[ OK ] Started Daily apt upgrade and clean activities. [ OK ] Reached target Timers. Starting OpenBSD Secure Shell server... [ OK ] Started Permit User Sessions. [ OK ] Started System Logging Service. [ OK ] Found device /dev/ttyS0. [** ] (1 of 2) A start job is running for…ot available (1min 31s / no limit) [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started OpenBSD Secure Shell server. [ 152.716073][ T8383] sshd (8383) used greatest stack depth: 4536 bytes left Warning: Permanently added '10.128.0.116' (ECDSA) to the list of known hosts. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 2020/08/07 17:47:44 fuzzer started 2020/08/07 17:47:45 dialing manager at 10.128.0.26:45451 2020/08/07 17:47:46 syscalls: 3255 2020/08/07 17:47:46 code coverage: enabled 2020/08/07 17:47:46 comparison tracing: enabled 2020/08/07 17:47:46 extra coverage: enabled 2020/08/07 17:47:46 setuid sandbox: enabled 2020/08/07 17:47:46 namespace sandbox: enabled 2020/08/07 17:47:46 Android sandbox: enabled 2020/08/07 17:47:46 fault injection: enabled 2020/08/07 17:47:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/07 17:47:46 net packet injection: enabled 2020/08/07 17:47:46 net device setup: enabled 2020/08/07 17:47:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/07 17:47:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/07 17:47:46 USB emulation: enabled 2020/08/07 17:47:46 hci packet injection: enabled 17:48:32 executing program 0: r0 = socket(0x2000000000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000052001f0014f9f407002c04021c002a100800010032fa6eba3f980e000000d795", 0x24) syzkaller login: [ 220.532468][ T29] audit: type=1400 audit(1596822512.495:8): avc: denied { execmem } for pid=8476 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 220.968592][ T8477] IPVS: ftp: loaded support on port[0] = 21 [ 221.246949][ T8477] chnl_net:caif_netlink_parms(): no params data found [ 221.384789][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.392275][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.402484][ T8477] device bridge_slave_0 entered promiscuous mode [ 221.418570][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.426064][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.435780][ T8477] device bridge_slave_1 entered promiscuous mode [ 221.491358][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.510235][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.565346][ T8477] team0: Port device team_slave_0 added [ 221.581270][ T8477] team0: Port device team_slave_1 added [ 221.633566][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.640640][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.666825][ T8477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.685873][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.693022][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.719851][ T8477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.791505][ T8477] device hsr_slave_0 entered promiscuous mode [ 221.801645][ T8477] device hsr_slave_1 entered promiscuous mode [ 222.127557][ T8477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.147929][ T8477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.169547][ T8477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.204695][ T8477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.570869][ T8477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.614948][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.624377][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.649305][ T8477] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.677363][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.687498][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.697640][ T3381] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.704982][ T3381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.763451][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.773255][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.783560][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.795385][ T3381] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.802702][ T3381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.811806][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.823064][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.858751][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.869755][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.912978][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.923193][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.934114][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.945746][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.955660][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.991456][ T8477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.006008][ T8477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.034252][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.044336][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.093179][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.100922][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.145792][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.215320][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.225702][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.294476][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.306976][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.338695][ T8477] device veth0_vlan entered promiscuous mode [ 223.349146][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.358485][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.407690][ T8477] device veth1_vlan entered promiscuous mode [ 223.505801][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.516096][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.525951][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.536165][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.557258][ T8477] device veth0_macvtap entered promiscuous mode [ 223.597185][ T8477] device veth1_macvtap entered promiscuous mode [ 223.665964][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.673957][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.683975][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.693757][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.704133][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.740832][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.749712][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.760106][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.555893][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 17:48:37 executing program 0: r0 = socket(0x2000000000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000052001f0014f9f407002c04021c002a100800010032fa6eba3f980e000000d795", 0x24) [ 225.943534][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 17:48:38 executing program 0: r0 = socket(0x2000000000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000052001f0014f9f407002c04021c002a100800010032fa6eba3f980e000000d795", 0x24) [ 226.183659][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 17:48:38 executing program 0: r0 = socket(0x2000000000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000052001f0014f9f407002c04021c002a100800010032fa6eba3f980e000000d795", 0x24) [ 226.428708][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 17:48:38 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 17:48:38 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 17:48:39 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) [ 227.103127][ T17] Bluetooth: hci0: command 0x0409 tx timeout 17:48:39 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 17:48:39 executing program 0: io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1, r2}]) 17:48:39 executing program 0: io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1, r2}]) 17:48:40 executing program 0: io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1, r2}]) 17:48:40 executing program 0: io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1, r2}]) 17:48:41 executing program 0: io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1, r2}]) [ 229.172516][ T28] Bluetooth: hci0: command 0x041b tx timeout 17:48:41 executing program 0: io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1, r2}]) 17:48:41 executing program 0: io_setup(0x1ff, &(0x7f00000004c0)=0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1, r2}]) 17:48:42 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000048000), 0x4000000) 17:48:42 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000048000), 0x4000000) 17:48:42 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000048000), 0x4000000) 17:48:43 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000048000), 0x4000000) [ 231.253657][ T28] Bluetooth: hci0: command 0x040f tx timeout 17:48:43 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000048000), 0x4000000) 17:48:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x21, 0x0, &(0x7f00000003c0)) 17:48:43 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000048000), 0x4000000) 17:48:44 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000048000), 0x4000000) [ 232.365502][ T8776] IPVS: ftp: loaded support on port[0] = 21 17:48:44 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) syz_genetlink_get_family_id$batadv(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:48:44 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) syz_genetlink_get_family_id$batadv(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 233.104911][ T8776] chnl_net:caif_netlink_parms(): no params data found 17:48:45 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) syz_genetlink_get_family_id$batadv(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 233.333278][ T8688] Bluetooth: hci0: command 0x0419 tx timeout [ 233.498046][ T8776] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.506133][ T8776] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.516019][ T8776] device bridge_slave_0 entered promiscuous mode 17:48:45 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) syz_genetlink_get_family_id$batadv(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 233.587882][ T8776] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.595380][ T8776] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.605191][ T8776] device bridge_slave_1 entered promiscuous mode [ 233.813698][ T8776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 17:48:45 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) syz_genetlink_get_family_id$batadv(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 233.872647][ T8776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.026213][ T8776] team0: Port device team_slave_0 added [ 234.063708][ T8776] team0: Port device team_slave_1 added [ 234.158397][ T8776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.165670][ T8776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.191946][ T8776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 17:48:46 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) syz_genetlink_get_family_id$batadv(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 234.289625][ T8776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.296859][ T8776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.325843][ T8776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.420024][ T8776] device hsr_slave_0 entered promiscuous mode [ 234.465440][ T8776] device hsr_slave_1 entered promiscuous mode [ 234.477704][ T8776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.485719][ T8776] Cannot create hsr debugfs directory 17:48:46 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) syz_genetlink_get_family_id$batadv(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 235.028484][ T8776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.084547][ T8776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 235.144521][ T8776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 235.194345][ T8776] netdevsim netdevsim1 netdevsim3: renamed from eth3 17:48:47 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) syz_genetlink_get_family_id$batadv(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:48:47 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) syz_genetlink_get_family_id$batadv(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 236.013510][ T8776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.108989][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.118366][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.167901][ T8776] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.219560][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.229762][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.239379][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.246695][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.351940][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.361505][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.371637][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.381735][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.389056][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.398175][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.409308][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.483476][ T8776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.494542][ T8776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.516909][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.527806][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.542643][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.553422][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.563991][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.573845][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.584490][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.594330][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.611790][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.622258][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.790138][ T8687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.798065][ T8687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.848181][ T8776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.001532][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.011725][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.093133][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.103144][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.134873][ T8776] device veth0_vlan entered promiscuous mode [ 237.149422][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.158740][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.204574][ T8776] device veth1_vlan entered promiscuous mode [ 237.310736][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.320946][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.346934][ T8776] device veth0_macvtap entered promiscuous mode [ 237.377710][ T8776] device veth1_macvtap entered promiscuous mode [ 237.440715][ T8776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 237.451978][ T8776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.466399][ T8776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.475075][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.485386][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.495037][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.505249][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.538194][ T8776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 237.549602][ T8776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.564167][ T8776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.575267][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.585791][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:48:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x21, 0x0, &(0x7f00000003c0)) 17:48:51 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) syz_genetlink_get_family_id$batadv(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:48:51 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) syz_genetlink_get_family_id$batadv(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:48:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x21, 0x0, &(0x7f00000003c0)) 17:48:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x21, 0x0, &(0x7f00000003c0)) 17:48:52 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) syz_genetlink_get_family_id$batadv(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:48:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e21", 0xc9}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1ae8, 0x11, 0x0, 0x27) 17:48:52 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) syz_genetlink_get_family_id$batadv(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 240.935703][ T17] Bluetooth: hci1: command 0x0409 tx timeout 17:48:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e21", 0xc9}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1ae8, 0x11, 0x0, 0x27) 17:48:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x20000000003, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) [ 241.875254][ T9086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9086 comm=syz-executor.0 17:48:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e21", 0xc9}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1ae8, 0x11, 0x0, 0x27) 17:48:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e21", 0xc9}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1ae8, 0x11, 0x0, 0x27) [ 242.659982][ T9086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9086 comm=syz-executor.0 17:48:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e21", 0xc9}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) 17:48:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x20000000003, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) [ 243.012414][ T8686] Bluetooth: hci1: command 0x041b tx timeout [ 243.143322][ T9100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9100 comm=syz-executor.0 17:48:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001780)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e21", 0xc9}], 0x1) 17:48:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) 17:48:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x20000000003, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:48:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) [ 244.309172][ T9110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9110 comm=syz-executor.0 17:48:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) 17:48:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) [ 245.092444][ T8686] Bluetooth: hci1: command 0x040f tx timeout 17:48:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x20000000003, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:48:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) [ 245.617030][ T9122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9122 comm=syz-executor.0 17:48:57 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) 17:48:58 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) 