last executing test programs: 1m40.596254329s ago: executing program 0 (id=420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r3 = dup(r1) write$uinput_user_dev(r3, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x12, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0xb, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) 1m39.013763818s ago: executing program 0 (id=424): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x44, r2, 0x11, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20004014) 1m37.79164801s ago: executing program 0 (id=428): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000080)={0x3, 0x1, {0x2, 0x1, 0x4, 0x3, 0x8}, 0x6}) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=r3, @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x9}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x14, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0xb, 0x6, 0x5, 0xfffffffffffffff4, 0x10}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7310b81}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x25, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x31, r6, 0x8, &(0x7f0000000400)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x6, 0x1, 0xfff}, 0x10, 0x0, r4, 0x0, &(0x7f00000005c0)=[r6, r3, r6, r3], 0x0, 0x10, 0xfffffff8}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r7}, 0x10) r8 = dup2(r6, r6) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0xd, 0x1, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) 1m35.785599904s ago: executing program 0 (id=433): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x506, &(0x7f00000023c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000380)='./file0\x00') open(&(0x7f0000000000)='./file1\x00', 0x0, 0x186) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/171, 0xab}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe2e0}], 0x4, 0x20, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f0000000bc0)=""/217, 0xd9}, {&(0x7f0000000340)=""/42, 0x2a}], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private2, [0x0, 0xffffff00], [0xffffffff, 0xff, 0x0, 0xffffff00], 'gre0\x00', 'veth0\x00', {0xff}, {0xff}, 0x87, 0xe, 0x6, 0x9}, 0x0, 0x258, 0x2b8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x4, 0x0, 0x2001000, 0x6, 0x3, 0x0, 0x20}, {0x2}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010101, [0xffffffff, 0xffffff00], 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x41f86f8c, 0x9, 0x49, 0x7, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b8) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x5, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x3, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1m33.141479937s ago: executing program 0 (id=446): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 1m32.0595834s ago: executing program 0 (id=452): syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x100000001]}, 0x8, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1m29.19475174s ago: executing program 32 (id=452): syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) socket$packet(0x11, 0x2, 0x300) signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x100000001]}, 0x8, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 16.043909535s ago: executing program 2 (id=636): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 15.142356401s ago: executing program 2 (id=638): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704010000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000640)=ANY=[], 0x0, 0x243, &(0x7f0000001ac0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x130, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@private=0xa010100, @remote, 0xff, 0xffffff, 0xc, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x3, 0x5, 0x1, 0x7, 0x2d23, 'veth1_macvtap\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 13.622005124s ago: executing program 3 (id=643): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r2, 0x0, 0x0}) 12.65982513s ago: executing program 3 (id=646): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000010dc0)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001000)="c8", 0x1}], 0x1}}], 0x1000e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="28703adbdb70", 'gretap0\x00'}}, 0x1e) 11.948318123s ago: executing program 1 (id=647): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) syz_open_dev$sg(&(0x7f0000000600), 0x92e, 0x100) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./bus\x00', 0x10040, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffffbf}}, {@fat=@nfs}, {@rodir}, {@shortname_win95}, {@utf8no}, {@shortname_winnt}, {@fat=@gid}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@rodir}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}], [{@hash}]}, 0x4, 0x36a, &(0x7f0000001840)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1a5801, 0x44) socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 11.334783435s ago: executing program 4 (id=649): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000080)={0x28, 0x3, r4, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.403630811s ago: executing program 1 (id=650): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 9.966933069s ago: executing program 4 (id=651): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000440)={0xc, @dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x3, 'lc\x00', 0x4, 0x0, 0x1a}, 0xe) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r5}, 0x20) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r6, 0x0, &(0x7f0000000180)) 9.887386197s ago: executing program 5 (id=652): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000053000000000000000000440f22c041", @ANYRESOCT], 0x53}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.526718315s ago: executing program 1 (id=653): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000b4e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 8.040291002s ago: executing program 5 (id=654): r0 = dup(0xffffffffffffffff) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000005c0)={0x0, 0xc2cf, 0x0, 0x595f314f, 0x19, "00e40000ded0fffdab7923e56de8bd024af900"}) write$UHID_INPUT(r0, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 7.5139427s ago: executing program 1 (id=655): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 6.855914353s ago: executing program 5 (id=656): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1000, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 6.818177703s ago: executing program 2 (id=657): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d"], 0x68}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.231680039s ago: executing program 4 (id=658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfbc, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea827d03e67140c89ceaaad28cb7f229db"}}}}, 0xfca) 6.103416747s ago: executing program 3 (id=659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r4, @ANYBLOB=' \x00', @ANYRES32=r4, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r5, 0x0, 0x4ffe6, 0x0) 5.706908578s ago: executing program 1 (id=660): gettid() syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.376785219s ago: executing program 5 (id=661): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x3) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$netlink(0x10, 0x3, 0x15) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5.075562967s ago: executing program 2 (id=662): socket$inet6(0xa, 0x3, 0x38) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000200)={0x0, 0x0}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406d0427c2000000"], 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 4.927248505s ago: executing program 4 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 4.517914604s ago: executing program 3 (id=664): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x49, 0x71, 0x4c, 0x40, 0x93a, 0x2623, 0xb214, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x0, 0xde, 0x75, 0xf5}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 4.277876988s ago: executing program 5 (id=665): getsockname(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.115463378s ago: executing program 2 (id=666): r0 = dup(0xffffffffffffffff) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000005c0)={0x0, 0xc2cf, 0x0, 0x595f314f, 0x19, "00e40000ded0fffdab7923e56de8bd024af900"}) write$UHID_INPUT(r0, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 2.319272949s ago: executing program 5 (id=667): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704010000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000640)=ANY=[], 0x0, 0x243, &(0x7f0000001ac0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x130, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@private=0xa010100, @remote, 0xff, 0xffffff, 0xc, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x3, 0x5, 0x1, 0x7, 0x2d23, 'veth1_macvtap\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.821496381s ago: executing program 1 (id=668): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 1.742728428s ago: executing program 2 (id=669): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000010dc0)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001000)="c8", 0x1}], 0x1}}], 0x1000e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="28703adbdb70", 'gretap0\x00'}}, 0x1e) 1.174580642s ago: executing program 3 (id=670): unshare(0x2c020400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="780000001000190026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02250000400100001400030076657468315f76697274"], 0x78}}, 0x18002) 1.056382104s ago: executing program 4 (id=671): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$char_usb(r0, &(0x7f0000000040)='p', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1}, 0x0, &(0x7f0000000180)={0x1ff}, 0x0, 0x0) 203.7949ms ago: executing program 3 (id=672): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$igmp6(0xa, 0x3, 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 4 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.166' (ED25519) to the list of known hosts. [ 207.244810][ T5790] cgroup: Unknown subsys name 'net' [ 207.436762][ T5790] cgroup: Unknown subsys name 'cpuset' [ 207.453214][ T5790] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.626646][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.633480][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.500191][ T5790] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 266.752842][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.777529][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.786144][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.794153][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 266.818962][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 266.828733][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 266.834244][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.837842][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 266.851523][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.856446][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.868419][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 266.872174][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.884944][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 266.885569][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.904791][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.905376][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 266.920468][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 266.937021][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.947644][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 266.950155][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.964348][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 266.978337][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 266.978807][ T5107] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.999348][ T5107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.012826][ T5107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.718741][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 269.046121][ T5107] Bluetooth: hci1: command tx timeout [ 269.051909][ T5107] Bluetooth: hci2: command tx timeout [ 269.112732][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 269.135435][ T5826] Bluetooth: hci3: command tx timeout [ 269.135741][ T5107] Bluetooth: hci0: command tx timeout [ 269.141020][ T5826] Bluetooth: hci4: command tx timeout [ 269.157486][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 269.246336][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 269.589166][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 269.880205][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.888844][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.896837][ T5811] bridge_slave_0: entered allmulticast mode [ 269.907031][ T5811] bridge_slave_0: entered promiscuous mode [ 269.991405][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.002949][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.011700][ T5811] bridge_slave_1: entered allmulticast mode [ 270.021780][ T5811] bridge_slave_1: entered promiscuous mode [ 270.243983][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.408516][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.419892][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.427651][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.435623][ T5821] bridge_slave_0: entered allmulticast mode [ 270.445544][ T5821] bridge_slave_0: entered promiscuous mode [ 270.714598][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.722615][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.731923][ T5821] bridge_slave_1: entered allmulticast mode [ 270.741878][ T5821] bridge_slave_1: entered promiscuous mode [ 270.922165][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.929996][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.939567][ T5812] bridge_slave_0: entered