last executing test programs: 12.391425906s ago: executing program 2 (id=415): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 12.288455716s ago: executing program 0 (id=416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) 11.544862765s ago: executing program 2 (id=418): bind$inet(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1/file0\x00', 0x101c813, &(0x7f0000000780)={[{@nodelalloc}, {@jqfmt_vfsv1}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noblock_validity}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file1/file0'}}]}, 0x0, 0x524, &(0x7f0000000c00)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x8, 0x0, 0x10000) 11.293141037s ago: executing program 0 (id=419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000001140)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = userfaultfd(0x1) close(r1) 10.341382976s ago: executing program 0 (id=423): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0xb0581000) cachestat(r2, &(0x7f0000000040)={0x0, 0x4}, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 10.163703004s ago: executing program 2 (id=424): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000700)='./bus\x00', 0x8c0, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES64, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x7) 9.641415625s ago: executing program 1 (id=428): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x78, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "3bce5a3801516524a9b2f4989e70f5053314614779293759bba284467d6e2d5a", "33f90c166a38c8add632356bbf5d5b5a", {"4ccf866522fea26fec53ae8226795aca", "c179ec8e25addbedb764d7d7a9005ff6"}}}}}}}, 0x0) 9.419455069s ago: executing program 2 (id=429): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 9.39524893s ago: executing program 0 (id=430): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)}}, {{0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000001400)="204a8567cb1126579765f5", 0xb}, {0x0}, {0x0}], 0x4, &(0x7f00000017c0)}}], 0x4, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r0, 0x2) 8.81053784s ago: executing program 1 (id=432): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000600)="a4", 0x1, 0x10007) writev(r1, &(0x7f0000003b00)=[{&(0x7f0000002680)="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", 0x61b}], 0x1) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) 8.708962349s ago: executing program 3 (id=433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68f}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x4000001) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 8.623890585s ago: executing program 2 (id=434): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0xfe, {0x2, 0x1f, 0x16, 0x16, 0x0, 0x8000}}) 7.54453266s ago: executing program 0 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r7, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc0c4) 7.400791652s ago: executing program 2 (id=436): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) 7.16723731s ago: executing program 3 (id=437): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYRES64=r0], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfa}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 7.063912485s ago: executing program 1 (id=438): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @adiantum, 0x3, '\x00', @auto="1326bdc306dbfded9f81000000000016"}) 5.832385175s ago: executing program 0 (id=439): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x8096) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 5.528924167s ago: executing program 3 (id=441): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000300)='net_dev_start_xmit\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 5.424788655s ago: executing program 1 (id=442): socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x87) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r0], 0x0) 4.832959872s ago: executing program 3 (id=443): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sendto$inet(r0, &(0x7f00000007c0), 0x0, 0x44095, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x20, 0x0, @rand_addr=' \x01\x00', 0xf0}}}, 0x32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) pselect6(0x0, 0x0, 0x0, &(0x7f0000000300)={0x9, 0x5, 0x3, 0x100, 0x101, 0x57f, 0x3c21, 0xdd60000000000000}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x8]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000000000700850000001700000018110000", @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000040000008500000082000000bf910000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.573578705s ago: executing program 1 (id=445): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)}}, {{0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000001400)="204a8567cb1126579765f5", 0xb}, {0x0}, {0x0}], 0x4, &(0x7f00000017c0)}}], 0x4, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r0, 0x2) 3.259093701s ago: executing program 3 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x2000000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, 0x0, 0x0) write(r3, 0x0, 0x0) 2.978694821s ago: executing program 4 (id=448): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000600)="a4", 0x1, 0x10007) writev(r1, &(0x7f0000003b00)=[{&(0x7f0000002680)="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", 0x610}], 0x1) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) 2.395403859s ago: executing program 4 (id=449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r7, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc0c4) 2.177067078s ago: executing program 1 (id=450): syz_usb_connect(0x0, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902290001000000000904000000020201"], 0x0) 1.902118937s ago: executing program 3 (id=451): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/222, 0xde) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x8, "4f49e9fb0847c1d1"}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x3}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) 1.374279563s ago: executing program 4 (id=452): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @adiantum, 0x3, '\x00', @auto="1326bdc306dbfded9f81000000000016"}) 1.105217074s ago: executing program 4 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r2, @ANYBLOB="010023bd7000000020003b00000008000300", @ANYRES32=r1, @ANYBLOB="2b00330030b0f800ffffffffffff080211000000505050505050050010008f0110000d0001000103c8ecb60092003300802009000802110000010802110000005050505050509f00030000000000000064000010030105"], 0xe0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) open(0x0, 0x80ff, 0x0) openat$mixer(0xffffff9c, 0x0, 0x40a400, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 396.705046ms ago: executing program 4 (id=454): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f0085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) 0s ago: executing program 4 (id=455): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="235109563d12", 0x6}], 0x1}}], 0x1, 0xd0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439ef5b6d21bc3c27abc9d63a8", 0xd}], 0x2}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 188.162413][ T5769] cgroup: Unknown subsys name 