17:48:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:48:58 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) [ 246.777047][ T9133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9133 comm=syz-executor.0 17:48:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:48:59 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) [ 247.172405][ T12] Bluetooth: hci1: command 0x0419 tx timeout [ 247.280381][ T9141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9141 comm=syz-executor.0 17:48:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) [ 247.834541][ T9150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9150 comm=syz-executor.0 17:48:59 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) 17:49:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) [ 248.296574][ T9158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9158 comm=syz-executor.0 17:49:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:00 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) [ 248.693493][ T9164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9164 comm=syz-executor.0 17:49:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:01 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) [ 249.139009][ T9172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9172 comm=syz-executor.0 17:49:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:01 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) [ 249.587114][ T9178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9178 comm=syz-executor.0 17:49:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:01 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) [ 250.033483][ T9182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9182 comm=syz-executor.0 17:49:02 executing program 0: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) 17:49:02 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) 17:49:03 executing program 0: pipe(0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) 17:49:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:03 executing program 0: pipe(0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:04 executing program 0: pipe(0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:04 executing program 0: pipe(&(0x7f0000000240)) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:04 executing program 0: pipe(&(0x7f0000000240)) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x0) 17:49:05 executing program 0: pipe(&(0x7f0000000240)) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:05 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, 0x0) 17:49:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:06 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, 0x0) 17:49:06 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, 0x0) 17:49:06 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:06 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x0, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:06 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:07 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x0, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:07 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:07 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x0, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:07 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) [ 255.940720][ T9252] IPVS: ftp: loaded support on port[0] = 21 17:49:08 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x0, 0x3, 0x2, 0x1b, 0x32e}) 17:49:08 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:08 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x0, 0x3, 0x2, 0x1b, 0x32e}) [ 256.833743][ T9252] chnl_net:caif_netlink_parms(): no params data found 17:49:09 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x0, 0x3, 0x2, 0x1b, 0x32e}) 17:49:09 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) [ 257.416008][ T9252] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.423899][ T9252] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.433893][ T9252] device bridge_slave_0 entered promiscuous mode [ 257.513550][ T9252] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.520928][ T9252] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.530876][ T9252] device bridge_slave_1 entered promiscuous mode [ 257.685438][ T9252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.733310][ T9252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.948471][ T9252] team0: Port device team_slave_0 added [ 257.997713][ T9252] team0: Port device team_slave_1 added [ 258.136489][ T9252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.144021][ T9252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.170218][ T9252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.261685][ T9252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.268906][ T9252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.295654][ T9252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.479449][ T9252] device hsr_slave_0 entered promiscuous mode [ 258.496818][ T9252] device hsr_slave_1 entered promiscuous mode [ 258.511000][ T9252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.518828][ T9252] Cannot create hsr debugfs directory [ 259.069295][ T9252] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.193943][ T9252] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.241235][ T9252] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.283132][ T9252] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 259.896920][ T9252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.944532][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.953958][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.998596][ T9252] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.038564][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.048875][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.059125][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.066477][ T8686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.155608][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.165379][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.175981][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.185626][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.192961][ T8686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.202048][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.213269][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.280046][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.290948][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.311695][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.322655][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.333443][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.362718][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.372842][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.429331][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.439528][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.462699][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.550414][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.558969][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.609038][ T9252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.767702][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.778072][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.896109][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.905988][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.941845][ T9252] device veth0_vlan entered promiscuous mode [ 260.952693][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.961887][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.011596][ T9252] device veth1_vlan entered promiscuous mode [ 261.139114][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.150067][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.179916][ T9252] device veth0_macvtap entered promiscuous mode [ 261.213580][ T9252] device veth1_macvtap entered promiscuous mode [ 261.293645][ T9252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.304277][ T9252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.314397][ T9252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.324982][ T9252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.340065][ T9252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.356074][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.366460][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.376225][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.386434][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.488390][ T9252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.500817][ T9252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.511013][ T9252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.521694][ T9252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.536396][ T9252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.549218][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.560391][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:49:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:15 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x0, 0x2, 0x1b, 0x32e}) 17:49:15 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:15 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x0, 0x2, 0x1b, 0x32e}) 17:49:16 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:16 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x0, 0x2, 0x1b, 0x32e}) 17:49:16 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:16 executing program 2: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) [ 