last executing test programs: 24.515537937s ago: executing program 3 (id=4): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x100) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000340)=""/192) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x11b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@quiet}, {@shortname_winnt}, {@utf8no}, {@fat=@discard}, {@fat=@flush}, {@shortname_winnt}, {@uni_xlate}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@shortname_win95}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000a00)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") r5 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') recvmmsg$unix(r5, 0x0, 0x0, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_tables_targets\x00') preadv(r6, &(0x7f0000002940)=[{&(0x7f0000002640)=""/78, 0x4e}], 0x1, 0x4, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2100) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x20040000}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 23.107770259s ago: executing program 3 (id=7): r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000cc0)={0x2, @pix_mp={0x3, 0x1, 0x35303553, 0x7, 0x5, [{0x7, 0x61280e0f}, {0x3, 0xa}, {0xe, 0x1}, {0x1, 0x1000}, {0x9, 0x8001}, {0x5, 0xdd7}, {0x5, 0x1ff}, {0x2}], 0x9, 0x2, 0x4, 0x2, 0x7}}) socket$key(0xf, 0x3, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r2, 0xc004ae0a, &(0x7f00000002c0)={0x40000000000000a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r3, &(0x7f0000002f00), 0x0, 0x20004000) r4 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) 22.137730687s ago: executing program 3 (id=9): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x6666729, 0x0, [{0x40000001, 0x0, 0x5, 0x0, 0x7, 0x5, 0x6c}, {0xa, 0x6, 0x3, 0x8dc, 0x2, 0xffffffc0}, {0x40000000, 0x1, 0x4, 0x9, 0xfffffffa, 0x7, 0x80000001}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x80440, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000200)) r4 = io_uring_setup(0xacc, &(0x7f0000000240)={0x0, 0x50eb, 0x8, 0x0, 0x27a}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f00000002c0)={r0}, 0x1) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000300)="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") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000400)='batadv0\x00') r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000480)) r6 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000004c0)='syzkaller\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="4470d00e7131882edd5f084978269d010917ccde8a63be566269a43a47fe4033d2088f4a87333937d4b81dcbadb61f0a70f62ec565fe16ab0a0c7d068faea0439a11418eedff30e47c282a89b26702ad15d683b73a9466fafd36247c8c7e47d94743e32c0802adc61e88981b7aa84713d38d9cf8b8cc045c1789b0ceed30b01fbf0be170b16764a5655a041ef2aff70bac4efdd68faddfa7f8bce6138d553844a5fa0231352161b7eeb491620a73b5586d5ee2c5ab061a4f8760f0e4d2fb89eeded61b3e966205b1614841ad72", 0xcd, r6) write(r4, &(0x7f00000006c0)="3cff249eb7a16fb402cbedc8c1f3402643a2a705bdf02ff83bc11a8062834f57ba15bdd2461e6249f093b20f5a8d3ba23a6a32e6bb69c7a727a9f82ce5332a5adf8d9667e0ae67ad31d92768aa531f0b592fc6c3e00c7dff4b829de0b53e8cae9be20ea044267a28003f97a3ceadfdec71f68651b7a65abddd4f6ecd3876db1e757ddcf3eb6edb78d1c773069aa1067d5454018f60a7fa557ab148a3ed", 0x9d) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000001ac0)={&(0x7f0000002000)={[{&(0x7f0000000780)="babe4aff04735302e9f0c074b6ab89c405c70504cdc365332e7d97e314383abdc68efdc2bd6ecc94e2a6d937ee1f43dfa9e9cf99002d13d21e0106c89d0e105eeb66c67a921d424294ea61b3024d5c38af41de68988ad5b4bbee3bc1e14116e2c7e062d0c82122bf88412fea013369e05b2d5bd7ec34cc7a932c9cccbe56a91c9984", 0x82}, {&(0x7f0000000840)="320c6d509a74adebb2c5ea0e7d7764482e800567abe8a88bed8299e6458982df2ad9c98844", 0x25, 0x3}, {&(0x7f0000000880)="5cbc0d1396cf22868372786634a5d8c5cacafb5945a71a0ffff8254eae000a7e6a68fcb0152abf26f8437e7d92110b973543ba53183a6bb3775c095fe9e7871b0c8fb785a96134cd959702e7f9f39a3549bba8c3d97db7f46e7b91f19bdc3033a3a0bfad368b234f9d20476bad46020a33dccd053e1add18ae91aa9f7db3a2b2bba8a087a8850f44d4b7f3dc0bdeca4f049f2cbbef06e323ad8e1f737a873ae564e4376fbef09df56fcba3fe8a0d", 0xae, 0x2}, {&(0x7f0000000940)="b49a1cabad66174b2898956f91bc759c845fbbc6fe0e02db24bce98cd8c76ef6f13eeacd3df302e6a7d4c78e1828ead847695f1c1f0a06852da4a41f4c575d8db86f61a739c9a923cc81cf4635a3211523dfff", 0x53}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="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", 0xff, 0x1}]}, 0x6}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000001f00), 0x6, 0x20002) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000001f40)) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) 19.56626858s ago: executing program 32 (id=9): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x6666729, 0x0, [{0x40000001, 0x0, 0x5, 0x0, 0x7, 0x5, 0x6c}, {0xa, 0x6, 0x3, 0x8dc, 0x2, 0xffffffc0}, {0x40000000, 0x1, 0x4, 0x9, 0xfffffffa, 0x7, 0x80000001}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x80440, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000200)) r4 = io_uring_setup(0xacc, &(0x7f0000000240)={0x0, 0x50eb, 0x8, 0x0, 0x27a}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f00000002c0)={r0}, 0x1) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000300)="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") ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000400)='batadv0\x00') r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000480)) r6 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000004c0)='syzkaller\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="4470d00e7131882edd5f084978269d010917ccde8a63be566269a43a47fe4033d2088f4a87333937d4b81dcbadb61f0a70f62ec565fe16ab0a0c7d068faea0439a11418eedff30e47c282a89b26702ad15d683b73a9466fafd36247c8c7e47d94743e32c0802adc61e88981b7aa84713d38d9cf8b8cc045c1789b0ceed30b01fbf0be170b16764a5655a041ef2aff70bac4efdd68faddfa7f8bce6138d553844a5fa0231352161b7eeb491620a73b5586d5ee2c5ab061a4f8760f0e4d2fb89eeded61b3e966205b1614841ad72", 