allmulticast mode [ 270.949259][ T5812] bridge_slave_0: entered promiscuous mode [ 270.968886][ T5811] team0: Port device team_slave_0 added [ 270.977555][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.985496][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.993225][ T5812] bridge_slave_1: entered allmulticast mode [ 271.003245][ T5812] bridge_slave_1: entered promiscuous mode [ 271.012914][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.020788][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.028709][ T5819] bridge_slave_0: entered allmulticast mode [ 271.038937][ T5819] bridge_slave_0: entered promiscuous mode [ 271.125560][ T5817] Bluetooth: hci2: command tx timeout [ 271.131292][ T5817] Bluetooth: hci1: command tx timeout [ 271.169863][ T5811] team0: Port device team_slave_1 added [ 271.179685][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.187619][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.195444][ T5819] bridge_slave_1: entered allmulticast mode [ 271.205433][ T5819] bridge_slave_1: entered promiscuous mode [ 271.206917][ T5826] Bluetooth: hci0: command tx timeout [ 271.218040][ T5826] Bluetooth: hci3: command tx timeout [ 271.218481][ T5817] Bluetooth: hci4: command tx timeout [ 271.274922][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.402381][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.411938][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.420120][ T5815] bridge_slave_0: entered allmulticast mode [ 271.429724][ T5815] bridge_slave_0: entered promiscuous mode [ 271.452097][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.462094][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.472416][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.480269][ T5815] bridge_slave_1: entered allmulticast mode [ 271.490116][ T5815] bridge_slave_1: entered promiscuous mode [ 271.519958][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.734009][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.748214][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.755585][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.781935][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.805990][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.863408][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.912151][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.919791][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.946596][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.968564][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.026867][ T5821] team0: Port device team_slave_0 added [ 272.044004][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.157578][ T5821] team0: Port device team_slave_1 added [ 272.173743][ T5819] team0: Port device team_slave_0 added [ 272.230003][ T5812] team0: Port device team_slave_0 added [ 272.249106][ T5812] team0: Port device team_slave_1 added [ 272.265431][ T5819] team0: Port device team_slave_1 added [ 272.398271][ T5815] team0: Port device team_slave_0 added [ 272.484971][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.492479][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.519041][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.580089][ T5815] team0: Port device team_slave_1 added [ 272.663295][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.670780][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.698569][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.807151][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.814351][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.842008][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.858516][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.867282][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.895289][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.927565][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.934785][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.961626][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.988191][ T5811] hsr_slave_0: entered promiscuous mode [ 272.998424][ T5811] hsr_slave_1: entered promiscuous mode [ 273.051651][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.059117][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.086990][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.172929][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.180581][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.207155][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.211541][ T5107] Bluetooth: hci1: command tx timeout [ 273.219898][ T5817] Bluetooth: hci2: command tx timeout [ 273.285315][ T5817] Bluetooth: hci4: command tx timeout [ 273.291031][ T5817] Bluetooth: hci3: command tx timeout [ 273.297097][ T5817] Bluetooth: hci0: command tx timeout [ 273.388846][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.396264][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.423513][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.515671][ T5819] hsr_slave_0: entered promiscuous mode [ 273.525924][ T5819] hsr_slave_1: entered promiscuous mode [ 273.534828][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.542818][ T5819] Cannot create hsr debugfs directory [ 273.563527][ T5821] hsr_slave_0: entered promiscuous mode [ 273.576164][ T5821] hsr_slave_1: entered promiscuous mode [ 273.584337][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.592364][ T5821] Cannot create hsr debugfs directory [ 273.814944][ T5812] hsr_slave_0: entered promiscuous mode [ 273.826249][ T5812] hsr_slave_1: entered promiscuous mode [ 273.834323][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.842311][ T5812] Cannot create hsr debugfs directory [ 274.032975][ T5815] hsr_slave_0: entered promiscuous mode [ 274.043651][ T5815] hsr_slave_1: entered promiscuous mode [ 274.053128][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.061096][ T5815] Cannot create hsr debugfs directory [ 275.308355][ T5817] Bluetooth: hci2: command tx timeout [ 275.309624][ T5826] Bluetooth: hci1: command tx timeout [ 275.366828][ T5826] Bluetooth: hci0: command tx timeout [ 275.372637][ T5817] Bluetooth: hci3: command tx timeout [ 275.378634][ T5817] Bluetooth: hci4: command tx timeout [ 275.505593][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 275.531722][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 275.557310][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 275.597952][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 275.816345][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 275.854542][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 275.882893][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 275.912260][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 275.939250][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 275.963378][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.073770][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.259601][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 276.290676][ T5812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 276.411511][ T5812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 276.465636][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.548536][ T5812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 276.579414][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.604609][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.631375][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 276.664866][ T5812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 277.127758][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.392072][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.467025][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.514187][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.553782][ T3798] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.561560][ T3798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.740023][ T3798] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.747774][ T3798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.811148][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.880987][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.924658][ T3798] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.932439][ T3798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.102518][ T5811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.113463][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.159711][ T3798] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.167468][ T3798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.193455][ T3798] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.201104][ T3798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.227595][ T3798] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.235241][ T3798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.560306][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.629774][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.801734][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.911039][ T3754] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.918845][ T3754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.968621][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.085769][ T3754] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.093400][ T3754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.112096][ T3754] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.120200][ T3754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.389705][ T3754] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.397474][ T3754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.160843][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.777996][ T5811] veth0_vlan: entered promiscuous mode [ 280.873003][ T5811] veth1_vlan: entered promiscuous mode [ 280.970684][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.362469][ T5811] veth0_macvtap: entered promiscuous mode [ 281.389810][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.520149][ T5811] veth1_macvtap: entered promiscuous mode [ 281.693053][ T5821] veth0_vlan: entered promiscuous mode [ 281.789422][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.828430][ T5821] veth1_vlan: entered promiscuous mode [ 281.944146][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.062524][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.081158][ T5811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.092863][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.102621][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.111784][ T5811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.185564][ T5819] veth0_vlan: entered promiscuous mode [ 282.263787][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.334359][ T5821] veth0_macvtap: entered promiscuous mode [ 282.423025][ T5821] veth1_macvtap: entered promiscuous mode [ 282.446784][ T5819] veth1_vlan: entered promiscuous mode [ 282.572922][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.721310][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.814530][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.826291][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.835683][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.845233][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.931711][ T5815] veth0_vlan: entered promiscuous mode [ 283.023288][ T5819] veth0_macvtap: entered promiscuous mode [ 283.111103][ T5815] veth1_vlan: entered promiscuous mode [ 283.160402][ T5819] veth1_macvtap: entered promiscuous mode [ 283.338030][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.466233][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.517777][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.527140][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.538485][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.547770][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.583291][ T5815] veth0_macvtap: entered promiscuous mode [ 283.680629][ T5815] veth1_macvtap: entered promiscuous mode [ 283.888459][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.016203][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.077351][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.087705][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.097617][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.107605][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.515175][ T5812] veth0_vlan: entered promiscuous mode [ 285.618422][ T5812] veth1_vlan: entered promiscuous mode [ 285.988149][ T5812] veth0_macvtap: entered promiscuous mode [ 286.138556][ T5812] veth1_macvtap: entered promiscuous mode [ 286.402644][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.508586][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.626033][ T5812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.637446][ T5812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.647131][ T5812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.656334][ T5812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.577910][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.586300][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.721622][ T3798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.732331][ T3798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.132318][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.139272][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.282066][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 291.411230][ T3798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.419474][ T3798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.528865][ T3798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.537845][ T3798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.721014][ T3901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.730282][ T3901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.905478][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.913747][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.641298][ T6005] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 292.668399][ T3798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.676735][ T3798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.830600][ T5867] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 293.100158][ T3798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.109004][ T3798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.124398][ T5867] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 293.134736][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.277824][ T5867] usb 1-1: config 0 descriptor?? [ 293.310398][ T5867] cp210x 1-1:0.0: cp210x converter detected [ 293.626269][ T5867] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 293.634217][ T5867] cp210x 1-1:0.0: querying part number failed [ 293.739801][ T5867] usb 1-1: cp210x converter now attached to ttyUSB0 [ 294.934160][ T6029] process 'syz.1.2' launched './file2' with NULL argv: empty string added [ 295.605872][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.614076][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.323578][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.332291][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.609666][ T6036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'. [ 296.724382][ T6034] loop3: detected capacity change from 0 to 512 [ 297.347858][ T6036] vlan2: entered promiscuous mode [ 297.353373][ T6036] syz_tun: entered promiscuous mode [ 297.360155][ T6036] vlan2: entered allmulticast mode [ 297.371352][ T6036] syz_tun: entered allmulticast mode [ 297.604393][ T5873] usb 1-1: USB disconnect, device number 2 [ 297.740048][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 297.751890][ T5873] cp210x 1-1:0.0: device disconnected [ 298.408551][ T6034] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 298.419735][ T6034] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 298.430567][ T6034] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.11: Failed to acquire dquot type 1 [ 298.940658][ T6034] EXT4-fs (loop3): 1 truncate cleaned up [ 298.949494][ T6034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.962908][ T6034] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.750194][ T6043] bond0: option ad_select: unable to set because the bond device is up [ 300.380973][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.953988][ T6048] netlink: 'syz.4.16': attribute type 1 has an invalid length. [ 301.298767][ T6053] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 301.428895][ T6048] netlink: 52 bytes leftover after parsing attributes in process `syz.4.16'. [ 301.482425][ T6057] trusted_key: encrypted_key: key user:syz not found [ 301.963600][ T6017] Set syz1 is full, maxelem 65536 reached [ 302.098172][ T6059] veth3: entered promiscuous mode [ 302.651761][ T6061] loop0: detected capacity change from 0 to 512 [ 302.777975][ T6066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20'. [ 302.787598][ T6066] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 302.812636][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.822810][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.906693][ T6061] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 304.606960][ T5876] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 305.010561][ T5876] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.020438][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.140402][ T5876] usb 2-1: config 0 descriptor?? [ 305.224921][ T5876] cp210x 2-1:0.0: cp210x converter detected [ 305.567886][ T6075] loop0: detected capacity change from 0 to 2048 [ 305.636536][ T6080] netlink: 204 bytes leftover after parsing attributes in process `syz.4.26'. [ 305.904877][ T6077] loop3: detected capacity change from 0 to 512 [ 306.063209][ T5876] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 306.077868][ T5876] cp210x 2-1:0.0: querying part number failed [ 306.492603][ T6075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.997130][ T6077] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 307.008459][ T6077] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 307.019031][ T6077] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.25: Failed to acquire dquot type 1 [ 307.289730][ T6077] EXT4-fs (loop3): 1 truncate cleaned up [ 307.307118][ T6077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.320536][ T6077] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.544315][ T5876] usb 2-1: cp210x converter now attached to ttyUSB0 [ 308.169389][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.336620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 309.055735][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 309.235425][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 309.329135][ T5873] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 309.339972][ T5873] usb 5-1: config 0 has no interface number 0 [ 309.438690][ T6049] Set syz1 is full, maxelem 65536 reached [ 309.672712][ T5876] usb 2-1: USB disconnect, device number 2 [ 309.690424][ T5873] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 309.700124][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.708682][ T5873] usb 5-1: Product: syz [ 309.713131][ T5873] usb 5-1: Manufacturer: syz [ 309.718121][ T5873] usb 5-1: SerialNumber: syz [ 309.747339][ T5873] usb 5-1: config 0 descriptor?? [ 309.780942][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 309.791217][ T5876] cp210x 2-1:0.0: device disconnected [ 309.995975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 310.506803][ T5873] usb 5-1: USB disconnect, device number 2 [ 310.560949][ T6096] loop1: detected capacity change from 0 to 8 [ 310.610051][ T6096] SQUASHFS error: Failed to read block 0x63a: -5 [ 310.616928][ T6096] SQUASHFS error: Unable to read metadata cache entry [638] [ 310.624773][ T6096] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 310.760065][ T6096] SQUASHFS error: Unable to read metadata cache entry [638] [ 310.768175][ T6096] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 310.864937][ T6096] SQUASHFS error: Unable to read metadata cache entry [638] [ 310.872894][ T6096] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 310.903934][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.023111][ T6103] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 311.102074][ T6103] netlink: 52 bytes leftover after parsing attributes in process `syz.3.32'. [ 311.448537][ T6103] veth3: entered promiscuous mode [ 312.113518][ T6111] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 312.718181][ T6116] sch_tbf: burst 88 is lower than device veth1 mtu (1514) ! [ 312.812202][ T6114] loop1: detected capacity change from 0 to 512 [ 312.890700][ T6114] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 313.372716][ T6120] netlink: 48 bytes leftover after parsing attributes in process `syz.0.37'. [ 313.511742][ T6118] loop3: detected capacity change from 0 to 2048 [ 313.573022][ T6122] loop4: detected capacity change from 0 to 512 [ 313.711589][ T6123] loop3: p1 < > p4 [ 313.726761][ T6123] loop3: p4 size 8388608 extends beyond EOD, truncated [ 313.868102][ T6122] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 313.879267][ T6122] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 313.890082][ T6122] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.38: Failed to acquire dquot type 1 [ 313.970029][ T6118] loop3: p1 < > p4 [ 313.992360][ T6118] loop3: p4 size 8388608 extends beyond EOD, truncated [ 314.032159][ T6122] EXT4-fs (loop4): 1 truncate cleaned up [ 314.040958][ T6122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.059043][ T6122] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.198892][ T5167] loop3: p1 < > p4 [ 314.236467][ T5167] loop3: p4 size 8388608 extends beyond EOD, truncated [ 314.507010][ T5812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.527881][ T6143] loop3: detected capacity change from 0 to 8 [ 315.660578][ T6143] SQUASHFS error: Failed to read block 0x63a: -5 [ 315.666340][ T6147] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 315.667526][ T6143] SQUASHFS error: Unable to read metadata cache entry [638] [ 315.682765][ T6143] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 315.722114][ T6147] netlink: 52 bytes leftover after parsing attributes in process `syz.1.46'. [ 315.853045][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 315.871823][ T6143] SQUASHFS error: Unable to read metadata cache entry [638] [ 315.880990][ T6143] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 315.957519][ T6143] SQUASHFS error: Unable to read metadata cache entry [638] [ 315.966177][ T6143] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 315.997065][ T6143] SQUASHFS error: Unable to read metadata cache entry [638] [ 316.010075][ T6143] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 316.048571][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 316.091260][ T5873] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 316.092890][ T6147] veth3: entered promiscuous mode [ 316.099861][ T5873] usb 1-1: config 0 has no interface number 0 [ 316.134486][ T5873] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 316.144372][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.153002][ T5873] usb 1-1: Product: syz [ 316.157653][ T5873] usb 1-1: Manufacturer: syz [ 316.162548][ T5873] usb 1-1: SerialNumber: syz [ 316.341852][ T5989] udevd[5989]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 316.372680][ T5873] usb 1-1: config 0 descriptor?? [ 316.382216][ T5985] udevd[5985]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 317.082336][ T5873] usb 1-1: USB disconnect, device number 3 [ 317.248081][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 317.273717][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 317.613746][ T6164] sch_tbf: burst 88 is lower than device veth0_to_team mtu (1514) ! [ 317.653290][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.713709][ T6164] Zero length message leads to an empty skb [ 317.872058][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 317.907084][ T6008] udevd[6008]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 318.084885][ T6168] loop1: detected capacity change from 0 to 512 [ 318.137480][ T6168] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 318.509442][ T6173] loop4: detected capacity change from 0 to 512 [ 318.796065][ T6173] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 318.807237][ T6173] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 318.817763][ T6173] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.53: Failed to acquire dquot type 1 [ 318.864855][ T6174] loop2: detected capacity change from 0 to 2048 [ 318.906692][ T6173] EXT4-fs (loop4): 1 truncate cleaned up [ 318.915494][ T6173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.929462][ T6173] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.117278][ T6174] loop2: p1 < > p4 [ 319.171752][ T6174] loop2: p4 size 8388608 extends beyond EOD, truncated [ 319.330750][ T6186] binder: BINDER_SET_CONTEXT_MGR already set [ 319.337495][ T6186] binder: 6185:6186 ioctl 40046207 0 returned -16 [ 319.728197][ T5812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.256625][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 320.266725][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 320.276071][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 320.354425][ T6008] udevd[6008]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 320.582599][ T6198] loop4: detected capacity change from 0 to 8 [ 320.765797][ T6198] SQUASHFS error: Failed to read block 0x63a: -5 [ 320.772687][ T6198] SQUASHFS error: Unable to read metadata cache entry [638] [ 320.780562][ T6198] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 321.014364][ T6198] SQUASHFS error: Unable to read metadata cache entry [638] [ 321.028474][ T6198] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 321.107035][ T6200] SQUASHFS error: Unable to read metadata cache entry [638] [ 321.114836][ T6200] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 321.197099][ T6200] SQUASHFS error: Unable to read metadata cache entry [638] [ 321.204775][ T6200] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 321.245564][ T6204] sch_tbf: burst 88 is lower than device team_slave_0 mtu (1514) ! [ 322.393901][ T6214] loop1: detected capacity change from 0 to 512 [ 323.020196][ T6219] binder: BINDER_SET_CONTEXT_MGR already set [ 323.026856][ T6219] binder: 6217:6219 ioctl 40046207 0 returned -16 [ 323.116693][ T6214] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 323.127779][ T6214] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 323.138479][ T6214] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.69: Failed to acquire dquot type 1 [ 323.238792][ T6214] EXT4-fs (loop1): 1 truncate cleaned up [ 323.248491][ T6214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.261761][ T6214] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.495452][ T6220] loop2: detected capacity change from 0 to 2048 [ 323.734965][ T6220] loop2: p1 < > p4 [ 323.749961][ T6220] loop2: p4 size 8388608 extends beyond EOD, truncated [ 323.771907][ T6223] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 323.799031][ T6231] bond0: option ad_select: unable to set because the bond device is up [ 324.188575][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.369885][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 325.055967][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.79'. [ 325.179054][ T6244] vlan2: entered promiscuous mode [ 325.184461][ T6244] hsr0: entered promiscuous mode [ 325.192365][ T6244] vlan2: entered allmulticast mode [ 325.198012][ T6244] hsr0: entered allmulticast mode [ 325.203329][ T6244] hsr_slave_0: entered allmulticast mode [ 325.210019][ T6244] hsr_slave_1: entered allmulticast mode [ 327.002435][ T6264] loop2: detected capacity change from 0 to 512 [ 327.334396][ T6267] loop4: detected capacity change from 0 to 2048 [ 327.432028][ T6272] netlink: 'syz.1.90': attribute type 15 has an invalid length. [ 327.507861][ T6267] loop4: p1 < > p4 [ 327.537100][ T6267] loop4: p4 size 8388608 extends beyond EOD, truncated [ 327.649728][ T6264] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 327.661985][ T6264] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 327.678304][ T6264] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.86: Failed to acquire dquot type 1 [ 327.789174][ T6264] EXT4-fs (loop2): 1 truncate cleaned up [ 327.801851][ T6264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.817065][ T6264] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.248135][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.267330][ T6281] loop1: detected capacity change from 0 to 256 [ 328.280613][ T6281] exfat: Deprecated parameter 'utf8' [ 328.292913][ T6281] exfat: Deprecated parameter 'namecase' [ 328.302343][ T6281] exfat: Deprecated parameter 'namecase' [ 328.309591][ T6281] exfat: Deprecated parameter 'utf8' [ 328.433412][ T6281] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 328.718057][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 328.771758][ T6286] vlan3: entered promiscuous mode [ 328.777305][ T6286] vlan1: entered promiscuous mode [ 328.784734][ T6286] vlan3: entered allmulticast mode [ 328.790695][ T6286] vlan1: entered allmulticast mode [ 328.797069][ T6286] veth0_vlan: entered allmulticast mode [ 330.763853][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 331.149724][ T6296] netlink: 'syz.1.99': attribute type 29 has an invalid length. [ 331.303798][ T6298] netlink: 'syz.1.99': attribute type 29 has an invalid length. [ 331.631108][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 332.638633][ T6305] netlink: 'syz.1.102': attribute type 15 has an invalid length. [ 333.676992][ T6310] loop0: detected capacity change from 0 to 512 [ 333.852684][ T6310] ======================================================= [ 333.852684][ T6310] WARNING: The mand mount option has been deprecated and [ 333.852684][ T6310] and is ignored by this kernel. Remove the mand [ 333.852684][ T6310] option from the mount to silence this warning. [ 333.852684][ T6310] ======================================================= [ 334.579861][ T6310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.593370][ T6310] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.866951][ T6318] loop1: detected capacity change from 0 to 2048 [ 334.977604][ T6008] loop1: p1 < > p4 [ 334.987132][ T6008] loop1: p4 size 8388608 extends beyond EOD, truncated [ 335.070057][ T6318] loop1: p1 < > p4 [ 335.109899][ T6318] loop1: p4 size 8388608 extends beyond EOD, truncated [ 335.166243][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.793500][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 335.816715][ T6331] netlink: 'syz.1.112': attribute type 29 has an invalid length. [ 335.921469][ T6335] netlink: 'syz.1.112': attribute type 29 has an invalid length. [ 335.934531][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.113'. [ 335.978780][ T6333] netlink: 'syz.0.110': attribute type 1 has an invalid length. [ 336.543513][ T6008] udevd[6008]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 337.106728][ T6339] netlink: 'syz.2.116': attribute type 15 has an invalid length. [ 337.240414][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 337.308890][ T6008] udevd[6008]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 337.424799][ T5107] Bluetooth: hci0: hardware error 0xd7 [ 337.492678][ T6343] binder_alloc: 6341: binder_alloc_buf, no vma [ 338.088193][ T6349] loop2: detected capacity change from 0 to 512 [ 338.294420][ T6353] loop1: detected capacity change from 0 to 512 [ 338.312924][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 338.348934][ T6349] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 338.360456][ T6349] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 338.378920][ T6349] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.119: Failed to acquire dquot type 1 [ 338.446128][ T6349] EXT4-fs (loop2): 1 truncate cleaned up [ 338.454914][ T6349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.468613][ T6349] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.575268][ T6353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.588903][ T6353] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.989005][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.105524][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.429001][ T6364] netlink: 'syz.3.125': attribute type 29 has an invalid length. [ 339.530873][ T5107] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 339.538490][ T6364] netlink: 'syz.3.125': attribute type 29 has an invalid length. [ 339.557034][ T6364] netlink: 500 bytes leftover after parsing attributes in process `syz.3.125'. [ 339.684272][ T6367] netlink: 'syz.4.127': attribute type 1 has an invalid length. [ 339.937908][ T6374] netlink: 44 bytes leftover after parsing attributes in process `syz.3.129'. [ 340.991729][ T6378] loop1: detected capacity change from 0 to 16 [ 341.048526][ T6378] erofs (device loop1): mounted with root inode @ nid 36. [ 341.126076][ T6382] netlink: 48 bytes leftover after parsing attributes in process `syz.4.132'. [ 341.221558][ T6378] erofs (device loop1): inline data across blocks @ nid 36 [ 341.229341][ T6378] syz.1.130: attempt to access beyond end of device [ 341.229341][ T6378] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 342.139991][ T6386] loop2: detected capacity change from 0 to 512 [ 342.541016][ T6391] loop4: detected capacity change from 0 to 512 [ 342.545675][ T6386] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 342.558707][ T6386] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 342.569358][ T6386] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.134: Failed to acquire dquot type 1 [ 342.588274][ T6386] EXT4-fs (loop2): 1 truncate cleaned up [ 342.597377][ T6386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.611220][ T6386] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.754807][ T6391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.770230][ T6391] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 342.801308][ T6394] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 342.996094][ T6400] netlink: 'syz.1.139': attribute type 29 has an invalid length. [ 343.021470][ T6400] netlink: 'syz.1.139': attribute type 29 has an invalid length. [ 343.057513][ T6400] netlink: 500 bytes leftover after parsing attributes in process `syz.1.139'. [ 343.246161][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.417942][ T5812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.868428][ T6407] netlink: 44 bytes leftover after parsing attributes in process `syz.1.143'. [ 344.475967][ T6413] syz_tun: entered allmulticast mode [ 344.580438][ T6412] syz_tun: left allmulticast mode [ 344.719161][ T30] audit: type=1326 audit(1752983325.935:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.1.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65a898e9a9 code=0x0 [ 344.740521][ T6419] netlink: 48 bytes leftover after parsing attributes in process `syz.3.146'. [ 346.043653][ T6428] loop4: detected capacity change from 0 to 256 [ 346.068734][ T6431] netlink: 'syz.0.153': attribute type 29 has an invalid length. [ 346.111614][ T6428] vfat: Bad value for 'time_offset' [ 346.137629][ T6431] netlink: 'syz.0.153': attribute type 29 has an invalid length. [ 346.194773][ T6437] netlink: 500 bytes leftover after parsing attributes in process `syz.0.153'. [ 346.201750][ T6432] syzkaller0: entered promiscuous mode [ 346.217098][ T6432] syzkaller0: entered allmulticast mode [ 346.285384][ T6436] loop2: detected capacity change from 0 to 1024 [ 346.296743][ T6436] EXT4-fs: Ignoring removed mblk_io_submit option [ 346.303704][ T6436] EXT4-fs: Ignoring removed bh option [ 346.447923][ T6436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.373616][ T30] audit: type=1326 audit(1752983328.565:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.4.156" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03e4d8e9a9 code=0x0 [ 348.936373][ T6454] netlink: 48 bytes leftover after parsing attributes in process `syz.1.159'. [ 350.001294][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.114110][ T6473] loop1: detected capacity change from 0 to 256 [ 351.177751][ T6473] vfat: Bad value for 'time_offset' [ 351.425346][ T6479] netlink: 'syz.3.168': attribute type 29 has an invalid length. [ 351.528811][ T6479] netlink: 548 bytes leftover after parsing attributes in process `syz.3.168'. [ 351.721924][ T6482] syzkaller0: entered promiscuous mode [ 351.728108][ T6482] syzkaller0: entered allmulticast mode [ 352.097137][ T6488] netlink: 48 bytes leftover after parsing attributes in process `syz.4.171'. [ 352.329086][ T30] audit: type=1326 audit(1752983333.555:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.3.173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdea3f8e9a9 code=0x0 [ 352.508080][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.515270][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.424501][ T6504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.178'. [ 353.764375][ T6513] syz_tun: entered allmulticast mode [ 353.836850][ T6512] syz_tun: left allmulticast mode [ 354.236252][ T6515] netlink: 'syz.2.183': attribute type 29 has an invalid length. [ 354.351133][ T6515] netlink: 548 bytes leftover after parsing attributes in process `syz.2.183'. [ 354.408631][ T6519] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 354.441554][ T6520] netlink: 48 bytes leftover after parsing attributes in process `syz.1.185'. [ 354.542092][ T6519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.663000][ T6525] bond1: (slave gretap1): making interface the new active one [ 354.676408][ T6525] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 355.476316][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.189'. [ 355.486358][ T6534] netlink: 152 bytes leftover after parsing attributes in process `syz.1.189'. [ 356.322026][ T6545] loop0: detected capacity change from 0 to 8 [ 356.437895][ T6545] SQUASHFS error: Failed to read block 0x63a: -5 [ 356.444686][ T6545] SQUASHFS error: Unable to read metadata cache entry [638] [ 356.457354][ T6545] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 356.543841][ T6550] SQUASHFS error: Unable to read metadata cache entry [638] [ 356.557427][ T6550] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 356.736277][ T6551] SQUASHFS error: Unable to read metadata cache entry [638] [ 356.744068][ T6551] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 356.762284][ T6551] SQUASHFS error: Unable to read metadata cache entry [638] [ 356.770240][ T6551] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 357.017490][ T6557] netlink: 548 bytes leftover after parsing attributes in process `syz.1.197'. [ 357.086117][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 357.278069][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 357.310631][ T5869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.364133][ T5869] usb 5-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 357.378675][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.388943][ T5869] usb 5-1: Product: syz [ 357.393410][ T5869] usb 5-1: Manufacturer: syz [ 357.398481][ T5869] usb 5-1: SerialNumber: syz [ 357.588509][ T5869] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input5 [ 357.825752][ T6561] loop0: detected capacity change from 0 to 128 [ 357.963809][ T30] audit: type=1800 audit(1752983339.185:5): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.199" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 358.262445][ T6561] syz.0.199: attempt to access beyond end of device [ 358.262445][ T6561] loop0: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 358.276949][ T6561] syz.0.199: attempt to access beyond end of device [ 358.276949][ T6561] loop0: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 358.296546][ T6561] Buffer I/O error on dev loop0, logical block 156, lost async page write [ 358.307245][ T6561] syz.0.199: attempt to access beyond end of device [ 358.307245][ T6561] loop0: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 358.321295][ T6561] Buffer I/O error on dev loop0, logical block 157, lost async page write [ 358.330436][ T6561] syz.0.199: attempt to access beyond end of device [ 358.330436][ T6561] loop0: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 358.344264][ T6561] Buffer I/O error on dev loop0, logical block 158, lost async page write [ 358.353275][ T6561] syz.0.199: attempt to access beyond end of device [ 358.353275][ T6561] loop0: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 358.367280][ T6561] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 358.377137][ T6561] syz.0.199: attempt to access beyond end of device [ 358.377137][ T6561] loop0: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 358.390975][ T6561] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 358.405646][ T6561] syz.0.199: attempt to access beyond end of device [ 358.405646][ T6561] loop0: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 358.421247][ T6561] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 358.431137][ T6561] syz.0.199: attempt to access beyond end of device [ 358.431137][ T6561] loop0: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 358.445168][ T6561] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 358.454016][ T6561] syz.0.199: attempt to access beyond end of device [ 358.454016][ T6561] loop0: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 358.467909][ T6561] Buffer I/O error on dev loop0, logical block 133, lost async page write [ 358.477070][ T6561] syz.0.199: attempt to access beyond end of device [ 358.477070][ T6561] loop0: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 358.490965][ T6561] Buffer I/O error on dev loop0, logical block 150, lost async page write [ 358.505451][ T6561] Buffer I/O error on dev loop0, logical block 151, lost async page write [ 359.039688][ T6564] netlink: 'syz.2.201': attribute type 1 has an invalid length. [ 359.946923][ T6569] netlink: 'syz.0.203': attribute type 1 has an invalid length. [ 360.042829][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 362.731630][ T5152] bcm5974 5-1:1.0: could not read from device [ 362.765474][ T5152] bcm5974 5-1:1.0: could not read from device [ 362.807362][ T5152] bcm5974 5-1:1.0: could not read from device [ 362.842981][ T5152] bcm5974 5-1:1.0: could not read from device [ 363.087550][ T6008] bcm5974 5-1:1.0: could not read from device [ 363.128662][ T5152] bcm5974 5-1:1.0: could not read from device [ 363.168930][ T5152] bcm5974 5-1:1.0: could not read from device [ 363.239148][ T5152] bcm5974 5-1:1.0: could not read from device [ 363.264139][ T5152] bcm5974 5-1:1.0: could not read from device [ 363.495452][ T6555] netlink: 'syz.1.197': attribute type 29 has an invalid length. [ 363.520275][ T6564] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 363.530384][ T6569] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 363.701952][ T6571] veth3: entered promiscuous mode [ 363.790109][ T5869] usb 5-1: USB disconnect, device number 3 [ 364.326945][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 364.341771][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 364.352871][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 364.667934][ T6585] loop0: detected capacity change from 0 to 128 [ 364.840805][ T6587] loop2: detected capacity change from 0 to 8 [ 364.978994][ T6587] SQUASHFS error: Failed to read block 0x63a: -5 [ 364.986138][ T6587] SQUASHFS error: Unable to read metadata cache entry [638] [ 364.993705][ T6587] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 365.092104][ T6594] SQUASHFS error: Unable to read metadata cache entry [638] [ 365.100669][ T6594] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 365.164565][ T6595] loop1: detected capacity change from 0 to 128 [ 365.215789][ T6594] SQUASHFS error: Unable to read metadata cache entry [638] [ 365.223406][ T6594] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 365.353927][ T30] audit: type=1800 audit(1752983346.565:6): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.212" name="file1" dev="loop1" ino=1048602 res=0 errno=0 [ 365.930874][ T6595] bio_check_eod: 9 callbacks suppressed [ 365.930958][ T6595] syz.1.212: attempt to access beyond end of device [ 365.930958][ T6595] loop1: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 365.951930][ T6595] syz.1.212: attempt to access beyond end of device [ 365.951930][ T6595] loop1: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 365.966005][ T6595] buffer_io_error: 8 callbacks suppressed [ 365.966094][ T6595] Buffer I/O error on dev loop1, logical block 156, lost async page write [ 365.988705][ T6595] syz.1.212: attempt to access beyond end of device [ 365.988705][ T6595] loop1: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 366.002525][ T6595] Buffer I/O error on dev loop1, logical block 157, lost async page write [ 366.011510][ T6595] syz.1.212: attempt to access beyond end of device [ 366.011510][ T6595] loop1: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 366.025487][ T6595] Buffer I/O error on dev loop1, logical block 158, lost async page write [ 366.034332][ T6595] syz.1.212: attempt to access beyond end of device [ 366.034332][ T6595] loop1: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 366.048131][ T6595] Buffer I/O error on dev loop1, logical block 159, lost async page write [ 366.057137][ T6595] syz.1.212: attempt to access beyond end of device [ 366.057137][ T6595] loop1: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 366.071060][ T6595] Buffer I/O error on dev loop1, logical block 160, lost async page write [ 366.085781][ T6595] syz.1.212: attempt to access beyond end of device [ 366.085781][ T6595] loop1: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 366.101295][ T6595] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 366.111217][ T6595] syz.1.212: attempt to access beyond end of device [ 366.111217][ T6595] loop1: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 366.125142][ T6595] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 366.133981][ T6595] syz.1.212: attempt to access beyond end of device [ 366.133981][ T6595] loop1: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 366.148797][ T6595] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 366.159254][ T6595] syz.1.212: attempt to access beyond end of device [ 366.159254][ T6595] loop1: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 366.173757][ T6595] Buffer I/O error on dev loop1, logical block 150, lost async page write [ 366.188446][ T6595] Buffer I/O error on dev loop1, logical block 151, lost async page write [ 366.579674][ T6600] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 366.671810][ T6600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 367.231212][ T6612] netlink: 'syz.3.218': attribute type 1 has an invalid length. [ 367.415534][ T5867] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 367.438006][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 367.656403][ T6612] veth3: entered promiscuous mode [ 367.675511][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 367.678093][ T6612] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 367.717576][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.778281][ T5867] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 367.788946][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.797806][ T5867] usb 2-1: Product: syz [ 367.802301][ T5867] usb 2-1: Manufacturer: syz [ 367.807454][ T5867] usb 2-1: SerialNumber: syz [ 368.004762][ T5867] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 368.210085][ T5152] bcm5974 2-1:1.0: could not read from device [ 368.235699][ T5152] bcm5974 2-1:1.0: could not read from device [ 368.297301][ T5152] bcm5974 2-1:1.0: could not read from device [ 368.344937][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 368.347360][ T5867] usb 2-1: USB disconnect, device number 3 [ 368.362714][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 368.372102][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 368.384099][ T5152] bcm5974 2-1:1.0: could not read from device [ 368.794599][ T6631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'. [ 370.019513][ T6643] netlink: 'syz.0.230': attribute type 1 has an invalid length. [ 370.119020][ T6643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.285928][ T6643] bond1: (slave gretap1): making interface the new active one [ 370.298921][ T6643] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 370.462024][ T6650] netlink: 'syz.3.233': attribute type 1 has an invalid length. [ 370.694604][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 370.848325][ T6650] veth5: entered promiscuous mode [ 370.869398][ T6650] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 371.003154][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 371.013293][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 371.024691][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 371.727971][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'. [ 371.932952][ T5867] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 371.969778][ T6671] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 372.126066][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 372.154449][ T5867] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.250494][ T5867] usb 5-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 372.260328][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.269366][ T5867] usb 5-1: Product: syz [ 372.273823][ T5867] usb 5-1: Manufacturer: syz [ 372.279052][ T5867] usb 5-1: SerialNumber: syz [ 372.397847][ T5867] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input7 [ 372.586315][ T5152] bcm5974 5-1:1.0: could not read from device [ 372.605397][ T5152] bcm5974 5-1:1.0: could not read from device [ 372.657254][ T5152] bcm5974 5-1:1.0: could not read from device [ 372.689454][ T5152] bcm5974 5-1:1.0: could not read from device [ 372.698761][ T5867] usb 5-1: USB disconnect, device number 4 [ 373.427397][ T6684] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 373.567614][ T6684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.124401][ T6692] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 374.488230][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 374.497226][ T6698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.251'. [ 374.497320][ T6698] netlink: 120 bytes leftover after parsing attributes in process `syz.3.251'. [ 374.497442][ T6698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.251'. [ 374.648741][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 374.672996][ T6699] veth3: entered promiscuous mode [ 374.701019][ T6699] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 376.426262][ T6724] netlink: 'syz.2.262': attribute type 1 has an invalid length. [ 376.576006][ T5869] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 376.671062][ T6724] 8021q: adding VLAN 0 to HW filter on device bond4 [ 376.785643][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 376.859208][ T5869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.918470][ T5869] usb 1-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 376.932596][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.942590][ T5869] usb 1-1: Product: syz [ 376.947541][ T5869] usb 1-1: Manufacturer: syz [ 376.952436][ T5869] usb 1-1: SerialNumber: syz [ 377.159819][ T5869] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8 [ 377.381406][ T5152] bcm5974 1-1:1.0: could not read from device [ 377.449689][ T5152] bcm5974 1-1:1.0: could not read from device [ 377.484862][ T6734] __nla_validate_parse: 4 callbacks suppressed [ 377.484945][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 377.501516][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 377.510827][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 377.547248][ T5869] usb 1-1: USB disconnect, device number 4 [ 377.565837][ T5152] bcm5974 1-1:1.0: could not read from device [ 377.589252][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.266'. [ 377.601965][ T5152] bcm5974 1-1:1.0: could not read from device [ 377.806726][ T6736] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 378.264177][ T6736] veth7: entered promiscuous mode [ 378.284692][ T6736] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 378.792277][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 379.810734][ T6761] netlink: 'syz.3.276': attribute type 1 has an invalid length. [ 379.963447][ T6761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 380.059310][ T6761] bond4: (slave gretap1): making interface the new active one [ 380.072566][ T6761] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 380.407213][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 380.422473][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 380.433598][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 380.502918][ T6769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.279'. [ 381.140715][ T5869] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 381.363177][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 381.386426][ T5869] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.458338][ T5869] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 381.468125][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.476820][ T5869] usb 2-1: Product: syz [ 381.481299][ T5869] usb 2-1: Manufacturer: syz [ 381.486270][ T5869] usb 2-1: SerialNumber: syz [ 381.497290][ T6780] netlink: 'syz.2.284': attribute type 1 has an invalid length. [ 381.709696][ T5869] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9 [ 381.775793][ T5876] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 381.904241][ T5152] bcm5974 2-1:1.0: could not read from device [ 381.905574][ T5869] usb 2-1: USB disconnect, device number 4 [ 381.982220][ T5876] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 381.992018][ T5876] usb 5-1: config 0 has no interface number 0 [ 382.041986][ T6780] veth3: entered promiscuous mode [ 382.070186][ T6780] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 382.103236][ T5876] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 382.112800][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.121533][ T5876] usb 5-1: Product: syz [ 382.126125][ T5876] usb 5-1: Manufacturer: syz [ 382.131031][ T5876] usb 5-1: SerialNumber: syz [ 382.313588][ T6789] 8021q: adding VLAN 0 to HW filter on device bond5 [ 382.432575][ T6789] vlan2: entered promiscuous mode [ 382.438135][ T6789] bond5: entered promiscuous mode [ 382.444314][ T6789] vlan2: entered allmulticast mode [ 382.449991][ T6789] bond5: entered allmulticast mode [ 382.480206][ T5876] usb 5-1: config 0 descriptor?? [ 382.672611][ T6792] input: syz1 as /devices/virtual/input/input10 [ 383.221344][ T5876] usb 5-1: Firmware: major: 219, minor: 211, hardware type: UNKNOWN (124) [ 383.436727][ T5876] usb 5-1: failed to fetch extended address, random address set [ 383.444741][ T5876] usb 5-1: atusb_probe: initialization failed, error = -524 [ 383.453507][ T5876] atusb 5-1:0.128: probe with driver atusb failed with error -524 [ 383.570603][ T5876] usb 5-1: USB disconnect, device number 5 [ 384.018298][ T6803] blktrace: Concurrent blktraces are not allowed on loop1 [ 384.584801][ T6808] netlink: 'syz.3.294': attribute type 27 has an invalid length. [ 384.946672][ T6816] netlink: 36 bytes leftover after parsing attributes in process `syz.1.298'. [ 