last executing test programs: 9m24.255412103s ago: executing program 32 (id=282): move_pages(0x0, 0x200000000000003d, &(0x7f0000000080)=[&(0x7f0000003000/0x4000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0xe, 0x6, 0x2, 0x4}) 9m21.71369015s ago: executing program 0 (id=351): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0xd9a04000) copy_file_range(r0, 0x0, r1, 0x0, 0xafb8, 0x0) 9m21.016278808s ago: executing program 0 (id=354): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000000}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/diskstats\x00', 0x0, 0x0) pipe(&(0x7f0000000440)) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x100000001, 0x5, 0x8000000000000001, 0x2627bc44, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000001c0)={0x7ff, 0x7, 0x3ff, 0x4e, 0x80021, 0x164, 0x1, 0x7f}, 0x0, 0x0) 9m19.568601374s ago: executing program 0 (id=357): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[], 0x47) splice(r1, 0x0, r0, 0x0, 0x800, 0x0) 9m18.907498038s ago: executing program 0 (id=360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x5, 0x8040, 0x0, 0x0, 0xfffffffffffffffe, 0x2004cb, 0x4000000000000000, 0xcb, 0x3, 0x8000, 0x1, 0x0, 0x2, 0x9, 0x1], 0xfec00000, 0x80200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m17.922926198s ago: executing program 0 (id=362): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x201, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0)=0x9, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) 9m17.196258605s ago: executing program 0 (id=364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x2c, 0x0, "e8000000000000000487bbd0450078548ceb6c4414fab09100000000004cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e4bf038654a4cf0fa0ce1f980c3059cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 9m1.797261067s ago: executing program 33 (id=364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x2c, 0x0, "e8000000000000000487bbd0450078548ceb6c4414fab09100000000004cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e4bf038654a4cf0fa0ce1f980c3059cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 8m7.667765102s ago: executing program 5 (id=551): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x74}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 8m6.96761771s ago: executing program 5 (id=555): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r2, 0x0, 0x0, 0x80800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m4.891101268s ago: executing program 5 (id=560): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000940)=ANY=[@ANYRES32=r4], 0xa) 8m3.532941843s ago: executing program 5 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 8m2.744247632s ago: executing program 3 (id=568): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f00000002c0), &(0x7f0000048000), 0x0) 8m2.646618886s ago: executing program 5 (id=569): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r2, 0x0, 0x0, 0x80800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m1.630280946s ago: executing program 5 (id=574): r0 = socket$inet6(0xa, 0x3, 0x5) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f00000000c0)={0xa, 0x4e02, 0xffffa231, @dev={0xfe, 0x80, '\x00', 0x42}, 0xe2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x7c}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x67}}}], 0x30}}], 0x2, 0x24048004) 8m0.993147918s ago: executing program 3 (id=576): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3, 0xfffc, 0xe655, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x1000000, 0x31, 0xffff1896, 0x7, 0x6, 0x115, 0x1b}, 0x9c) 7m59.060337624s ago: executing program 34 (id=574): r0 = socket$inet6(0xa, 0x3, 0x5) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f00000000c0)={0xa, 0x4e02, 0xffffa231, @dev={0xfe, 0x80, '\x00', 0x42}, 0xe2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x7c}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x67}}}], 0x30}}], 0x2, 0x24048004) 7m58.988508637s ago: executing program 3 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="b000000000000000e86d0000000000000600"/31, @ANYBLOB], 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 7m58.258081981s ago: executing program 3 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000180)=ANY=[], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x1000000, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1], 0xfe, 0x1a4, &(0x7f00000005c0)="$eJzs279qU1EcB/BfYqppHZLBSRwuuDiFpk9gkApiQFAyKAiKbUB6JWAhoIPN5uBL+CiOrvokjh2EI82tNi1R5Gp7Q/L5LPnBOd+cP4GTnMB9duPV3s5of/h0+DmatVrUb6cUh7VoRz1OfAoAYHkcphTfUkrpyiTWP0ZKqeoZAQDnzfc/AKyeR4+f3O/1+9sPs6wZkb8fD8aD4rVo7w3jZeSxG5vRiu9x9APhWFHfvdff3sym2vEhPzjOH4wHl07nu9GK9vx8t8hnp/NrsTGb34pWXJuf35qbvxy3bs7kO9GKry9iFHnsxFH2JP+um2V3HvTP5K9O+wEAAMAy6GS/zL2/dzq/ay/yvdpf/z9w5n7diOuNatcOAKtq/83bved5vvu6siIiJn/o82WjmGipIRpRIpWVXM7PLa1yM/+tWI///85rZT6CaRGTBdmWBSpG9fMeohkR06LCQwm4EDPHLQAAAAAAAAAAAAAAsKAu4tGlqtcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOr5EQAA//8MpY1r") getdents64(r1, 0xfffffffffffffffe, 0xff80) 7m55.803166181s ago: executing program 3 (id=590): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000100001"], 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, 0x0, 0x47) splice(r1, 0x0, r0, 0x0, 0x800, 0x0) 7m51.414054061s ago: executing program 3 (id=601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x3, 0x2) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) 7m48.928217562s ago: executing program 35 (id=601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x3, 0x2) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) 5m6.168075002s ago: executing program 6 (id=1160): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40004004}) 5m5.489592689s ago: executing program 6 (id=1163): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_raw(r0, &(0x7f0000000000), 0x10) readv(r0, &(0x7f0000000380)=[{&(0x7f0000003880)=""/4102, 0x1006}, {0x0}], 0x2) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x24042850}, 0x4) 5m4.093312497s ago: executing program 6 (id=1170): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="ae830dadabb3fc250d1ff1d4f57ad2130b70ddaf41c51ec49b0107974d4e5f9c3a23254f6b1b9f6f0eb191ee58de3e24fe45993126e37ea1aa1511b668bb995a85e23621c49b51f835283e9132c83ce9cca46c52f5ade174e62bd65ecf2825de22d2f5a9a57e571c01f1def66eb9567ff34133bd9aa29272072d0c9d317f78033cfa77ed8e26b364184356", 0x8b}, {&(0x7f0000000440)="3bf7f4a753d42efc9c3e1f6347f01d335a6c661da0ed2938fce9f398f67033996f4e68ee45c0bf77837aad0d3a33c5fa4673324bb13dfb57d9eb0eccdffaf68adb12eb5b0ac8464f254d70ff5d16c0d2a5f8c16751dd14d287e5af8eaff410af113c925045242b0f08f5bd0ac9c7c10718f8ac3593d2151aaaab8221a9dd6d819f8448973f3a87f846e48cde1c68ca8a2fd87f7713f0076bc07099ea4b4846be84cbfc90b3303382405a6c1b67c98913677fe6fc8264ca86f68d78f7b84b8650e234ef5c2d1b42bbfb2e64309cd34603ba03a016de70cd7c52990ff50ddd7eb95d7099bb2c5d89dee4dd5e9966c5d3827a944bcd5fa73b017974e845acf6b331435b3949d217a03a4ae967edc5e53bb8fe0e11f2bd7eed7e76ca2731bc1cf0d46800dc02936430e463aef7f037f0c195b7a81d6c8c6775fc825766bab891f60e39a93d24001215b0a9c23a59827a4cf6a943f3d449d1bc5fe35ee8247ee2d0c8e271f2f83b16deca64665ee48bab799bb31d4ad1c0aaf68d2869d99ae795933dee531147c1b9a285ceec0837c2e4f01916df8719338eaccf1ecd68bdf0d64dc58a1a1a253331d09f7b201553b01ed675b98a457ab2064c12f1f14faadec9a458d1bf5592654e8c8d519c59a7473a8a3ddb90b7fd0ad9ce3ee0084d5504914e1816c6737ec52036ec41ed9a168c5b2cdd559794bf0b9779284df38fef88bea311a678d9e4fe858ab9a22489f9fb15b24d8bc83e706a96", 0x216}], 0x2}}], 0x2, 0x10) 5m2.510879721s ago: executing program 6 (id=1179): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000580)="44c394f305916c", 0x7, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffb800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 5m0.522280055s ago: executing program 6 (id=1183): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 4m59.760881216s ago: executing program 6 (id=1188): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 4m43.885900758s ago: executing program 36 (id=1188): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 4m25.049147755s ago: executing program 7 (id=1284): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000f40)=@setlink={0x2c, 0x13, 0x413, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x100, 0x420}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x2c}}, 0x0) 4m23.88596909s ago: executing program 7 (id=1285): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2", 0x7e, 0x0, 0x0, 0x0) 4m23.295213855s ago: executing program 7 (id=1288): unshare(0x40600) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x271a, 0xffffffffffffffff, 0x0) 4m22.619007998s ago: executing program 7 (id=1292): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x9, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x7, 0x6, @multicast}, 0x14) 4m18.890397844s ago: executing program 7 (id=1298): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x9, 0x2, 0x0, 0x0, 0x9, 0x54, 0x6, 0x3, 0xfa, 0x6, 0x15, 0x0, 0xfff, 0x3, 0x1, 0x0, 0xf7, 0xed, '\x00', 0x7, 0xfffffffffffffff7}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000001600)=""/58, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 4m17.923894611s ago: executing program 7 (id=1301): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xc}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x310, 0xffffffff, 0xf8, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x0, 0x4}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1, 0x20000000}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x2, 0x0, 0x5], 0x0, 0x2}, {0x1, [0x3, 0x8, 0x5, 0x6, 0x2], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01cf18000006000000000c0000000c00000002006d464f7b590b49a2000400e200000000f2c174770003935141371bb2f3ddfa8293199fa0"], 0x0, 0x26}, 0x28) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(r2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x2, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0xc3, 0x84, 0x8, 0x7}, 0xe) sendto$inet6(r4, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r4, 0x1) recvmmsg(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000002c0)}, 0x5}, {{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000c40), 0x0, &(0x7f0000000780)=""/33, 0x21}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000cc0)=""/114, 0x72}], 0x1, &(0x7f0000000ec0)=""/177, 0xb1}, 0x5}], 0x3, 0x0, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, 0x0, 0x10000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r8, 0x0, 0x5, &(0x7f00000007c0)="dd", 0x1) setsockopt$inet_opts(r8, 0x0, 0x5, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x800) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 4m2.444112103s ago: executing program 37 (id=1301): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xc}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x310, 0xffffffff, 0xf8, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x0, 0x4}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1, 0x20000000}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x2, 0x0, 0x5], 0x0, 0x2}, {0x1, [0x3, 0x8, 0x5, 0x6, 0x2], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01cf18000006000000000c0000000c00000002006d464f7b590b49a2000400e200000000f2c174770003935141371bb2f3ddfa8293199fa0"], 0x0, 0x26}, 0x28) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(r2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x2, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0xc3, 0x84, 0x8, 0x7}, 0xe) sendto$inet6(r4, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r4, 0x1) recvmmsg(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000002c0)}, 0x5}, {{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000c40), 0x0, &(0x7f0000000780)=""/33, 0x21}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000cc0)=""/114, 0x72}], 0x1, &(0x7f0000000ec0)=""/177, 0xb1}, 0x5}], 0x3, 0x0, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, 0x0, 0x10000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r8, 0x0, 0x5, &(0x7f00000007c0)="dd", 0x1) setsockopt$inet_opts(r8, 0x0, 0x5, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x800) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 22.320368508s ago: executing program 1 (id=2186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) 19.44532527s ago: executing program 1 (id=2193): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000fbff00000600320003000000000000000000000010002b00000000000000000000000000fc0200000000000006000000000000fd030005000000000002000000ac1414aa0000000000000000030006000080000002"], 0x80}}, 0x0) 17.427114061s ago: executing program 1 (id=2197): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000600)={0xfdf9, 0x8, 0x401f}, 0x8) sendto$inet6(r0, &(0x7f0000000cc0)='\x00', 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3355}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) 16.410511236s ago: executing program 9 (id=2199): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f00000000000000090204", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000007b7030000000800008500000086000007bf092000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 15.523554781s ago: executing program 9 (id=2202): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000540), &(0x7f0000000080)=0x8) 14.620044386s ago: executing program 9 (id=2204): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x400c405) exit(0xfe) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ffd, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000140)='wg2\x00', 0x4) pread64(r5, 0x0, 0x3, 0x0) 10.417468886s ago: executing program 1 (id=2211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 9.175680298s ago: executing program 8 (id=2213): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x4ec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8.056713569s ago: executing program 1 (id=2216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) 5.266055889s ago: executing program 2 (id=2220): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x4, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000dc0)={'veth0_to_batadv\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x800) 5.206317343s ago: executing program 1 (id=2221): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r0 = inotify_init1(0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffffd) r3 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x12) ptrace(0x8, r3) ptrace(0x4207, r3) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r2, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4000064f) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 4.462324893s ago: executing program 9 (id=2222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4.217788549s ago: executing program 4 (id=2223): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f00000000000000090204801811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000007b7030000000800008500000086000007bf092000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 3.747643503s ago: executing program 2 (id=2224): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.663107768s ago: executing program 8 (id=2225): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000540)={r2}, &(0x7f0000000080)=0x8) 3.65724089s ago: executing program 4 (id=2226): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.121864314s ago: executing program 2 (id=2227): bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd32abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40453f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259f717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195833106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21da55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5fc1db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc9feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb89ee1c95361debf58f671170cfa57fb0c9cbad5c70244a2b6de2062cbd1ba2c85f73689d3ffcd37022ab9fcabd17fd40bfd316088dffe92728016ec5c72e21da52d09f849ab4a4b2d9b4799bab3a6d7f2ba57e100e7ffec0bd4c0659ebaf7b225edaa0af3f5aa99d1551d34b2d2faf0971dbe852142088b1c9b052e1177c47365d950e22c2b04283f62fec31837b5068dab60c5c2c1547acd52ab5e5cde41d24563b05e223e2aafe2c55ba3001d12e4de86597487e99c3b2bf193d7d6d0821481c16fd7cece5df2567182ca1ad6028028bf9f72d503b3d70e1c3c4b5e73ac286abb2b3b069f2ccda4c6a7a3759302b02034e8217b4ecdb9f1118a4117fd49d5467a84b70fae675af118bd885ee7798782765438caaf69856e236bf4b37bff5f971df3fd5e03a9ea39d5397b4e5c5a0d7eacf2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4, 