0xcd, r6) write(r4, &(0x7f00000006c0)="3cff249eb7a16fb402cbedc8c1f3402643a2a705bdf02ff83bc11a8062834f57ba15bdd2461e6249f093b20f5a8d3ba23a6a32e6bb69c7a727a9f82ce5332a5adf8d9667e0ae67ad31d92768aa531f0b592fc6c3e00c7dff4b829de0b53e8cae9be20ea044267a28003f97a3ceadfdec71f68651b7a65abddd4f6ecd3876db1e757ddcf3eb6edb78d1c773069aa1067d5454018f60a7fa557ab148a3ed", 0x9d) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000001ac0)={&(0x7f0000002000)={[{&(0x7f0000000780)="babe4aff04735302e9f0c074b6ab89c405c70504cdc365332e7d97e314383abdc68efdc2bd6ecc94e2a6d937ee1f43dfa9e9cf99002d13d21e0106c89d0e105eeb66c67a921d424294ea61b3024d5c38af41de68988ad5b4bbee3bc1e14116e2c7e062d0c82122bf88412fea013369e05b2d5bd7ec34cc7a932c9cccbe56a91c9984", 0x82}, {&(0x7f0000000840)="320c6d509a74adebb2c5ea0e7d7764482e800567abe8a88bed8299e6458982df2ad9c98844", 0x25, 0x3}, {&(0x7f0000000880)="5cbc0d1396cf22868372786634a5d8c5cacafb5945a71a0ffff8254eae000a7e6a68fcb0152abf26f8437e7d92110b973543ba53183a6bb3775c095fe9e7871b0c8fb785a96134cd959702e7f9f39a3549bba8c3d97db7f46e7b91f19bdc3033a3a0bfad368b234f9d20476bad46020a33dccd053e1add18ae91aa9f7db3a2b2bba8a087a8850f44d4b7f3dc0bdeca4f049f2cbbef06e323ad8e1f737a873ae564e4376fbef09df56fcba3fe8a0d", 0xae, 0x2}, {&(0x7f0000000940)="b49a1cabad66174b2898956f91bc759c845fbbc6fe0e02db24bce98cd8c76ef6f13eeacd3df302e6a7d4c78e1828ead847695f1c1f0a06852da4a41f4c575d8db86f61a739c9a923cc81cf4635a3211523dfff", 0x53}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="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", 0xff, 0x1}]}, 0x6}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000001f00), 0x6, 0x20002) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000001f40)) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) 13.607521623s ago: executing program 1 (id=25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000240)="360fc357210f205a430f32660feb050efa632ac443910d8282000000000f01c8b805000000b9c734a7da0f01c10f9fe3f33e3636d3ee670fc71b", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.605515566s ago: executing program 1 (id=29): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 10.753908086s ago: executing program 2 (id=36): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1f, &(0x7f0000000000)=0x1, 0x4) 9.951912658s ago: executing program 2 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280083f01000800000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20040040) 9.747384344s ago: executing program 0 (id=38): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x94) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000007c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c050}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x39fab) 9.023053955s ago: executing program 2 (id=40): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x40000000, 0x0) ptrace$getregset(0x4205, r0, 0x2, 0x0) 8.798944174s ago: executing program 0 (id=41): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8.072476086s ago: executing program 1 (id=43): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x408002, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xb, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/127, 0x7f}, 0xfffffff3}], 0x1, 0x4160, 0x0) 7.771579118s ago: executing program 2 (id=44): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) syz_clone3(&(0x7f00000003c0)={0xac020080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) 7.339728644s ago: executing program 4 (id=45): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xcb08, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002100)={0x14}, 0x14) 7.079365899s ago: executing program 1 (id=46): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 6.747342756s ago: executing program 2 (id=47): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x8000000000000000, 0x5, 0x4202004c4, 0x1004, 0x5, 0x8000000000000002, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb7, 0xfffffffffffffffe], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.214437993s ago: executing program 1 (id=48): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {}, {0xd, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 5.924159432s ago: executing program 2 (id=49): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000600)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, {{0x2, 0x5, 0x1, r2}}}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 5.923803799s ago: executing program 4 (id=50): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x81a0}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x55, 0x0, &(0x7f00000003c0)="b874386d1929ebfd66cc265d21bc", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.638865903s ago: executing program 33 (id=49): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000600)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, {{0x2, 0x5, 0x1, r2}}}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2.591337444s ago: executing program 0 (id=52): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000200)}, 0x20) 2.554711933s ago: executing program 1 (id=53): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf74cf000) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x238ca99069c878a9, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2.500264453s ago: executing program 4 (id=54): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000970000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xf8, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.977350663s ago: executing program 4 (id=55): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x408002, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xb, 0x4) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/127, 0x7f}, 0xfffffff3}], 0x1, 0x4160, 0x0) 1.897134902s ago: executing program 0 (id=56): r0 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x2c400}], 0x14, 