'net' [ 188.313519][ T5769] cgroup: Unknown subsys name 'cpuset' [ 188.330268][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.656487][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.663604][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 238.154417][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 242.392017][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.406351][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.422563][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.431112][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.441468][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.451033][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.459507][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.469353][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.479373][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.491787][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.502592][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.516190][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.522871][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.524705][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.544154][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.546419][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.561989][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.573871][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.577958][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.587522][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.593706][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.614245][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.625714][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.641615][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.651667][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.012922][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 244.079779][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 244.557094][ T5085] Bluetooth: hci2: command tx timeout [ 244.714520][ T5085] Bluetooth: hci3: command tx timeout [ 244.720444][ T5794] Bluetooth: hci1: command tx timeout [ 244.726361][ T5085] Bluetooth: hci0: command tx timeout [ 244.803468][ T5794] Bluetooth: hci4: command tx timeout [ 244.835395][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 244.999409][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 245.236311][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.244068][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.251571][ T5797] bridge_slave_0: entered allmulticast mode [ 245.261195][ T5797] bridge_slave_0: entered promiscuous mode [ 245.315524][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.323390][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.331096][ T5797] bridge_slave_1: entered allmulticast mode [ 245.340782][ T5797] bridge_slave_1: entered promiscuous mode [ 245.350182][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 245.377812][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.385933][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.393883][ T5787] bridge_slave_0: entered allmulticast mode [ 245.403919][ T5787] bridge_slave_0: entered promiscuous mode [ 245.634412][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.642593][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.650341][ T5787] bridge_slave_1: entered allmulticast mode [ 245.665298][ T5787] bridge_slave_1: entered promiscuous mode [ 245.711286][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.850955][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.042079][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.168548][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.186359][ T5797] team0: Port device team_slave_0 added [ 246.345986][ T5797] team0: Port device team_slave_1 added [ 246.439476][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.447302][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.455436][ T5789] bridge_slave_0: entered allmulticast mode [ 246.465022][ T5789] bridge_slave_0: entered promiscuous mode [ 246.576845][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.585834][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.593753][ T5789] bridge_slave_1: entered allmulticast mode [ 246.603594][ T5789] bridge_slave_1: entered promiscuous mode [ 246.626031][ T5787] team0: Port device team_slave_0 added [ 246.634130][ T5794] Bluetooth: hci2: command tx timeout [ 246.634138][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.634536][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.654900][ T5785] bridge_slave_0: entered allmulticast mode [ 246.667973][ T5785] bridge_slave_0: entered promiscuous mode [ 246.755690][ T5787] team0: Port device team_slave_1 added [ 246.798700][ T5794] Bluetooth: hci1: command tx timeout [ 246.801325][ T5801] Bluetooth: hci0: command tx timeout [ 246.804577][ T5794] Bluetooth: hci3: command tx timeout [ 246.860560][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.869598][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.877664][ T5785] bridge_slave_1: entered allmulticast mode [ 246.883074][ T5794] Bluetooth: hci4: command tx timeout [ 246.887531][ T5785] bridge_slave_1: entered promiscuous mode [ 246.901237][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.909898][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.937597][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.019741][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.027918][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.035876][ T5793] bridge_slave_0: entered allmulticast mode [ 247.045484][ T5793] bridge_slave_0: entered promiscuous mode [ 247.134705][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.142101][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.168587][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.204079][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.248020][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.255745][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.263638][ T5793] bridge_slave_1: entered allmulticast mode [ 247.273183][ T5793] bridge_slave_1: entered promiscuous mode [ 247.294440][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.370417][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.386798][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.394204][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.420579][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.438149][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.445646][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.472359][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.493000][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.746565][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.811309][ T5789] team0: Port device team_slave_0 added [ 247.834185][ T5797] hsr_slave_0: entered promiscuous mode [ 247.844529][ T5797] hsr_slave_1: entered promiscuous mode [ 247.867560][ T5785] team0: Port device team_slave_0 added [ 247.885621][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.907348][ T5789] team0: Port device