265.018307][ T4897] Bluetooth: hci2: command 0x0409 tx timeout 17:49:17 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x0, 0x1b, 0x32e}) 17:49:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:49:17 executing program 2: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:17 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x0, 0x1b, 0x32e}) 17:49:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:49:17 executing program 2: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:18 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x0, 0x1b, 0x32e}) 17:49:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:49:18 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:18 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x0, 0x32e}) 17:49:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:19 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) [ 267.094967][ T17] Bluetooth: hci2: command 0x041b tx timeout 17:49:19 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x0, 0x32e}) [ 267.138956][ T9552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9552 comm=syz-executor.1 17:49:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) 17:49:19 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x0, 0x32e}) 17:49:19 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:20 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b}) 17:49:20 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:20 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b}) 17:49:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x0) 17:49:21 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:21 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b}) [ 269.186241][ T17] Bluetooth: hci2: command 0x040f tx timeout 17:49:21 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:21 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:21 executing program 0 (fault-call:1 fault-nth:0): pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) [ 269.874651][ T9591] FAULT_INJECTION: forcing a failure. [ 269.874651][ T9591] name failslab, interval 1, probability 0, space 0, times 1 [ 269.887505][ T9591] CPU: 0 PID: 9591 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 269.896162][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.906538][ T9591] Call Trace: [ 269.909942][ T9591] dump_stack+0x21c/0x280 [ 269.914381][ T9591] should_fail+0x8b7/0x9e0 [ 269.918912][ T9591] __should_failslab+0x1f6/0x290 [ 269.923962][ T9591] should_failslab+0x29/0x70 [ 269.928664][ T9591] kmem_cache_alloc_trace+0xf7/0xc70 [ 269.934054][ T9591] ? kmsan_internal_set_origin+0x75/0xb0 [ 269.939793][ T9591] ? tcp_sendmsg_locked+0x7501/0x7e60 [ 269.945283][ T9591] tcp_sendmsg_locked+0x7501/0x7e60 [ 269.950582][ T9591] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 269.956475][ T9591] ? __mod_node_page_state+0xfe/0x330 [ 269.961937][ T9591] ? kmsan_get_metadata+0x116/0x180 [ 269.967233][ T9591] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 269.973137][ T9591] ? kmsan_get_metadata+0x116/0x180 [ 269.978428][ T9591] ? kmsan_internal_set_origin+0x75/0xb0 [ 269.984166][ T9591] ? kmsan_set_origin_checked+0x95/0xf0 [ 269.989814][ T9591] ? __local_bh_enable_ip+0x97/0x1d0 [ 269.995216][ T9591] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 270.001387][ T9591] tcp_sendmsg+0xb2/0x100 [ 270.005822][ T9591] ? tcp_sendmsg_locked+0x7e60/0x7e60 [ 270.011289][ T9591] inet_sendmsg+0x15b/0x1d0 [ 270.015922][ T9591] ? inet_send_prepare+0x6b0/0x6b0 [ 270.021136][ T9591] __sys_sendto+0x9f8/0xca0 [ 270.025749][ T9591] ? ksys_write+0x454/0x500 [ 270.030349][ T9591] ? kmsan_get_metadata+0x116/0x180 [ 270.035637][ T9591] ? kmsan_get_metadata+0x116/0x180 [ 270.040917][ T9591] __se_sys_sendto+0x107/0x130 [ 270.045773][ T9591] __ia32_sys_sendto+0x6e/0x90 [ 270.051249][ T9591] __do_fast_syscall_32+0x2af/0x480 [ 270.057251][ T9591] do_fast_syscall_32+0x6b/0xd0 [ 270.062201][ T9591] do_SYSENTER_32+0x73/0x90 [ 270.066808][ T9591] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 270.073202][ T9591] RIP: 0023:0xf7f8d549 [ 270.077481][ T9591] Code: Bad RIP value. [ 270.081615][ T9591] RSP: 002b:00000000f55870cc EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 270.090113][ T9591] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 270.098164][ T9591] RDX: 0000000000000000 RSI: 000000002400cfb9 RDI: 0000000000000000 [ 270.106208][ T9591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.114245][ T9591] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 270.122305][ T9591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 17:49:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 270.948327][ T9599] FAULT_INJECTION: forcing a failure. [ 270.948327][ T9599] name failslab, interval 1, probability 0, space 0, times 0 [ 270.961413][ T9599] CPU: 0 PID: 9599 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 270.970069][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.980273][ T9599] Call Trace: [ 270.983683][ T9599] dump_stack+0x21c/0x280 [ 270.988119][ T9599] should_fail+0x8b7/0x9e0 [ 270.992643][ T9599] __should_failslab+0x1f6/0x290 [ 270.997711][ T9599] should_failslab+0x29/0x70 [ 271.002404][ T9599] __kmalloc+0xae/0x410 [ 271.006660][ T9599] ? kmsan_get_metadata+0x116/0x180 [ 271.011964][ T9599] ? tomoyo_realpath_from_path+0x15a/0xcb0 [ 271.017890][ T9599] tomoyo_realpath_from_path+0x15a/0xcb0 [ 271.023669][ T9599] tomoyo_path_number_perm+0x2a4/0xaf0 [ 271.029293][ T9599] tomoyo_file_ioctl+0x74/0x90 [ 271.034171][ T9599] ? tomoyo_inode_getattr+0x60/0x60 [ 271.039464][ T9599] security_file_ioctl+0x10a/0x210 17:49:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) [ 271.044685][ T9599] __se_compat_sys_ioctl+0x166/0x1100 [ 271.050178][ T9599] ? kmsan_set_origin_checked+0x95/0xf0 [ 271.055830][ T9599] ? kmsan_get_metadata+0x116/0x180 [ 271.061146][ T9599] __ia32_compat_sys_ioctl+0x4a/0x70 [ 271.066540][ T9599] __do_fast_syscall_32+0x2af/0x480 [ 271.071876][ T9599] do_fast_syscall_32+0x6b/0xd0 [ 271.076827][ T9599] do_SYSENTER_32+0x73/0x90 [ 271.081441][ T9599] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 271.087846][ T9599] RIP: 0023:0xf7fce549 [ 271.091993][ T9599] Code: Bad RIP value. [ 271.096131][ T9599] RSP: 002b:00000000f55c80cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 271.104637][ T9599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0086418 [ 271.112696][ T9599] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.120746][ T9599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.128803][ T9599] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 271.136852][ T9599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.145386][ T9599] ERROR: Out of memory at tomoyo_realpath_from_path. 17:49:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 271.263530][ T8688] Bluetooth: hci2: command 0x0419 tx timeout 17:49:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:49:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:24 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:24 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x10, 0x2400cfb9, 0x0, 0x0) [ 272.504364][ T9614] FAULT_INJECTION: forcing a failure. [ 272.504364][ T9614] name failslab, interval 1, probability 0, space 0, times 0 [ 272.517263][ T9614] CPU: 1 PID: 9614 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 272.525999][ T9614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.536110][ T9614] Call Trace: [ 272.539515][ T9614] dump_stack+0x21c/0x280 [ 272.543993][ T9614] should_fail+0x8b7/0x9e0 [ 272.548528][ T9614] __should_failslab+0x1f6/0x290 [ 272.553588][ T9614] should_failslab+0x29/0x70 [ 272.558290][ T9614] kmem_cache_alloc_trace+0xf7/0xc70 [ 272.563677][ T9614] ? kmsan_internal_set_origin+0x75/0xb0 [ 272.569427][ T9614] ? tcp_sendmsg_locked+0x7501/0x7e60 [ 272.574923][ T9614] tcp_sendmsg_locked+0x7501/0x7e60 [ 272.580314][ T9614] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 272.586231][ T9614] ? __mod_node_page_state+0xfe/0x330 [ 272.591717][ T9614] ? kmsan_get_metadata+0x116/0x180 [ 272.597019][ T9614] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 272.602971][ T9614] ? kmsan_get_metadata+0x116/0x180 [ 272.608285][ T9614] ? kmsan_internal_set_origin+0x75/0xb0 [ 272.614015][ T9614] ? kmsan_set_origin_checked+0x95/0xf0 [ 272.619710][ T9614] ? __local_bh_enable_ip+0x97/0x1d0 [ 272.625122][ T9614] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 272.631302][ T9614] tcp_sendmsg+0xb2/0x100 [ 272.635753][ T9614] ? tcp_sendmsg_locked+0x7e60/0x7e60 [ 272.641233][ T9614] inet_sendmsg+0x15b/0x1d0 [ 272.645848][ T9614] ? inet_send_prepare+0x6b0/0x6b0 [ 272.651087][ T9614] __sys_sendto+0x9f8/0xca0 [ 272.655720][ T9614] ? ksys_write+0x454/0x500 [ 272.660328][ T9614] ? kmsan_get_metadata+0x116/0x180 [ 272.665642][ T9614] ? kmsan_get_metadata+0x116/0x180 [ 272.671053][ T9614] __se_sys_sendto+0x107/0x130 [ 272.675928][ T9614] __ia32_sys_sendto+0x6e/0x90 [ 272.680802][ T9614] __do_fast_syscall_32+0x2af/0x480 [ 272.686118][ T9614] do_fast_syscall_32+0x6b/0xd0 [ 272.691077][ T9614] do_SYSENTER_32+0x73/0x90 [ 272.696477][ T9614] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 272.702875][ T9614] RIP: 0023:0xf7fbc549 [ 272.707087][ T9614] Code: Bad RIP value. [ 272.711220][ T9614] RSP: 002b:00000000f55b60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 272.719723][ T9614] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 272.727770][ T9614] RDX: 0000000000000000 RSI: 000000002400cfb9 RDI: 0000000000000000 [ 272.735816][ T9614] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.743960][ T9614] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 