0x7800, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x1a00808, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) stat(&(0x7f0000004d40)='./file0/file2\x00', &(0x7f0000004d80)) 1.216583132s ago: executing program 4 (id=57): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 921.98485ms ago: executing program 0 (id=58): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x8000000000000000, 0x5, 0x4202004c4, 0x1004, 0x5, 0x8000000000000002, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb7, 0xfffffffffffffffe], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 204.153918ms ago: executing program 0 (id=59): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000001c00)=ANY=[], 0x0) 0s ago: executing program 4 (id=60): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 191.641007][ T5771] cgroup: Unknown subsys name 'net' [ 191.775569][ T5771] cgroup: Unknown subsys name 'cpuset' [ 191.791213][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 198.210975][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 203.039773][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.066238][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.075460][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.077110][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.092007][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.106337][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.106373][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.132405][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.153102][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.166460][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.175258][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.192281][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.204632][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.220633][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.233249][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.253321][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.266158][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.276376][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.318470][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.335640][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.345331][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.355559][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.365510][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.430196][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.472538][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.560470][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 204.890566][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 205.234725][ T5095] Bluetooth: hci0: command tx timeout [ 205.246593][ T5095] Bluetooth: hci1: command tx timeout [ 205.316555][ T5095] Bluetooth: hci2: command tx timeout [ 205.564576][ T5095] Bluetooth: hci3: command tx timeout [ 205.667846][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.675613][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.683326][ T5794] bridge_slave_0: entered allmulticast mode [ 205.699075][ T5794] bridge_slave_0: entered promiscuous mode [ 205.745585][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 205.793941][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.795501][ T5095] Bluetooth: hci4: command tx timeout [ 205.801649][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.814542][ T5794] bridge_slave_1: entered allmulticast mode [ 205.829241][ T5794] bridge_slave_1: entered promiscuous mode [ 205.902670][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 206.161374][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.169161][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.177028][ T5788] bridge_slave_0: entered allmulticast mode [ 206.185941][ T5788] bridge_slave_0: entered promiscuous mode [ 206.207232][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 206.239423][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.249199][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.256878][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.264730][ T5788] bridge_slave_1: entered allmulticast mode [ 206.274608][ T5788] bridge_slave_1: entered promiscuous mode [ 206.432927][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.645925][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.741123][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.762208][ T5794] team0: Port device team_slave_0 added [ 206.878564][ T5794] team0: Port device team_slave_1 added [ 207.127585][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.135562][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.143260][ T5787] bridge_slave_0: entered allmulticast mode [ 207.153133][ T5787] bridge_slave_0: entered promiscuous mode [ 207.233849][ T5788] team0: Port device team_slave_0 added [ 207.285307][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.293019][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.303254][ T5787] bridge_slave_1: entered allmulticast mode [ 207.313524][ T5787] bridge_slave_1: entered promiscuous mode [ 207.314901][ T5095] Bluetooth: hci1: command tx timeout [ 207.326832][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.327046][ T5796] Bluetooth: hci0: command tx timeout [ 207.337879][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.347244][ T5799] bridge_slave_0: entered allmulticast mode [ 207.357279][ T5799] bridge_slave_0: entered promiscuous mode [ 207.377123][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.384534][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.397762][ T5095] Bluetooth: hci2: command tx timeout [ 207.411578][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.441585][ T5788] team0: Port device team_slave_1 added [ 207.449570][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.457246][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.465057][ T5799] bridge_slave_1: entered allmulticast mode [ 207.474850][ T5799] bridge_slave_1: entered promiscuous mode [ 207.531152][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.539045][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.565492][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.634659][ T5095] Bluetooth: hci3: command tx timeout [ 207.801114][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.808463][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.835027][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.874981][ T5095] Bluetooth: hci4: command tx timeout [ 207.947436][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.973482][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.020611][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.027944][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.055264][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.077326][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.099018][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.143053][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.150820][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.158715][ T5797] bridge_slave_0: entered allmulticast mode [ 208.167754][ T5797] bridge_slave_0: entered promiscuous mode [ 208.200003][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.207804][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.215654][ T5797] bridge_slave_1: entered allmulticast mode [ 208.225707][ T5797] bridge_slave_1: entered promiscuous mode [ 208.348679][ T5799] team0: Port device team_slave_0 added [ 208.367874][ T5799] team0: Port device team_slave_1 added [ 208.571191][ T5794] hsr_slave_0: entered promiscuous mode [ 208.581627][ T5794] hsr_slave_1: entered promiscuous mode [ 208.599306][ T5787] team0: Port device team_slave_0 added [ 208.689742][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.701559][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.710108][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.737668][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.757296][ T5787] team0: Port device team_slave_1 added [ 208.846312][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.858043][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.865380][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.891633][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.990209][ T5788] hsr_slave_0: entered promiscuous mode [ 209.000888][ T5788] hsr_slave_1: entered promiscuous mode [ 209.009561][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 209.015577][ T5788] Cannot create hsr debugfs directory [ 209.117306][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.125069][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.151540][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.168900][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.176322][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.202978][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.320969][ T5797] team0: Port device team_slave_0 added [ 209.395160][ T5095] Bluetooth: hci1: command tx timeout [ 209.400853][ T5796] Bluetooth: hci0: command tx timeout [ 209.454954][ T5797] team0: Port device team_slave_1 added [ 209.475929][ T5095] Bluetooth: hci2: command tx timeout [ 209.693508][ T5799] hsr_slave_0: entered promiscuous mode [ 209.704069][ T5799] hsr_slave_1: entered promiscuous mode [ 209.712758][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 209.718881][ T5095] Bluetooth: hci3: command tx timeout [ 209.718922][ T5799] Cannot create hsr debugfs directory [ 209.761952][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.769283][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.795839][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.827710][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.835065][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.862091][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.961846][ T5095] Bluetooth: hci4: command tx timeout [ 210.043267][ T5787] hsr_slave_0: entered promiscuous mode [ 210.054184][ T5787] hsr_slave_1: entered promiscuous mode [ 210.062684][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 210.068710][ T5787] Cannot create hsr debugfs directory [ 210.409592][ T5797] hsr_slave_0: entered promiscuous mode [ 210.419897][ T5797] hsr_slave_1: entered promiscuous mode [ 210.428719][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 210.434778][ T5797] Cannot create hsr debugfs directory [ 211.215087][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.256297][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.340022][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.421596][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.495042][ T5095] Bluetooth: hci1: command tx timeout [ 211.500881][ T5796] Bluetooth: hci0: command tx timeout [ 211.556043][ T5796] Bluetooth: hci2: command tx timeout [ 211.615796][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.659590][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.680096][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.732236][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.828675][ T5796] Bluetooth: hci3: command tx timeout [ 212.009997][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.044671][ T5796] Bluetooth: hci4: command tx timeout [ 