team_slave_1 added [ 248.011672][ T5785] team0: Port device team_slave_1 added [ 248.264183][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.271409][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.299000][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.327576][ T5787] hsr_slave_0: entered promiscuous mode [ 248.336722][ T5787] hsr_slave_1: entered promiscuous mode [ 248.345780][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.353792][ T5787] Cannot create hsr debugfs directory [ 248.436618][ T5793] team0: Port device team_slave_0 added [ 248.445868][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.453339][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.479684][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.512964][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.520248][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.546818][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.565833][ T5793] team0: Port device team_slave_1 added [ 248.653068][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.660289][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.686949][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.716925][ T5794] Bluetooth: hci2: command tx timeout [ 248.873934][ T5794] Bluetooth: hci0: command tx timeout [ 248.879697][ T5801] Bluetooth: hci1: command tx timeout [ 248.885969][ T5085] Bluetooth: hci3: command tx timeout [ 248.952632][ T5801] Bluetooth: hci4: command tx timeout [ 249.027730][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.035454][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.061812][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.088326][ T5789] hsr_slave_0: entered promiscuous mode [ 249.098450][ T5789] hsr_slave_1: entered promiscuous mode [ 249.106982][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.114954][ T5789] Cannot create hsr debugfs directory [ 249.164872][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.172369][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.198935][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.558582][ T5785] hsr_slave_0: entered promiscuous mode [ 249.569010][ T5785] hsr_slave_1: entered promiscuous mode [ 249.577980][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.585859][ T5785] Cannot create hsr debugfs directory [ 249.829673][ T5793] hsr_slave_0: entered promiscuous mode [ 249.839006][ T5793] hsr_slave_1: entered promiscuous mode [ 249.848077][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.856000][ T5793] Cannot create hsr debugfs directory [ 250.270243][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.396730][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.422707][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.530782][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.810776][ T5801] Bluetooth: hci2: command tx timeout [ 250.939985][ T5787] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.962526][ T5801] Bluetooth: hci1: command tx timeout [ 250.968254][ T5801] Bluetooth: hci0: command tx timeout [ 250.975585][ T5085] Bluetooth: hci3: command tx timeout [ 250.986502][ T5787] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.012175][ T5787] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.033234][ T5794] Bluetooth: hci4: command tx timeout [ 251.072584][ T5787] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.322170][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 251.350819][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 251.423674][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 251.470416][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 251.653883][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.684550][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.731054][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.755530][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 251.841499][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.875374][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 251.952744][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.010341][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.204134][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.525024][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.580244][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.694498][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.702287][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.804812][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.812511][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.874660][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.034312][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.043063][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.151946][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.159549][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.465516][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.636339][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.661274][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.685476][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.767516][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.775357][ T4574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.835888][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.891432][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.899220][ T4574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.939426][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.105466][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.113320][ T4574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.138390][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.146115][ T4574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.167829][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.175685][ T4574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.358006][ T5789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.369909][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.440480][ T5785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.451349][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.524310][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.532219][ T4574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.930641][ T5793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.944145][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.524657][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.593851][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.218827][ T5797] veth0_vlan: entered promiscuous mode [ 256.311620][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.365989][ T5797] veth1_vlan: entered promiscuous mode [ 256.438730][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.800656][ T5797] veth0_macvtap: entered promiscuous mode [ 256.937419][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.948785][ T5797] veth1_macvtap: entered promiscuous mode [ 257.003701][ T5789] veth0_vlan: entered promiscuous mode [ 257.036532][ T5785] veth0_vlan: entered promiscuous mode [ 257.130244][ T5789] veth1_vlan: entered promiscuous mode [ 