385.803720][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 385.813090][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 385.821160][ T6824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.822400][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 385.964395][ T6828] vlan2: entered promiscuous mode [ 385.970117][ T6828] bond1: entered promiscuous mode [ 385.976597][ T6828] vlan2: entered allmulticast mode [ 385.981642][ T6831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.301'. [ 385.981924][ T6828] bond1: entered allmulticast mode [ 385.991279][ T6831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.301'. [ 386.431782][ T6834] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 386.531092][ T6834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.481141][ T6847] loop4: detected capacity change from 0 to 128 [ 387.568206][ T6847] netlink: 'syz.4.310': attribute type 27 has an invalid length. [ 388.726511][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.318'. [ 388.736112][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.318'. [ 388.749210][ T5876] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 388.975677][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 389.029111][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.074466][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 389.085227][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.093707][ T5876] usb 2-1: Product: syz [ 389.098548][ T5876] usb 2-1: Manufacturer: syz [ 389.103472][ T5876] usb 2-1: SerialNumber: syz [ 389.169326][ T6868] netlink: 'syz.4.320': attribute type 1 has an invalid length. [ 389.254147][ T5876] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input11 [ 389.338075][ T6868] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.415386][ T5152] bcm5974 2-1:1.0: could not read from device [ 389.470381][ T5152] bcm5974 2-1:1.0: could not read from device [ 389.482995][ T5152] bcm5974 2-1:1.0: could not read from device [ 389.542966][ T5876] usb 2-1: USB disconnect, device number 5 [ 389.576510][ T5152] bcm5974 2-1:1.0: could not read from device [ 390.422477][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 390.422944][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 390.431799][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 390.726484][ T6880] loop2: detected capacity change from 0 to 128 [ 390.872365][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.325'. [ 391.432556][ T6886] loop4: detected capacity change from 0 to 256 [ 391.527355][ T6886] vfat: Bad value for 'time_offset' [ 391.875939][ T6890] netlink: 188 bytes leftover after parsing attributes in process `syz.2.330'. [ 392.302841][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 392.313966][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 392.323549][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 392.427056][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 392.436671][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 392.714502][ T6899] netlink: 'syz.4.333': attribute type 1 has an invalid length. [ 392.888195][ T6899] 8021q: adding VLAN 0 to HW filter on device bond4 [ 394.228259][ T6921] loop1: detected capacity change from 0 to 128 [ 394.420252][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.340'. [ 396.119297][ T6938] loop4: detected capacity change from 0 to 512 [ 396.228390][ T6938] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 396.570721][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 396.580765][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 396.595618][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 396.649993][ T6947] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 396.674069][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 396.686632][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 396.851063][ T6947] 8021q: adding VLAN 0 to HW filter on device bond6 [ 398.127672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 398.225739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 398.358001][ T6963] loop1: detected capacity change from 0 to 128 [ 398.480751][ T6963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'. [ 399.681526][ T6982] netlink: 'syz.3.364': attribute type 1 has an invalid length. [ 399.691990][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 399.701416][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 399.711310][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 399.734921][ T6980] loop1: detected capacity change from 0 to 512 [ 399.808572][ T6982] 8021q: adding VLAN 0 to HW filter on device bond7 [ 399.831877][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 399.958752][ T6980] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 401.096665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 401.199620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 401.506694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 401.916235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 401.929864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 402.131089][ T6994] blktrace: Concurrent blktraces are not allowed on loop7 [ 402.326542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 403.481481][ T7021] netlink: 'syz.1.379': attribute type 1 has an invalid length. [ 403.573687][ T7021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.845915][ T7026] loop4: detected capacity change from 0 to 512 [ 403.908273][ T7024] bond2: (slave gretap1): making interface the new active one [ 403.921043][ T7024] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 403.943361][ T7026] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 407.279531][ T7061] __nla_validate_parse: 1 callbacks suppressed [ 407.279617][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 407.296064][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 407.305617][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 407.357726][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 407.368829][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 408.563136][ T7075] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 408.580270][ T7075] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 410.438273][ T7075] loop1: detected capacity change from 0 to 4096 [ 410.590900][ T7075] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 411.457149][ T7075] ntfs3(loop1): Failed to read $UpCase (-4). [ 412.728700][ T7093] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 413.139381][ T7093] veth3: entered promiscuous mode [ 413.161365][ T7093] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 413.967932][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.974711][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.636213][ T5869] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 414.822313][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 414.831746][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 414.845719][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 414.875380][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 414.924396][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 414.936231][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.946563][ T5869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 414.956764][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 414.968730][ T5869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 414.979471][ T5869] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 414.988994][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.120868][ T7112] netlink: 172 bytes leftover after parsing attributes in process `syz.1.409'. [ 415.246227][ T5869] usb 1-1: config 0 descriptor?? [ 415.256697][ T7105] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 415.545251][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.552883][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.560733][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.568799][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.576977][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.584501][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.592462][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.600194][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.607877][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.615588][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.623075][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.630663][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.641667][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.650359][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.657941][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.665608][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.673073][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.680736][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.688327][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.695992][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.703491][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.711041][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.718592][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.726320][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.733793][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.744407][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.753151][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.760873][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.768764][ T5817] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 415.790721][ T5107] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 415.805911][ T5867] usb 1-1: USB disconnect, device number 5 [ 417.756579][ T7132] blktrace: Concurrent blktraces are not allowed on loop5 [ 419.649040][ T7149] input: syz1 as /devices/virtual/input/input12 [ 420.646270][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.423'. [ 420.730273][ T7154] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 420.897671][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 420.907308][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 420.917075][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 422.954251][ T7165] loop1: detected capacity change from 0 to 2048 [ 423.088944][ T7165] /dev/loop1: Can't open blockdev [ 423.413327][ T7171] blktrace: Concurrent blktraces are not allowed on loop1 [ 424.582162][ T7187] loop0: detected capacity change from 0 to 512 [ 425.035572][ T7187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.048986][ T7187] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.282402][ T7187] xt_HMARK: proto mask must be zero with L3 mode [ 425.867620][ T7205] loop4: detected capacity change from 0 to 256 [ 425.927638][ T7205] vfat: Bad value for 'time_offset' [ 426.370225][ T7208] blktrace: Concurrent blktraces are not allowed on loop7 [ 426.496938][ T5821] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 426.575475][ T5821] EXT4-fs (loop0): Remounting filesystem read-only [ 427.340565][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.369328][ T1853] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.497963][ T1853] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.706315][ T1853] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.884708][ T7225] input: syz1 as /devices/virtual/input/input13 [ 427.936318][ T1853] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.705844][ T1853] bridge_slave_1: left allmulticast mode [ 428.711829][ T1853] bridge_slave_1: left promiscuous mode [ 428.718800][ T1853] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.799989][ T1853] bridge_slave_0: left allmulticast mode [ 428.806712][ T1853] bridge_slave_0: left promiscuous mode [ 428.813473][ T1853] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.273847][ T1853] bond1 (unregistering): (slave gretap1): Releasing active interface [ 429.595597][ T1853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.648140][ T1853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.703878][ T1853] bond0 (unregistering): Released all slaves [ 429.730138][ T1853] bond1 (unregistering): Released all slaves [ 429.842799][ T1853] bond2 (unregistering): (slave veth3): Releasing backup interface [ 429.878920][ T1853] bond2 (unregistering): Released all slaves [ 430.416912][ T1853] hsr_slave_0: left promiscuous mode [ 430.441176][ T1853] hsr_slave_1: left promiscuous mode [ 430.449894][ T1853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.459307][ T1853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.554513][ T1853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.562891][ T1853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.122076][ T7243] loop1: detected capacity change from 0 to 512 [ 431.510759][ T1853] veth1_macvtap: left promiscuous mode [ 431.516882][ T1853] veth0_macvtap: left promiscuous mode [ 431.522998][ T1853] veth1_vlan: left promiscuous mode [ 431.529020][ T1853] veth0_vlan: left promiscuous mode [ 433.297052][ T5107] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 433.342741][ T5107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 433.446138][ T5107] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 433.502672][ T7243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.516651][ T7243] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.557750][ T5107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 433.607348][ T5107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.216190][ T1853] team0 (unregistering): Port device team_slave_1 removed [ 434.253979][ T1853] team0 (unregistering): Port device team_slave_0 removed [ 435.044065][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.868376][ T49] Bluetooth: hci4: command tx timeout [ 437.673385][ T7254] chnl_net:caif_netlink_parms(): no params data found [ 437.932685][ T49] Bluetooth: hci4: command tx timeout [ 440.014188][ T49] Bluetooth: hci4: command tx timeout [ 440.686853][ T7299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.471'. [ 440.777690][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.785719][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.793741][ T7254] bridge_slave_0: entered allmulticast mode [ 440.805198][ T7254] bridge_slave_0: entered promiscuous mode [ 441.088284][ T7254] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.099210][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.107352][ T7254] bridge_slave_1: entered allmulticast mode [ 441.117988][ T7254] bridge_slave_1: entered promiscuous mode [ 441.416313][ T7254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.512540][ T7254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.771467][ T7254] team0: Port device team_slave_0 added [ 441.803659][ T7254] team0: Port device team_slave_1 added [ 441.960350][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.968553][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.979309][ C0] hrtimer: interrupt took 341730 ns [ 441.997074][ T7254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.022675][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.032232][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.063940][ T7254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.105669][ T49] Bluetooth: hci4: command tx timeout [ 442.519061][ T7254] hsr_slave_0: entered promiscuous mode [ 442.530040][ T7254] hsr_slave_1: entered promiscuous mode [ 442.539702][ T7254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.548085][ T7254] Cannot create hsr debugfs directory [ 443.238885][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 443.248423][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 443.258097][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 443.996640][ T7336] netlink: 40 bytes leftover after parsing attributes in process `syz.4.484'. [ 444.593489][ T7254] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 444.746946][ T7254] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 444.778910][ T7343] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 444.893110][ T7343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 444.904560][ T7254] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 445.044123][ T7254] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 445.055425][ T5876] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 445.165747][ T7343] vlan3: entered promiscuous mode [ 445.171543][ T7343] bond4: entered promiscuous mode [ 445.177987][ T7343] vlan3: entered allmulticast mode [ 445.183383][ T7343] bond4: entered allmulticast mode [ 445.226369][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 445.258825][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 445.272371][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.282730][ T5876] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 445.293628][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 445.305916][ T5876] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 445.316439][ T5876] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 445.325953][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.543779][ T5876] usb 5-1: config 0 descriptor?? [ 445.557746][ T7346] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 446.075965][ T49] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 446.088506][ T5867] usb 5-1: USB disconnect, device number 6 [ 446.428547][ T7359] 8021q: VLANs not supported on vcan0 [ 446.857398][ T7254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.038550][ T7254] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.192021][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.199924][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.336195][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.343843][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.743333][ T7374] loop4: detected capacity change from 0 to 512 [ 449.125380][ T7374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.138871][ T7374] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.685783][ T5812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.769078][ T7254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.042108][ T7403] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 451.177063][ T7403] 8021q: adding VLAN 0 to HW filter on device bond5 [ 451.267326][ T7406] binder: BINDER_SET_CONTEXT_MGR already set [ 451.277336][ T7406] binder: 7405:7406 ioctl 40046207 0 returned -16 [ 451.393065][ T7403] vlan4: entered promiscuous mode [ 451.398810][ T7403] bond5: entered promiscuous mode [ 451.404893][ T7403] vlan4: entered allmulticast mode [ 451.411040][ T7403] bond5: entered allmulticast mode [ 452.226228][ T7415] tipc: Enabling of bearer rejected, failed to enable media [ 453.048024][ T7423] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 456.517865][ T7254] veth0_vlan: entered promiscuous mode [ 456.674612][ T7254] veth1_vlan: entered promiscuous mode [ 457.071218][ T7436] loop1: detected capacity change from 0 to 512 [ 457.182586][ T7254] veth0_macvtap: entered promiscuous mode [ 457.345884][ T7254] veth1_macvtap: entered promiscuous mode [ 457.379810][ T7436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.393108][ T7436] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.658637][ T7254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.804416][ T7254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.938015][ T7254] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.948501][ T7254] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.958007][ T7254] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.967293][ T7254] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.189883][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.177950][ T7457] loop1: detected capacity change from 0 to 256 [ 459.190300][ T7459] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 459.306053][ T7459] 8021q: adding VLAN 0 to HW filter on device bond6 [ 459.368147][ T7457] FAT-fs (loop1): bogus number of FAT sectors [ 459.374550][ T7457] FAT-fs (loop1): Can't find a valid FAT filesystem [ 459.516686][ T7464] vlan4: entered promiscuous mode [ 459.522044][ T7464] bond6: entered promiscuous mode [ 459.528575][ T7464] vlan4: entered allmulticast mode [ 459.533961][ T7464] bond6: entered allmulticast mode [ 461.960920][ T7490] tipc: Enabling of bearer rejected, failed to enable media [ 463.716846][ T7506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.517'. [ 463.728216][ T7506] netlink: 72 bytes leftover after parsing attributes in process `syz.4.517'. [ 465.337711][ T7523] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 465.516363][ T7523] 8021q: adding VLAN 0 to HW filter on device bond8 [ 465.846004][ T7529] vlan3: entered promiscuous mode [ 465.851357][ T7529] bond8: entered promiscuous mode [ 465.861651][ T7529] vlan3: entered allmulticast mode [ 465.867374][ T7529] bond8: entered allmulticast mode [ 467.513412][ T7548] loop1: detected capacity change from 0 to 512 [ 467.826620][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.530'. [ 467.836376][ T7552] netlink: 72 bytes leftover after parsing attributes in process `syz.3.530'. [ 467.901408][ T7548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.915333][ T7548] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.126348][ T4006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.134840][ T4006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.443032][ T1853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.451410][ T1853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.538759][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.737425][ T7558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.531'. [ 470.266185][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 470.457960][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 470.509635][ T5873] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 470.518503][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.534576][ T5873] usb 5-1: config 0 has no interface number 0 [ 470.619791][ T5873] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 470.637007][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.645632][ T5873] usb 5-1: Product: syz [ 470.650090][ T5873] usb 5-1: Manufacturer: syz [ 470.655345][ T5873] usb 5-1: SerialNumber: syz [ 470.769205][ T5873] usb 5-1: config 0 descriptor?? [ 470.856190][ T5873] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 470.863002][ T5873] usb 5-1: No valid video chain found. [ 472.836624][ T7598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.542'. [ 472.846987][ T7598] netlink: 72 bytes leftover after parsing attributes in process `syz.2.542'. [ 473.525956][ T5876] usb 5-1: USB disconnect, device number 7 [ 474.178856][ T7606] kvm: emulating exchange as write [ 475.273508][ T7623] overlayfs: failed to resolve './file1': -2 [ 475.398471][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.405606][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.553261][ T5876] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 475.773534][ T5876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.784814][ T5876] usb 6-1: config 0 has no interfaces? [ 475.791014][ T5876] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 475.800681][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.945135][ T5876] usb 6-1: config 0 descriptor?? [ 476.244742][ T5876] usb 6-1: USB disconnect, device number 2 [ 477.004692][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.554'. [ 477.015872][ T7643] netlink: 72 bytes leftover after parsing attributes in process `syz.2.554'. [ 478.143021][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.558'. [ 478.421189][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.557'. [ 479.447750][ T7671] overlayfs: failed to resolve './file1': -2 [ 479.572088][ T7674] bridge_slave_0: left allmulticast mode [ 479.578282][ T7674] bridge_slave_0: left promiscuous mode [ 479.585582][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.887462][ T7674] bridge_slave_1: left allmulticast mode [ 479.893699][ T7674] bridge_slave_1: left promiscuous mode [ 479.901037][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.118552][ T7674] bond0: (slave bond_slave_0): Releasing backup interface [ 480.217474][ T7674] bond0: (slave bond_slave_1): Releasing backup interface [ 480.300212][ T7674] team0: Port device team_slave_0 removed [ 480.367015][ T7674] team0: Port device team_slave_1 removed [ 480.377249][ T7674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.385105][ T7674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.423009][ T7674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.431439][ T7674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.654411][ T7674] bond1: (slave gretap1): Releasing active interface [ 480.831531][ T7679] bridge_slave_0: left allmulticast mode [ 480.837647][ T7679] bridge_slave_0: left promiscuous mode [ 480.844045][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.925438][ T5873] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 480.977612][ T7679] bridge_slave_1: left allmulticast mode [ 480.983899][ T7679] bridge_slave_1: left promiscuous mode [ 480.991193][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.123961][ T5873] usb 6-1: config 0 has no interfaces? [ 481.246752][ T5873] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 481.256862][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.265445][ T5873] usb 6-1: Product: syz [ 481.269844][ T5873] usb 6-1: Manufacturer: syz [ 481.279240][ T5873] usb 6-1: SerialNumber: syz [ 481.411030][ T7679] bond0: (slave bond_slave_0): Releasing backup interface [ 481.483464][ T5873] usb 6-1: config 0 descriptor?? [ 481.638178][ T7679] bond0: (slave bond_slave_1): Releasing backup interface [ 481.953221][ T7679] team0: Port device team_slave_0 removed [ 482.065426][ T7679] team0: Port device team_slave_1 removed [ 482.075894][ T7679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.083580][ T7679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.226949][ T7679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.234686][ T7679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.521666][ T7679] bond2: (slave gretap1): Releasing active interface [ 482.936277][ T7685] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 483.065540][ T7679] bond3: (slave veth3): Releasing backup interface [ 483.696156][ T5873] usb 6-1: USB disconnect, device number 3 [ 484.953003][ T7717] overlayfs: failed to resolve './file1': -2 [ 485.657354][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 487.019298][ T7746] input: syz0 as /devices/virtual/input/input14 [ 487.466175][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 487.494082][ T7751] bond0: entered promiscuous mode [ 487.502456][ T7751] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 487.785552][ T7751] bond0: left promiscuous mode [ 488.177137][ T5876] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 488.271726][ T5867] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 488.406121][ T5876] usb 5-1: config 0 has no interfaces? [ 488.466520][ T5876] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 488.476300][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.484629][ T5876] usb 5-1: Product: syz [ 488.489520][ T5876] usb 5-1: Manufacturer: syz [ 488.494414][ T5876] usb 5-1: SerialNumber: syz [ 488.502719][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 488.570230][ T5867] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 488.579277][ T5867] usb 6-1: config 179 has an invalid descriptor of length 48, skipping remainder of the config [ 488.591628][ T5867] usb 6-1: config 179 has no interface number 0 [ 488.598710][ T5867] usb 6-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 488.612627][ T5867] usb 6-1: config 179 interface 65 has no altsetting 0 [ 488.620496][ T5867] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 