17:49:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xf0ff7f, 0x2400cfb9, 0x0, 0x0) [ 272.752009][ T9614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 17:49:24 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x2, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x10000000, 0x2400cfb9, 0x0, 0x0) 17:49:25 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x10, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:25 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x4b47, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x7ffff000, 0x2400cfb9, 0x0, 0x0) 17:49:26 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x4b49, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:26 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x4c01, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x10, 0x2400cfb9, 0x0, 0x0) 17:49:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x10) 17:49:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xf0ff7f, 0x2400cfb9, 0x0, 0x0) 17:49:27 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x541b, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0xf0ff7f) 17:49:27 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x5421, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x10000000, 0x2400cfb9, 0x0, 0x0) 17:49:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x10000000) 17:49:28 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x5450, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x7ffff000, 0x2400cfb9, 0x0, 0x0) 17:49:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x7ffff000) 17:49:28 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x5451, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:29 executing program 1: r0 = socket$inet(0x2, 0x5, 0x8000) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x64) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x20000000003, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x200}, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYRESHEX], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00\x007z\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="00000000000000000400000009000100727376700000000044000200400005003c0001004000000000be0520"], 0x74}}, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000080)=r7) 17:49:29 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x5452, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x10) 17:49:29 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x5460, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0xf0ff7f) 17:49:30 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x6364, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:30 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x20000000003, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1d055fc2) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 17:49:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x10000000) 17:49:30 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x8933, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x7ffff000) 17:49:31 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x400448c9, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) 17:49:31 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x400448dd, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:32 executing program 1: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200040, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x39, 0x1, 0xd, 0x1a, 0x0, 0xc508, 0x6, 0x8f, 0xffffffffffffffff}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:32 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x400454ca, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:32 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x18, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:32 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x40049409, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:32 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000aa304ed89d4367e275e92eeb0ed04a44860107124fc1a4f1b2", @ANYRES16=r7, @ANYBLOB="000827bd7000ffdbdf25010000000900010073797a30000000000900010073797a3000000000050004000200000014000200766c616e30000000000000000000000014000200626f6e645f736c6176655f3100000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) fstatfs(r0, &(0x7f0000000000)=""/110) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r8, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) [ 281.110533][ T9723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:49:33 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x40086602, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) [ 281.158917][ T9723] smc: net device macvtap0 applied user defined pnetid SYZ2 [ 281.214088][ T9724] smc: net device macvtap0 erased user defined pnetid SYZ2 [ 281.229492][ T9723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12458 sclass=netlink_route_socket pid=9723 comm=syz-executor.2 17:49:33 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x40087602, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 17:49:34 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x40186366, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:34 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x3, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x20}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x92}]}}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_NAT_SRC={0x1c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x50) 17:49:34 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x4020940d, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) [ 282.832486][ T9740] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.883394][ T9745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=9745 comm=syz-executor.1 [ 282.938454][ T9745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=9745 comm=syz-executor.1 17:49:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x9b9, @dev={0xfe, 0x80, [], 0x10}, 0x5}}, 0x2, 0xef3c, 0x0, 0x6}, &(0x7f00000000c0)=0x98) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000300)={0x1, 0x93, 0x4, 0x4, 0x8, "e61b54eb3f9acea2"}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x20000000003, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x2}, &(0x7f0000000240)=0x8) sendto$inet(r4, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:35 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x402c5828, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x20040150) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000080)={0x1, 0xfffffb68}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000400000009000100727376700000000044000200400005003c0001004000000000be0520"], 0x74}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@private=0xa010101, @empty, r2}, 0xc) 17:49:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x9b9, @dev={0xfe, 0x80, [], 0x10}, 0x5}}, 0x2, 0xef3c, 0x0, 0x6}, &(0x7f00000000c0)=0x98) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000300)={0x1, 0x93, 0x4, 0x4, 0x8, "e61b54eb3f9acea2"}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x20000000003, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x2}, &(0x7f0000000240)=0x8) sendto$inet(r4, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:36 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x402c5829, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:36 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x402c582a, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000140)={0xa20000, 0x3f, 0xff, r0, 0x0, &(0x7f0000000100)={0x9e0906, 0x1a8, [], @p_u32=&(0x7f00000000c0)=0x400}}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x1, 0xfffffff9, 0x3) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @multicast2}, {0x306, @remote}, 0x40, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syz_tun\x00'}) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x280900, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000540)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x5, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x5, &(0x7f0000000380)=[{&(0x7f0000000080)="fab532d789b9e2027bd2e0a2388558d0c39bc1f0f64db9ff67d8f2cd97856fcb39a8166623dc7950c9123a9785a2c59e18b865fa1007426ae992b10b6081092b869c599733d760887230eda17856004d6aacd4558b25b270fc679bc3f56e1062aa8a1b6ad822cef360539af3a498f497fa248747b5fd7d90bed883353c1df8f13884923e169d5024cb1cee3bbe400d09567714c34a6c7e854bddc3bc39a4709bc943f82665eb6a91b86be297e2253d23e23775557cb8956f95db0d2f87ef21461a0332bcd8c5eb03024361a17cf2c6fbdb", 0xd1, 0xfd3}, {&(0x7f0000000180)="c55213ed0ac6d60bf4", 0x9, 0x1}, {&(0x7f00000001c0)="848fec59f272ef0fa3c55dcf2d8b5c19afee194ceaba6d5d8b3935500a9ada7c30268abb35c24c7ca29188598e6bda8a6eba30eb5606e4fd222be9ee4eaa288074d07b81eb1d8b98601884a77d482032ac7602f9b65f6c31e61e730d3ced864d46f41dd39606b35747724807263bd67e589c6716357e9688367e1562ffeed5265e428438806411abe8b8cc09feb402bfd91c6f8cf3f0489c80f2d1ed8c37cb33511c12e61ec6b7519d5414c0aee727fe7955f8225cd9ef2a0744b6a72c60747be5a101db05c3c718259e2c244ec75b20d098d0326d7efa1b036f032677d4cd226996a6a21eb3664a99eee2977dcb2111f19ac2d2097861843f0cc2472750", 0xfe, 0xfff}, {&(0x7f00000002c0)="1bf35f0d0b8f39e4b2b6f560aab92e1f85461fb6f2834d516a826269d9e0f9a49c92ba957ad9340b78d3e478d9c6ccef8ee8ae1fd68398e9c3bf86dacc5c6e", 0x3f, 0x7}, {&(0x7f0000000300)="a752f54f74bcbbe05f3d96d808c1e916001cda2705b74b9cbd5149ccbd42024b23e5f6ae18eed2066e8f6c3a49ee1ae8c9745bd6296003d82675e44136e5ed54cc865a952a7b2d4ee687ed", 0x4b, 0x1000000}], 0x2011021, &(0x7f0000000480)={[{@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@user_xattr='user_xattr'}, {@noacl='noacl'}], [{@euid_eq={'euid', 