0x10, 0x0, 0xff6a}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x2000c840}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xfff2, 0xfff1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x70, 0x7}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d4}, 0x4004880) 3.115967605s ago: executing program 9 (id=2228): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) socket$kcm(0x2, 0xa, 0x2) 3.022785798s ago: executing program 8 (id=2229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, 0x0) 3.010406091s ago: executing program 4 (id=2230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018"], 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 2.160520575s ago: executing program 2 (id=2231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) 2.01627861s ago: executing program 4 (id=2232): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 2.010460043s ago: executing program 8 (id=2233): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.426840986s ago: executing program 2 (id=2234): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00602fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.312319432s ago: executing program 9 (id=2235): writev(0xffffffffffffffff, &(0x7f0000005740)=[{&(0x7f0000000280)='\n)', 0x2}], 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x15, 0x5, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0xf9, 0x3, &(0x7f0000000040)={0x19, "78b8142115db2c054906d8cf007efb564aaae98e0100000014000c00"}}) syz_usb_connect(0x4, 0x3f, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) sendmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x1, 0x20040000) 1.259138853s ago: executing program 4 (id=2236): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003a00)={0x4c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) 1.205474995s ago: executing program 8 (id=2237): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 523.756577ms ago: executing program 8 (id=2238): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x92) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 224.426137ms ago: executing program 4 (id=2239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 0s ago: executing program 2 (id=2240): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): > 2 [ 197.952715][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 198.101499][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 198.168955][ T5778] Bluetooth: hci1: command tx timeout [ 198.213301][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 198.238670][ T5778] Bluetooth: hci0: command tx timeout [ 198.398847][ T5778] Bluetooth: hci3: command tx timeout [ 198.483207][ T5772] Bluetooth: hci2: command tx timeout [ 198.489059][ T5778] Bluetooth: hci4: command tx timeout [ 198.506143][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 198.534843][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 199.296428][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.309498][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.317213][ T5771] bridge_slave_0: entered allmulticast mode [ 199.327913][ T5771] bridge_slave_0: entered promiscuous mode [ 199.421503][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.430353][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.438296][ T5771] bridge_slave_1: entered allmulticast mode [ 199.452906][ T5771] bridge_slave_1: entered promiscuous mode [ 199.464258][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.474472][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.483242][ T5775] bridge_slave_0: entered allmulticast mode [ 199.493935][ T5775] bridge_slave_0: entered promiscuous mode [ 199.578623][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.602084][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.622318][ T5775] bridge_slave_1: entered allmulticast mode [ 199.633235][ T5775] bridge_slave_1: entered promiscuous mode [ 199.664410][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.679605][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.687376][ T5781] bridge_slave_0: entered allmulticast mode [ 199.701522][ T5781] bridge_slave_0: entered promiscuous mode [ 199.879401][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.887276][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.898329][ T5781] bridge_slave_1: entered allmulticast mode [ 199.907057][ T5781] bridge_slave_1: entered promiscuous mode [ 199.956258][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.975981][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.101526][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.109723][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.117193][ T5782] bridge_slave_0: entered allmulticast mode [ 200.126921][ T5782] bridge_slave_0: entered promiscuous mode [ 200.203645][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.239072][ T5772] Bluetooth: hci1: command tx timeout [ 200.246407][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.254783][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.262976][ T5782] bridge_slave_1: entered allmulticast mode [ 200.272224][ T5782] bridge_slave_1: entered promiscuous mode [ 200.289877][ T5771] team0: Port device team_slave_0 added [ 200.296184][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.303861][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.311884][ T5783] bridge_slave_0: entered allmulticast mode [ 200.321166][ T5783] bridge_slave_0: entered promiscuous mode [ 200.328869][ T5772] Bluetooth: hci0: command tx timeout [ 200.345503][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.364994][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.410844][ T5771] team0: Port device team_slave_1 added [ 200.420045][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.427584][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.435324][ T5783] bridge_slave_1: entered allmulticast mode [ 200.444497][ T5783] bridge_slave_1: entered promiscuous mode [ 200.479399][ T5772] Bluetooth: hci3: command tx timeout [ 200.493403][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.558772][ T5772] Bluetooth: hci2: command tx timeout [ 200.558839][ T5778] Bluetooth: hci4: command tx timeout [ 200.655538][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.726409][ T5775] team0: Port device team_slave_0 added [ 200.769961][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.807999][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.815746][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.842529][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.864069][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.883098][ T5775] team0: Port device team_slave_1 added [ 200.896386][ T5781] team0: Port device team_slave_0 added [ 200.912274][ T5781] team0: Port device team_slave_1 added [ 200.946386][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.953643][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.980545][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.000617][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.072552][ T5782] team0: Port device team_slave_0 added [ 201.208269][ T5782] team0: Port device team_slave_1 added [ 201.216573][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.223864][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.250427][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.268140][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.275767][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.302309][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.343812][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.351012][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.378676][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.477377][ T5783] team0: Port device team_slave_0 added [ 201.486686][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.494091][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.520764][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.564551][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.571723][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.598097][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.622410][ T5783] team0: Port device team_slave_1 added [ 201.673210][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.680878][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.708140][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.788027][ T5771] hsr_slave_0: entered promiscuous mode [ 201.796984][ T5771] hsr_slave_1: entered promiscuous mode [ 201.886265][ T5781] hsr_slave_0: entered promiscuous mode [ 201.895162][ T5781] hsr_slave_1: entered promiscuous mode [ 201.903607][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 201.909657][ T5781] Cannot create hsr debugfs directory [ 201.948699][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.955866][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.982277][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.000681][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.007826][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.034120][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.225622][ T5775] hsr_slave_0: entered promiscuous mode [ 202.235201][ T5775] hsr_slave_1: entered promiscuous mode [ 202.243701][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 202.249989][ T5775] Cannot create hsr debugfs directory [ 202.315139][ T5782] hsr_slave_0: entered promiscuous mode [ 202.321117][ T5772] Bluetooth: hci1: command tx timeout [ 202.330333][ T5782] hsr_slave_1: entered promiscuous mode [ 202.338205][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 202.344322][ T5782] Cannot create hsr debugfs directory [ 202.399048][ T5772] Bluetooth: hci0: command tx timeout [ 202.559181][ T5772] Bluetooth: hci3: command tx timeout [ 202.639106][ T5778] Bluetooth: hci4: command tx timeout [ 202.644797][ T5772] Bluetooth: hci2: command tx timeout [ 202.708123][ T5783] hsr_slave_0: entered promiscuous mode [ 202.717136][ T5783] hsr_slave_1: entered promiscuous mode [ 202.725533][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 202.731523][ T5783] Cannot create hsr debugfs directory [ 203.893990][ T5781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.934393][ T5781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.978102][ T5781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.001753][ T5781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.107718][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.114557][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.137767][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.172679][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.196105][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.224951][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.399168][ T5772] Bluetooth: hci1: command tx timeout [ 204.479952][ T5772] Bluetooth: hci0: command tx timeout [ 204.502177][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.543012][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.609501][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.639028][ T5772] Bluetooth: hci3: command tx timeout [ 204.647101][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.720263][ T5778] Bluetooth: hci4: command tx timeout [ 204.726016][ T5772] Bluetooth: hci2: command tx timeout [ 204.929716][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 204.971881][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 204.993555][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.017686][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 205.249354][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.372850][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.416025][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.440953][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.517192][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.624497][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.711636][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.719265][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.783686][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.841603][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.849189][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.015028][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.171284][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.178930][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.250495][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.257906][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.337738][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.551976][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.635000][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.734867][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.742589][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.838285][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.885707][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.893322][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.933553][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.072975][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.080634][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.146109][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.241200][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.248901][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.263562][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.271035][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.436441][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.444083][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.626920][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.737332][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.224288][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.566006][ T5771] veth0_vlan: entered promiscuous mode [ 209.738248][ T5771] veth1_vlan: entered promiscuous mode [ 210.063375][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.143843][ T5782] veth0_vlan: entered promiscuous mode [ 210.190335][ T5781] veth0_vlan: entered promiscuous mode [ 210.206789][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.278399][ T5771] veth0_macvtap: entered promiscuous mode [ 210.300937][ T5782] veth1_vlan: entered promiscuous mode [ 210.387049][ T5771] veth1_macvtap: entered promiscuous mode [ 210.398100][ T5781] veth1_vlan: entered promiscuous mode [ 210.614845][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.682555][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.773804][ T5782] veth0_macvtap: entered promiscuous mode [ 210.871206][ T72] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.885382][ T72] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.898228][ T5782] veth1_macvtap: entered promiscuous mode [ 210.989592][ T5783] veth0_vlan: entered promiscuous mode [ 211.006719][ T5781] veth0_macvtap: entered promiscuous mode [ 211.030140][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.045454][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.093628][ T5775] veth0_vlan: entered promiscuous mode [ 211.132128][ T5781] veth1_macvtap: entered promiscuous mode [ 211.238353][ T5775] veth1_vlan: entered promiscuous mode [ 211.284568][ T5783] veth1_vlan: entered promiscuous mode [ 211.339702][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.373650][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.491373][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.508102][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.667719][ T143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.719521][ T143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.768341][ T5775] veth0_macvtap: entered promiscuous mode [ 211.796699][ T143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.842336][ T143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.879319][ T5775] veth1_macvtap: entered promiscuous mode [ 211.893025][ T143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.977877][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.010873][ T5783] veth0_macvtap: entered promiscuous mode [ 212.031082][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.077877][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.123651][ T5783] veth1_macvtap: entered promiscuous mode [ 212.187322][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.364981][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.430201][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.511911][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.637280][ T1027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.677730][ T1027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.695241][ T1027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.763056][ T1027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.805239][ T1027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.861219][ T1027] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.898847][ T143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.907911][ T143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.544242][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.595966][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.960964][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.999449][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.505481][ T5771] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 218.528385][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.536590][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.874572][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.909537][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.099086][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.107155][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.329981][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.338007][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.861057][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.915439][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.189319][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.197358][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.672678][ T5974] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 220.933465][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.956069][ T5974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.989758][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.997939][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.009177][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.422096][ T6037] trusted_key: encrypted_key: insufficient parameters specified [ 229.893214][ T6079] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 230.011829][ T6082] process 'syz.3.47' launched './file0' with NULL argv: empty string added [ 230.780580][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 233.367695][ T6121] sctp: [Deprecated]: syz.4.62 (pid 6121) Use of int in max_burst socket option. [ 233.367695][ T6121] Use struct sctp_assoc_value instead [ 233.450477][ T6121] trusted_key: encrypted_key: key user:syz not found [ 237.472225][ T6178] io-wq is not configured for unbound workers [ 245.923576][ T29] audit: type=1800 audit(1774708983.649:2): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.123" name="bus" dev="tmpfs" ino=147 res=0 errno=0 [ 249.426612][ T29] audit: type=1326 audit(1774708987.169:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 249.583483][ T29] audit: type=1326 audit(1774708987.169:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 249.665106][ T29] audit: type=1326 audit(1774708987.229:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 249.767463][ T29] audit: type=1326 audit(1774708987.229:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 249.901456][ T29] audit: type=1326 audit(1774708987.229:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 250.009118][ T29] audit: type=1326 audit(1774708987.229:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 250.109317][ T29] audit: type=1326 audit(1774708987.239:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 250.226148][ T29] audit: type=1326 audit(1774708987.239:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 252.011977][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.152'. [ 258.485165][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.187'. [ 259.356419][ T29] audit: type=1326 audit(1774708997.099:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.191" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61aa59c799 code=0x0 [ 259.499568][ T29] audit: type=1326 audit(1774708997.179:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61aa59c799 code=0x7ffc0000 [ 259.659085][ T29] audit: type=1326 audit(1774708997.199:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61aa55cfce code=0x7ffc0000 [ 259.803657][ T29] audit: type=1326 audit(1774708997.219:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61aa55cfce code=0x7ffc0000 [ 259.899635][ T29] audit: type=1326 audit(1774708997.229:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61aa55cfce code=0x7ffc0000 [ 260.026756][ T29] audit: type=1326 audit(1774708997.239:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61aa55cfce code=0x7ffc0000 [ 260.148955][ T29] audit: type=1326 audit(1774708997.239:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61aa59c799 code=0x7ffc0000 [ 260.278146][ T29] audit: type=1326 audit(1774708997.239:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61aa55cfce code=0x7ffc0000 [ 260.452359][ T29] audit: type=1326 audit(1774708997.299:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61aa55cfce code=0x7ffc0000 [ 260.563348][ T6461] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 260.563348][ T6461] The task syz.4.193 (6461) triggered the difference, watch for misbehavior. [ 260.642234][ T29] audit: type=1326 audit(1774708997.299:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61aa55cfce code=0x7ffc0000 [ 264.270335][ T6502] Zero length message leads to an empty skb [ 264.289391][ T6504] mmap: syz.2.212 (6504) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 265.537807][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.544904][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.460282][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 269.710795][ T6571] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 271.570167][ T6585] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 280.109156][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 297.951888][ T5778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.989584][ T5778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.055292][ T5778] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.088108][ T5778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.108913][ T5778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.262353][ T6870] syz.3.350 (6870): attempted to duplicate a private mapping with mremap. This is not supported. [ 300.161248][ T5772] Bluetooth: hci5: command tx timeout [ 300.672110][ T6853] chnl_net:caif_netlink_parms(): no params data found [ 301.490328][ T6890] xt_hashlimit: size too large, truncated to 1048576 [ 302.241008][ T5772] Bluetooth: hci5: command tx timeout [ 302.849341][ T6853] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.880421][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.959348][ T6853] bridge_slave_0: entered allmulticast mode [ 303.023053][ T6853] bridge_slave_0: entered promiscuous mode [ 303.111958][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.158947][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.166837][ T6853] bridge_slave_1: entered allmulticast mode [ 303.235260][ T6853] bridge_slave_1: entered promiscuous mode [ 303.767776][ T6853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.890534][ T6853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.322771][ T5772] Bluetooth: hci5: command tx timeout [ 304.533514][ T6853] team0: Port device team_slave_0 added [ 304.621896][ T6853] team0: Port device team_slave_1 added [ 304.761841][ T6913] syz.4.366 (6913): /proc/6912/oom_adj is deprecated, please use /proc/6912/oom_score_adj instead. [ 305.062320][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.109400][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.288642][ T6853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.374600][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.433397][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.578680][ T6853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.243087][ T6853] hsr_slave_0: entered promiscuous mode [ 306.299943][ T6853] hsr_slave_1: entered promiscuous mode [ 306.343065][ T6853] debugfs: 'hsr0' already exists in 'hsr' [ 306.388829][ T6853] Cannot create hsr debugfs directory [ 306.401621][ T5772] Bluetooth: hci5: command tx timeout [ 308.581492][ T6929] loop2: detected capacity change from 0 to 164 [ 308.675878][ T6929] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 308.783394][ T6929] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 308.835098][ T6853] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 309.023785][ T6853] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 309.253834][ T6853] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 309.434084][ T6853] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 311.460393][ T6853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.693799][ T6853] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.830752][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.838291][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.965100][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.972715][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.672915][ T6853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.181410][ T6853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.170124][ T6853] veth0_vlan: entered promiscuous mode [ 318.300408][ T6853] veth1_vlan: entered promiscuous mode [ 318.799397][ T6976] Bluetooth: hci1: command 0x0406 tx timeout [ 318.805705][ T6976] Bluetooth: hci0: command 0x0406 tx timeout [ 318.812670][ T6976] Bluetooth: hci3: command 0x0406 tx timeout [ 318.837401][ T6976] Bluetooth: hci4: command 0x0406 tx timeout [ 318.843830][ T6976] Bluetooth: hci2: command 0x0406 tx timeout [ 318.887353][ T6853] veth0_macvtap: entered promiscuous mode [ 318.987180][ T6853] veth1_macvtap: entered promiscuous mode [ 319.565186][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.819496][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.016388][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.067107][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.144733][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.206467][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.653175][ T5772] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.663873][ T5772] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.673976][ T5772] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.695525][ T6993] loop2: detected capacity change from 0 to 16 [ 320.696111][ T5772] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.780956][ T5772] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.923020][ T6993] erofs (device loop2): invalid ishare xattr prefix id 0 [ 321.023411][ T6993] ======================================================= [ 321.023411][ T6993] WARNING: The mand mount option has been deprecated and [ 321.023411][ T6993] and is ignored by this kernel. Remove the mand [ 321.023411][ T6993] option from the mount to silence this warning. [ 321.023411][ T6993] ======================================================= [ 322.879217][ T5772] Bluetooth: hci6: command tx timeout [ 323.945042][ T6994] chnl_net:caif_netlink_parms(): no params data found [ 324.975129][ T5772] Bluetooth: hci6: command tx timeout [ 326.125276][ T7041] syzkaller0: entered promiscuous mode [ 326.208789][ T7041] syzkaller0: entered allmulticast mode [ 326.430302][ T7047] loop3: detected capacity change from 0 to 512 [ 326.930213][ T7047] loop3: detected capacity change from 0 to 2048 [ 327.004633][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.018696][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.069518][ T5772] Bluetooth: hci6: command tx timeout [ 327.119770][ T6994] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.127361][ T6994] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.150357][ T6994] bridge_slave_0: entered allmulticast mode [ 327.227181][ T6994] bridge_slave_0: entered promiscuous mode [ 327.230166][ T7047] loop3: p1 [ 327.328906][ T6994] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.388867][ T6994] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.429254][ T6994] bridge_slave_1: entered allmulticast mode [ 327.501418][ T6994] bridge_slave_1: entered promiscuous mode [ 328.195304][ T6994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.326805][ T6138] udevd[6138]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 328.344051][ T6994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.963754][ T6994] team0: Port device team_slave_0 added [ 329.071797][ T6994] team0: Port device team_slave_1 added [ 329.118808][ T5772] Bluetooth: hci6: command tx timeout [ 329.709429][ T6994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.768665][ T6994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.908870][ T6994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.017602][ T6994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.068896][ T6994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.209366][ T6994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.038023][ T6994] hsr_slave_0: entered promiscuous mode [ 331.113813][ T6994] hsr_slave_1: entered promiscuous mode [ 331.160973][ T6994] debugfs: 'hsr0' already exists in 'hsr' [ 331.204274][ T6994] Cannot create hsr debugfs directory [ 332.918612][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.947743][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.652042][ T7105] loop4: detected capacity change from 0 to 256 [ 333.863314][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.908736][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.053925][ T6994] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 335.187163][ T6994] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 335.355836][ T6994] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 335.560722][ T6994] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 337.265145][ T7132] loop5: detected capacity change from 0 to 512 [ 337.437740][ T7136] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 338.254658][ T6994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.985371][ T6994] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.126021][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.133751][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.381470][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.566754][ T7159] loop4: detected capacity change from 0 to 256 [ 