257.194600][ T5785] veth1_vlan: entered promiscuous mode [ 257.252933][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.369789][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.462720][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.472590][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.481625][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.490884][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.626792][ T5793] veth0_vlan: entered promiscuous mode [ 257.660729][ T5789] veth0_macvtap: entered promiscuous mode [ 257.733882][ T5789] veth1_macvtap: entered promiscuous mode [ 257.746972][ T5785] veth0_macvtap: entered promiscuous mode [ 257.770388][ T5793] veth1_vlan: entered promiscuous mode [ 257.824186][ T5785] veth1_macvtap: entered promiscuous mode [ 257.905818][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.917263][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.932477][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.073897][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.085901][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.101002][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.128615][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.139696][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.150042][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.163013][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.178371][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.221034][ T5793] veth0_macvtap: entered promiscuous mode [ 258.243915][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.253261][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.262498][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.271520][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.331284][ T5793] veth1_macvtap: entered promiscuous mode [ 258.359306][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.370208][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.380561][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.391468][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.408901][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.560910][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.570828][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.580086][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.589337][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.672781][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.684164][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.694470][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.705458][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.716580][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.728050][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.743711][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.773971][ T5787] veth0_vlan: entered promiscuous mode [ 258.844031][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.855023][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.865435][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.878067][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.890884][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.903005][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.918641][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.977244][ T5787] veth1_vlan: entered promiscuous mode [ 259.040486][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.051661][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.060921][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.070117][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.396147][ T5787] veth0_macvtap: entered promiscuous mode [ 259.517399][ T5787] veth1_macvtap: entered promiscuous mode [ 259.719809][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.730832][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.741130][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.752098][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.762280][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.773160][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.783316][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.794171][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.809623][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.868155][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.879058][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.889331][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.900640][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.910803][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.921715][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.932079][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.946039][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.960928][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.273979][ T5787] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.284631][ T5787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.295457][ T5787] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.306304][ T5787] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.149750][ T1816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.158545][ T1816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.371265][ T4574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.381592][ T4574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.920695][ T4574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.928991][ T4574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.130321][ T4574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.139720][ T4574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.363798][ T5797] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 265.364457][ T3728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.390708][ T3728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.557630][ T1816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.565921][ T1816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.757734][ T1816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.767235][ T1816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.900411][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.908923][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.436515][ T5970] loop2: detected capacity change from 0 to 1024 [ 266.464331][ T5974] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4'. [ 266.466287][ T5970] EXT4-fs: inline encryption not supported [ 266.481011][ T5970] EXT4-fs: Ignoring removed orlov option [ 266.613694][ T5970] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 266.728741][ T5970] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 266.837807][ T5970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.007742][ T30] audit: type=1800 audit(1745536230.355:2): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 267.187706][ T1896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.197868][ T1896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.309631][ T5983] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 