0x3d, r1}}, {@smackfshat={'smackfshat', 0x3d, '&'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_appraise='dont_appraise'}, {@audit='audit'}, {@permit_directio='permit_directio'}, {@smackfsfloor={'smackfsfloor', 0x3d, '@'}}]}) 17:49:37 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x402c582b, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:37 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f00000000c0)={{0x84, @rand_addr=0x64010101, 0x4e24, 0x4, 'nq\x00', 0x10, 0x7, 0x2a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 0x0, 0x3, 0x5}}, 0x44) r4 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r6, 0x0) r7 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r7, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES16, @ANYRESOCT=r7, @ANYRES32=r6], 0xfffffe3e) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r8, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) 17:49:37 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x402c5839, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) [ 285.686742][ T9772] IPVS: ftp: loaded support on port[0] = 21 17:49:38 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x80086301, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) [ 286.595475][ T9772] chnl_net:caif_netlink_parms(): no params data found 17:49:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffc) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='t\x00\x00\x00l\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000400000009000100727376700000000044000200400005003c0001004000000000be0520"], 0x74}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000001000)=ANY=[@ANYBLOB="b4090000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="b002028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000400000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100e9fc01006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000084000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000054000400ff0f0381800000000200400200000000000002000300000078033f050900000001002001ff0f000049003f4005000000ff7f0108090000000100050641cf000004001f06ffffffffff0700ff0100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000400040040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=0x0, @ANYBLOB="e801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400060001f0020000007fff00050900000004003ec4c9000000ff7f03ff0500000008000100", @ANYRES32=0x0, @ANYBLOB="9800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004000101d9b30180000000000562fbffffff0104ff031b09000076f0058101000000040008060200000008000100", @ANYRES32=0x0, @ANYBLOB="8001028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400090003fe00000000ffff02811223167bff030009ff0700000500057f0e0b000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x9b4}, 0x1, 0x0, 0x0, 0x20068004}, 0x4000895) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, 0xee01, r7) r8 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000200), 0x10efe10675dec16, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) setresgid(r2, 0xee01, r5) setresgid(r1, r2, r5) [ 287.196855][ T9772] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.204403][ T9772] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.214248][ T9772] device bridge_slave_0 entered promiscuous mode 17:49:39 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x80086601, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) [ 287.381154][ T9772] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.388953][ T9772] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.398869][ T9772] device bridge_slave_1 entered promiscuous mode 17:49:39 executing program 1: r0 = inotify_init1(0x80000) fchmod(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @multicast2}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, {0x2, 0x4e23, @local}, 'erspan0\x00'}) sendto$inet(r1, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) [ 287.694229][ T9772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.766341][ T9772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.984032][ T9772] team0: Port device team_slave_0 added [ 288.013620][ T9772] team0: Port device team_slave_1 added [ 288.277750][ T9772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.285079][ T9772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.311480][ T9772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.498456][ T9772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.505792][ T9772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.531952][ T9772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.918384][ T9772] device hsr_slave_0 entered promiscuous mode [ 289.024350][ T9772] device hsr_slave_1 entered promiscuous mode [ 289.062669][ T9772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.070359][ T9772] Cannot create hsr debugfs directory [ 290.128330][ T9772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.205703][ T9772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.297935][ T9772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.370170][ T9772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.089138][ T9772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.137441][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.150122][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.177937][ T9772] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.227516][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.237979][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.248695][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.256295][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.309922][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.320039][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.330309][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.340095][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.347677][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.357002][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.451515][ T9772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.463838][ T9772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.482513][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.493794][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.505178][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.516899][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.528003][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.538607][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.548641][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.559358][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.569465][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.661143][ T9772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.673706][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.684409][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.693889][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.703411][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.817185][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.828232][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.904378][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 291.916596][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.950851][ T9772] device veth0_vlan entered promiscuous mode [ 291.973836][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.983642][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.055204][ T9772] device veth1_vlan entered promiscuous mode [ 292.223482][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 292.235613][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 292.245447][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 292.255784][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 292.285443][ T9772] device veth0_macvtap entered promiscuous mode [ 292.317235][ T9772] device veth1_macvtap entered promiscuous mode [ 292.354134][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 292.364731][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 292.430620][ T9772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 292.445688][ T9772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.455806][ T9772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 292.466585][ T9772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.476681][ T9772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 292.487343][ T9772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.502630][ T9772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.521547][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 292.533277][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.574827][ T9772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 292.586547][ T9772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.596904][ T9772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 292.607647][ T9772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.618192][ T9772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 292.628877][ T9772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.643767][ T9772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.655843][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.667645][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:49:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x9b9, @dev={0xfe, 0x80, [], 0x10}, 0x5}}, 0x2, 0xef3c, 0x0, 0x6}, &(0x7f00000000c0)=0x98) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000300)={0x1, 0x93, 0x4, 0x4, 