339.681194][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.688864][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.974155][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.425934][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.187265][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.786315][ T35] bridge_slave_1: left allmulticast mode [ 342.839168][ T35] bridge_slave_1: left promiscuous mode [ 342.876655][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.988178][ T35] bridge_slave_0: left allmulticast mode [ 343.006928][ T35] bridge_slave_0: left promiscuous mode [ 343.046888][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.523946][ T7194] loop3: detected capacity change from 0 to 256 [ 345.307861][ T7217] loop2: detected capacity change from 0 to 128 [ 345.342988][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.443795][ T7217] vfat: Unknown parameter 'ÿÿÿÿ' [ 345.490270][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.614492][ T35] bond0 (unregistering): Released all slaves [ 347.544367][ T35] hsr_slave_0: left promiscuous mode [ 347.599879][ T35] hsr_slave_1: left promiscuous mode [ 347.627263][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.695217][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.824232][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.879510][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.076306][ T35] veth1_macvtap: left promiscuous mode [ 348.105764][ T35] veth0_macvtap: left promiscuous mode [ 348.133982][ T35] veth1_vlan: left promiscuous mode [ 348.168697][ T35] veth0_vlan: left promiscuous mode [ 351.899224][ T35] team0 (unregistering): Port device team_slave_1 removed [ 352.120780][ T35] team0 (unregistering): Port device team_slave_0 removed [ 353.489942][ T7293] loop2: detected capacity change from 0 to 512 [ 353.565311][ T7293] msdos: Unknown parameter 'ots' [ 354.056428][ T6994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.680402][ T7321] syzkaller0: entered promiscuous mode [ 356.686113][ T7321] syzkaller0: entered allmulticast mode [ 358.170865][ T6994] veth0_vlan: entered promiscuous mode [ 358.329078][ T6994] veth1_vlan: entered promiscuous mode [ 359.016056][ T6994] veth0_macvtap: entered promiscuous mode [ 359.176544][ T6994] veth1_macvtap: entered promiscuous mode [ 360.809662][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.819610][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.895652][ T7361] loop5: detected capacity change from 0 to 128 [ 362.142342][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.331181][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.474951][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 363.918776][ T56] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.744420][ T56] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.843111][ T6994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.946299][ T56] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.989379][ T56] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.103341][ T6994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.464923][ T1027] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.506607][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.550776][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 365.606028][ T143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.635922][ T143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.635193][ T7483] ucma_write: process 277 (syz.4.545) changed security contexts after opening file descriptor, this is not allowed. [ 375.407011][ T7533] loop4: detected capacity change from 0 to 128 [ 376.248846][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.284062][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.758799][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.778565][ T7548] loop4: detected capacity change from 0 to 128 [ 376.786994][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.038083][ T72] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.717652][ T72] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.200918][ T72] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.423412][ T72] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.957494][ T72] bridge_slave_1: left allmulticast mode [ 380.969036][ T72] bridge_slave_1: left promiscuous mode [ 380.975750][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.023742][ T72] bridge_slave_0: left allmulticast mode [ 381.038652][ T72] bridge_slave_0: left promiscuous mode [ 381.045428][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.922938][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.063435][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.199064][ T72] bond0 (unregistering): Released all slaves [ 382.343384][ T7599] loop2: detected capacity change from 0 to 128 [ 382.865071][ T7603] loop3: detected capacity change from 0 to 128 [ 382.883166][ T5072] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.893130][ T5072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.910772][ T5072] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.936608][ T5072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.948184][ T5072] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.209545][ T7603] FAT-fs (loop3): Directory bread(block 32) failed [ 383.216335][ T7603] FAT-fs (loop3): Directory bread(block 33) failed [ 383.300439][ T7603] FAT-fs (loop3): Directory bread(block 34) failed [ 383.307232][ T7603] FAT-fs (loop3): Directory bread(block 35) failed [ 383.393340][ T7603] FAT-fs (loop3): Directory bread(block 36) failed [ 383.448848][ T7603] FAT-fs (loop3): Directory bread(block 37) failed [ 383.514000][ T7603] FAT-fs (loop3): Directory bread(block 38) failed [ 383.568804][ T7603] FAT-fs (loop3): Directory bread(block 39) failed [ 383.618998][ T7603] FAT-fs (loop3): Directory bread(block 40) failed [ 383.679599][ T7603] FAT-fs (loop3): Directory bread(block 41) failed [ 383.698778][ T7612] fuse: Bad value for 'fd' [ 383.968626][ T72] hsr_slave_0: left promiscuous mode [ 384.009918][ T72] hsr_slave_1: left promiscuous mode [ 384.047736][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.084543][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.154396][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.218998][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.360912][ T72] veth1_macvtap: left promiscuous mode [ 384.366679][ T72] veth0_macvtap: left promiscuous mode [ 384.384926][ T72] veth1_vlan: left promiscuous mode [ 384.400094][ T72] veth0_vlan: left promiscuous mode [ 385.039326][ T5072] Bluetooth: hci1: command tx timeout [ 386.926702][ T72] team0 (unregistering): Port device team_slave_1 removed [ 387.052196][ T72] team0 (unregistering): Port device team_slave_0 removed [ 387.118748][ T5072] Bluetooth: hci1: command tx timeout [ 388.419159][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.425838][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.211405][ T5072] Bluetooth: hci1: command tx timeout [ 389.808985][ T72] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.983934][ T7605] chnl_net:caif_netlink_parms(): no params data found [ 390.173967][ T72] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.375262][ T72] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.533859][ T72] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.061446][ T72] bridge_slave_1: left allmulticast mode [ 391.067354][ T72] bridge_slave_1: left promiscuous mode [ 391.100624][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.140047][ T72] bridge_slave_0: left allmulticast mode [ 391.145927][ T72] bridge_slave_0: left promiscuous mode [ 391.189789][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.279207][ T5072] Bluetooth: hci1: command tx timeout [ 392.215847][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.390695][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.472892][ T72] bond0 (unregistering): Released all slaves [ 392.785146][ T7698] loop4: detected capacity change from 0 to 128 [ 393.066023][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 393.084479][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 393.109669][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 393.125481][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 393.143746][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 393.264614][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.288211][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.363776][ T7605] bridge_slave_0: entered allmulticast mode [ 393.429442][ T7605] bridge_slave_0: entered promiscuous mode [ 393.515891][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.575612][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.620427][ T7605] bridge_slave_1: entered allmulticast mode [ 393.660619][ T7605] bridge_slave_1: entered promiscuous mode [ 394.344596][ T7605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.480540][ T72] hsr_slave_0: left promiscuous mode [ 394.499223][ T72] hsr_slave_1: left promiscuous mode [ 394.535128][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.569645][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.581207][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.589864][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.647737][ T72] veth1_macvtap: left promiscuous mode [ 394.661194][ T72] veth0_macvtap: left promiscuous mode [ 394.675106][ T72] veth1_vlan: left promiscuous mode [ 394.688891][ T72] veth0_vlan: left promiscuous mode [ 395.198724][ T5772] Bluetooth: hci0: command tx timeout [ 395.844669][ T7724] syz.6.618 uses obsolete (PF_INET,SOCK_PACKET) [ 396.781595][ T72] team0 (unregistering): Port device team_slave_1 removed [ 396.871506][ T72] team0 (unregistering): Port device team_slave_0 removed [ 397.278976][ T5772] Bluetooth: hci0: command tx timeout [ 397.905043][ T7747] netlink: 36 bytes leftover after parsing attributes in process `syz.4.625'. [ 397.990398][ T7605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.532446][ T7605] team0: Port device team_slave_0 added [ 398.761334][ T7605] team0: Port device team_slave_1 added [ 399.196330][ T7760] loop2: detected capacity change from 0 to 128 [ 399.310968][ T7605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.318141][ T7605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.361433][ T7605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.389088][ T5772] Bluetooth: hci0: command tx timeout [ 399.518216][ T7762] loop4: detected capacity change from 0 to 128 [ 399.646992][ T7605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.674108][ T7762] FAT-fs (loop4): error, clusters badly computed (2 != 0) [ 399.694512][ T7605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.702000][ T7762] FAT-fs (loop4): Filesystem has been set read-only [ 399.768717][ T7605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.447150][ T7605] hsr_slave_0: entered promiscuous mode [ 400.494222][ T7605] hsr_slave_1: entered promiscuous mode [ 400.520493][ T7605] debugfs: 'hsr0' already exists in 'hsr' [ 400.526451][ T7605] Cannot create hsr debugfs directory [ 401.459215][ T5772] Bluetooth: hci0: command tx timeout [ 403.033994][ T7700] chnl_net:caif_netlink_parms(): no params data found [ 403.566613][ T7605] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 403.712131][ T7605] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 403.810676][ T7605] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 403.893258][ T7605] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 405.275774][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.290075][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.297930][ T7700] bridge_slave_0: entered allmulticast mode [ 405.349602][ T7700] bridge_slave_0: entered promiscuous mode [ 405.475340][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.504415][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.563298][ T7700] bridge_slave_1: entered allmulticast mode [ 405.620085][ T7700] bridge_slave_1: entered promiscuous mode [ 405.920732][ T7847] serio: Serial port pts0 [ 406.189115][ T7700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.281369][ T7700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.419649][ T7851] program syz.6.654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.447247][ T7851] program syz.6.654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.677148][ T7700] team0: Port device team_slave_0 added [ 406.747714][ T7700] team0: Port device team_slave_1 added [ 407.176587][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.213025][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.319845][ T7700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.365645][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.407312][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.466987][ T7700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.557508][ T7605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.447700][ T7700] hsr_slave_0: entered promiscuous mode [ 408.490302][ T7700] hsr_slave_1: entered promiscuous mode [ 408.514396][ T7700] debugfs: 'hsr0' already exists in 'hsr' [ 408.542155][ T7700] Cannot create hsr debugfs directory [ 408.909228][ T7605] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.037941][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.045609][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.929759][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.937407][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.117586][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.127455][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.851647][ T7922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.017859][ T7922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.103593][ T7954] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 415.139134][ T7954] block device autoloading is deprecated and will be removed. [ 415.358859][ T143] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.371098][ T1098] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.657094][ T1098] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.719089][ T1098] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.817225][ T7700] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 416.925562][ T7700] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 417.122562][ T7700] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 417.251811][ T7700] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 418.820585][ T7605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.105410][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.421540][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.508015][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.515787][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.686337][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.694038][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.503436][ T7605] veth0_vlan: entered promiscuous mode [ 422.714242][ T7605] veth1_vlan: entered promiscuous mode [ 422.875567][ T7700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.412449][ T7605] veth0_macvtap: entered promiscuous mode [ 423.474779][ T8043] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 423.528646][ T8043] overlayfs: failed to set xattr on upper [ 423.540713][ T7605] veth1_macvtap: entered promiscuous mode [ 423.590350][ T8043] overlayfs: ...falling back to redirect_dir=nofollow. [ 423.662684][ T8043] overlayfs: ...falling back to index=off. [ 423.699951][ T8043] overlayfs: ...falling back to uuid=null. [ 423.895400][ T7605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.118431][ T7605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.262422][ T8056] loop6: detected capacity change from 0 to 128 [ 424.303599][ T1027] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.362628][ T1027] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.371662][ T8056] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 424.448612][ T8056] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 424.523387][ T1027] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.598218][ T1027] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.666892][ T8062] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 424.723959][ T8062] FAT-fs (loop6): Filesystem has been set read-only [ 424.794708][ T8056] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 424.853098][ T8064] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 426.697056][ T7700] veth0_vlan: entered promiscuous mode [ 426.853836][ T7700] veth1_vlan: entered promiscuous mode [ 426.876545][ T8091] loop4: detected capacity change from 0 to 128 [ 426.989979][ T8091] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 427.661895][ T7700] veth0_macvtap: entered promiscuous mode [ 427.733833][ T7700] veth1_macvtap: entered promiscuous mode [ 428.045027][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.087137][ T5781] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 428.154402][ T5781] FAT-fs (loop4): Filesystem has been set read-only [ 428.194621][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.438120][ T35] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.484027][ T35] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.603011][ T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.726322][ T1098] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.233487][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.299924][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.704263][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.753534][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.247791][ T8192] loop6: detected capacity change from 0 to 128 [ 435.400037][ T8192] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 435.418521][ C1] hrtimer: interrupt took 291542 ns [ 435.458699][ T8192] FAT-fs (loop6): Filesystem has been set read-only [ 435.533601][ T8192] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 435.904122][ T8200] loop2: detected capacity change from 0 to 128 [ 437.169021][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.248128][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.685952][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.719781][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.965222][ T8227] loop4: detected capacity change from 0 to 128 [ 438.930642][ T8236] netlink: 'syz.6.739': attribute type 3 has an invalid length. [ 439.860702][ T8243] loop6: detected capacity change from 0 to 128 [ 441.784016][ T8265] netlink: 'syz.2.748': attribute type 2 has an invalid length. [ 441.805973][ T8265] netlink: 'syz.2.748': attribute type 2 has an invalid length. [ 441.859437][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 443.537879][ T8286] loop6: detected capacity change from 0 to 128 [ 446.799374][ T5072] Bluetooth: hci6: command 0x0406 tx timeout [ 448.029171][ T8337] netlink: 'syz.7.770': attribute type 5 has an invalid length. [ 448.919913][ T8347] netlink: 16 bytes leftover after parsing attributes in process `syz.7.774'. [ 448.931829][ T8351] fuse: Bad value for 'fd' [ 449.867886][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.874768][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.107024][ T8392] tipc: Started in network mode [ 452.119483][ T8392] tipc: Node identity 5a1ddb3413ba, cluster identity 4711 [ 452.132527][ T8392] tipc: Enabled bearer , priority 0 [ 452.441596][ T8392] syzkaller0: entered promiscuous mode [ 452.448235][ T8392] syzkaller0: entered allmulticast mode [ 452.469962][ T8392] tipc: Resetting bearer [ 452.619307][ T8391] tipc: Resetting bearer [ 453.105989][ T8391] tipc: Disabling bearer [ 453.272381][ T8402] fuse: Bad value for 'fd' [ 454.251336][ T8416] batadv0: entered promiscuous mode [ 454.292363][ T8416] gretap0: entered promiscuous mode [ 454.373513][ T8416] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 454.499014][ T8416] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 454.825344][ T8416] batadv0: left promiscuous mode [ 454.941897][ T8416] gretap0: left promiscuous mode [ 460.449263][ T8460] syz.8.807 (8460) used greatest stack depth: 2392 bytes left [ 461.040217][ T8497] tipc: Enabled bearer , priority 0 [ 461.136989][ T8500] syzkaller0: entered promiscuous mode [ 461.204183][ T8500] syzkaller0: entered allmulticast mode [ 461.411014][ T8497] tipc: Resetting bearer [ 461.549305][ T8495] tipc: Resetting bearer [ 461.661499][ T8495] tipc: Disabling bearer [ 462.374192][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.825'. [ 462.580973][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.7.825'. [ 462.680549][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.825'. [ 462.697301][ T8523] netlink: 'syz.6.827': attribute type 3 has an invalid length. [ 462.761408][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.825'. [ 462.826983][ T8520] bond0: entered promiscuous mode [ 462.837692][ T8520] bond_slave_0: entered promiscuous mode [ 462.860882][ T8520] bond_slave_1: entered promiscuous mode [ 463.019221][ T8520] batadv0: entered promiscuous mode [ 463.660324][ T8537] netlink: 68 bytes leftover after parsing attributes in process `syz.6.827'. [ 464.042806][ T8517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.104079][ T8517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.196354][ T8517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.226192][ T8517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.380209][ T8517] batadv0 (unregistering): left promiscuous mode [ 465.113201][ T8537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.146244][ T8568] tipc: Started in network mode [ 467.173968][ T8568] tipc: Node identity aee1d2346dae, cluster identity 4711 [ 467.285783][ T8568] tipc: Enabled bearer , priority 0 [ 467.347054][ T8569] syzkaller0: entered promiscuous mode [ 467.401130][ T8569] syzkaller0: entered allmulticast mode [ 467.600503][ T8585] tipc: Resetting bearer [ 467.757392][ T8566] tipc: Resetting bearer [ 467.855782][ T8566] tipc: Disabling bearer [ 469.279150][ T8608] netlink: 32 bytes leftover after parsing attributes in process `syz.6.850'. [ 469.628089][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.8.852'. [ 469.689838][ T8610] ipvlan1: entered promiscuous mode [ 469.754689][ T8610] ipvlan1: entered allmulticast mode [ 469.777447][ T8610] veth0_vlan: entered allmulticast mode [ 469.847539][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'. [ 469.889918][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.854'. [ 469.918853][ T8617] netlink: 'syz.4.854': attribute type 5 has an invalid length. [ 470.082940][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.093338][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'. [ 470.118938][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.128001][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.148949][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.854'. [ 470.158159][ T8617] netlink: 'syz.4.854': attribute type 5 has an invalid length. [ 470.200015][ T72] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.744460][ T8640] Bluetooth: MGMT ver 1.23 [ 472.835247][ T12] bridge_slave_1: left allmulticast mode [ 472.865149][ T12] bridge_slave_1: left promiscuous mode [ 472.937844][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.030774][ T12] bridge_slave_0: left allmulticast mode [ 473.057854][ T12] bridge_slave_0: left promiscuous mode [ 473.120688][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.945751][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.970833][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.866'. [ 474.047864][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.175942][ T12] bond0 (unregistering): Released all slaves [ 475.621325][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.869'. [ 477.769830][ T12] hsr_slave_0: left promiscuous mode [ 477.812111][ T12] hsr_slave_1: left promiscuous mode [ 477.849532][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.932865][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.641234][ T12] team0 (unregistering): Port device team_slave_1 removed [ 479.808243][ T12] team0 (unregistering): Port device team_slave_0 removed [ 480.506600][ T8751] loop7: detected capacity change from 0 to 128 [ 481.142980][ T8735] geneve2: entered promiscuous mode [ 481.208909][ T8735] geneve2: entered allmulticast mode [ 481.269651][ T8748] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 481.278921][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.280888][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.378642][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.388536][ T8698] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.410000][ T8748] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 481.472488][ T8748] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 482.981807][ T8774] netlink: 27 bytes leftover after parsing attributes in process `syz.2.890'. [ 496.027853][ T8948] tipc: Enabled bearer , priority 10 [ 497.303789][ T5838] tipc: Node number set to 3276788276 [ 497.917082][ T8695] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.963300][ T8695] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.017130][ T8695] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.061694][ T8695] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.260938][ T8695] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.324315][ T8695] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.529628][ T8983] loop7: detected capacity change from 0 to 128 [ 498.864137][ T8698] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.917314][ T8698] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.365595][ T8998] hsr0: entered promiscuous mode [ 500.482804][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.8.949'. [ 500.537362][ T5831] IPVS: starting estimator thread 0... [ 500.669089][ T9007] IPVS: using max 192 ests per chain, 9600 per kthread [ 502.141218][ T9024] loop4: detected capacity change from 0 to 128 [ 502.510622][ T9025] vxcan3: entered promiscuous mode [ 505.656069][ T9061] loop2: detected capacity change from 0 to 128 [ 508.239702][ T5072] Bluetooth: hci1: command 0x0406 tx timeout [ 508.545428][ T9096] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 509.012130][ T9105] netlink: 14 bytes leftover after parsing attributes in process `syz.2.981'. [ 509.109378][ T9096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.646559][ T9099] bond1: (slave veth3): Enslaving as an active interface with a down link [ 509.863111][ T9101] bond1: (slave dummy0): making interface the new active one [ 509.925872][ T9101] dummy0: entered promiscuous mode [ 509.963026][ T9101] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 510.166069][ T9105] bond1: (slave dummy0): Releasing active interface [ 510.255975][ T9105] dummy0 (unregistering): left promiscuous mode [ 511.305639][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.312495][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.432358][ T9124] overlayfs: failed to resolve './file2': -2 [ 511.543105][ T9124] loop2: detected capacity change from 0 to 128 [ 511.621787][ T9124] vfat: Unknown parameter 'ÿÿ0x0000000000000003' [ 513.607927][ T9141] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.616752][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.201990][ T9141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.353180][ T9141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.479338][ T5072] Bluetooth: hci0: command 0x0406 tx timeout [ 518.657324][ T9153] tipc: Started in network mode [ 518.663299][ T9153] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 518.675990][ T9153] tipc: Enabled bearer , priority 10 [ 518.892810][ T56] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.921265][ T56] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.944800][ T56] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.082479][ T56] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.823974][ T7926] tipc: Node number set to 4269801491 [ 521.555536][ T9232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1020'. [ 523.803215][ T9260] vcan0: tx drop: invalid sa for name 0x0001000000000000 [ 524.146166][ T9265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.864112][ T9285] tipc: Enabled bearer , priority 0 [ 525.913864][ T9291] syzkaller0: entered promiscuous mode [ 525.930062][ T9291] syzkaller0: entered allmulticast mode [ 526.096101][ T9285] tipc: Resetting bearer [ 527.081643][ T9283] tipc: Resetting bearer [ 527.111896][ T9283] tipc: Disabling bearer [ 528.206482][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1048'. [ 528.360999][ T9325] batadv_slave_1: entered promiscuous mode [ 528.563748][ T9318] batadv_slave_1: left promiscuous mode [ 529.241545][ T9338] warning: `syz.2.1054' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 529.469129][ T9342] block nbd7: not configured, cannot reconfigure [ 530.065990][ T9347] tipc: Enabled bearer , priority 0 [ 530.095670][ T9352] fuse: Unknown parameter 'grou00000000000000000000' [ 530.128528][ T9347] syzkaller0: entered promiscuous mode [ 530.134245][ T9347] syzkaller0: entered allmulticast mode [ 530.279867][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1061'. [ 530.586393][ T9358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.709932][ T9347] tipc: Resetting bearer [ 530.759937][ T9346] tipc: Resetting bearer [ 530.801459][ T9346] tipc: Disabling bearer [ 532.940698][ T9396] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1071'. [ 533.049333][ T9395] netlink: 'syz.4.1071': attribute type 15 has an invalid length. [ 533.103451][ T9395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1071'. [ 533.393882][ T9402] fuse: Unknown parameter 'group_i00000000000000000000' [ 533.585971][ T9403] syzkaller0: entered promiscuous mode [ 533.622601][ T9403] syzkaller0: entered allmulticast mode [ 534.196669][ T9410] tipc: Started in network mode [ 534.230031][ T9410] tipc: Node identity 62f53801b4fa, cluster identity 4711 [ 534.246536][ T9410] tipc: Enabled bearer , priority 0 [ 534.445966][ T9414] syzkaller0: entered promiscuous mode [ 534.526980][ T9414] syzkaller0: entered allmulticast mode [ 534.777473][ T9418] tipc: Resetting bearer [ 534.843564][ T9409] tipc: Resetting bearer [ 534.971863][ T9409] tipc: Disabling bearer [ 536.065567][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1081'. [ 536.140351][ T9438] batadv_slave_1: entered promiscuous mode [ 536.243234][ T9440] overlayfs: missing 'lowerdir' [ 536.322556][ T9440] loop2: detected capacity change from 0 to 128 [ 536.394451][ T9440] vfat: Unknown parameter 'ÿÿ0x0000000000000003' [ 536.504554][ T9431] batadv_slave_1: left promiscuous mode [ 537.509288][ T9449] netlink: 'syz.4.1086': attribute type 15 has an invalid length. [ 537.599975][ T9449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1086'. [ 537.775773][ T9452] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1087'. [ 539.069118][ T9466] tipc: Enabled bearer , priority 0 [ 539.115068][ T9470] syzkaller0: entered promiscuous mode [ 539.166084][ T9470] syzkaller0: entered allmulticast mode [ 539.359290][ T9466] tipc: Resetting bearer [ 539.422783][ T9465] tipc: Resetting bearer [ 539.549262][ T9465] tipc: Disabling bearer [ 539.776290][ T9480] overlayfs: missing 'lowerdir' [ 539.859220][ T9480] loop2: detected capacity change from 0 to 128 [ 539.912169][ T9480] vfat: Unknown parameter 'ÿÿ0x0000000000000003' [ 540.360958][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1096'. [ 540.507816][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1096'. [ 541.117568][ T9487] tipc: Enabled bearer , priority 0 [ 541.658765][ T9504] netlink: 'syz.4.1100': attribute type 15 has an invalid length. [ 