267.696635][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.700585][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.705184][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.856726][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 268.005905][ T5992] trusted_key: syz.3.8 sent an empty control message without MSG_MORE. [ 268.687655][ T6001] loop3: detected capacity change from 0 to 128 [ 268.758665][ T6003] mmap: syz.2.10 (6003) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 268.913304][ T6001] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 268.921373][ T6001] FAT-fs (loop3): Filesystem has been set read-only [ 269.541041][ T6009] loop0: detected capacity change from 0 to 1764 [ 269.553946][ T6013] loop2: detected capacity change from 0 to 164 [ 269.653719][ T6015] Zero length message leads to an empty skb [ 269.668398][ T6011] loop4: detected capacity change from 0 to 2048 [ 269.765732][ T6011] ======================================================= [ 269.765732][ T6011] WARNING: The mand mount option has been deprecated and [ 269.765732][ T6011] and is ignored by this kernel. Remove the mand [ 269.765732][ T6011] option from the mount to silence this warning. [ 269.765732][ T6011] ======================================================= [ 269.990369][ T6011] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.382366][ T5850] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 270.606113][ T5850] usb 1-1: not running at top speed; connect to a high speed hub [ 270.674409][ T5850] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 270.682992][ T5850] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.693730][ T5850] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 270.709014][ T5850] usb 1-1: config 1 has no interface number 1 [ 270.722667][ T5850] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 270.738180][ T5850] usb 1-1: config 1 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.751528][ T5850] usb 1-1: config 1 interface 4 has no altsetting 0 [ 270.944213][ T5850] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.953988][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.962603][ T5850] usb 1-1: Product: syz [ 270.967058][ T5850] usb 1-1: Manufacturer: syz [ 270.972720][ T5850] usb 1-1: SerialNumber: syz [ 271.365529][ T6033] netlink: 100 bytes leftover after parsing attributes in process `syz.4.21'. [ 271.406487][ T5850] usb 1-1: 0:2 : does not exist [ 271.443449][ T5850] usb 1-1: cannot find UAC_HEADER [ 271.590970][ T5850] snd-usb-audio 1-1:1.4: probe with driver snd-usb-audio failed with error -22 [ 271.726667][ T5850] usb 1-1: USB disconnect, device number 2 [ 272.485702][ T6043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27'. [ 272.748581][ T6046] loop1: detected capacity change from 0 to 8 [ 273.057236][ T6050] loop3: detected capacity change from 0 to 512 [ 273.222921][ T6050] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.30: corrupted in-inode xattr: invalid ea_ino [ 273.320754][ T6050] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.30: couldn't read orphan inode 15 (err -117) [ 273.430512][ T6050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.673301][ T6056] loop0: detected capacity change from 0 to 1024 [ 273.805462][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.838827][ T6056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.852085][ T6056] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.995745][ T6056] EXT4-fs error (device loop0): ext4_lookup:1781: inode #2: comm syz.0.32: bad inode number: 12 [ 274.240776][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.650418][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.947600][ T6073] netlink: 100 bytes leftover after parsing attributes in process `syz.1.37'. [ 275.068481][ T6071] loop4: detected capacity change from 0 to 1024 [ 275.134742][ T6071] EXT4-fs: Ignoring removed orlov option [ 275.140946][ T6071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.391384][ T6071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.384616][ T6091] netlink: 'syz.0.43': attribute type 11 has an invalid length. [ 276.413435][ T5787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.575597][ T6093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.44'. [ 276.630787][ T6097] loop2: detected capacity change from 0 to 128 [ 276.884503][ T6097] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 276.892600][ T6097] FAT-fs (loop2): Filesystem has been set read-only [ 276.938747][ T6100] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 277.229594][ T6103] loop0: detected capacity change from 0 to 8 [ 277.305690][ T6103] syz.0.47: attempt to access beyond end of device [ 277.305690][ T6103] loop0: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 277.321481][ T6103] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 277.330103][ T6103] unable to read xattr id index table [ 277.499441][ T6105] loop1: detected capacity change from 0 to 256 [ 277.546716][ T6105] exfat: Deprecated parameter 'namecase' [ 277.553104][ T6105] exfat: Deprecated parameter 'namecase' [ 277.787101][ T6105] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 277.792853][ T6109] loop2: detected capacity change from 0 to 128 [ 277.855520][ T6109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.863315][ T6109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.944186][ T6109] EXT4-fs (loop2): Test dummy encryption mode enabled [ 277.980218][ T6105] exFAT-fs (loop1): error, data size is invalid(16777215) [ 278.055266][ T6109] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 278.121519][ T6109] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.951335][ T6118] netlink: 100 bytes leftover after parsing attributes in process `syz.0.51'. [ 278.995676][ T6109] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 279.014203][ T6119] loop1: detected capacity change from 0 to 512 [ 279.128371][ T6119] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 279.143088][ T6119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 279.328060][ T6119] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #17: comm syz.1.52: corrupted in-inode xattr: invalid ea_ino [ 279.337670][ T5797] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 279.452895][ T6119] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.52: couldn't read orphan inode 17 (err -117) [ 279.480522][ T6119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.532634][ T6125] loop3: detected capacity change from 0 to 764 [ 279.548570][ T6127] loop4: detected capacity change from 0 to 256 [ 279.620685][ T6127] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 279.663000][ T6119] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.1.52: path (unknown): bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 279.723710][ T6053] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 280.066593][ T1895] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 280.139328][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.268097][ T1895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.279584][ T1895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.292970][ T1895] usb 5-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 