0x8, "e61b54eb3f9acea2"}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x20000000003, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x2}, &(0x7f0000000240)=0x8) sendto$inet(r4, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:46 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0x80087601, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:46 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000afa035c3a8979a649d8da8141587ce15d56301d42fbf9b8dd9cddb95c086123cc013ed1a7a40815e0a4252b3070e7d6b2d550a7ce11450eeed4f4ca72a6b9684bfa56ed5102e119c0265896d67d541d89a2db52d5ed0f64453a90f661f20b422effa3d1471dabcaec3cd5431715dd517f0b4fc47c5bbda6c", @ANYRES16=r1, @ANYBLOB="8d05000000000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x26000004) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4e2c700441c7b9418f85bf510000c14bdee2903ddeefb70c34f9d70c7f5caf3f55c811d144ec003bb86c815b4f21cf9b3e40f512", @ANYRES16=r1, @ANYBLOB="00032abd7000fedbdf250200000014000100fe8000000000000000000000000000bb0400040018000400020000004a0000001c0b00000100000063000000"], 0x44}, 0x1, 0x0, 0x0, 0x4881}, 0x4040000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x4004) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000000300)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="4800cb0010000507018002000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000003feed8f00c4e88142a8aa46631ee6ea25f2a88d9b1bb3021f58a04788f66f548114ed2b32c307ac28c9f00d59c6bf14bc78e976e5347fe14ccd0881ca19ef374595368582cc57dd0a85c230fa8dade8c60b594be9c079c18f57029a6a507c2bb8f70706d", @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf250200000008000100030000000800010001000000080002000200000008000200020000000800010003000000080002000200000008000100030000000800020002000000"], 0x54}}, 0x48840) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 17:49:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:49:47 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0045878, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @loopback}, &(0x7f0000000040)=0xc) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x17) 17:49:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x9b9, @dev={0xfe, 0x80, [], 0x10}, 0x5}}, 0x2, 0xef3c, 0x0, 0x6}, &(0x7f00000000c0)=0x98) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000300)={0x1, 0x93, 0x4, 0x4, 0x8, "e61b54eb3f9acea2"}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x20000000003, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x2}, &(0x7f0000000240)=0x8) sendto$inet(r4, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:47 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0045878, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) [ 295.972768][ T17] Bluetooth: hci3: command 0x0409 tx timeout 17:49:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000400000009000100727376700000000044000200400005003c0001004000000000be0520"], 0x74}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', r4}) r5 = dup3(r0, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000000)) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0xa00, 0x0) ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000080)) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x9b9, @dev={0xfe, 0x80, [], 0x10}, 0x5}}, 0x2, 0xef3c, 0x0, 0x6}, &(0x7f00000000c0)=0x98) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000300)={0x1, 0x93, 0x4, 0x4, 0x8, "e61b54eb3f9acea2"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x20000000003, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x2}, &(0x7f0000000240)=0x8) 17:49:48 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086429, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) [ 296.606684][T10053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 296.758925][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:49:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x9b9, @dev={0xfe, 0x80, [], 0x10}, 0x5}}, 0x2, 0xef3c, 0x0, 0x6}, &(0x7f00000000c0)=0x98) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000300)={0x1, 0x93, 0x4, 0x4, 0x8, "e61b54eb3f9acea2"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x20000000003, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f00000003c0)) 17:49:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000003e00)={{0xa, 0x4e22, 0x3, @mcast2, 0x10001}, {0xa, 0x4e21, 0x0, @remote}, 0x1, [0xfffc, 0x7, 0x5, 0x5, 0x3, 0xb729, 0x50, 0x3c]}, 0xffffff6f) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:49 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0189436, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:50 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x9b9, @dev={0xfe, 0x80, [], 0x10}, 0x5}}, 0x2, 0xef3c, 0x0, 0x6}, &(0x7f00000000c0)=0x98) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000300)={0x1, 0x93, 0x4, 0x4, 0x8, "e61b54eb3f9acea2"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x20000000003, 0x0) [ 298.066545][ T17] Bluetooth: hci3: command 0x041b tx timeout 17:49:50 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc020660b, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x2, 0x1b, 0x32e}) 17:49:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x9b9, @dev={0xfe, 0x80, [], 0x10}, 0x5}}, 0x2, 0xef3c, 0x0, 0x6}, &(0x7f00000000c0)=0x98) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000300)={0x1, 0x93, 0x4, 0x4, 0x8, "e61b54eb3f9acea2"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) 17:49:51 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x2, 0x3, 0x2, 0x1b, 0x32e}) 17:49:51 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0xa, 0x3, 0x2, 0x1b, 0x32e}) 17:49:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x9b9, @dev={0xfe, 0x80, [], 0x10}, 0x5}}, 0x2, 0xef3c, 0x0, 0x6}, &(0x7f00000000c0)=0x98) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000300)={0x1, 0x93, 0x4, 0x4, 0x8, "e61b54eb3f9acea2"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) 17:49:51 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) 17:49:52 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x64, 0x3, 0x2, 0x1b, 0x32e}) [ 300.132575][ T8688] Bluetooth: hci3: command 0x040f tx timeout 17:49:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x9b9, @dev={0xfe, 0x80, [], 0x10}, 0x5}}, 0x2, 0xef3c, 0x0, 0x6}, &(0x7f00000000c0)=0x98) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000300)={0x1, 0x93, 0x4, 0x4, 0x8, "e61b54eb3f9acea2"}) socket$alg(0x26, 0x5, 0x0) 17:49:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffd) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x235004e1}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x174, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x722b9e41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd6c3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8294}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3897}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x702bfade}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b48b999}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67e91eee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45e36139}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f61ebae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x434b7731}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f786467}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a0abc21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c79075e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x174}, 0x1, 0x0, 0x0, 0x9}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40246608, &(0x7f0000000000)={0x2, 0x7, 0x6, 0x0, 0x1, 0x1}) 17:49:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x1003, 0x0, 0x0, "0cd768c434a73511131f803c8744e48cf531a1", 0x0, 0x8}) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x20000000003, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x3d) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) [ 300.620541][T10106] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:52 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x2, 0x2, 0x1b, 0x32e}) [ 300.834521][T10111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x9b9, @dev={0xfe, 0x80, [], 0x10}, 0x5}}, 0x2, 0xef3c, 0x0, 0x6}, &(0x7f00000000c0)=0x98) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000300)={0x1, 0x93, 0x4, 0x4, 0x8, "e61b54eb3f9acea2"}) 17:49:53 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0xa, 0x2, 0x1b, 0x32e}) 17:49:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x9b9, @dev={0xfe, 0x80, [], 0x10}, 0x5}}, 0x2, 0xef3c, 0x0, 0x6}, &(0x7f00000000c0)=0x98) socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) 17:49:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000040)={0x6, 0x4a69, {}, {0xffffffffffffffff}, 0xffff}) r3 = openat$fuse(0xffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r5, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d4010000030601022dbd7000fcdbdf250c000004ee00528008000000", @ANYRES32=r2, @ANYBLOB='\b\x00k\x00', @ANYRES32=r3, @ANYBLOB="87426f512b139c1c9e2b1526c392079c5688446adf7ae23b48d51b3429dae61c378bae15c1c001a4bfeaafdd265611f0fae7a2f2fc8dcbaa588261b7c1ceca44a707d8d7300bf5e4dc7b7540c24b5e257537edff7a787009ad94e5f45365cba063d70763d06b280f6b8c939f524c2af709288faed221cf55dab0410fe4156a487597fc30d8217c3f8e6dffd5fcec4f3691a097773847b024405257dbea81732ca1f4bdec6d0c3600e7d259880a7a5ec8e637603fd7af230a404bdd0d99f2b7e0d8f310f0d49c3ae4e5708cd53051330606a206006c007d000000000006003580f9fb000004005c00c400398008004d000a01010108003600", @ANYRES32=r5, @ANYBLOB="08006700ac1e0101f6b5f6ed389d052046555adbef56dc89589b511b7ebf3fb6107e2431a901df8baf3b90bd78c11205d667cd72278566786108cc408a229500ee5d03d08e7316e3c787d3bc0a59177786b34afc517d5d9c3587a34af98c01d64fa50cc065466e8dc3d4baed5734c6df8bb27bdc5a30cc33ab2d5b10fadcb5fa3f1117e1cbfa702624b6e090216db2fea420cbeebdbd8f3ee3b890ce9da995e35006dd9f1ce4fa54e955bb99d67215fa"], 