541.680157][ T9504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1100'. [ 541.741077][ T9489] syzkaller0: entered promiscuous mode [ 541.746784][ T9489] syzkaller0: entered allmulticast mode [ 541.793334][ T9489] tipc: Resetting bearer [ 541.863020][ T8698] tipc: Resetting bearer [ 541.906652][ T9484] tipc: Resetting bearer [ 542.312173][ T9484] tipc: Disabling bearer [ 542.381042][ T9506] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1101'. [ 543.520879][ T9526] netlink: 'syz.8.1107': attribute type 1 has an invalid length. [ 543.773815][ T9533] overlayfs: missing 'lowerdir' [ 543.910910][ T9533] loop7: detected capacity change from 0 to 128 [ 543.990266][ T9533] vfat: Unknown parameter 'ÿÿ0x0000000000000003' [ 544.045173][ T9526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.822402][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 544.898257][ T9551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1112'. [ 545.101001][ T9551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.172147][ T9571] fuse: Bad value for 'fd' [ 546.759350][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 546.803012][ T9581] overlayfs: missing 'lowerdir' [ 546.892835][ T9581] loop6: detected capacity change from 0 to 128 [ 546.937080][ T9581] vfat: Unknown parameter 'ÿÿ0x0000000000000003' [ 547.900335][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1131'. [ 547.931218][ T9599] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1131'. [ 547.989560][ T9599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.419407][ T9599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.649770][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 549.700320][ T9620] fuse: Unknown parameter 'group_id00000000000000000000' [ 550.049789][ T9629] overlayfs: missing 'lowerdir' [ 550.149211][ T9629] loop2: detected capacity change from 0 to 128 [ 550.220455][ T9629] vfat: Unknown parameter 'ÿÿ0x0000000000000003' [ 551.303447][ T9640] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1146'. [ 551.946077][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1148'. [ 552.062108][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1148'. [ 552.112451][ T9655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.307731][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1149'. [ 552.664152][ T9655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.324454][ T9670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1154'. [ 553.373804][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 554.393882][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1156'. [ 555.247700][ T9699] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1162'. [ 556.652996][ T9718] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1169'. [ 556.705588][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'. [ 561.582577][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1189'. [ 561.756187][ T9788] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1189'. [ 565.631616][ T9836] batadv_slave_1: entered promiscuous mode [ 565.754327][ T9838] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1203'. [ 566.211189][ T9832] batadv_slave_1: left promiscuous mode [ 566.391830][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1205'. [ 566.469726][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1205'. [ 566.588505][ T9844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.502562][ T9860] netlink: 'syz.8.1208': attribute type 2 has an invalid length. [ 567.510904][ T9860] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1208'. [ 570.546046][ T9905] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1218'. [ 570.930541][ T9901] batadv_slave_1: entered promiscuous mode [ 571.043380][ T9898] batadv_slave_1: left promiscuous mode [ 571.759212][ T9914] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1220'. [ 572.752139][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.768750][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.311213][ T9920] ip6gre1: entered promiscuous mode [ 573.316753][ T9920] ip6gre1: entered allmulticast mode [ 573.506830][ T9925] tipc: Enabling of bearer rejected, failed to enable media [ 575.249163][ T9957] fuse: Unknown parameter 'user_id00000000000000000000' [ 575.729480][ T9962] fuse: Bad value for 'fd' [ 577.013446][ T9972] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1235'. [ 578.154283][ T9977] syzkaller0: entered promiscuous mode [ 578.181595][ T9977] syzkaller0: entered allmulticast mode [ 578.611157][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 578.656141][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 578.672231][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 578.700527][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 578.717691][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 580.040757][T10008] fuse: Unknown parameter 'user_id00000000000000000000' [ 580.801562][ T5072] Bluetooth: hci4: command tx timeout [ 580.936189][T10026] fuse: Bad value for 'fd' [ 581.498898][T10018] syzkaller0: entered promiscuous mode [ 581.507193][T10018] syzkaller0: entered allmulticast mode [ 581.897650][ T9996] chnl_net:caif_netlink_parms(): no params data found [ 582.878621][ T5072] Bluetooth: hci4: command tx timeout [ 584.292631][T10053] syzkaller0: entered promiscuous mode [ 584.327733][T10053] syzkaller0: entered allmulticast mode [ 584.961227][ T5072] Bluetooth: hci4: command tx timeout [ 585.342468][T10085] fuse: Bad value for 'fd' [ 586.648584][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.698878][ T9996] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.706816][ T9996] bridge_slave_0: entered allmulticast mode [ 586.772385][ T9996] bridge_slave_0: entered promiscuous mode [ 586.852071][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.860497][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.870317][ T9996] bridge_slave_1: entered allmulticast mode [ 586.882471][ T9996] bridge_slave_1: entered promiscuous mode [ 587.059355][ T5072] Bluetooth: hci4: command tx timeout [ 587.144249][ T9996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.180718][ T9996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.755093][ T9996] team0: Port device team_slave_0 added [ 587.894383][ T9996] team0: Port device team_slave_1 added [ 588.450196][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.457446][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.545333][T10119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1268'. [ 588.706814][ T9996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.857580][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.942403][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.044457][ T9996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.720428][T10123] syzkaller0: entered promiscuous mode [ 589.726136][T10123] syzkaller0: entered allmulticast mode [ 590.866641][T10136] netlink: 'syz.4.1271': attribute type 1 has an invalid length. [ 591.252439][T10136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 591.770600][ T9996] hsr_slave_0: entered promiscuous mode [ 591.844763][ T9996] hsr_slave_1: entered promiscuous mode [ 593.747699][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1280'. [ 594.504517][ T9996] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 595.275659][ T9996] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 595.431888][ T9996] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 595.536924][ T9996] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 595.596009][T10174] netlink: 'syz.7.1284': attribute type 1 has an invalid length. [ 595.627745][T10172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1282'. [ 595.754627][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.173011][T10174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 596.351534][T10180] tipc: Enabled bearer , priority 0 [ 596.471252][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.543178][T10173] tipc: Disabling bearer [ 596.814369][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.194306][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.228542][T10203] batadv_slave_1: entered promiscuous mode [ 598.430446][T10209] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1291'. [ 598.666190][T10198] batadv_slave_1: left promiscuous mode [ 599.420768][T10218] netlink: 'syz.8.1294': attribute type 1 has an invalid length. [ 599.922622][ T35] bridge_slave_1: left allmulticast mode [ 599.942642][ T35] bridge_slave_1: left promiscuous mode [ 599.965153][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.007025][ T35] bridge_slave_0: left allmulticast mode [ 600.024604][ T35] bridge_slave_0: left promiscuous mode [ 600.042289][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.394382][T10228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1295'. [ 600.949492][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.000458][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.025714][ T35] bond0 (unregistering): Released all slaves [ 601.163054][T10218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 601.318630][ T35] tipc: Disabling bearer [ 601.349948][ T35] tipc: Left network mode [ 601.799367][T10237] tipc: Enabled bearer , priority 0 [ 602.554112][T10234] syzkaller0: entered promiscuous mode [ 602.579913][T10234] syzkaller0: entered allmulticast mode [ 602.638621][T10234] tipc: Resetting bearer [ 602.897016][ T1112] tipc: Resetting bearer [ 602.981317][T10233] tipc: Resetting bearer [ 603.294373][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1303'. [ 603.541920][T10233] tipc: Disabling bearer [ 603.847981][ T7926] tipc: Node number set to 1235737396 [ 603.920323][T10265] batadv_slave_1: entered promiscuous mode [ 603.939713][T10265] batadv_slave_1: left promiscuous mode [ 604.061130][ T35] hsr_slave_0: left promiscuous mode [ 604.103764][ T35] hsr_slave_1: left promiscuous mode [ 604.131843][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.150587][T10276] netlink: 'syz.4.1305': attribute type 1 has an invalid length. [ 604.175458][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.279610][ T35] veth1_macvtap: left promiscuous mode [ 604.292960][ T35] veth0_macvtap: left promiscuous mode [ 604.324129][ T35] veth1_vlan: left promiscuous mode [ 604.359805][ T35] veth0_vlan: left promiscuous mode [ 605.992879][ T35] team0 (unregistering): Port device team_slave_1 removed [ 606.050651][ T35] team0 (unregistering): Port device team_slave_0 removed [ 606.701710][T10268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.769538][T10276] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 606.997395][ T9996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.306344][ T9996] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.500738][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.508628][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.685380][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.693101][ T8695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.810457][T10339] tipc: Enabled bearer , priority 0 [ 609.900896][T10341] netlink: 'syz.2.1316': attribute type 1 has an invalid length. [ 610.141962][T10342] syzkaller0: entered promiscuous mode [ 610.148003][T10342] syzkaller0: entered allmulticast mode [ 610.158903][T10342] tipc: Resetting bearer [ 610.175575][ T1112] tipc: Resetting bearer [ 610.359482][T10341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 610.372227][T10335] tipc: Resetting bearer [ 610.780859][T10335] tipc: Disabling bearer [ 611.198213][ T9996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.640324][T10380] syz.4.1324 uses old SIOCAX25GETINFO [ 613.795991][T10395] netlink: 'syz.8.1327': attribute type 1 has an invalid length. [ 613.839262][T10397] netlink: 'syz.2.1328': attribute type 3 has an invalid length. [ 613.960952][T10395] 8021q: adding VLAN 0 to HW filter on device bond3 [ 614.629226][ T9996] veth0_vlan: entered promiscuous mode [ 614.804810][ T9996] veth1_vlan: entered promiscuous mode [ 615.343383][T10418] syzkaller0: entered promiscuous mode [ 615.350323][T10418] syzkaller0: entered allmulticast mode [ 615.855744][T10428] fuse: Unknown parameter '0x0000000000000003' [ 616.336262][ T9996] veth0_macvtap: entered promiscuous mode [ 616.513790][ T9996] veth1_macvtap: entered promiscuous mode [ 616.821725][ T9996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.011612][ T9996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.166679][ T1112] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.211442][ T1112] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.269236][ T143] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.314051][ T143] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.740141][T10445] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1338'. [ 617.800024][T10448] netlink: 'syz.4.1339': attribute type 1 has an invalid length. [ 617.828045][T10445] tipc: Invalid UDP bearer configuration [ 617.828539][T10445] tipc: Enabling of bearer rejected, failed to enable media [ 618.211338][T10445] netlink: 'syz.8.1338': attribute type 4 has an invalid length. [ 618.435066][T10457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1341'. [ 619.338624][T10466] fuse: Unknown parameter '0x0000000000000003' [ 619.577605][T10468] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 619.638177][T10468] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 619.799147][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 619.813744][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 619.849477][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 619.875649][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 619.896103][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 621.213279][T10495] netlink: 'syz.4.1350': attribute type 1 has an invalid length. [ 622.004493][ T49] Bluetooth: hci5: command tx timeout [ 622.407566][T10476] chnl_net:caif_netlink_parms(): no params data found [ 622.857848][T10515] netlink: 'syz.8.1353': attribute type 4 has an invalid length. [ 624.088511][ T49] Bluetooth: hci5: command tx timeout [ 624.449795][T10538] netlink: 'syz.8.1359': attribute type 1 has an invalid length. [ 624.874178][T10476] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.906769][T10476] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.943387][T10476] bridge_slave_0: entered allmulticast mode [ 625.005934][T10476] bridge_slave_0: entered promiscuous mode [ 625.138814][T10476] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.188912][T10476] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.239317][T10476] bridge_slave_1: entered allmulticast mode [ 625.283094][T10476] bridge_slave_1: entered promiscuous mode [ 625.875408][T10476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.007472][T10476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.158760][ T49] Bluetooth: hci5: command tx timeout [ 626.571722][T10476] team0: Port device team_slave_0 added [ 626.716351][T10476] team0: Port device team_slave_1 added [ 627.249739][T10476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.265192][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.367509][T10476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.434293][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.479018][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.488087][T10476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.588578][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.617304][T10576] netlink: 'syz.4.1367': attribute type 4 has an invalid length. [ 627.708619][T10476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.238562][ T49] Bluetooth: hci5: command tx timeout [ 628.249870][T10583] fuse: Unknown parameter 'user_i00000000000000000000' [ 628.511778][ T8672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.538740][ T8672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.582456][T10476] hsr_slave_0: entered promiscuous mode [ 628.605733][T10476] hsr_slave_1: entered promiscuous mode [ 628.634499][T10476] debugfs: 'hsr0' already exists in 'hsr' [ 628.641582][T10476] Cannot create hsr debugfs directory [ 631.698991][T10622] netlink: 'syz.4.1381': attribute type 1 has an invalid length. [ 632.850989][T10476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 633.004799][T10476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 633.100235][T10476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 633.441220][T10476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 633.530252][T10649] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1389'. [ 634.185170][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.198610][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.450440][T10671] fuse: Unknown parameter 'user_i00000000000000000000' [ 635.695847][T10476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.040046][T10476] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.192840][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.200492][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.362236][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.370032][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.197575][T10476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.254978][T10693] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1403'. [ 637.949329][T10702] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1406'. [ 638.954706][T10714] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 639.855117][T10476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.849016][T10476] veth0_vlan: entered promiscuous mode [ 641.045833][T10476] veth1_vlan: entered promiscuous mode [ 641.729366][T10749] fuse: Unknown parameter 'user_id00000000000000000000' [ 642.105599][T10476] veth0_macvtap: entered promiscuous mode [ 642.313702][T10476] veth1_macvtap: entered promiscuous mode [ 642.750904][T10476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.027053][T10476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.260739][ T8695] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.298691][ T8695] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.307867][ T8695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.426768][ T8695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.173870][T10843] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 649.862369][T10843] 8021q: adding VLAN 0 to HW filter on device bond3 [ 650.135902][T10843] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 650.553219][T10844] bond3: (slave veth5): Enslaving as an active interface with a down link [ 650.781372][T10854] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 650.810980][T10854] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 654.293892][ T8683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.368181][ T8683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.801227][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.836163][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.967869][T10918] batadv_slave_1: entered promiscuous mode [ 656.046935][T10918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1340'. [ 656.149684][T10918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.633783][T10918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.824895][T10911] batadv_slave_1: left promiscuous mode [ 658.162124][ T7926] IPVS: starting estimator thread 0... [ 658.284433][T10945] IPVS: using max 192 ests per chain, 9600 per kthread [ 659.271974][ T8698] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.673391][ T8698] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.982974][ T6138] udevd[6138]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 660.195688][ T8698] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.684308][ T8698] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.008983][T10975] batadv_slave_1: entered promiscuous mode [ 661.074787][T10975] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1475'. [ 661.772795][T10970] batadv_slave_1: left promiscuous mode [ 661.908994][ T8698] bridge_slave_1: left allmulticast mode [ 661.938723][ T8698] bridge_slave_1: left promiscuous mode [ 661.982703][ T8698] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.150367][ T8698] bridge_slave_0: left allmulticast mode [ 662.190113][ T8698] bridge_slave_0: left promiscuous mode [ 662.233133][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.554562][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1482'. [ 663.706007][ T8698] bond0 (unregistering): left promiscuous mode [ 663.738528][ T8698] bond_slave_0: left promiscuous mode [ 663.745527][ T8698] bond_slave_1: left promiscuous mode [ 663.867745][ T8698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.999401][ T8698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.074633][ T8698] bond0 (unregistering): Released all slaves [ 664.115162][ T8698] bond1 (unregistering): Released all slaves [ 664.201981][ T8698] bond2 (unregistering): Released all slaves [ 664.276009][T11000] tipc: Enabling of bearer rejected, failed to enable media [ 665.676582][ T8698] hsr_slave_0: left promiscuous mode [ 665.783780][ T8698] hsr_slave_1: left promiscuous mode [ 665.921425][T11042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1492'. [ 665.978910][ T8698] veth1_macvtap: left promiscuous mode [ 665.988884][ T5831] IPVS: starting estimator thread 0... [ 666.009939][ T49] Bluetooth: hci5: link tx timeout [ 666.015285][ T49] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 666.022815][ T8698] veth0_macvtap: left promiscuous mode [ 666.048722][ T5072] Bluetooth: hci5: link tx timeout [ 666.054497][ T5072] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 666.088797][T11044] IPVS: using max 192 ests per chain, 9600 per kthread [ 667.701196][T11062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1501'. [ 668.080498][ T5072] Bluetooth: hci5: command 0x0406 tx timeout [ 668.203298][ T8698] team0 (unregistering): Port device team_slave_1 removed [ 668.291188][ T8698] team0 (unregistering): Port device team_slave_0 removed [ 668.949580][T11034] batadv_slave_1: entered promiscuous mode [ 668.987508][T11034] batadv_slave_1: left promiscuous mode [ 669.000621][T11059] tipc: Enabling of bearer rejected, failed to enable media [ 670.760676][T11094] 0: reclassify loop, rule prio 0, protocol 800 [ 671.367084][T11095] syzkaller0: entered promiscuous mode [ 671.407037][T11095] syzkaller0: entered allmulticast mode [ 671.986565][T11112] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1515'. [ 672.114279][T11113] batadv_slave_1: entered promiscuous mode [ 672.200229][T11113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1514'. [ 672.280362][T11118] tipc: Enabling of bearer rejected, failed to enable media [ 672.640005][T11108] batadv_slave_1: left promiscuous mode [ 673.275458][T11125] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 673.364118][T11125] bridge0: port 3(macvlan2) entered blocking state [ 673.399395][T11125] bridge0: port 3(macvlan2) entered disabled state [ 673.429335][T11125] macvlan2: entered allmulticast mode [ 673.478758][T11125] bond0: entered allmulticast mode [ 673.535627][T11125] bond_slave_0: entered allmulticast mode [ 673.560207][T11125] bond_slave_1: entered allmulticast mode [ 673.653372][T11125] macvlan2: entered promiscuous mode [ 673.663658][T11125] bridge0: port 3(macvlan2) entered blocking state [ 673.671040][T11125] bridge0: port 3(macvlan2) entered forwarding state [ 674.275361][T11149] syzkaller0: entered promiscuous mode [ 674.341408][T11149] syzkaller0: entered allmulticast mode [ 674.579767][T11152] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1527'. [ 675.663891][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 677.849515][T11202] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1540'. [ 678.753177][T11212] syzkaller0: entered promiscuous mode [ 678.786055][T11212] syzkaller0: entered allmulticast mode [ 681.709028][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1555'. [ 683.376459][T11282] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1563'. [ 683.467453][T11282] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1563'. [ 684.885372][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'. [ 686.439587][T11325] syzkaller0: entered promiscuous mode [ 686.450632][T11325] syzkaller0: entered allmulticast mode [ 686.810248][T11331] tipc: Enabling of bearer rejected, failed to enable media [ 688.099989][T11337] syzkaller0: entered promiscuous mode [ 688.105884][T11337] syzkaller0: entered allmulticast mode [ 688.299574][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1582'. [ 690.007076][T11376] xt_hashlimit: size too large, truncated to 1048576 [ 690.278013][T11385] syzkaller1: entered promiscuous mode [ 690.344923][T11385] syzkaller1: entered allmulticast mode [ 690.506324][T11393] netlink: 'syz.4.1590': attribute type 1 has an invalid length. [ 690.617507][T11395] tipc: Enabling of bearer rejected, failed to enable media [ 691.728964][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1595'. [ 692.280026][T11407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 692.600620][T11409] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 693.399662][T11425] syzkaller0: entered promiscuous mode [ 693.405370][T11425] syzkaller0: entered allmulticast mode [ 695.621482][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.362734][T11474] syzkaller0: entered promiscuous mode [ 696.401585][T11474] syzkaller0: entered allmulticast mode [ 697.960159][T11499] syzkaller0: entered promiscuous mode [ 698.008613][T11499] syzkaller0: entered allmulticast mode [ 699.482771][T11521] syzkaller0: entered promiscuous mode [ 699.504031][T11521] syzkaller0: entered allmulticast mode [ 700.451449][T11525] syzkaller0: entered promiscuous mode [ 700.478702][T11525] syzkaller0: entered allmulticast mode [ 703.892605][T11598] syzkaller0: entered promiscuous mode [ 703.911387][T11598] syzkaller0: entered allmulticast mode [ 704.619987][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 705.717726][T11614] syzkaller0: entered promiscuous mode [ 705.808518][T11614] syzkaller0: entered allmulticast mode [ 707.256278][T11641] syzkaller0: entered promiscuous mode [ 707.318529][T11641] syzkaller0: entered allmulticast mode [ 708.934645][T11672] syzkaller0: entered promiscuous mode [ 708.976111][T11672] syzkaller0: entered allmulticast mode [ 710.404897][T11690] syzkaller0: entered promiscuous mode [ 710.411056][T11690] syzkaller0: entered allmulticast mode [ 710.460857][T11695] syzkaller0: entered promiscuous mode [ 710.485292][T11695] syzkaller0: entered allmulticast mode [ 711.298639][T11708] batadv_slave_1: entered promiscuous mode [ 711.445475][T11712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1678'. [ 711.799125][T11705] batadv_slave_1: left promiscuous mode [ 712.838334][T11727] syzkaller0: entered promiscuous mode [ 712.888800][T11727] syzkaller0: entered allmulticast mode [ 713.982641][T11743] syzkaller0: entered promiscuous mode [ 714.011679][T11743] syzkaller0: entered allmulticast mode [ 715.703697][T11775] batadv_slave_1: entered promiscuous mode [ 715.766099][T11775] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1693'. [ 715.809314][T11775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.928524][T11775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.224161][T11769] batadv_slave_1: left promiscuous mode [ 716.382876][T11777] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 716.427037][T11777] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 718.191004][T11787] syzkaller0: entered promiscuous mode [ 718.196738][T11787] syzkaller0: entered allmulticast mode [ 721.510134][T11861] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1716'. [ 722.737249][T11873] syzkaller0: entered promiscuous mode [ 722.799256][T11873] syzkaller0: entered allmulticast mode [ 723.509225][T11885] Illegal XDP return value 4294967274 on prog (id 69) dev syz_tun, expect packet loss! [ 724.422643][T11902] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1728'. [ 724.510042][T11902] nbd: must specify at least one socket [ 725.139511][T11912] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1729'. [ 726.564912][T11935] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 726.648516][T11935] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 727.551913][T11943] syzkaller0: entered promiscuous mode [ 727.603865][T11943] syzkaller0: entered allmulticast mode [ 728.650959][T11971] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 728.712497][T11971] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 730.745986][T12009] netlink: 'syz.1.1754': attribute type 4 has an invalid length. [ 732.072875][T12019] syzkaller0: entered promiscuous mode [ 732.130780][T12019] syzkaller0: entered allmulticast mode [ 732.650161][T12039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1760'. [ 733.220955][T12046] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1761'. [ 733.318813][T12046] nbd: must specify at least one socket [ 734.104723][T12055] syzkaller0: entered promiscuous mode [ 734.142901][T12055] syzkaller0: entered allmulticast mode [ 735.807005][T12081] netlink: 'syz.9.1770': attribute type 4 has an invalid length. [ 737.081050][T12100] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1775'. [ 737.158731][T12100] nbd: must specify at least one socket [ 738.254577][T12117] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 738.339038][T12117] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 739.260733][T12134] netlink: 'syz.9.1786': attribute type 4 has an invalid length. [ 740.082138][T12141] syzkaller0: entered promiscuous mode [ 740.087868][T12141] syzkaller0: entered allmulticast mode [ 740.194705][ T49] Bluetooth: hci5: link tx timeout [ 740.201238][ T49] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 740.210197][ T5072] Bluetooth: hci5: link tx timeout [ 740.219446][ T5072] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 740.509651][T12150] syzkaller0: entered promiscuous mode [ 740.568580][T12150] syzkaller0: entered allmulticast mode [ 741.250326][T12157] syzkaller0: entered promiscuous mode [ 741.298652][T12157] syzkaller0: entered allmulticast mode [ 741.349734][T12164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1796'. [ 742.073758][T12164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 742.238596][ T5772] Bluetooth: hci5: command 0x0406 tx timeout [ 743.760771][ T5772] Bluetooth: hci4: command 0x0406 tx timeout [ 743.947636][T12200] syzkaller0: entered promiscuous mode [ 743.980658][T12200] syzkaller0: entered allmulticast mode [ 745.050091][T12219] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1812'. [ 745.833910][T12219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 749.707252][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1829'. [ 750.195750][T12291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 753.504248][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1847'. [ 753.712129][T12351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 753.995432][T12363] syzkaller0: entered promiscuous mode [ 754.001672][T12363] syzkaller0: entered allmulticast mode [ 756.848154][T12406] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1862'. [ 757.443591][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1863'. [ 757.690110][T12415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 757.866878][T12426] tipc: Enabled bearer , priority 0 [ 757.966246][T12427] syzkaller0: entered promiscuous mode [ 758.008898][T12427] syzkaller0: entered allmulticast mode [ 758.063689][T12429] syzkaller0: entered promiscuous mode [ 758.071060][T12429] syzkaller0: entered allmulticast mode [ 758.322588][T12421] tipc: Resetting