280.302507][ T1895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.432463][ T6133] loop2: detected capacity change from 0 to 512 [ 280.464881][ T1895] usb 5-1: config 0 descriptor?? [ 280.913189][ T6133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.926771][ T6133] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.988512][ T1895] wacom 0003:056A:005D.0001: probe with driver wacom failed with error -22 [ 281.110891][ T1895] usb 5-1: USB disconnect, device number 2 [ 281.248180][ T6131] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.56: corrupted inode contents [ 281.392702][ T6131] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.56: mark_inode_dirty error [ 281.416040][ T6139] loop1: detected capacity change from 0 to 4096 [ 281.489616][ T6144] loop0: detected capacity change from 0 to 2048 [ 281.554089][ T6131] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.56: corrupted inode contents [ 281.608954][ T6144] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.634705][ T6139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.670478][ T6131] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.56: mark_inode_dirty error [ 281.818261][ T6139] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 282.241751][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.395617][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.901023][ T6172] loop0: detected capacity change from 0 to 256 [ 284.969084][ T6172] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 285.070815][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 285.741636][ T6179] loop3: detected capacity change from 0 to 1024 [ 286.137985][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.145458][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.461451][ T6203] loop3: detected capacity change from 0 to 512 [ 288.624100][ T6203] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 288.954197][ T6203] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 289.103441][ T6203] EXT4-fs (loop3): 1 truncate cleaned up [ 289.112213][ T6203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.045329][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 290.151374][ T30] audit: type=1800 audit(1745536253.525:3): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.82" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 290.176106][ T30] audit: type=1800 audit(1745536253.525:4): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.82" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 290.624858][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.041512][ T6235] loop3: detected capacity change from 0 to 256 [ 291.242881][ T6235] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 293.118833][ T5850] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 293.392251][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 293.435632][ T5850] usb 5-1: unable to get BOS descriptor or descriptor too short [ 293.543530][ T5850] usb 5-1: config 2 has an invalid interface number: 39 but max is 0 [ 293.552319][ T5850] usb 5-1: config 2 has no interface number 0 [ 293.558785][ T5850] usb 5-1: config 2 interface 39 altsetting 5 endpoint 0x2 has an invalid bInterval 128, changing to 7 [ 293.570535][ T5850] usb 5-1: config 2 interface 39 has no altsetting 0 [ 293.679834][ T6259] loop3: detected capacity change from 0 to 1024 [ 293.830550][ T5850] usb 5-1: New USB device found, idVendor=0b48, idProduct=3014, bcdDevice=31.8c [ 293.844439][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.854266][ T5850] usb 5-1: Product: syz [ 293.858680][ T5850] usb 5-1: Manufacturer: syz [ 293.863782][ T5850] usb 5-1: SerialNumber: syz [ 293.974420][ T3071] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 294.193256][ T3071] usb 2-1: Using ep0 maxpacket: 16 [ 294.291792][ T3071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.303799][ T3071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.314465][ T3071] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.328089][ T3071] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 294.337954][ T3071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.587872][ T5850] usb 5-1: USB disconnect, device number 3 [ 294.721184][ T3071] usb 2-1: config 0 descriptor?? [ 295.460500][ T3071] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 295.576020][ T3071] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 295.596272][ T3071] microsoft 0003:045E:07DA.0002: no inputs found [ 295.603227][ T3071] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 295.707888][ T3071] usb 2-1: USB disconnect, device number 2 [ 295.986300][ T6276] loop4: detected capacity change from 0 to 512 [ 296.034347][ T6276] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 296.662534][ T3071] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 296.922797][ T3071] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.933552][ T3071] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 296.943502][ T3071] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.039299][ T3071] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 297.049523][ T3071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.058111][ T3071] usb 4-1: Product: syz [ 297.062665][ T3071] usb 4-1: Manufacturer: syz [ 297.067530][ T3071] usb 4-1: SerialNumber: syz [ 297.183621][ T3071] usb 4-1: config 0 descriptor?? [ 297.407612][ T3071] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 297.414671][ T3071] usb 4-1: No valid video chain found. [ 297.565395][ T3071] usb 4-1: USB disconnect, device number 2 [ 297.759540][ T6293] loop0: detected capacity change from 0 to 1024 [ 297.797009][ T6293] EXT4-fs: Ignoring removed bh option [ 297.891115][ T6293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.898670][ T6295] loop1: detected capacity change from 0 to 512 [ 297.967057][ T6295] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 297.976863][ T6295] EXT4-fs (loop1): blocks per group (42) and clusters per group (32768) inconsistent [ 298.083525][ T6300] loop4: detected capacity change from 0 to 512 [ 298.185462][ T6300] EXT4-fs: Ignoring removed oldalloc option [ 298.284425][ T6300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 298.312883][ T6300] System zones: 1-12 [ 298.381743][ T6295] ( [ 298.411433][ T6300] EXT4-fs (loop4): 1 truncate cleaned up [ 298.454532][ T6300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.875788][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.078264][ T5787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.250554][ T6310] loop3: detected capacity change from 0 to 128 [ 299.533093][ T6310] FAT-fs (loop3): Directory bread(block 32) failed [ 299.540201][ T6310] FAT-fs (loop3): Directory bread(block 33) failed [ 299.547704][ T6310] FAT-fs (loop3): Directory bread(block 34) failed [ 299.554784][ T6310] FAT-fs (loop3): Directory bread(block 35) failed [ 299.561751][ T6310] FAT-fs (loop3): Directory bread(block 36) failed [ 299.568801][ T6310] FAT-fs (loop3): Directory bread(block 37) failed [ 299.580114][ T6310] FAT-fs (loop3): Directory bread(block 38) failed [ 299.588034][ T6310] FAT-fs (loop3): Directory bread(block 