.265763][T10858] fuse: Bad value for 'rootmode' [ 681.491340][T10815] chnl_net:caif_netlink_parms(): no params data found [ 681.946479][T10863] 9p: Bad value for 'rfdno' [ 682.814944][T10816] Bluetooth: hci4: command tx timeout [ 682.942812][T10879] overlayfs: failed to clone upperpath [ 682.968697][T10879] overlayfs: failed to clone upperpath [ 683.445425][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.473982][T10815] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.505662][T10815] bridge_slave_0: entered allmulticast mode [ 683.545852][T10815] bridge_slave_0: entered promiscuous mode [ 683.602125][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.633050][T10815] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.664693][T10815] bridge_slave_1: entered allmulticast mode [ 683.707873][T10815] bridge_slave_1: entered promiscuous mode [ 683.867131][T10889] 9p: Bad value for 'rfdno' [ 684.081851][T10815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.149966][T10815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.609553][T10815] team0: Port device team_slave_0 added [ 684.707117][T10815] team0: Port device team_slave_1 added [ 684.876599][T10816] Bluetooth: hci4: command tx timeout [ 685.051107][T10815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.104173][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.189012][T10815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.254653][T10815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.294428][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.392160][T10815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.601272][T10904] loop9: detected capacity change from 0 to 8192 [ 686.023112][T10815] hsr_slave_0: entered promiscuous mode [ 686.066523][T10815] hsr_slave_1: entered promiscuous mode [ 686.120650][T10815] debugfs: 'hsr0' already exists in 'hsr' [ 686.157517][T10815] Cannot create hsr debugfs directory [ 686.933207][T10816] Bluetooth: hci4: command tx timeout [ 687.283138][T10932] bridge_slave_0: left allmulticast mode [ 687.311280][T10932] bridge_slave_0: left promiscuous mode [ 687.356618][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.442241][T10932] bridge_slave_1: left allmulticast mode [ 687.448148][T10932] bridge_slave_1: left promiscuous mode [ 687.534359][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.661768][T10932] bond0: (slave bond_slave_0): Releasing backup interface [ 687.698434][T10935] netlink: 'syz.9.1595': attribute type 1 has an invalid length. [ 687.757915][T10935] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1595'. [ 687.794791][T10932] bond0: (slave bond_slave_1): Releasing backup interface [ 687.852689][T10932] team0: Port device team_slave_0 removed [ 687.905149][T10932] team0: Port device team_slave_1 removed [ 687.916172][T10941] overlayfs: failed to clone upperpath [ 687.928803][T10932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.960069][T10932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.980421][T10932] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 690.003619][T10971] fuse: Bad value for 'group_id' [ 690.020730][T10971] fuse: Bad value for 'group_id' [ 690.293550][T10815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 690.361840][T10815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 690.530169][T10815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 690.622407][T10815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 692.146986][T11003] fuse: Unknown parameter '0x0000000000000003' [ 692.156348][T10815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.290788][T11008] fuse: Bad value for 'group_id' [ 692.317687][T11008] fuse: Bad value for 'group_id' [ 692.469469][T10815] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.582422][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.590286][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.776514][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.784242][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.021828][T11018] overlayfs: failed to clone upperpath [ 695.376817][T11054] fuse: Bad value for 'group_id' [ 695.429999][T11054] fuse: Bad value for 'group_id' [ 695.531617][T11059] fuse: Unknown parameter '0x0000000000000003' [ 695.659633][T11062] overlayfs: failed to clone upperpath [ 695.839908][T10815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.901746][T11083] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 697.017529][T11083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 697.163024][T11086] vlan2: entered allmulticast mode [ 697.199331][T11086] veth0_to_bond: entered allmulticast mode [ 697.244905][T11086] bond1: (slave vlan2): Opening slave failed [ 698.658208][T11112] fuse: Unknown parameter '0x0000000000000003' [ 698.963686][T11117] ip6gre1: entered allmulticast mode [ 698.972031][T11119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1648'. [ 698.986590][T11119] ip6gre1: entered promiscuous mode [ 699.027881][T10815] veth0_vlan: entered promiscuous mode [ 699.168302][T10815] veth1_vlan: entered promiscuous mode [ 699.754174][T10815] veth0_macvtap: entered promiscuous mode [ 699.842223][T10815] veth1_macvtap: entered promiscuous mode [ 700.104975][T10815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.303759][T10815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.488000][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.526648][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.644246][ T34] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.674371][ T34] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.750734][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.757398][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.865376][T11145] overlayfs: failed to clone upperpath [ 701.747103][T11157] fuse: Bad value for 'fd' [ 701.827688][T11159] fuse: Unknown parameter 'fd0x0000000000000003' [ 702.278711][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1664'. [ 705.786212][T11211] fuse: Bad value for 'fd' [ 706.318258][T11217] fuse: Unknown parameter 'fd0x0000000000000003' [ 707.548149][T11240] overlayfs: failed to clone lowerpath [ 708.938967][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.024285][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.545030][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.578710][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.987979][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 713.998140][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 714.008074][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 714.027703][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 714.041490][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 715.624656][T11330] chnl_net:caif_netlink_parms(): no params data found [ 716.153001][ T5773] Bluetooth: hci0: command tx timeout [ 717.721856][T11330] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.750554][T11330] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.781666][T11330] bridge_slave_0: entered allmulticast mode [ 717.854083][T11330] bridge_slave_0: entered promiscuous mode [ 717.942552][T11330] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.974577][T11330] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.982475][T11330] bridge_slave_1: entered allmulticast mode [ 718.038112][T11330] bridge_slave_1: entered promiscuous mode [ 718.214658][ T5773] Bluetooth: hci0: command tx timeout [ 718.511042][T11400] ip6gre1: entered promiscuous mode [ 718.553703][T11400] ip6gre1: entered allmulticast mode [ 718.641721][T11330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.741704][T11330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.100869][T11330] team0: Port device team_slave_0 added [ 719.195312][T11330] team0: Port device team_slave_1 added [ 719.211356][T11417] fuse: Unknown parameter 'grou00000000000000000000' [ 719.605366][T11330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.632598][T11330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.721520][T11330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.835529][T11330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.856802][T11330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.946522][T11330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.064585][T11424] overlayfs: missing 'lowerdir' [ 720.292532][ T5773] Bluetooth: hci0: command tx timeout [ 720.524151][T11330] hsr_slave_0: entered promiscuous mode [ 720.578959][T11330] hsr_slave_1: entered promiscuous mode [ 720.618863][T11330] debugfs: 'hsr0' already exists in 'hsr' [ 720.664961][T11330] Cannot create hsr debugfs directory [ 722.262412][T11445] fuse: Bad value for 'fd' [ 722.374225][ T5773] Bluetooth: hci0: command tx timeout [ 722.554421][T11452] fuse: Unknown parameter 'grou00000000000000000000' [ 723.105757][T11458] overlayfs: failed to clone lowerpath [ 723.725487][T11466] overlayfs: missing 'lowerdir' [ 723.890304][T11330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 724.016017][T11330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 724.164922][T11330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 724.345155][T11330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 726.062306][T11489] fuse: Bad value for 'fd' [ 726.682829][T11330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.943477][T11330] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.064902][ T227] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.072578][ T227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.207161][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.215018][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.373079][T10816] Bluetooth: hci1: command 0x0406 tx timeout [ 729.289006][T11520] overlayfs: missing 'lowerdir' [ 730.059303][T11330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.710992][T11530] fuse: Bad value for 'fd' [ 730.721540][T11330] veth0_vlan: entered promiscuous mode [ 730.867516][T11330] veth1_vlan: entered promiscuous mode [ 731.050131][T11535] bond0: option ad_select: unable to set because the bond device is up [ 731.385216][T11330] veth0_macvtap: entered promiscuous mode [ 731.515274][T11330] veth1_macvtap: entered promiscuous mode [ 731.770497][T11330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.924256][T11330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.147796][ T1138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.184354][ T1138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.247384][ T227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.316998][ T227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.950000][T11561] overlayfs: missing 'lowerdir' [ 735.475835][T11596] 9p: Bad value for 'rfdno' [ 735.660791][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1784'. [ 739.857415][T11657] overlayfs: missing 'lowerdir' [ 739.888157][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.913552][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.299025][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.356787][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.845990][T11678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.624122][T11713] overlayfs: failed to clone upperpath [ 743.859453][T11717] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 749.646083][T11799] tmpfs: Unknown parameter '18446744073709551615' [ 753.182793][T11837] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 756.094618][T11862] pim6reg1: entered promiscuous mode [ 756.100153][T11862] pim6reg1: entered allmulticast mode [ 756.248121][T11867] netlink: 'syz.4.1859': attribute type 1 has an invalid length. [ 756.571821][T11867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 756.699479][T11869] vlan2: entered allmulticast mode [ 756.724569][T11869] veth0_to_bond: entered allmulticast mode [ 756.915035][T11874] fuse: Bad value for 'fd' [ 759.842714][T11911] netlink: 'syz.3.1872': attribute type 1 has an invalid length. [ 760.218138][T11917] fuse: Bad value for 'fd' [ 760.310486][T11911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 760.429744][T11912] vlan2: entered allmulticast mode [ 760.470698][T11912] veth0_to_bond: entered allmulticast mode [ 762.162991][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 762.169762][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.665707][T11948] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 763.362796][T11956] netlink: 'syz.9.1888': attribute type 1 has an invalid length. [ 763.747187][T11956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 767.041861][T12013] sctp: [Deprecated]: syz.4.1904 (pid 12013) Use of int in max_burst socket option. [ 767.041861][T12013] Use struct sctp_assoc_value instead [ 769.536471][T12049] sctp: [Deprecated]: syz.2.1914 (pid 12049) Use of int in max_burst socket option. [ 769.536471][T12049] Use struct sctp_assoc_value instead [ 770.132776][T12055] netlink: 'syz.3.1916': attribute type 1 has an invalid length. [ 770.408221][T12055] 8021q: adding VLAN 0 to HW filter on device bond4 [ 770.529321][T12061] loop2: detected capacity change from 0 to 2048 [ 770.613753][ T9304] loop2: p3 < > p4 < > [ 770.618178][ T9304] loop2: partition table partially beyond EOD, truncated [ 770.686996][ T9304] loop2: p3 start 4284289 is beyond EOD, truncated [ 770.802890][T12061] loop2: p3 < > p4 < > [ 770.807316][T12061] loop2: partition table partially beyond EOD, truncated [ 770.852251][T12061] loop2: p3 start 4284289 is beyond EOD, truncated [ 771.890061][ T9304] udevd[9304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 777.499335][T12141] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 777.647978][T12142] gre1: entered promiscuous mode [ 780.727911][T12173] loop7: detected capacity change from 0 to 7 [ 780.755634][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.765679][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.793619][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.803601][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.831423][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.841417][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.851828][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.861887][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.873745][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.883849][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.894322][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.904508][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.913960][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.924012][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.941356][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.951355][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.959692][T12173] ldm_validate_partition_table(): Disk read failed. [ 780.970935][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.980965][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 781.001391][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 781.011426][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 781.033322][T12173] Dev loop7: unable to read RDB block 0 [ 781.096861][T12173] loop7: unable to read partition table [ 781.134965][T12173] loop7: partition table beyond EOD, truncated [ 781.167334][T12173] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 783.588401][T12211] fuse: Unknown parameter 'use00000000000000000000' [ 784.386552][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1967'. [ 789.323038][ T142] bridge_slave_1: left allmulticast mode [ 789.328933][ T142] bridge_slave_1: left promiscuous mode [ 789.382510][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.449512][ T142] bridge_slave_0: left allmulticast mode [ 789.512757][ T142] bridge_slave_0: left promiscuous mode [ 789.538146][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.885479][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.051725][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.148342][ T142] bond0 (unregistering): Released all slaves [ 791.247704][ T142] bond1 (unregistering): Released all slaves [ 792.825187][ T142] hsr_slave_0: left promiscuous mode [ 792.871407][ T142] hsr_slave_1: left promiscuous mode [ 795.123174][T12368] 9p: Bad value for 'rfdno' [ 796.654928][T12392] overlayfs: failed to clone upperpath [ 797.771001][T12420] vlan2: entered allmulticast mode [ 797.788901][T12420] veth0_to_bond: entered allmulticast mode [ 