bearer [ 758.391160][T12417] tipc: Resetting bearer [ 758.501748][T12417] tipc: Disabling bearer [ 759.163877][T12447] syz_tun: entered allmulticast mode [ 759.206269][T12444] syz_tun: left allmulticast mode [ 760.110476][T12462] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1875'. [ 760.397320][T12469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1877'. [ 760.877603][T12456] bridge0: port 3(macvlan2) entered disabled state [ 760.886181][T12456] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.896117][T12456] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.292421][T12456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.755327][ T35] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.803870][ T35] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.835198][ T35] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.895559][ T35] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.702459][T12486] syzkaller0: entered promiscuous mode [ 762.738696][T12486] syzkaller0: entered allmulticast mode [ 763.266919][T12494] batadv_slave_1: entered promiscuous mode [ 763.390398][T12496] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1886'. [ 764.025108][T12492] batadv_slave_1: left promiscuous mode [ 764.715902][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1893'. [ 765.785819][T12535] syzkaller0: entered promiscuous mode [ 765.825705][T12535] syzkaller0: entered allmulticast mode [ 773.545446][T12642] veth0_virt_wifi: entered allmulticast mode [ 774.103012][T12642] syzkaller0: entered promiscuous mode [ 774.157675][T12642] syzkaller0: entered allmulticast mode [ 778.147126][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 778.147210][ T29] audit: type=1800 audit(1774709515.889:84): pid=12714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1957" name="bus" dev="tmpfs" ino=1275 res=0 errno=0 [ 785.212315][ T29] audit: type=1326 audit(1774709522.959:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f5b9c799 code=0x7ffc0000 [ 785.311932][ T29] audit: type=1326 audit(1774709522.959:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f5b9c799 code=0x7ffc0000 [ 785.419016][ T29] audit: type=1326 audit(1774709522.959:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f5b9c799 code=0x7ffc0000 [ 785.543467][ T29] audit: type=1326 audit(1774709522.969:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f33f5b9c799 code=0x7ffc0000 [ 785.660839][ T29] audit: type=1326 audit(1774709522.979:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f5b9c799 code=0x7ffc0000 [ 785.788706][ T29] audit: type=1326 audit(1774709522.979:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f5b9c799 code=0x7ffc0000 [ 785.897756][ T29] audit: type=1326 audit(1774709522.989:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f33f5b9c799 code=0x7ffc0000 [ 786.044622][ T29] audit: type=1326 audit(1774709522.989:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f5b9c799 code=0x7ffc0000 [ 786.080987][ T29] audit: type=1326 audit(1774709523.009:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f5b9c799 code=0x7ffc0000 [ 786.168721][ T29] audit: type=1326 audit(1774709522.989:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12814 comm="syz.8.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f5b9c799 code=0x7ffc0000 [ 789.320361][T12856] syzkaller0: entered promiscuous mode [ 789.346404][T12856] syzkaller0: entered allmulticast mode [ 794.390155][T12919] tipc: Enabled bearer , priority 0 [ 794.439935][T12919] syzkaller0: entered promiscuous mode [ 794.498774][T12919] syzkaller0: entered allmulticast mode [ 794.629676][T12918] tipc: Resetting bearer [ 794.787651][T12918] tipc: Disabling bearer [ 795.526305][T12937] netlink: 'syz.4.2021': attribute type 1 has an invalid length. [ 795.828909][T12937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 798.486863][T12982] tipc: Enabled bearer , priority 0 [ 798.568640][T12985] syzkaller0: entered promiscuous mode [ 798.574485][T12985] syzkaller0: entered allmulticast mode [ 798.780331][T12977] tipc: Resetting bearer [ 798.800903][T12977] tipc: Disabling bearer [ 806.640037][T13094] tipc: Started in network mode [ 806.645214][T13094] tipc: Node identity bbbbbb01, cluster identity 4711 [ 806.738076][T13094] tipc: Enabled bearer , priority 10 [ 808.157809][ T7927] tipc: Node number set to 3149642497 [ 818.299625][T13218] syzkaller0: entered promiscuous mode [ 818.305454][T13218] syzkaller0: entered allmulticast mode [ 821.877300][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 821.877381][ T29] audit: type=1326 audit(1774709559.619:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 822.002339][ T29] audit: type=1326 audit(1774709559.669:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 822.072964][ T29] audit: type=1326 audit(1774709559.669:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 822.139152][ T29] audit: type=1326 audit(1774709559.689:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 822.235760][ T29] audit: type=1326 audit(1774709559.689:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 822.261413][T13272] syzkaller0: entered promiscuous mode [ 822.267121][T13272] syzkaller0: entered allmulticast mode [ 822.374279][ T29] audit: type=1326 audit(1774709559.689:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 822.620371][ T29] audit: type=1326 audit(1774709559.689:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 822.690086][ T29] audit: type=1326 audit(1774709559.709:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 822.801433][ T29] audit: type=1326 audit(1774709559.709:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 822.913334][ T29] audit: type=1326 audit(1774709559.709:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d19c799 code=0x7ffc0000 [ 825.470007][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2139'. [ 826.391174][T13321] syzkaller0: entered promiscuous mode [ 826.396887][T13321] syzkaller0: entered allmulticast mode [ 827.516917][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'. [ 828.715585][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2153'. [ 830.475763][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2160'. [ 830.630043][T13366] syzkaller0: entered promiscuous mode [ 830.635761][T13366] syzkaller0: entered allmulticast mode [ 831.964276][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2164'. [ 833.773529][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2174'. [ 835.234564][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2180'. [ 838.852788][T13431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2187'. [ 840.123249][T13445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2190'. [ 840.936746][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2191'. [ 844.928109][T12310] IPVS: starting estimator thread 0... [ 845.069370][T13471] IPVS: using max 192 ests per chain, 9600 per kthread [ 845.109770][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2200'. [ 847.169784][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 847.169863][ T29] audit: type=1326 audit(1774709584.909:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13479 comm="syz.9.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba59c799 code=0x7ffc0000 [ 847.311537][ T29] audit: type=1326 audit(1774709584.919:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13479 comm="syz.9.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ba59c799 code=0x7ffc0000 [ 850.048899][T12310] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 850.261863][T12310] usb 5-1: Using ep0 maxpacket: 16 [ 850.305501][T12310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.362244][T12310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.407056][T12310] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 850.460194][T12310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.550718][T12310] usb 5-1: config 0 descriptor?? [ 851.127993][T12310] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 851.154560][T12310] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 851.178532][T12310] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 851.230290][T12310] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 851.237665][T12310] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 851.314330][T12310] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 851.948905][ T7926] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 852.173930][ T7926] usb 9-1: config 0 has no interfaces? [ 852.194374][ T7926] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 852.251982][ T7926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.317718][ T7926] usb 9-1: config 0 descriptor?? [ 852.739749][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2215'. [ 853.267554][ T5832] usb 5-1: USB disconnect, device number 2 [ 853.804490][T13523] netlink: 'syz.4.2218': attribute type 1 has an invalid length. [ 854.192092][T13523] 8021q: adding VLAN 0 to HW filter on device bond5 [ 854.329919][ T5832] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 854.554612][T13527] bond5: (slave gretap1): making interface the new active one [ 854.669755][ T5832] usb 5-1: unable to get BOS descriptor or descriptor too short [ 854.720134][T13527] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 854.757051][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.784278][ T5832] usb 5-1: config 0 has no interfaces? [ 854.814198][ T5832] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 854.824432][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.837941][ T5832] usb 5-1: Product: syz [ 854.855226][ T5832] usb 5-1: Manufacturer: syz [ 854.866902][ T5832] usb 5-1: SerialNumber: syz [ 854.926409][ T5832] usb 5-1: config 0 descriptor?? [ 855.296770][ T5832] usb 5-1: USB disconnect, device number 3 [ 855.445740][ T7926] usb 9-1: USB disconnect, device number 2 [ 855.727185][T13532] batadv_slave_1: entered promiscuous mode [ 856.442802][T13531] batadv_slave_1: left promiscuous mode [ 857.786054][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'. [ 857.855693][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2230'. [ 858.809994][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'. [ 859.798590][ T7926] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 860.014735][ T7926] usb 10-1: Using ep0 maxpacket: 32 [ 860.039486][ T7926] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 860.102466][ T7926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.165764][ T7926] usb 10-1: config 0 descriptor?? [ 860.439104][ T7926] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 860.535052][ T7926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 860.600496][ T7926] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 860.621004][ T7926] usb 10-1: media controller created [ 860.652759][T13574] ===================================================== [ 860.660962][T13574] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 860.668891][T13574] _copy_to_user+0xcc/0x120 [ 860.673636][T13574] i2cdev_ioctl_smbus+0x586/0x660 [ 860.679132][T13574] i2cdev_ioctl+0xa14/0xf40 [ 860.683870][T13574] __se_sys_ioctl+0x23c/0x400 [ 860.689056][T13574] __x64_sys_ioctl+0x97/0xe0 [ 860.693878][T13574] x64_sys_call+0x1975/0x3ea0 [ 860.699124][T13574] do_syscall_64+0x134/0xf80 [ 860.703960][T13574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.710288][T13574] [ 860.712716][T13574] Uninit was stored to memory at: [ 860.718002][T13574] __i2c_smbus_xfer+0x25a0/0x3120 [ 860.723549][T13574] i2c_smbus_xfer+0x2d8/0x480 [ 860.728790][T13574] i2cdev_ioctl_smbus+0x4a1/0x660 [ 860.734058][T13574] i2cdev_ioctl+0xa14/0xf40 [ 860.738946][T13574] __se_sys_ioctl+0x23c/0x400 [ 860.743875][T13574] __x64_sys_ioctl+0x97/0xe0 [ 860.749156][T13574] x64_sys_call+0x1975/0x3ea0 [ 860.754073][T13574] do_syscall_64+0x134/0xf80 [ 860.759094][T13574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.765195][T13574] [ 860.767620][T13574] Local variable msgbuf1.i created at: [ 860.773434][T13574] __i2c_smbus_xfer+0x853/0x3120 [ 860.778888][T13574] i2c_smbus_xfer+0x2d8/0x480 [ 860.783769][T13574] [ 860.786203][T13574] Bytes 0-1 of 2 are uninitialized [ 860.791644][T13574] Memory access of size 2 starts at ffff888081b6bd06 [ 860.798633][T13574] Data copied to user address 0000200000000040 [ 860.804922][T13574] [ 860.807404][T13574] CPU: 1 UID: 0 PID: 13574 Comm: syz.9.2235 Not tainted syzkaller #0 PREEMPT(full) [ 860.817144][T13574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.827467][T13574] ===================================================== [ 860.834621][T13574] Disabling lock debugging due to kernel taint [ 860.964899][T13574] Kernel panic - not syncing: kmsan.panic set ... [ 860.971549][T13574] CPU: 1 UID: 0 PID: 13574 Comm: syz.9.2235 Tainted: G B syzkaller #0 PREEMPT(full) [ 860.982739][T13574] Tainted: [B]=BAD_PAGE [ 860.987024][T13574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.997254][T13574] Call Trace: [ 861.000664][T13574] [ 861.003724][T13574] __dump_stack+0x26/0x30 [ 861.008302][T13574] dump_stack_lvl+0x50/0x1c0 [ 861.013113][T13574] ? dump_stack+0x12/0x25 [ 861.017679][T13574] dump_stack+0x1e/0x25 [ 861.022064][T13574] vpanic+0x7b4/0x1430 [ 861.026403][T13574] panic+0x15d/0x160 [ 861.030625][T13574] kmsan_report+0x31a/0x320 [ 861.035390][T13574] ? kmsan_internal_check_memory+0x1e8/0x240 [ 861.041645][T13574] ? kmsan_copy_to_user+0xef/0x190 [ 861.047043][T13574] ? _copy_to_user+0xcc/0x120 [ 861.051958][T13574] ? i2cdev_ioctl_smbus+0x586/0x660 [ 861.057415][T13574] ? i2cdev_ioctl+0xa14/0xf40 [ 861.062333][T13574] ? __se_sys_ioctl+0x23c/0x400 [ 861.067429][T13574] ? __x64_sys_ioctl+0x97/0xe0 [ 861.072426][T13574] ? x64_sys_call+0x1975/0x3ea0 [ 861.077515][T13574] ? do_syscall_64+0x134/0xf80 [ 861.082605][T13574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.088905][T13574] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 861.094432][T13574] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 861.099949][T13574] ? __i2c_transfer+0x1179/0x3280 [ 861.105141][T13574] ? kmsan_get_metadata+0xf1/0x160 [ 861.110517][T13574] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 861.117072][T13574] ? kmsan_get_metadata+0xf1/0x160 [ 861.122350][T13574] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 861.128349][T13574] ? __i2c_smbus_xfer+0x1f6c/0x3120 [ 861.133682][T13574] ? kmsan_get_metadata+0xf1/0x160 [ 861.138960][T13574] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 861.144936][T13574] kmsan_internal_check_memory+0x1e8/0x240 [ 861.150903][T13574] kmsan_copy_to_user+0xef/0x190 [ 861.155990][T13574] _copy_to_user+0xcc/0x120 [ 861.160624][T13574] i2cdev_ioctl_smbus+0x586/0x660 [ 861.165843][T13574] i2cdev_ioctl+0xa14/0xf40 [ 861.170520][T13574] ? kmsan_get_metadata+0x9/0x160 [ 861.175847][T13574] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 861.181114][T13574] __se_sys_ioctl+0x23c/0x400 [ 861.185950][T13574] __x64_sys_ioctl+0x97/0xe0 [ 861.190695][T13574] x64_sys_call+0x1975/0x3ea0 [ 861.195561][T13574] do_syscall_64+0x134/0xf80 [ 861.200331][T13574] ? clear_bhb_loop+0x50/0xa0 [ 861.205161][T13574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.211190][T13574] RIP: 0033:0x7fa6ba59c799 [ 861.215708][T13574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.235446][T13574] RSP: 002b:00007fa6bb405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.244003][T13574] RAX: ffffffffffffffda RBX: 00007fa6ba815fa0 RCX: 00007fa6ba59c799 [ 861.252080][T13574] RDX: 00002000000000c0 RSI: 0000000000000720 RDI: 0000000000000006 [ 861.260170][T13574] RBP: 00007fa6ba632c99 R08: 0000000000000000 R09: 0000000000000000 [ 861.268242][T13574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.276360][T13574] R13: 00007fa6ba816038 R14: 00007fa6ba815fa0 R15: 00007fff9cac9018 [ 861.284526][T13574] [ 861.288300][T13574] Kernel Offset: disabled [ 861.292699][T13574] Rebooting in 86400 seconds..