39) failed [ 299.595560][ T6310] FAT-fs (loop3): Directory bread(block 40) failed [ 299.602694][ T6310] FAT-fs (loop3): Directory bread(block 41) failed [ 300.946100][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.125'. [ 301.704660][ T1895] Process accounting resumed [ 302.399572][ T6356] loop3: detected capacity change from 0 to 256 [ 302.402894][ T6353] loop1: detected capacity change from 0 to 2048 [ 302.474943][ T6356] exfat: Invalid uid '0x00000000ffffffff' [ 302.525399][ T6353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.554842][ T6361] fuse: Bad value for 'fd' [ 302.723936][ T30] audit: type=1800 audit(1745536266.085:5): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.135" name="file2" dev="loop1" ino=1416 res=0 errno=0 [ 304.606327][ T5841] Process accounting resumed [ 304.614932][ T6378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.145'. [ 305.122009][ T6390] fuse: Bad value for 'fd' [ 305.962618][ T6401] loop1: detected capacity change from 0 to 1024 [ 306.010320][ T6401] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 306.020523][ T6401] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 306.133330][ T6401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.701492][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.070016][ T6415] loop3: detected capacity change from 0 to 128 [ 307.154026][ T6415] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 307.263659][ T6418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.161'. [ 307.348146][ T5841] Process accounting resumed [ 307.423660][ T6421] fuse: Unknown parameter '0x0000000000000003' [ 308.113456][ T6427] loop0: detected capacity change from 0 to 256 [ 308.172252][ T6427] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 308.185522][ T6427] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 308.317858][ T6427] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 309.784337][ T6447] loop2: detected capacity change from 0 to 1024 [ 309.952610][ T6443] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 309.963348][ T6443] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 310.092993][ T6447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.148360][ T6443] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 310.155900][ T6443] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 310.255068][ T6443] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 310.261518][ T6443] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 310.384841][ T6443] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 310.395283][ T6443] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 310.493411][ T6443] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 310.499798][ T6443] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 310.759146][ T6447] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 310.884441][ T6447] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 310.889065][ T6467] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1 with error 28 [ 310.897906][ T6447] EXT4-fs (loop2): This should not happen!! Data will be lost [ 310.897906][ T6447] [ 310.910140][ T6467] EXT4-fs (loop2): This should not happen!! Data will be lost [ 310.910140][ T6467] [ 310.920075][ T6447] EXT4-fs (loop2): Total free blocks count 0 [ 310.929892][ T6467] EXT4-fs (loop2): Total free blocks count 0 [ 310.930010][ T6467] EXT4-fs (loop2): Free/Dirty block details [ 310.930103][ T6467] EXT4-fs (loop2): free_blocks=68451041280 [ 310.930200][ T6467] EXT4-fs (loop2): dirty_blocks=80 [ 311.826366][ T5841] Process accounting resumed [ 311.927467][ T6477] fuse: Unknown parameter '0x0000000000000003' [ 312.668978][ T6487] loop0: detected capacity change from 0 to 1024 [ 312.854140][ T6487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.294836][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.451087][ T6501] Bluetooth: MGMT ver 1.23 [ 315.479097][ T6528] fuse: Unknown parameter '0x0000000000000003' [ 317.894456][ T6569] loop4: detected capacity change from 0 to 1024 [ 317.968043][ T6569] EXT4-fs: Ignoring removed orlov option [ 317.978856][ T6569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 318.179526][ T6569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.262403][ T6578] fuse: Unknown parameter '0x0000000000000003' [ 318.799532][ T5787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.757689][ T6603] loop3: detected capacity change from 0 to 512 [ 319.908848][ T6603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 320.222493][ T6603] EXT4-fs warning (device loop3): dx_probe:839: inode #2: comm syz.3.214: Unimplemented hash flags: 0x0001 [ 320.234529][ T6603] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.214: Corrupt directory, running e2fsck is recommended [ 320.325754][ T6603] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.214: path /48/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 320.861338][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.284934][ T6620] fuse: Unknown parameter '0x0000000000000003' [ 321.453025][ T6628] pimreg: entered allmulticast mode [ 321.523812][ T6629] pimreg: left allmulticast mode [ 323.630969][ T6664] loop3: detected capacity change from 0 to 512 [ 323.823332][ T6664] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.233: corrupted in-inode xattr: invalid ea_ino [ 323.933252][ T6664] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.233: couldn't read orphan inode 15 (err -117) [ 323.973738][ T6664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.994110][ T6670] fuse: Unknown parameter '0x0000000000000003' [ 324.525530][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.269093][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.243'. [ 326.794307][ T6715] fuse: Unknown parameter 'fd0x0000000000000003' [ 327.334064][ T6722] loop3: detected capacity change from 0 to 512 [ 327.447411][ T6722] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 327.457405][ T6722] EXT4-fs (loop3): blocks per group (42) and clusters per group (32768) inconsistent [ 327.924184][ T6729] [ 329.824307][ T6761] fuse: Unknown parameter 'fd0x0000000000000003' [ 330.411211][ T6768] loop1: detected capacity change from 0 to 128 [ 330.603930][ T6768] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 330.723866][ T6768] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 330.995841][ T6768] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 331.536462][ T5793] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 331.996301][ T6793] loop4: detected capacity change from 0 to 512 [ 332.046850][ T6793] EXT4-fs: inline encryption not supported [ 332.190877][ T6793] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 332.308246][ T6793] EXT4-fs (loop4): 1 truncate cleaned up [ 332.316853][ T6793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.508697][ T5787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.079298][ T6812] fuse: Unknown parameter 'fd0x0000000000000003' [ 334.257268][ T6830] loop4: detected capacity change from 0 to 1024 [ 334.437220][ T6830] hfsplus: bad catalog folder thread [ 334.800133][ T6833] loop2: detected capacity change from 0 to 512 [ 335.032159][ T6833] EXT4-fs