797.941731][T12423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.949237][T12423] IPv6: NLM_F_CREATE should be set when creating new route [ 798.844512][T12426] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.854758][T12426] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.952114][T12426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.018768][T12426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.835771][T12452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.946107][T12452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 801.992291][ T2969] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.014316][ T2969] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.036838][T12474] fuse: Unknown parameter 'group_id00000000000000000000' [ 802.071000][ T2969] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.130625][ T2969] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.162899][T10816] Bluetooth: hci4: command 0x0406 tx timeout [ 805.776213][T12538] overlayfs: failed to clone upperpath [ 805.880574][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2058'. [ 806.199736][T12546] sctp: [Deprecated]: syz.9.2059 (pid 12546) Use of int in max_burst socket option. [ 806.199736][T12546] Use struct sctp_assoc_value instead [ 806.674249][T12554] 9p: Bad value for 'rfdno' [ 806.785049][T12551] loop2: detected capacity change from 0 to 2048 [ 806.966517][ T9304] Alternate GPT is invalid, using primary GPT. [ 806.968425][ T9304] loop2: p1 p2 p3 [ 807.023555][ T9304] loop2: partition table partially beyond EOD, truncated [ 807.045568][T12560] ip6gre2: entered promiscuous mode [ 807.045673][T12560] ip6gre2: entered allmulticast mode [ 807.126957][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 807.136361][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 807.153880][ T5819] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 807.204660][ T5819] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 807.309803][T12551] Alternate GPT is invalid, using primary GPT. [ 807.310782][T12551] loop2: p1 p2 p3 [ 807.310907][T12551] loop2: partition table partially beyond EOD, truncated [ 807.927964][ T6092] blk_print_req_error: 11 callbacks suppressed [ 807.928047][ T6092] I/O error, dev loop2, sector 1008 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 807.963046][ T5819] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 808.022115][ T6092] I/O error, dev loop2, sector 1008 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.080723][ T6092] buffer_io_error: 11 callbacks suppressed [ 808.080810][ T6092] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 808.127506][ T6092] I/O error, dev loop2, sector 1009 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.149650][ T6092] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 808.188860][ T6092] I/O error, dev loop2, sector 1010 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.241414][ T6092] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 808.271840][ T6092] I/O error, dev loop2, sector 1011 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.307284][ T6092] Buffer I/O error on dev loop2p3, logical block 11, async page read [ 808.326921][ T6092] I/O error, dev loop2, sector 1012 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.367339][ T6092] Buffer I/O error on dev loop2p3, logical block 12, async page read [ 808.407778][ T6092] I/O error, dev loop2, sector 1013 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.473277][ T6092] Buffer I/O error on dev loop2p3, logical block 13, async page read [ 808.513311][ T6092] I/O error, dev loop2, sector 1014 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.571279][ T6092] Buffer I/O error on dev loop2p3, logical block 14, async page read [ 808.618121][ T6092] I/O error, dev loop2, sector 1015 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 808.671318][ T6092] Buffer I/O error on dev loop2p3, logical block 15, async page read [ 808.743814][ T6092] udevd[6092]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 809.018398][ T5950] udevd[5950]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 809.062917][ T9304] udevd[9304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 809.080713][ T6092] udevd[6092]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 809.283306][T12587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2073'. [ 810.922497][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 812.483614][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2085'. [ 812.507913][T12631] fuse: Bad value for 'fd' [ 814.188038][T12652] mmap: syz.4.2092 (12652) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 815.955185][T12671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2100'. [ 818.442422][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 818.739496][T12703] sctp: [Deprecated]: syz.0.2108 (pid 12703) Use of int in max_burst socket option. [ 818.739496][T12703] Use struct sctp_assoc_value instead [ 819.826392][T12710] vlan0: entered allmulticast mode [ 819.837302][T12710] veth0_to_bond: entered allmulticast mode [ 821.045102][T12721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2113'. [ 823.173134][T12745] fuse: Bad value for 'fd' [ 823.423433][T12747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2121'. [ 823.591507][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 823.598199][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 824.416270][T12762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2127'. [ 825.593233][T12780] fuse: Bad value for 'fd' [ 825.702218][T12782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2135'. [ 827.121316][T12807] fuse: Bad value for 'fd' [ 827.648801][T12818] fuse: Invalid rootmode [ 827.996467][T12822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2150'. [ 828.841748][T12840] sctp: [Deprecated]: syz.0.2155 (pid 12840) Use of int in max_burst socket option. [ 828.841748][T12840] Use struct sctp_assoc_value instead [ 829.499611][T12853] fuse: Bad value for 'fd' [ 830.232862][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2164'. [ 830.269824][T12861] vlan0: entered allmulticast mode [ 831.257552][T12882] sctp: [Deprecated]: syz.0.2170 (pid 12882) Use of int in max_burst socket option. [ 831.257552][T12882] Use struct sctp_assoc_value instead [ 831.936124][T12895] fuse: Invalid rootmode [ 832.522352][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 832.814673][T12910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2179'. [ 833.192273][T12913] overlayfs: failed to clone upperpath [ 833.832563][T12926] sctp: [Deprecated]: syz.3.2185 (pid 12926) Use of int in max_burst socket option. [ 833.832563][T12926] Use struct sctp_assoc_value instead [ 834.407642][T12932] overlayfs: failed to clone upperpath [ 834.530866][T12935] fuse: Bad value for 'rootmode' [ 835.160455][T12945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2192'. [ 837.422242][T12972] fuse: Bad value for 'rootmode' [ 841.001421][T10816] Bluetooth: hci0: command 0x0406 tx timeout [ 841.528304][T13016] fuse: Bad value for 'rootmode' [ 843.258062][T13037] loop9: detected capacity change from 0 to 256 [ 843.323778][T13037] vfat: Deprecated parameter 'posix' [ 843.329385][T13037] FAT-fs: "posix" option is obsolete, not supported now [ 845.325569][T13062] fuse: Unknown parameter 'use00000000000000000000' [ 846.052074][T13074] syz.0.2231 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 847.499946][T13095] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 847.578116][T13095] bond2 (unregistering): Released all slaves [ 847.784883][T13104] fuse: Unknown parameter 'use00000000000000000000' [ 848.691269][T13117] sctp: [Deprecated]: syz.2.2243 (pid 13117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 848.691269][T13117] Use struct sctp_sack_info instead [ 850.768002][T13141] fuse: Bad value for 'fd' [ 851.326903][T13147] fuse: Unknown parameter 'use00000000000000000000' [ 852.933150][T13173] fuse: Bad value for 'fd' [ 853.277800][T13178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2264'. [ 853.380665][T13178] ip6gre3: entered promiscuous mode [ 853.403522][T13178] ip6gre3: entered allmulticast mode [ 853.888922][T13188] fuse: Unknown parameter 'user_i00000000000000000000' [ 856.722978][T13225] fuse: Unknown parameter 'user_i00000000000000000000' [ 858.012354][T13244] fuse: Bad value for 'fd' [ 859.440799][T13261] fuse: Unknown parameter 'user_i00000000000000000000' [ 859.864430][T13265] loop9: detected capacity change from 0 to 1764 [ 860.682291][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 860.701965][ T34] bridge_slave_1: left allmulticast mode [ 860.707844][ T34] bridge_slave_1: left promiscuous mode [ 860.789516][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.862280][ T34] bridge_slave_0: left allmulticast mode [ 860.868148][ T34] bridge_slave_0: left promiscuous mode [ 860.931295][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.024184][T13287] loop2: detected capacity change from 0 to 256 [ 862.043182][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.213076][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.304326][ T34] bond0 (unregistering): Released all slaves [ 862.436166][T13287] FAT-fs (loop2): Directory bread(block 64) failed [ 862.471362][T13287] FAT-fs (loop2): Directory bread(block 65) failed [ 862.510756][T13287] FAT-fs (loop2): Directory bread(block 66) failed [ 862.558847][T13287] FAT-fs (loop2): Directory bread(block 67) failed [ 862.589129][T13287] FAT-fs (loop2): Directory bread(block 68) failed [ 862.655947][T13287] FAT-fs (loop2): Directory bread(block 69) failed [ 862.690871][T13287] FAT-fs (loop2): Directory bread(block 70) failed [ 862.772982][T13287] FAT-fs (loop2): Directory bread(block 71) failed [ 862.876334][T13287] FAT-fs (loop2): Directory bread(block 72) failed [ 862.910353][T13287] FAT-fs (loop2): Directory bread(block 73) failed [ 863.353853][T13302] fuse: Unknown parameter 'user_id00000000000000000000' [ 864.550372][ T34] hsr_slave_0: left promiscuous mode [ 864.590576][ T34] hsr_slave_1: left promiscuous mode [ 864.622892][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.696756][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.077757][ T34] team0 (unregistering): Port device team_slave_1 removed [ 866.189176][ T34] team0 (unregistering): Port device team_slave_0 removed [ 867.295717][T13347] fuse: Unknown parameter 'user_id00000000000000000000' [ 870.241561][T13376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2333'. [ 870.399252][T13380] fuse: Unknown parameter 'user_id00000000000000000000' [ 871.268596][T13394] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2339'. [ 872.919292][T13403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.954967][T13403] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.072557][T13403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 873.090131][T13412] fuse: Bad value for 'group_id' [ 873.111872][T13412] fuse: Bad value for 'group_id' [ 873.284846][T13414] fuse: Bad value for 'fd' [ 874.043523][T13420] fuse: Bad value for 'fd' [ 874.831236][T13427] sctp: [Deprecated]: syz.0.2352 (pid 13427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 874.831236][T13427] Use struct sctp_sack_info instead [ 875.055112][T13431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2353'. [ 876.262632][T13441] fuse: Bad value for 'fd' [ 877.481741][T13451] netlink: 4312 bytes leftover after parsing attributes in process `syz.9.2360'. [ 880.179541][T13473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2367'. [ 881.211947][T13471] loop9: detected capacity change from 0 to 256 [ 881.243297][T13480] fuse: Bad value for 'fd' [ 881.274025][T13471] vfat: Deprecated parameter 'posix' [ 881.279548][T13471] FAT-fs: "posix" option is obsolete, not supported now [ 882.984106][T13492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2373'. [ 883.062153][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2373'. [ 885.037864][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 885.044964][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 885.145790][T13513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2379'. [ 885.680220][T13518] fuse: Bad value for 'fd' [ 887.804205][T13539] sctp: [Deprecated]: syz.3.2388 (pid 13539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 887.804205][T13539] Use struct sctp_sack_info instead [ 890.336998][T13557] fuse: Bad value for 'fd' [ 897.012431][T13605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2406'. [ 898.409720][T13623] syzkaller0: entered promiscuous mode [ 898.431871][T13623] syzkaller0: entered allmulticast mode [ 899.083220][T13632] loop9: detected capacity change from 0 to 512 [ 899.460932][T13642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2420'. [ 899.929460][T13647] netlink: 'syz.3.2421': attribute type 1 has an invalid length. [ 899.957792][T13647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2421'. [ 900.823339][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2426'. [ 902.701481][T13686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2434'. [ 904.044858][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2441'. [ 907.004578][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2454'. [ 910.569243][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2472'. [ 912.749359][T13833] sctp: [Deprecated]: syz.0.2484 (pid 13833) Use of int in max_burst socket option. [ 912.749359][T13833] Use struct sctp_assoc_value instead [ 922.831136][T13958] sctp: [Deprecated]: syz.3.2522 (pid 13958) Use of int in max_burst socket option. [ 922.831136][T13958] Use struct sctp_assoc_value instead [ 929.079875][T14021] 9p: Bad value for 'wfdno' [ 931.641815][ T10] page_pool_release_retry() stalled pool shutdown: id 77, 41 inflight 60 sec [ 932.016864][T14057] 9p: Bad value for 'wfdno' [ 932.166620][T14056] loop9: detected capacity change from 0 to 164 [ 933.223138][T14072] fuse: Bad value for 'fd' [ 933.677736][T14077] sctp: [Deprecated]: syz.4.2558 (pid 14077) Use of int in max_burst socket option. [ 933.677736][T14077] Use struct sctp_assoc_value instead [ 934.964088][T14094] 9p: Bad value for 'wfdno' [ 936.310485][T14113] fuse: Bad value for 'fd' [ 938.115115][T14133] 9p: Bad value for 'wfdno' [ 939.073742][T14139] loop9: detected capacity change from 0 to 1764 [ 940.612638][T14156] fuse: Bad value for 'fd' [ 942.671964][T14185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 942.679678][T14185] IPv6: NLM_F_CREATE should be set when creating new route [ 942.815725][T14189] fuse: Bad value for 'fd' [ 944.312710][T14213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2600'. [ 945.271487][T14225] sctp: [Deprecated]: syz.4.2602 (pid 14225) Use of int in max_burst socket option. [ 945.271487][T14225] Use struct sctp_assoc_value instead [ 945.907720][T14234] loop9: detected capacity change from 0 to 128 [ 946.299272][T14236] overlayfs: failed to clone upperpath [ 946.489794][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 946.497680][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 946.615313][T14240] fuse: Bad value for 'fd' [ 950.549305][T14278] fuse: Bad value for 'fd' [ 952.514643][T14306] netlink: 'syz.2.2628': attribute type 1 has an invalid length. [ 952.623238][T14308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2628'. [ 952.747092][T14306] bond1: entered promiscuous mode [ 952.802699][T14306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 953.862396][T14317] fuse: Invalid rootmode [ 954.095204][T10816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 954.112606][T10816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 954.125735][T10816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 954.139331][T10816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 954.175070][T10816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 955.486769][T14328] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.497058][T14328] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.283558][ T5773] Bluetooth: hci5: command tx timeout [ 956.590699][T14328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.633009][T14346] netlink: 'syz.9.2642': attribute type 1 has an invalid length. [ 956.663574][T14328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.686181][T14347] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2642'. [ 957.549140][T14346] bond2: entered promiscuous mode [ 957.560175][T14346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 957.636057][ T142] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.696081][ T142] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.748447][T14355] fuse: Invalid rootmode [ 958.014029][ T142] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.031377][T14359] sctp: [Deprecated]: syz.3.2646 (pid 14359) Use of int in max_burst socket option. [ 958.031377][T14359] Use struct sctp_assoc_value instead [ 958.070095][ T142] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.362681][ T5773] Bluetooth: hci5: command tx timeout [ 958.392278][T14366] fuse: Bad value for 'fd' [ 960.012270][ T106] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 960.441417][ T5773] Bluetooth: hci5: command tx timeout [ 961.164502][ T106] bond0 (unregistering): Released all slaves [ 961.235988][ T106] bond1 (unregistering): Released all slaves [ 961.506814][T14320] chnl_net:caif_netlink_parms(): no params data found [ 962.521506][ T5773] Bluetooth: hci5: command tx timeout [ 963.255472][T14418] fuse: Bad value for 'fd' [ 963.266391][ T106] hsr_slave_0: left promiscuous mode [ 963.285570][ T106] hsr_slave_1: left promiscuous mode [ 965.451339][T14320] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.486795][T14320] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.527199][T14320] bridge_slave_0: entered allmulticast mode [ 965.584892][T14320] bridge_slave_0: entered promiscuous mode [ 965.660156][T14320] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.702298][T14320] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.732672][T14320] bridge_slave_1: entered allmulticast mode [ 965.783672][T14320] bridge_slave_1: entered promiscuous mode [ 966.093683][T14436] fuse: Bad value for 'fd' [ 966.178355][T14320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.302515][T14320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.711952][T14320] team0: Port device team_slave_0 added [ 966.784424][T14320] team0: Port device team_slave_1 added [ 967.135828][T14320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.154079][T14320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.261954][T14320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.304617][T14320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.331283][T14320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.420814][T14320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.916479][T14320] hsr_slave_0: entered promiscuous mode [ 967.946919][T14320] hsr_slave_1: entered promiscuous mode [ 969.662318][T14473] fuse: Bad value for 'user_id' [ 969.667422][T14473] fuse: Bad value for 'user_id' [ 969.908016][T14480] sctp: [Deprecated]: syz.3.2679 (pid 14480) Use of int in max_burst socket option. [ 969.908016][T14480] Use struct sctp_assoc_value instead [ 971.043536][T14320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 971.181225][T14320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 971.350613][T14320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 971.485379][T14320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 973.496013][T14320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.876047][T14507] syzkaller0: entered promiscuous mode [ 973.930280][T14507] syzkaller0: entered allmulticast mode [ 973.994204][T14320] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.180250][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.187944][ T6271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.344274][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.352013][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.342173][T14518] fuse: Bad value for 'user_id' [ 975.360250][T14518] fuse: Bad value for 'user_id' [ 976.695409][T14320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.334935][T14320] veth0_vlan: entered promiscuous mode [ 977.364299][T14536] sctp: [Deprecated]: syz.9.2696 (pid 14536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 977.364299][T14536] Use struct sctp_sack_info instead [ 977.515079][T14320] veth1_vlan: entered promiscuous mode [ 977.946916][T14320] veth0_macvtap: entered promiscuous mode [ 978.030204][T14320] veth1_macvtap: entered promiscuous mode [ 978.235733][T14320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.245263][T14546] fuse: Bad value for 'fd' [ 978.357381][T14320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.565773][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.610763][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.662178][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.701939][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.028520][T14565] netlink: 'syz.2.2704': attribute type 12 has an invalid length. [ 980.433754][ T29] audit: type=1326 audit(1772097337.943:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14571 comm="syz.3.2706" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707ef6c code=0x0 [ 982.617332][T14591] fuse: Bad value for 'fd' [ 985.621726][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.662108][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.714286][T14625] fuse: Bad value for 'fd' [ 985.911817][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.974018][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.563957][T14666] fuse: Bad value for 'fd' [ 991.710075][T14694] fuse: Bad value for 'fd' [ 992.788164][T14706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 992.812278][T14706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 992.832903][T14706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 992.862350][T14706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 992.875421][T14706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 993.113430][T14713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2757'. [ 994.481346][T14727] fuse: Bad value for 'fd' [ 995.001313][T14706] Bluetooth: hci3: command tx timeout [ 995.179145][T14704] chnl_net:caif_netlink_parms(): no params data found [ 996.918311][ T106] bridge_slave_1: left allmulticast mode [ 996.931717][ T106] bridge_slave_1: left promiscuous mode [ 996.949071][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.042095][ T106] bridge_slave_0: left allmulticast mode [ 997.047978][ T106] bridge_slave_0: left promiscuous mode [ 997.081442][T14706] Bluetooth: hci3: command tx timeout [ 997.098942][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.834502][ T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.955715][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.046281][ T106] bond0 (unregistering): Released all slaves [ 998.106035][ T106] bond1 (unregistering): Released all slaves [ 998.137874][T14770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2778'. [ 998.268211][ T106] bond2 (unregistering): Released all slaves [ 998.440347][ T106] bond3 (unregistering): Released all slaves [ 998.548418][ T106] bond4 (unregistering): Released all slaves [ 998.677560][T14764] netlink: 'syz.9.2776': attribute type 12 has an invalid length. [ 999.161347][T14706] Bluetooth: hci3: command tx timeout [ 999.421375][T14704] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.470459][T14704] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.522008][T14704] bridge_slave_0: entered allmulticast mode [ 999.542306][T14704] bridge_slave_0: entered promiscuous mode [ 999.607631][T14704] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.651900][T14704] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.678753][T14704] bridge_slave_1: entered allmulticast mode [ 999.710004][T14704] bridge_slave_1: entered promiscuous mode [ 1000.216521][T14704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.326210][ T106] hsr_slave_0: left promiscuous mode [ 1001.241760][T14706] Bluetooth: hci3: command tx timeout [ 1002.231538][T14704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.264636][T14793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2788'. [ 1002.958050][T14704] team0: Port device team_slave_0 added [ 1003.046279][T14704] team0: Port device team_slave_1 added [ 1003.550278][T14704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.585794][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.623825][T14704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.729010][T14704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.772453][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.862133][T14704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.396291][T14704] hsr_slave_0: entered promiscuous mode [ 1004.447114][T14704] hsr_slave_1: entered promiscuous mode [ 1004.494986][T14704] debugfs: 'hsr0' already exists in 'hsr' [ 1004.551384][T14704] Cannot create hsr debugfs directory [ 1007.919243][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1007.926791][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1008.199093][T14704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1008.315751][T14704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1008.433751][T14704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1008.601685][T14704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1008.871996][T14869] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2814'. [ 1010.327395][T14704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.592377][T14704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.713952][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.721638][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.898608][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.906388][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.575880][T14904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2827'. [ 1014.349441][T14704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.053206][T14949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2842'. [ 1015.119108][T14704] veth0_vlan: entered promiscuous mode [ 1015.601065][T14704] veth1_vlan: entered promiscuous mode [ 1016.122660][T14704] veth0_macvtap: entered promiscuous mode [ 1016.199219][T14704] veth1_macvtap: entered promiscuous mode [ 1016.467439][T14704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.651959][T14704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.862366][ T1138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.901438][ T1138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.943698][ T1138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.970485][ T1138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.358074][T15002] fuse: Unknown parameter 'use00000000000000000000' [ 1020.982366][T15028] fuse: Unknown parameter 'group_i00000000000000000000' [ 1021.936994][T15040] fuse: Unknown parameter 'user_i00000000000000000000' [ 1023.160713][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.193235][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.547259][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.600144][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.357448][T15068] fuse: Unknown parameter 'group_i00000000000000000000' [ 1024.998546][T15077] fuse: Unknown parameter 'user_i00000000000000000000' [ 1025.631928][T15085] fuse: Unknown parameter 'fd0x0000000000000003' [ 1027.525993][T15105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2895'. [ 1027.594568][T15106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2895'. [ 1027.789336][T15108] fuse: Unknown parameter 'user_i00000000000000000000' [ 1029.889831][T15122] fuse: Unknown parameter 'fd0x0000000000000003' [ 1031.827097][T15140] fuse: Unknown parameter 'user_id00000000000000000000' [ 1035.810746][T15169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2918'. [ 1035.842645][T15170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2918'. [ 1037.644676][ T29] audit: type=1326 audit(1772097395.153:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15190 comm="syz.2.2925" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57f6c code=0x7ffc0000 [ 1038.024977][ T29] audit: type=1326 audit(1772097395.533:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.9.2926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1038.161404][ T29] audit: type=1326 audit(1772097395.533:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.9.2926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1038.337057][ T29] audit: type=1326 audit(1772097395.573:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.9.2926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1038.461403][ T29] audit: type=1326 audit(1772097395.573:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.9.2926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1038.558542][ T29] audit: type=1326 audit(1772097395.583:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.9.2926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1038.695557][ T29] audit: type=1326 audit(1772097395.583:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.9.2926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1038.812045][ T29] audit: type=1326 audit(1772097395.603:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.9.2926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=368 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1038.930883][ T29] audit: type=1326 audit(1772097395.603:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.9.2926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1039.092424][ T29] audit: type=1326 audit(1772097395.603:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.9.2926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1040.610404][T15221] fuse: Bad value for 'fd' [ 1043.307548][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2947'. [ 1043.681723][T15250] fuse: Bad value for 'fd' [ 1045.135162][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2955'. [ 1046.846375][T15286] fuse: Bad value for 'fd' [ 1047.601210][T15295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2968'. [ 1049.650299][T15316] fuse: Unknown parameter '0x0000000000000003' [ 1050.356646][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2981'. [ 1052.237701][T15347] fuse: Unknown parameter '0x0000000000000003' [ 1052.301745][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2992'. [ 1053.070060][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2996'. [ 1053.816690][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1053.816768][ T29] audit: type=1326 audit(1772097411.303:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1053.994054][ T29] audit: type=1326 audit(1772097411.383:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1054.121471][ T29] audit: type=1326 audit(1772097411.403:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=308 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1054.261424][ T29] audit: type=1326 audit(1772097411.403:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1054.389714][ T29] audit: type=1326 audit(1772097411.403:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1054.561231][ T29] audit: type=1326 audit(1772097411.413:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1054.691361][ T29] audit: type=1326 audit(1772097411.413:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1054.871246][ T29] audit: type=1326 audit(1772097411.433:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1054.981393][ T29] audit: type=1326 audit(1772097411.433:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1055.091610][ T29] audit: type=1326 audit(1772097411.433:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1055.732876][T15375] fuse: Unknown parameter '0x0000000000000003' [ 1055.781645][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3005'. [ 1056.452608][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3008'. [ 1059.535281][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3021'. [ 1060.526492][T15429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1060.534160][T15429] IPv6: NLM_F_CREATE should be set when creating new route [ 1061.685364][T15445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3033'. [ 1063.156422][T15458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3038'. [ 1065.526355][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3046'. [ 1067.351552][T15496] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1068.980204][T15517] netlink: 75 bytes leftover after parsing attributes in process `syz.2.3063'. [ 1069.346260][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1069.356496][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.753453][T15534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3069'. [ 1070.872816][T15532] bond1: entered promiscuous