212.052262][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.101350][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.123618][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.358302][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.390153][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.412555][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.463883][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.740606][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.810332][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.838939][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.865207][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.037776][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.111158][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.337828][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.380358][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.460758][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.468643][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.582450][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.590226][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.607844][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.615454][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.658088][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.710426][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.717995][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.904093][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.024811][ T1895] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.032403][ T1895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.097109][ T4526] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.104834][ T4526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.257962][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.463566][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.591045][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.603007][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.700234][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.798029][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.805735][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.915786][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.923353][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.940223][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.947909][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.964605][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.972139][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.328843][ T5799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.597212][ T5797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.356637][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.394008][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.921655][ T5788] veth0_vlan: entered promiscuous mode [ 216.949524][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.970758][ T5794] veth0_vlan: entered promiscuous mode [ 217.044065][ T5788] veth1_vlan: entered promiscuous mode [ 217.152495][ T5794] veth1_vlan: entered promiscuous mode [ 217.428124][ T5788] veth0_macvtap: entered promiscuous mode [ 217.534065][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.549626][ T5794] veth0_macvtap: entered promiscuous mode [ 217.569255][ T5787] veth0_vlan: entered promiscuous mode [ 217.617989][ T5788] veth1_macvtap: entered promiscuous mode [ 217.672567][ T5794] veth1_macvtap: entered promiscuous mode [ 217.693291][ T5787] veth1_vlan: entered promiscuous mode [ 217.836687][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.876245][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.932529][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.982490][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.100636][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.143137][ T3533] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.200293][ T3533] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.212129][ T5787] veth0_macvtap: entered promiscuous mode [ 218.263878][ T3533] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.313918][ T3533] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.349997][ T5787] veth1_macvtap: entered promiscuous mode [ 218.362252][ T3533] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.428320][ T5797] veth0_vlan: entered promiscuous mode [ 218.439487][ T3533] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.494067][ T3533] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.523705][ T1895] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.607213][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.619113][ T5797] veth1_vlan: entered promiscuous mode [ 218.759451][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.982281][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.045709][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.092736][ T5797] veth0_macvtap: entered promiscuous mode [ 219.119758][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.193507][ T5797] veth1_macvtap: entered promiscuous mode [ 219.209897][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.453414][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.547954][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.644610][ T3609] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.666070][ T135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.759581][ T135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.806855][ T4526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.296447][ T5799] veth0_vlan: entered promiscuous mode [ 220.428178][ T5799] veth1_vlan: entered promiscuous mode [ 220.852775][ T5799] veth0_macvtap: entered promiscuous mode [ 220.961678][ T5799] veth1_macvtap: entered promiscuous mode [ 221.109572][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.235108][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.332470][ T1895] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.399144][ T1895] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.458671][ T1895] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.514588][ T1895] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.897018][ T1895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.908321][ T1895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.175485][ T1895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.183740][ T1895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.479258][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.487532][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.721666][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.730111][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.915293][ T5794] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 226.128967][ T3695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.137274][ T3695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.432478][ T4526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.492802][ T4526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.875779][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.883971][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.999885][ T5977] loop3: detected capacity change from 0 to 128 [ 227.077221][ T5977] ======================================================= [ 227.077221][ T5977] WARNING: The mand mount option has been deprecated and [ 227.077221][ T5977] and is ignored by this kernel. Remove the mand [ 227.077221][ T5977] option from the mount to silence this warning. [ 227.077221][ T5977] ======================================================= [ 227.177358][ T3749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.185603][ T3749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.612876][ T5982] loop1: detected capacity change from 0 to 1024 [ 227.684693][ T5982] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.009946][ T5982] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2: Invalid block bitmap block 0 in block_group 0 [ 228.107939][ T5982] Quota error (device loop1): write_blk: dquota write failed [ 228.116073][ T5982] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 228.127564][ T5982] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2: Failed to acquire dquot type 0 [ 228.188107][ T5982] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 228.208142][ T5982] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2: Invalid inode bitmap blk 0 in block_group 0 [ 228.234792][ T3588] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 228.238939][ T5982] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 228.244214][ T3588] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:17: Failed to release dquot type 0 [ 228.260794][ T5982] EXT4-fs (loop1): 1 orphan inode deleted [ 228.277897][ T5982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.352003][ T4526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.369263][ T4526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.542670][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.551139][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.604153][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 228.722293][ T3695] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.784606][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 228.868995][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 228.880228][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.898835][ T24] usb 1-1: Product: syz [ 228.903229][ T24] usb 1-1: Manufacturer: syz [ 228.912337][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.922137][ T24] usb 1-1: SerialNumber: syz [ 228.971456][ T3695] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.048018][ T24] usb 1-1: config 0 descriptor?? [ 229.100422][ T24] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 229.208948][ T3695] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.313410][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.325131][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.375746][ T5997] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 229.408527][ T24] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 229.462406][ T3695] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.508379][ T24] usb 1-1: USB disconnect, device number 2 [ 229.877218][ T6000] Zero length message leads to an empty skb [ 230.126913][ T3695] bridge_slave_1: left allmulticast mode [ 230.132897][ T3695] bridge_slave_1: left promiscuous mode [ 230.139843][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.195928][ T3695] bridge_slave_0: left allmulticast mode [ 230.201814][ T3695] bridge_slave_0: left promiscuous mode [ 230.213078][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.846931][ T3695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.865935][ T3695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.895977][ T3695] bond0 (unregistering): Released all slaves [ 231.487363][ T3695] hsr_slave_0: left promiscuous mode [ 231.535022][ T3695] hsr_slave_1: left promiscuous mode [ 231.543376][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.557132][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.624010][ T30] audit: type=1326 audit(1764762222.242:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7412b8f749 code=0x7ffc0000 [ 231.647312][ T30] audit: type=1326 audit(1764762222.252:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7412b8f749 code=0x7ffc0000 [ 231.675962][ T30] audit: type=1326 audit(1764762222.252:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7412b8f749 code=0x7ffc0000 [ 231.719806][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.727673][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.832907][ T3695] veth1_macvtap: left promiscuous mode [ 231.841556][ T3695] veth0_macvtap: left promiscuous mode [ 231.847940][ T3695] veth1_vlan: left promiscuous mode [ 231.857161][ T3695] veth0_vlan: left promiscuous mode [ 231.952502][ T6013] loop4: detected capacity change from 0 to 512 [ 231.987781][ T30] audit: type=1326 audit(1764762222.332:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f7412b8f749 code=0x7ffc0000 [ 232.010348][ T30] audit: type=1326 audit(1764762222.332:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7412b8f749 code=0x7ffc0000 [ 232.033560][ T30] audit: type=1326 audit(1764762222.332:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7412b8f749 code=0x7ffc0000 [ 232.056548][ T30] audit: type=1326 audit(1764762222.342:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7412b8f749 code=0x7ffc0000 [ 232.381198][ T6013] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 232.394915][ T6013] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 232.605948][ T6019] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 232.667824][ T6013] EXT4-fs (loop4): 1 truncate cleaned up [ 232.679331][ T6013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.946280][ T6015] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.5: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 233.065368][ T6014] program syz.4.