488.630158][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.663920][ T5876] usb 5-1: config 0 descriptor?? [ 489.147981][ T7757] syz.5.588 uses obsolete (PF_INET,SOCK_PACKET) [ 489.200423][ T7757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.211088][ T7757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.331741][ T5876] usb 6-1: USB disconnect, device number 4 [ 490.016122][ T7772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.594'. [ 490.276129][ T5867] usb 5-1: USB disconnect, device number 8 [ 491.744175][ T5876] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 492.029185][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 492.057767][ T5876] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 492.066916][ T5876] usb 5-1: config 179 has no interface number 0 [ 492.073607][ T5876] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 492.085619][ T5876] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 492.097744][ T5876] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 492.110058][ T5876] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 492.123103][ T5876] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 492.141044][ T5876] usb 5-1: config 179 interface 65 has no altsetting 0 [ 492.149904][ T5876] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 492.159750][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.274785][ T7798] loop1: detected capacity change from 0 to 256 [ 492.369348][ T5876] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input15 [ 492.456138][ T5152] input input15: unable to receive magic message: -110 [ 492.490912][ T7798] FAT-fs (loop1): bogus number of FAT sectors [ 492.492064][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.498011][ T7798] FAT-fs (loop1): Can't find a valid FAT filesystem [ 492.507702][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.613739][ T5152] input input15: unable to receive magic message: -32 [ 492.727053][ T5152] input input15: unable to receive magic message: -32 [ 492.816323][ T5876] usb 5-1: USB disconnect, device number 9 [ 492.822498][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 492.822760][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 494.844372][ T5876] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 495.119118][ T5876] usb 5-1: config 0 has no interfaces? [ 495.206912][ T5876] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 495.216772][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.225421][ T5876] usb 5-1: Product: syz [ 495.229872][ T5876] usb 5-1: Manufacturer: syz [ 495.234747][ T5876] usb 5-1: SerialNumber: syz [ 495.427928][ T5876] usb 5-1: config 0 descriptor?? [ 495.891724][ T7824] input: syz0 as /devices/virtual/input/input17 [ 496.182841][ T7824] input: syz1 as /devices/virtual/input/input16 [ 501.300464][ T7881] netlink: 'syz.3.625': attribute type 1 has an invalid length. [ 501.483025][ T7881] 8021q: adding VLAN 0 to HW filter on device bond9 [ 501.786486][ T7884] vlan4: entered promiscuous mode [ 501.791847][ T7884] bond9: entered promiscuous mode [ 501.798284][ T7884] vlan4: entered allmulticast mode [ 501.803694][ T7884] bond9: entered allmulticast mode [ 502.787927][ T7895] netlink: 'syz.1.631': attribute type 3 has an invalid length. [ 508.071996][ T5876] usb 5-1: USB disconnect, device number 10 [ 508.304788][ T7950] loop1: detected capacity change from 0 to 256 [ 508.367534][ T7950] vfat: Bad value for 'time_offset' [ 508.754524][ T7958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.878620][ T7958] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 510.474735][ T7974] loop1: detected capacity change from 0 to 128 [ 510.580669][ T7974] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 510.608292][ T7974] System zones: 1-3, 19-19, 35-36 [ 510.708419][ T7974] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 510.796020][ T7974] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 511.196561][ T30] audit: type=1800 audit(1752983492.375:7): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.653" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 512.134194][ T5815] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 514.675298][ T5876] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 514.722938][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.661'. [ 514.732907][ T8015] 8021q: VLANs not supported on nlmon0 [ 514.918694][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 514.930940][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 514.941764][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 515.104632][ T5876] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 515.114532][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.123039][ T5876] usb 2-1: Product: syz [ 515.127576][ T5876] usb 2-1: Manufacturer: syz [ 515.132451][ T5876] usb 2-1: SerialNumber: syz [ 515.333989][ T5876] usb 2-1: config 0 descriptor?? [ 515.717638][ T5876] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 515.866992][ T5876] usb 2-1: USB disconnect, device number 6 [ 516.339016][ T8025] syz.4.663 (8025) used greatest stack depth: 2472 bytes left [ 516.545373][ T8022] netlink: 136 bytes leftover after parsing attributes in process `syz.3.664'. [ 516.554728][ T8022] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 518.156264][ T8031] loop5: detected capacity change from 0 to 256 [ 518.297684][ T8031] FAT-fs (loop5): bogus number of FAT sectors [ 518.304373][ T8031] FAT-fs (loop5): Can't find a valid FAT filesystem [ 518.976696][ T8039] netlink: 68 bytes leftover after parsing attributes in process `syz.3.670'. [ 519.919614][ T8047] ===================================================== [ 519.927168][ T8047] BUG: KMSAN: uninit-value in sctp_inq_pop+0x14dc/0x19e0 [ 519.934386][ T8047] sctp_inq_pop+0x14dc/0x19e0 [ 519.939560][ T8047] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 519.944681][ T8047] sctp_inq_push+0x2a6/0x350 [ 519.949536][ T8047] sctp_backlog_rcv+0x3c7/0xda0 [ 519.954543][ T8047] sk_backlog_rcv+0x142/0x420 [ 519.959494][ T8047] __release_sock+0x1d3/0x330 [ 519.964328][ T8047] release_sock+0x6b/0x270 [ 519.969417][ T8047] sctp_wait_for_connect+0x458/0x820 [ 519.974873][ T8047] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 519.985273][ T8047] sctp_sendmsg+0x3910/0x49f0 [ 519.990240][ T8047] inet_sendmsg+0x26c/0x2a0 [ 519.996347][ T8047] __sock_sendmsg+0x278/0x3d0 [ 520.001244][ T8047] __sys_sendto+0x593/0x720 [ 520.007303][ T8047] __x64_sys_sendto+0x130/0x200 [ 520.012303][ T8047] x64_sys_call+0x3c0b/0x3db0 [ 520.017277][ T8047] do_syscall_64+0xd9/0x210 [ 520.021933][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.028074][ T8047] [ 520.030544][ T8047] Uninit was stored to memory at: [ 520.035992][ T8047] sctp_inq_pop+0x144a/0x19e0 [ 520.040848][ T8047] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 520.046090][ T8047] sctp_inq_push+0x2a6/0x350 [ 520.050837][ T8047] sctp_backlog_rcv+0x3c7/0xda0 [ 520.056077][ T8047] sk_backlog_rcv+0x142/0x420 [ 520.060928][ T8047] __release_sock+0x1d3/0x330 [ 520.065850][ T8047] release_sock+0x6b/0x270 [ 520.070432][ T8047] sctp_wait_for_connect+0x458/0x820 [ 520.075957][ T8047] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 520.086077][ T8047] sctp_sendmsg+0x3910/0x49f0 [ 520.090983][ T8047] inet_sendmsg+0x26c/0x2a0 [ 520.096696][ T8047] __sock_sendmsg+0x278/0x3d0 [ 520.101547][ T8047] __sys_sendto+0x593/0x720 [ 520.106297][ T8047] __x64_sys_sendto+0x130/0x200 [ 520.111286][ T8047] x64_sys_call+0x3c0b/0x3db0 [ 520.116297][ T8047] do_syscall_64+0xd9/0x210 [ 520.120943][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.127070][ T8047] [ 520.129471][ T8047] Uninit was created at: [ 520.133911][ T8047] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 520.140715][ T8047] kmalloc_reserve+0x22f/0x4b0 [ 520.145719][ T8047] __alloc_skb+0x347/0x7d0 [ 520.150255][ T8047] sctp_packet_transmit+0x18a1/0x46d0 [ 520.155886][ T8047] sctp_outq_flush+0x1c7d/0x67c0 [ 520.160996][ T8047] sctp_outq_uncork+0x9e/0xc0 [ 520.166035][ T8047] sctp_do_sm+0x8c8e/0x9720 [ 520.170751][ T8047] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 520.176041][ T8047] sctp_inq_push+0x2a6/0x350 [ 520.180792][ T8047] sctp_backlog_rcv+0x3c7/0xda0 [ 520.190237][ T8047] sk_backlog_rcv+0x142/0x420 [ 520.196197][ T8047] __release_sock+0x1d3/0x330 [ 520.201036][ T8047] release_sock+0x6b/0x270 [ 520.205737][ T8047] sctp_wait_for_connect+0x458/0x820 [ 520.211180][ T8047] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 520.216815][ T8047] sctp_sendmsg+0x3910/0x49f0 [ 520.221636][ T8047] inet_sendmsg+0x26c/0x2a0 [ 520.226410][ T8047] __sock_sendmsg+0x278/0x3d0 [ 520.231254][ T8047] __sys_sendto+0x593/0x720 [ 520.236068][ T8047] __x64_sys_sendto+0x130/0x200 [ 520.241048][ T8047] x64_sys_call+0x3c0b/0x3db0 [ 520.245974][ T8047] do_syscall_64+0xd9/0x210 [ 520.250633][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.256802][ T8047] [ 520.259239][ T8047] CPU: 0 UID: 0 PID: 8047 Comm: syz.3.672 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(none) [ 520.271497][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 520.281767][ T8047] ===================================================== [ 520.293236][ T8047] Disabling lock debugging due to kernel taint [ 520.300758][ T8047] Kernel panic - not syncing: kmsan.panic set ... [ 520.307334][ T8047] CPU: 0 UID: 0 PID: 8047 Comm: syz.3.672 Tainted: G B 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(none) [ 520.321084][ T8047] Tainted: [B]=BAD_PAGE [ 520.325444][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 520.335688][ T8047] Call Trace: [ 520.339082][ T8047] [ 520.342104][ T8047] __dump_stack+0x26/0x30 [ 520.346598][ T8047] dump_stack_lvl+0x53/0x270 [ 520.351347][ T8047] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 520.357328][ T8047] dump_stack+0x1e/0x25 [ 520.361643][ T8047] panic+0x4bd/0xd50 [ 520.365737][ T8047] kmsan_report+0x31c/0x320 [ 520.370396][ T8047] ? __msan_warning+0x1b/0x30 [ 520.375233][ T8047] ? sctp_inq_pop+0x14dc/0x19e0 [ 520.380259][ T8047] ? sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 520.385590][ T8047] ? sctp_inq_push+0x2a6/0x350 [ 520.390542][ T8047] ? sctp_backlog_rcv+0x3c7/0xda0 [ 520.395850][ T8047] ? sk_backlog_rcv+0x142/0x420 [ 520.400920][ T8047] ? __release_sock+0x1d3/0x330 [ 520.405930][ T8047] ? release_sock+0x6b/0x270 [ 520.410690][ T8047] ? sctp_wait_for_connect+0x458/0x820 [ 520.416313][ T8047] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 520.422009][ T8047] ? sctp_sendmsg+0x3910/0x49f0 [ 520.427029][ T8047] ? inet_sendmsg+0x26c/0x2a0 [ 520.431855][ T8047] ? __sock_sendmsg+0x278/0x3d0 [ 520.436875][ T8047] ? __sys_sendto+0x593/0x720 [ 520.441688][ T8047] ? __x64_sys_sendto+0x130/0x200 [ 520.446853][ T8047] ? x64_sys_call+0x3c0b/0x3db0 [ 520.451869][ T8047] ? do_syscall_64+0xd9/0x210 [ 520.456683][ T8047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.462896][ T8047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.469129][ T8047] ? sched_clock_cpu+0x59/0xa80 [ 520.474142][ T8047] ? kmsan_get_metadata+0xfb/0x160 [ 520.479402][ T8047] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 520.485916][ T8047] ? kmsan_get_metadata+0xfb/0x160 [ 520.491207][ T8047] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 520.497309][ T8047] ? kmsan_get_metadata+0xfb/0x160 [ 520.502652][ T8047] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 520.508630][ T8047] ? kmsan_get_metadata+0xfb/0x160 [ 520.513901][ T8047] __msan_warning+0x1b/0x30 [ 520.518538][ T8047] sctp_inq_pop+0x14dc/0x19e0 [ 520.523416][ T8047] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 520.528556][ T8047] ? __schedule+0x2682/0x76c0 [ 520.533435][ T8047] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 520.539702][ T8047] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 520.545369][ T8047] sctp_inq_push+0x2a6/0x350 [ 520.550144][ T8047] sctp_backlog_rcv+0x3c7/0xda0 [ 520.555185][ T8047] ? kmsan_get_metadata+0xfb/0x160 [ 520.560467][ T8047] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 520.566095][ T8047] sk_backlog_rcv+0x142/0x420 [ 520.570981][ T8047] __release_sock+0x1d3/0x330 [ 520.575833][ T8047] release_sock+0x6b/0x270 [ 520.580430][ T8047] sctp_wait_for_connect+0x458/0x820 [ 520.585887][ T8047] ? __pfx_autoremove_wake_function+0x10/0x10 [ 520.592161][ T8047] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 520.597751][ T8047] ? kmsan_get_metadata+0xfb/0x160 [ 520.603091][ T8047] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 520.609097][ T8047] sctp_sendmsg+0x3910/0x49f0 [ 520.614120][ T8047] ? kmsan_internal_poison_memory+0xa0/0xa0 [ 520.620269][ T8047] ? __pfx_sctp_sendmsg+0x10/0x10 [ 520.625449][ T8047] inet_sendmsg+0x26c/0x2a0 [ 520.630112][ T8047] __sock_sendmsg+0x278/0x3d0 [ 520.635095][ T8047] __sys_sendto+0x593/0x720 [ 520.639770][ T8047] ? kmsan_get_metadata+0xfb/0x160 [ 520.645056][ T8047] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 520.651074][ T8047] __x64_sys_sendto+0x130/0x200 [ 520.656094][ T8047] x64_sys_call+0x3c0b/0x3db0 [ 520.660951][ T8047] do_syscall_64+0xd9/0x210 [ 520.665599][ T8047] ? irqentry_exit+0x16/0x60 [ 520.670323][ T8047] ? clear_bhb_loop+0x40/0x90 [ 520.675184][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.681309][ T8047] RIP: 0033:0x7fdea3f8e9a9 [ 520.685869][ T8047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.705656][ T8047] RSP: 002b:00007fdea4d4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 520.714269][ T8047] RAX: ffffffffffffffda RBX: 00007fdea41b5fa0 RCX: 00007fdea3f8e9a9 [ 520.722392][ T8047] RDX: 000000000000cf88 RSI: 0000200000847fff RDI: 0000000000000004 [ 520.730495][ T8047] RBP: 00007fdea4010d69 R08: 000020000005ffe4 R09: 000000000000001c [ 520.738587][ T8047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.746688][ T8047] R13: 0000000000000000 R14: 00007fdea41b5fa0 R15: 00007ffec9ee3b58 [ 520.754905][ T8047] [ 520.758472][ T8047] Kernel Offset: disabled [ 520.762911][ T8047] Rebooting in 86400 seconds..