0x1d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 17:49:54 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x64, 0x2, 0x1b, 0x32e}) [ 302.212416][ T8688] Bluetooth: hci3: command 0x0419 tx timeout [ 302.402427][T10135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=10135 comm=syz-executor.2 17:49:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x9b9, @dev={0xfe, 0x80, [], 0x10}, 0x5}}, 0x2, 0xef3c, 0x0, 0x6}, &(0x7f00000000c0)=0x98) openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) 17:49:54 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x3, 0x1b, 0x32e}) 17:49:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) sendto$inet(r0, 0x0, 0x0, 0x40801, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x80002, 0x0) close(r3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb5a}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4840}, 0x40448c4) 17:49:54 executing program 1: syz_extract_tcp_res(&(0x7f0000000000), 0x7, 0x9) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "840051f4", {0x1, 0x1ff, 0xb7, 0x1, 0x81}}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/173, 0xad}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000340)=""/56, 0x38}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000540)=""/151, 0x97}, {&(0x7f0000000600)=""/250, 0xfa}, {&(0x7f0000000700)=""/217, 0xd9}], 0x4, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r2 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=r2) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r5 = openat$btrfs_control(0xffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc04c565d, &(0x7f0000000140)={0x1, 0xc, 0x4, 0x4, 0x8000, {}, {0x2, 0x8, 0xed, 0x8, 0x4, 0xfe, "ac1c9663"}, 0xffff516b, 0x2, @fd=r4, 0x5, 0x0, r5}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x3, &(0x7f0000000100)) r6 = socket$inet(0x2, 0x5, 0x9) sendto$inet(r6, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) 17:49:55 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x4, 0x1b, 0x32e}) 17:49:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x82, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) 17:49:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x100, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) [ 303.592858][ T28] usb 2-1: new high-speed USB device number 2 using dummy_hcd 17:49:55 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x5, 0x1b, 0x32e}) 17:49:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) [ 304.154797][ T28] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 304.164074][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.172364][ T28] usb 2-1: Product: syz [ 304.176665][ T28] usb 2-1: Manufacturer: syz [ 304.181387][ T28] usb 2-1: SerialNumber: syz 17:49:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400cfb9, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x20000000003, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) syz_io_uring_setup(0x26b52, &(0x7f0000000580)={0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005eb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_complete(r6) pipe(&(0x7f0000000240)) socket$alg(0x26, 0x5, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f00000000c0)) r8 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @aes256, 0x1, [], "38c7c02671ddd8595e3effb25c9d0ca2"}) [ 304.407256][ T28] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 17:49:56 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x6, 0x1b, 0x32e}) 17:49:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000090) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000380)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) socket$inet(0x2, 0x80001, 0x84) openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) 17:49:57 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000180)={0x7fffffff, 0x3, 0x3, 0x7, 0x1b, 0x32e}) [ 305.256799][ T8688] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 305.485649][ T8688] ===================================================== [ 305.492647][ T8688] BUG: KMSAN: kernel-usb-infoleak in kmsan_handle_urb+0x28/0x40 [ 305.500905][ T8688] CPU: 1 PID: 8688 Comm: kworker/1:4 Not tainted 5.8.0-rc5-syzkaller #0 [ 305.509235][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.519317][ T8688] Workqueue: events request_firmware_work_func [ 305.525483][ T8688] Call Trace: [ 305.528801][ T8688] dump_stack+0x21c/0x280 [ 305.533172][ T8688] kmsan_report+0xf7/0x1e0 [ 305.537619][ T8688] kmsan_internal_check_memory+0x238/0x3d0 [ 305.543447][ T8688] ? should_fail+0x72/0x9e0 [ 305.547977][ T8688] ? kmsan_get_metadata+0x116/0x180 [ 305.553227][ T8688] kmsan_handle_urb+0x28/0x40 [ 305.557927][ T8688] usb_submit_urb+0x861/0x2470 [ 305.562723][ T8688] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 305.568609][ T8688] hif_usb_send+0x633/0x1790 [ 305.573225][ T8688] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 305.579073][ T8688] htc_connect_service+0x14b4/0x19f0 [ 305.584502][ T8688] ? hif_usb_sta_drain+0x6c0/0x6c0 [ 305.589650][ T8688] ath9k_wmi_connect+0x178/0x2c0 [ 305.594620][ T8688] ? ath9k_wmi_connect+0x2c0/0x2c0 [ 305.599766][ T8688] ? ath9k_wmi_ctrl_tx+0x50/0x50 [ 305.604730][ T8688] ath9k_init_htc_services+0xf3/0x11f0 [ 305.610233][ T8688] ath9k_htc_probe_device+0x4dc/0x3ed0 [ 305.615830][ T8688] ? ath9k_hif_usb_alloc_urbs+0x1cb8/0x2010 [ 305.621757][ T8688] ath9k_htc_hw_init+0xdf/0x190 [ 305.626652][ T8688] ath9k_hif_usb_firmware_cb+0x42e/0xab0 [ 305.632323][ T8688] request_firmware_work_func+0x1aa/0x2d0 [ 305.638059][ T8688] ? ath9k_hif_request_firmware+0x930/0x930 [ 305.643973][ T8688] ? request_firmware_nowait+0x840/0x840 [ 305.649627][ T8688] process_one_work+0x1688/0x2140 [ 305.654726][ T8688] worker_thread+0x10bc/0x2730 [ 305.659504][ T8688] ? kmsan_get_metadata+0x116/0x180 [ 305.666464][ T8688] ? kmsan_get_metadata+0x116/0x180 [ 305.671700][ T8688] kthread+0x551/0x590 [ 305.675787][ T8688] ? process_one_work+0x2140/0x2140 [ 305.681015][ T8688] ? kthread_blkcg+0x110/0x110 [ 305.685796][ T8688] ret_from_fork+0x1f/0x30 [ 305.690283][ T8688] [ 305.692611][ T8688] Uninit was created at: [ 305.696865][ T8688] kmsan_internal_poison_shadow+0x66/0xd0 [ 305.702607][ T8688] kmsan_slab_alloc+0x8a/0xe0 [ 305.707299][ T8688] __kmalloc_node_track_caller+0xeab/0x12e0 [ 305.713199][ T8688] __alloc_skb+0x35f/0xb30 [ 305.717627][ T8688] htc_connect_service+0x1057/0x19f0 [ 305.722930][ T8688] ath9k_wmi_connect+0x178/0x2c0 [ 305.727905][ T8688] ath9k_init_htc_services+0xf3/0x11f0 [ 305.733379][ T8688] ath9k_htc_probe_device+0x4dc/0x3ed0 [ 305.738865][ T8688] ath9k_htc_hw_init+0xdf/0x190 [ 305.743738][ T8688] ath9k_hif_usb_firmware_cb+0x42e/0xab0 [ 305.749382][ T8688] request_firmware_work_func+0x1aa/0x2d0 [ 305.755118][ T8688] process_one_work+0x1688/0x2140 [ 305.760156][ T8688] worker_thread+0x10bc/0x2730 [ 305.764927][ T8688] kthread+0x551/0x590 [ 305.769008][ T8688] ret_from_fork+0x1f/0x30 [ 305.773420][ T8688] [ 305.775750][ T8688] Bytes 4-7 of 18 are uninitialized [ 305.780978][ T8688] Memory access of size 18 starts at ffff888049834200 [ 305.787736][ T8688] ===================================================== [ 305.794669][ T8688] Disabling lock debugging due to kernel taint [ 305.801256][ T8688] Kernel panic - not syncing: panic_on_warn set ... [ 305.807878][ T8688] CPU: 1 PID: 8688 Comm: kworker/1:4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 305.817697][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.827784][ T8688] Workqueue: events request_firmware_work_func [ 305.833945][ T8688] Call Trace: [ 305.837254][ T8688] dump_stack+0x21c/0x280 [ 305.841620][ T8688] panic+0x4d7/0xef7 [ 305.845573][ T8688] ? add_taint+0x17c/0x210 [ 305.850015][ T8688] kmsan_report+0x1df/0x1e0 [ 305.854540][ T8688] kmsan_internal_check_memory+0x238/0x3d0 [ 305.860384][ T8688] ? should_fail+0x72/0x9e0 [ 305.864900][ T8688] ? kmsan_get_metadata+0x116/0x180 [ 305.870126][ T8688] kmsan_handle_urb+0x28/0x40 [ 305.874820][ T8688] usb_submit_urb+0x861/0x2470 [ 305.879608][ T8688] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 305.885462][ T8688] hif_usb_send+0x633/0x1790 [ 305.890068][ T8688] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 305.895907][ T8688] htc_connect_service+0x14b4/0x19f0 [ 305.901217][ T8688] ? hif_usb_sta_drain+0x6c0/0x6c0 [ 305.906357][ T8688] ath9k_wmi_connect+0x178/0x2c0 [ 305.911317][ T8688] ? ath9k_wmi_connect+0x2c0/0x2c0 [ 305.916438][ T8688] ? ath9k_wmi_ctrl_tx+0x50/0x50 [ 305.921394][ T8688] ath9k_init_htc_services+0xf3/0x11f0 [ 305.926921][ T8688] ath9k_htc_probe_device+0x4dc/0x3ed0 [ 305.932433][ T8688] ? ath9k_hif_usb_alloc_urbs+0x1cb8/0x2010 [ 305.938342][ T8688] ath9k_htc_hw_init+0xdf/0x190 [ 305.943225][ T8688] ath9k_hif_usb_firmware_cb+0x42e/0xab0 [ 305.948897][ T8688] request_firmware_work_func+0x1aa/0x2d0 [ 305.955080][ T8688] ? ath9k_hif_request_firmware+0x930/0x930 [ 305.961000][ T8688] ? request_firmware_nowait+0x840/0x840 [ 305.966676][ T8688] process_one_work+0x1688/0x2140 [ 305.971743][ T8688] worker_thread+0x10bc/0x2730 [ 305.976545][ T8688] ? kmsan_get_metadata+0x116/0x180 [ 305.981766][ T8688] ? kmsan_get_metadata+0x116/0x180 [ 305.987001][ T8688] kthread+0x551/0x590 [ 305.991084][ T8688] ? process_one_work+0x2140/0x2140 [ 305.996304][ T8688] ? kthread_blkcg+0x110/0x110 [ 306.001090][ T8688] ret_from_fork+0x1f/0x30 [ 306.006549][ T8688] Kernel Offset: disabled [ 306.010914][ T8688] Rebooting in 86400 seconds..