mode [ 1070.880649][T15532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1071.116682][T15534] veth3: entered promiscuous mode [ 1071.146973][T15534] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1074.483686][T15575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3084'. [ 1074.760662][T15572] bond3: entered promiscuous mode [ 1074.786439][T15572] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1075.212874][T15575] veth7: entered promiscuous mode [ 1075.253737][T15575] bond3: (slave veth7): Enslaving as an active interface with an up link [ 1075.438853][T15581] loop3: detected capacity change from 0 to 1764 [ 1076.002412][T15590] overlayfs: failed to clone upperpath [ 1076.521204][T15574] Bluetooth: hci5: command 0x0406 tx timeout [ 1078.340740][T15607] overlay: filesystem on ./file0 not supported as upperdir [ 1078.750498][T15613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3100'. [ 1078.966198][T15611] bond2: entered promiscuous mode [ 1079.019688][T15611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1079.437820][T15613] veth13: entered promiscuous mode [ 1079.478090][T15613] bond2: (slave veth13): Enslaving as an active interface with an up link [ 1082.682365][T15658] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3116'. [ 1082.918791][T15655] bond3: entered promiscuous mode [ 1082.975130][T15655] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1083.372471][T15658] veth9: entered promiscuous mode [ 1083.410696][T15658] bond3: (slave veth9): Enslaving as an active interface with an up link [ 1083.509561][T15665] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3120'. [ 1086.666592][ T13] bridge_slave_1: left allmulticast mode [ 1086.676334][ T13] bridge_slave_1: left promiscuous mode [ 1086.698607][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.735437][ T13] bridge_slave_0: left allmulticast mode [ 1086.751474][ T13] bridge_slave_0: left promiscuous mode [ 1086.763724][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.491299][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1087.543004][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.569674][ T13] bond0 (unregistering): Released all slaves [ 1087.611685][ T13] bond1 (unregistering): Released all slaves [ 1087.682378][ T13] bond2 (unregistering): Released all slaves [ 1087.753139][ T13] bond3 (unregistering): (slave veth7): Releasing backup interface [ 1087.807529][ T13] veth7: left promiscuous mode [ 1087.832467][ T13] bond3 (unregistering): Released all slaves [ 1088.591424][ T13] hsr_slave_0: left promiscuous mode [ 1088.675908][ T13] hsr_slave_1: left promiscuous mode [ 1088.724330][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.776717][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.800661][T15574] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1090.814057][T15574] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1090.837086][T15574] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1090.872709][T15574] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1090.909036][T15574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1091.063725][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1091.188466][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1091.303085][T15718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3140'. [ 1091.364764][T15718] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3140'. [ 1092.059141][T15718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3140'. [ 1093.001498][T15574] Bluetooth: hci2: command tx timeout [ 1095.082705][T15574] Bluetooth: hci2: command tx timeout [ 1095.100775][T15713] chnl_net:caif_netlink_parms(): no params data found [ 1097.161612][T15574] Bluetooth: hci2: command tx timeout [ 1097.834580][T15713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.835050][T15713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.879693][T15713] bridge_slave_0: entered allmulticast mode [ 1097.897062][T15713] bridge_slave_0: entered promiscuous mode [ 1097.971598][T15713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.972008][T15713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.973219][T15713] bridge_slave_1: entered allmulticast mode [ 1097.988944][T15713] bridge_slave_1: entered promiscuous mode [ 1098.432670][T15713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.539957][T15713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.938029][T15713] team0: Port device team_slave_0 added [ 1099.030083][T15713] team0: Port device team_slave_1 added [ 1099.251097][T15574] Bluetooth: hci2: command tx timeout [ 1099.496508][T15713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.551505][T15713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.663797][T15713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.717677][T15713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.755838][T15713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.836032][T15713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.397664][T15713] hsr_slave_0: entered promiscuous mode [ 1100.444794][T15713] hsr_slave_1: entered promiscuous mode [ 1100.476598][T15713] debugfs: 'hsr0' already exists in 'hsr' [ 1100.491589][T15713] Cannot create hsr debugfs directory [ 1103.811562][T15713] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1103.982468][T15713] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1104.068845][T15713] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1104.186470][T15713] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1105.217373][T15842] loop3: detected capacity change from 0 to 16 [ 1105.341236][T15842] erofs (device loop3): invalid ishare xattr prefix id 0 [ 1106.050219][T15713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.312696][T15713] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.415007][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.422634][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.849694][T15860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1106.943884][ T227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.951547][ T227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.096043][T15890] overlayfs: failed to clone upperpath [ 1110.134368][T15713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.280154][T15950] loop3: detected capacity change from 0 to 256 [ 1113.394099][T15950] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1113.595697][T15713] veth0_vlan: entered promiscuous mode [ 1113.837840][T15713] veth1_vlan: entered promiscuous mode [ 1114.517802][T15713] veth0_macvtap: entered promiscuous mode [ 1114.546266][T15962] overlayfs: failed to resolve './file1': -2 [ 1114.643156][T15713] veth1_macvtap: entered promiscuous mode [ 1115.014359][T15713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.273253][T15713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.563312][ T6271] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.614958][ T6271] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.716260][ T6271] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.748826][ T6271] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.756690][T15988] loop3: detected capacity change from 0 to 256 [ 1116.886020][T15988] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1117.484106][T14706] Bluetooth: hci3: command 0x0406 tx timeout [ 1118.046369][T16004] overlayfs: failed to resolve './file1': -2 [ 1119.068391][T16015] netlink: 'syz.3.3225': attribute type 29 has an invalid length. [ 1119.141333][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 1119.178686][T16015] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1121.723788][T16049] overlayfs: failed to resolve './file1': -2 [ 1122.482665][T16058] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3236'. [ 1124.293683][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.355844][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.801587][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.809638][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.462434][T16093] overlayfs: failed to resolve './file1': -2 [ 1128.904035][T16137] overlayfs: failed to resolve './file1': -2 [ 