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.097543][ T6014] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 233.106170][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.145370][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.155507][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.190589][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.241818][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.691032][ T3695] team0 (unregistering): Port device team_slave_1 removed [ 233.753729][ T3695] team0 (unregistering): Port device team_slave_0 removed [ 234.441568][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.778057][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.784866][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.448008][ T6026] chnl_net:caif_netlink_parms(): no params data found [ 235.474683][ T5796] Bluetooth: hci0: command tx timeout [ 236.423943][ T6066] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 236.423943][ T6066] The task syz.1.23 (6066) triggered the difference, watch for misbehavior. [ 237.006702][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.014742][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.022607][ T6026] bridge_slave_0: entered allmulticast mode [ 237.034548][ T6026] bridge_slave_0: entered promiscuous mode [ 237.163581][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.186714][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.194715][ T6026] bridge_slave_1: entered allmulticast mode [ 237.205603][ T6026] bridge_slave_1: entered promiscuous mode [ 237.570185][ T5796] Bluetooth: hci0: command tx timeout [ 237.749806][ T6026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.869660][ T6026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.359879][ T6026] team0: Port device team_slave_0 added [ 238.430216][ T6026] team0: Port device team_slave_1 added [ 238.823867][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.831218][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.858360][ T6026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.104124][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.111452][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.142502][ T6026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.641852][ T5796] Bluetooth: hci0: command tx timeout [ 239.856932][ T6026] hsr_slave_0: entered promiscuous mode [ 239.867785][ T6026] hsr_slave_1: entered promiscuous mode [ 239.881896][ T6026] debugfs: 'hsr0' already exists in 'hsr' [ 239.888099][ T6026] Cannot create hsr debugfs directory [ 241.267562][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 241.663832][ T6121] loop4: detected capacity change from 0 to 128 [ 241.723196][ T5796] Bluetooth: hci0: command tx timeout [ 241.746417][ T6121] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 241.973115][ T6121] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 242.324034][ T6026] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.421862][ T6026] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.497671][ T6026] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.566532][ T6026] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 244.063737][ T6026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.286327][ T6026] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.348672][ T1895] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.356379][ T1895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.438409][ T1895] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.446100][ T1895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.879943][ T1895] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.186202][ T1895] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.302565][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'. [ 245.311133][ T1895] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.518561][ T1895] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.220800][ T1895] bridge_slave_1: left allmulticast mode [ 246.228041][ T1895] bridge_slave_1: left promiscuous mode [ 246.234930][ T1895] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.349319][ T1895] bridge_slave_0: left allmulticast mode [ 246.355424][ T1895] bridge_slave_0: left promiscuous mode [ 246.362039][ T1895] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.968249][ T1895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.026239][ T1895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.076636][ T1895] bond0 (unregistering): Released all slaves [ 247.730898][ T1895] hsr_slave_0: left promiscuous mode [ 247.760340][ T1895] hsr_slave_1: left promiscuous mode [ 247.770814][ T1895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.779951][ T1895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.797744][ T1895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.805637][ T1895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.847025][ T1895] veth1_macvtap: left promiscuous mode [ 247.852817][ T1895] veth0_macvtap: left promiscuous mode [ 247.859581][ T1895] veth1_vlan: left promiscuous mode [ 247.865321][ T1895] veth0_vlan: left promiscuous mode [ 248.768612][ T1895] team0 (unregistering): Port device team_slave_1 removed [ 248.801413][ T1895] team0 (unregistering): Port device team_slave_0 removed [ 249.689797][ T6026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.813443][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.845475][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.862815][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.930705][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.953008][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.339672][ T42] kernel read not supported for file /35/net/mcfilter6 (pid: 42 comm: kworker/1:1) [ 251.178679][ T6193] ===================================================== [ 251.186220][ T6193] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x18e5/0x1f60 [ 251.194756][ T6193] bpf_prog_run_generic_xdp+0x18e5/0x1f60 [ 251.200694][ T6193] do_xdp_generic+0xd52/0x1690 [ 251.205837][ T6193] tun_get_user+0x506b/0x6c20 [ 251.210771][ T6193] tun_chr_write_iter+0x3e9/0x5c0 [ 251.216209][ T6193] vfs_write+0xbe2/0x15d0 [ 251.220791][ T6193] __x64_sys_write+0x1fb/0x4d0 [ 251.225945][ T6193] x64_sys_call+0x30ab/0x3e70 [ 251.230856][ T6193] do_syscall_64+0xd9/0xf80 [ 251.235735][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.241828][ T6193] [ 251.244428][ T6193] Uninit was stored to memory at: [ 251.249777][ T6193] pskb_expand_head+0x310/0x1610 [ 251.255075][ T6193] do_xdp_generic+0xa79/0x1690 [ 251.260018][ T6193] tun_get_user+0x506b/0x6c20 [ 251.265081][ T6193] tun_chr_write_iter+0x3e9/0x5c0 [ 251.270319][ T6193] vfs_write+0xbe2/0x15d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 251.275044][ T6193] __x64_sys_write+0x1fb/0x4d0 [ 251.280032][ T6193] x64_sys_call+0x30ab/0x3e70 [ 251.285231][ T6193] do_syscall_64+0xd9/0xf80 [ 251.289963][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.296218][ T6193] [ 251.298727][ T6193] Uninit was created at: [ 251.303288][ T6193] __kmalloc_node_track_caller_noprof+0xb4b/0x1ba0 [ 251.310171][ T6193] kmalloc_reserve+0x22f/0x4b0 [ 251.315321][ T6193] __alloc_skb+0x33e/0xc10 [ 251.320044][ T6193] alloc_skb_with_frags+0xc5/0xa60 [ 251.325557][ T6193] sock_alloc_send_pskb+0xacc/0xc60 [ 251.330948][ T6193] tun_get_user+0x1142/0x6c20 [ 251.336013][ T6193] tun_chr_write_iter+0x3e9/0x5c0 [ 251.341250][ T6193] vfs_write+0xbe2/0x15d0 [ 251.345958][ T6193] __x64_sys_write+0x1fb/0x4d0 [ 251.350972][ T6193] x64_sys_call+0x30ab/0x3e70 [ 251.356026][ T6193] do_syscall_64+0xd9/0xf80 [ 251.360745][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.366995][ T6193] [ 251.369463][ T6193] CPU: 0 UID: 0 PID: 6193 Comm: syz.0.59 Not tainted syzkaller #0 PREEMPT(none) [ 251.378951][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.389337][ T6193] ===================================================== [ 251.396562][ T6193] Disabling lock debugging due to kernel taint [ 251.402858][ T6193] Kernel panic - not syncing: kmsan.panic set ... [ 251.409451][ T6193] CPU: 0 UID: 0 PID: 6193 Comm: syz.0.59 Tainted: G B syzkaller #0 PREEMPT(none) [ 251.420356][ T6193] Tainted: [B]=BAD_PAGE [ 251.424622][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.434843][ T6193] Call Trace: [ 251.438249][ T6193] [ 251.441288][ T6193] __dump_stack+0x26/0x30 [ 251.445855][ T6193] dump_stack_lvl+0x53/0x270 [ 251.450669][ T6193] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 251.456693][ T6193] dump_stack+0x1e/0x25 [ 251.461093][ T6193] vpanic+0x435/0xd30 [ 251.465319][ T6193] panic+0x15d/0x160 [ 251.469490][ T6193] kmsan_report+0x31c/0x320 [ 251.474204][ T6193] ? __msan_warning+0x1b/0x30 [ 251.479130][ T6193] ? bpf_prog_run_generic_xdp+0x18e5/0x1f60 [ 251.485220][ T6193] ? do_xdp_generic+0xd52/0x1690 [ 251.490342][ T6193] ? tun_get_user+0x506b/0x6c20 [ 251.495428][ T6193] ? tun_chr_write_iter+0x3e9/0x5c0 [ 251.500834][ T6193] ? vfs_write+0xbe2/0x15d0 [ 251.505554][ T6193] ? __x64_sys_write+0x1fb/0x4d0 [ 251.510702][ T6193] ? x64_sys_call+0x30ab/0x3e70 [ 251.515758][ T6193] ? do_syscall_64+0xd9/0xf80 [ 251.520632][ T6193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.526883][ T6193] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 251.532875][ T6193] ? ___bpf_prog_run+0xea65/0xeba0 [ 251.538223][ T6193] ? __bpf_prog_run32+0xc2/0xf0 [ 251.543277][ T6193] ? kmsan_get_metadata+0xfb/0x160 [ 251.548552][ T6193] __msan_warning+0x1b/0x30 [ 251.553298][ T6193] bpf_prog_run_generic_xdp+0x18e5/0x1f60 [ 251.559310][ T6193] do_xdp_generic+0xd52/0x1690 [ 251.564243][ T6193] ? __msan_warning+0x1b/0x30 [ 251.569145][ T6193] ? filter_irq_stacks+0x13f/0x190 [ 251.574463][ T6193] ? kmsan_get_metadata+0xfb/0x160 [ 251.579759][ T6193] ? tun_get_user+0x4fea/0x6c20 [ 251.584829][ T6193] tun_get_user+0x506b/0x6c20 [ 251.589719][ T6193] ? stack_depot_save_flags+0x35/0x790 [ 251.595367][ T6193] ? kmsan_get_metadata+0xfb/0x160 [ 251.600641][ T6193] ? kmsan_get_metadata+0xfb/0x160 [ 251.605920][ T6193] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 251.612476][ T6193] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 251.618825][ T6193] tun_chr_write_iter+0x3e9/0x5c0 [ 251.624086][ T6193] vfs_write+0xbe2/0x15d0 [ 251.628644][ T6193] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 251.634414][ T6193] __x64_sys_write+0x1fb/0x4d0 [ 251.639400][ T6193] x64_sys_call+0x30ab/0x3e70 [ 251.644274][ T6193] do_syscall_64+0xd9/0xf80 [ 251.648975][ T6193] ? clear_bhb_loop+0x40/0x90 [ 251.653831][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.659918][ T6193] RIP: 0033:0x7f7412b8e1ff [ 251.664465][ T6193] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 251.684245][ T6193] RSP: 002b:00007f7410df6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 251.692857][ T6193] RAX: ffffffffffffffda RBX: 00007f7412de5fa0 RCX: 00007f7412b8e1ff [ 251.700971][ T6193] RDX: 000000000000fdef RSI: 0000200000001c00 RDI: 00000000000000c8 [ 251.709078][ T6193] RBP: 00007f7412c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 251.717176][ T6193] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 251.725280][ T6193] R13: 00007f7412de6038 R14: 00007f7412de5fa0 R15: 00007ffe15f7ed18 [ 251.733430][ T6193] [ 251.736977][ T6193] Kernel Offset: disabled [ 251.741370][ T6193] Rebooting in 86400 seconds..