1130.785341][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1130.801478][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1131.999485][T16176] overlayfs: failed to resolve './file1': -2 [ 1136.309324][T16221] netlink: 'syz.9.3288': attribute type 1 has an invalid length. [ 1136.884886][T16221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1137.237918][T16223] bond4: (slave ip6erspan0): making interface the new active one [ 1137.346375][T16223] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1138.412065][T16244] fuse: Bad value for 'fd' [ 1143.596725][T16305] loop6: detected capacity change from 0 to 512 [ 1164.294587][T16530] loop3: detected capacity change from 0 to 128 [ 1164.398484][T16530] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1164.449879][T16532] overlayfs: failed to clone upperpath [ 1164.516369][T16530] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 1164.523688][T16532] overlayfs: failed to clone upperpath [ 1164.581611][T16530] FAT-fs (loop3): Filesystem has been set read-only [ 1164.614119][T16530] syz.3.3384: attempt to access beyond end of device [ 1164.614119][T16530] loop3: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 1164.711538][T16530] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 1164.745270][T16530] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 1164.801826][T16530] syz.3.3384: attempt to access beyond end of device [ 1164.801826][T16530] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 1164.886726][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1164.886807][ T29] audit: type=1800 audit(1772097522.393:76): pid=16530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3384" name="file2" dev="loop3" ino=1048683 res=0 errno=0 [ 1168.696181][T16575] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1172.746052][T16619] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3410'. [ 1176.495065][T16655] loop6: detected capacity change from 0 to 8192 [ 1177.645106][T16675] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1178.952205][T16693] syzkaller0: entered promiscuous mode [ 1178.957911][T16693] syzkaller0: entered allmulticast mode [ 1181.037378][T16715] overlayfs: failed to clone upperpath [ 1182.596433][T16738] netlink: 'syz.9.3445': attribute type 9 has an invalid length. [ 1186.398775][T16788] ===================================================== [ 1186.406521][T16788] BUG: KMSAN: uninit-value in eth_type_trans+0x7d5/0x9b0 [ 1186.414008][T16788] eth_type_trans+0x7d5/0x9b0 [ 1186.418944][T16788] bpf_prog_run_generic_xdp+0x1313/0x20d0 [ 1186.425097][T16788] do_xdp_generic+0xe07/0x17f0 [ 1186.430099][T16788] tun_get_user+0x525a/0x7830 [ 1186.435187][T16788] tun_chr_write_iter+0x3e9/0x5c0 [ 1186.440435][T16788] vfs_write+0xbe1/0x15c0 [ 1186.445116][T16788] ksys_write+0x1d9/0x470 [ 1186.449756][T16788] __ia32_sys_write+0x9a/0xf0 [ 1186.454763][T16788] ia32_sys_call+0x37a7/0x4360 [ 1186.459747][T16788] do_int80_emulation+0x15a/0x330 [ 1186.465204][T16788] asm_int80_emulation+0x1f/0x30 [ 1186.470371][T16788] [ 1186.472877][T16788] Uninit was stored to memory at: [ 1186.478317][T16788] pskb_expand_head+0x4a0/0x1fb0 [ 1186.483603][T16788] do_xdp_generic+0xb30/0x17f0 [ 1186.488699][T16788] tun_get_user+0x525a/0x7830 [ 1186.493703][T16788] tun_chr_write_iter+0x3e9/0x5c0 [ 1186.498979][T16788] vfs_write+0xbe1/0x15c0 [ 1186.503609][T16788] ksys_write+0x1d9/0x470 [ 1186.508156][T16788] __ia32_sys_write+0x9a/0xf0 [ 1186.513146][T16788] ia32_sys_call+0x37a7/0x4360 [ 1186.518098][T16788] do_int80_emulation+0x15a/0x330 [ 1186.523399][T16788] asm_int80_emulation+0x1f/0x30 [ 1186.528530][T16788] [ 1186.531053][T16788] Uninit was created at: [ 1186.535642][T16788] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 1186.542421][T16788] __alloc_skb+0x90d/0x1190 [ 1186.547137][T16788] alloc_skb_with_frags+0xc5/0xa60 [ 1186.552559][T16788] sock_alloc_send_pskb+0xacb/0xc60 [ 1186.558087][T16788] tun_get_user+0xcfc/0x7830 [ 1186.563007][T16788] tun_chr_write_iter+0x3e9/0x5c0 [ 1186.568266][T16788] vfs_write+0xbe1/0x15c0 [ 1186.572908][T16788] ksys_write+0x1d9/0x470 [ 1186.577450][T16788] __ia32_sys_write+0x9a/0xf0 [ 1186.582466][T16788] ia32_sys_call+0x37a7/0x4360 [ 1186.587410][T16788] do_int80_emulation+0x15a/0x330 [ 1186.592709][T16788] asm_int80_emulation+0x1f/0x30 [ 1186.597844][T16788] [ 1186.600325][T16788] CPU: 0 UID: 0 PID: 16788 Comm: syz.9.3462 Not tainted syzkaller #0 PREEMPT(full) [ 1186.609992][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1186.620292][T16788] ===================================================== [ 1186.627429][T16788] Disabling lock debugging due to kernel taint [ 1186.633818][T16788] Kernel panic - not syncing: kmsan.panic set ... [ 1186.640405][T16788] CPU: 0 UID: 0 PID: 16788 Comm: syz.9.3462 Tainted: G B syzkaller #0 PREEMPT(full) [ 1186.651582][T16788] Tainted: [B]=BAD_PAGE [ 1186.655868][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1186.666096][T16788] Call Trace: [ 1186.669503][T16788] [ 1186.672558][T16788] __dump_stack+0x26/0x30 [ 1186.677111][T16788] dump_stack_lvl+0x50/0x1c0 [ 1186.681942][T16788] ? dump_stack+0x12/0x25 [ 1186.686578][T16788] dump_stack+0x1e/0x25 [ 1186.690944][T16788] vpanic+0x7b4/0x1430 [ 1186.695277][T16788] panic+0x15d/0x160 [ 1186.699450][T16788] kmsan_report+0x31a/0x320 [ 1186.704205][T16788] ? free_frozen_pages+0x21/0x30 [ 1186.709416][T16788] ? __msan_warning+0x1b/0x30 [ 1186.714349][T16788] ? eth_type_trans+0x7d5/0x9b0 [ 1186.719492][T16788] ? bpf_prog_run_generic_xdp+0x1313/0x20d0 [ 1186.725678][T16788] ? do_xdp_generic+0xe07/0x17f0 [ 1186.730875][T16788] ? tun_get_user+0x525a/0x7830 [ 1186.735973][T16788] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1186.741431][T16788] ? vfs_write+0xbe1/0x15c0 [ 1186.746161][T16788] ? ksys_write+0x1d9/0x470 [ 1186.750889][T16788] ? __ia32_sys_write+0x9a/0xf0 [ 1186.755955][T16788] ? ia32_sys_call+0x37a7/0x4360 [ 1186.761087][T16788] ? do_int80_emulation+0x15a/0x330 [ 1186.766479][T16788] ? asm_int80_emulation+0x1f/0x30 [ 1186.771976][T16788] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1186.778064][T16788] ? bpf_xdp_adjust_head+0x2e2/0x390 [ 1186.783746][T16788] ? kmsan_get_metadata+0xf1/0x160 [ 1186.789134][T16788] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1186.795228][T16788] ? ___bpf_prog_run+0xea23/0xeb60 [ 1186.800691][T16788] ? kmsan_get_metadata+0xf1/0x160 [ 1186.806087][T16788] __msan_warning+0x1b/0x30 [ 1186.810874][T16788] eth_type_trans+0x7d5/0x9b0 [ 1186.815921][T16788] bpf_prog_run_generic_xdp+0x1313/0x20d0 [ 1186.821975][T16788] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1186.828208][T16788] do_xdp_generic+0xe07/0x17f0 [ 1186.833312][T16788] ? tun_get_user+0x51dc/0x7830 [ 1186.838429][T16788] tun_get_user+0x525a/0x7830 [ 1186.843372][T16788] ? stack_depot_save_flags+0x35/0x790 [ 1186.849232][T16788] ? kmsan_get_metadata+0xf1/0x160 [ 1186.854608][T16788] ? kmsan_get_metadata+0xf1/0x160 [ 1186.859978][T16788] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1186.866589][T16788] ? kmsan_get_metadata+0x50/0x160 [ 1186.872017][T16788] tun_chr_write_iter+0x3e9/0x5c0 [ 1186.877349][T16788] vfs_write+0xbe1/0x15c0 [ 1186.881948][T16788] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1186.887759][T16788] ksys_write+0x1d9/0x470 [ 1186.892343][T16788] __ia32_sys_write+0x9a/0xf0 [ 1186.897260][T16788] ia32_sys_call+0x37a7/0x4360 [ 1186.902248][T16788] do_int80_emulation+0x15a/0x330 [ 1186.907473][T16788] ? clear_bhb_loop+0x50/0xa0 [ 1186.912363][T16788] ? clear_bhb_loop+0x50/0xa0 [ 1186.917283][T16788] asm_int80_emulation+0x1f/0x30 [ 1186.922439][T16788] RIP: 0023:0xf71b5b6b [ 1186.926696][T16788] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1186.946516][T16788] RSP: 002b:00000000f546d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1186.955166][T16788] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800000c0 [ 1186.963309][T16788] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 1186.971440][T16788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1186.979558][T16788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1186.987691][T16788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1186.995859][T16788] [ 1186.999613][T16788] Kernel Offset: disabled [ 1187.004017][T16788] Rebooting in 86400 seconds..