error (device loop2): __ext4_fill_super:5502: inode #2: comm syz.2.282: casefold flag without casefold feature [ 335.191519][ T6833] EXT4-fs (loop2): get root inode failed [ 335.198319][ T6833] EXT4-fs (loop2): mount failed [ 336.829238][ T6870] loop3: detected capacity change from 0 to 128 [ 336.937524][ T6870] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 337.033276][ T6870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.484956][ T6875] loop0: detected capacity change from 0 to 1024 [ 337.615031][ T6878] loop4: detected capacity change from 0 to 512 [ 338.189027][ T6875] ext4: Unknown parameter 'fsname' [ 338.326922][ T6892] loop2: detected capacity change from 0 to 256 [ 338.415041][ T6892] vfat: Bad value for 'dmask' [ 338.512117][ T6878] EXT4-fs (loop4): Test dummy encryption mode enabled [ 338.626567][ T6878] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #12: comm syz.4.300: corrupted in-inode xattr: invalid ea_ino [ 338.743005][ T6878] EXT4-fs (loop4): Remounting filesystem read-only [ 338.752490][ T6878] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.602930][ T5787] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 341.525981][ T6935] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 343.898235][ T6963] loop0: detected capacity change from 0 to 2048 [ 344.025437][ T6963] loop0: p1 < > p3 [ 344.056380][ T6963] loop0: p3 size 134217728 extends beyond EOD, truncated [ 344.792871][ T6980] loop1: detected capacity change from 0 to 2048 [ 344.902919][ T6980] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.309922][ T6991] loop3: detected capacity change from 0 to 256 [ 345.412152][ T6991] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 345.424186][ T6991] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 345.534780][ T6991] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 346.326244][ T7000] loop4: detected capacity change from 0 to 2048 [ 346.487170][ T6996] loop1: detected capacity change from 0 to 8192 [ 346.504520][ T7000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.060116][ T6068] udevd[6068]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 347.107469][ T5951] udevd[5951]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 347.543315][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.550121][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.692521][ T5841] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 347.917972][ T5841] usb 3-1: Using ep0 maxpacket: 16 [ 347.969347][ T5841] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 348.046999][ T5841] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 348.056729][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.065732][ T5841] usb 3-1: Product: syz [ 348.070282][ T5841] usb 3-1: Manufacturer: syz [ 348.075808][ T5841] usb 3-1: SerialNumber: syz [ 348.248483][ T7014] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 348.295906][ T5841] usb 3-1: config 0 descriptor?? [ 348.379054][ T5841] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 348.450462][ T5841] usb 3-1: Detected FT232R [ 348.465069][ T7014] kvm: pic: non byte read [ 348.518381][ T3071] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 348.520498][ T7014] kvm: pic: non byte read [ 348.575497][ T5841] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 348.624241][ T7014] kvm: pic: non byte read [ 348.664686][ T5841] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 348.674196][ T7014] kvm: pic: non byte read [ 348.698873][ T5841] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 348.723854][ T5841] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 348.758748][ T3071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.769878][ T3071] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 348.780920][ T3071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.873269][ T5841] usb 3-1: USB disconnect, device number 2 [ 348.964200][ T5841] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 348.976459][ T5841] ftdi_sio 3-1:0.0: device disconnected [ 349.004191][ T3071] usb 1-1: config 0 descriptor?? [ 349.529910][ T3071] lg-g15 0003:046D:C222.0003: item fetching failed at offset 0/7 [ 349.603427][ T3071] lg-g15 0003:046D:C222.0003: probe with driver lg-g15 failed with error -22 [ 349.735310][ T3071] usb 1-1: USB disconnect, device number 3 [ 349.823532][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.350'. [ 350.456182][ T7032] loop1: detected capacity change from 0 to 1024 [ 350.574165][ T7035] loop2: detected capacity change from 0 to 128 [ 350.647217][ T7035] EXT4-fs: Ignoring removed nobh option [ 350.789981][ T30] audit: type=1800 audit(1745536314.155:6): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.353" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 350.815357][ T7035] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.904124][ T7035] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 351.413552][ T5797] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.712456][ T7061] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 353.940432][ T7061] kvm: pic: non byte read [ 353.998701][ T7061] kvm: pic: non byte read [ 354.076710][ T7061] kvm: pic: level sensitive irq not supported [ 354.077139][ T7061] kvm: pic: non byte read [ 355.051123][ T7083] loop2: detected capacity change from 0 to 128 [ 355.098979][ T7083] EXT4-fs: Ignoring removed nobh option [ 355.435497][ T7083] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.563784][ T7083] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 355.962497][ T7096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.482797][ T5797] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 358.107981][ T7111] syz.0.379 uses obsolete (PF_INET,SOCK_PACKET) [ 358.363682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 358.444724][ T3071] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 358.506371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 358.769451][ T3071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 358.780971][ T3071] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 358.790460][ T3071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.855798][ T3071] usb 2-1: config 0 descriptor?? [ 358.875049][ T7113] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 359.112102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 359.312856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 359.322588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 359.426809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 359.448737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 359.460742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 359.504278][ T3071] elan 0003:04F3:0755.0004: unknown main item tag 0x3 [ 359.574926][ T3071] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 359.680444][ T3071] usb 2-1: USB disconnect, device number 3 [ 359.821460][ T7124] loop0: detected capacity change from 0 to 2048 [ 359.911467][ T7126] loop4: detected capacity change from 0 to 128 [ 359.946773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 359.963576][ T7124] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.024347][ T7126] EXT4-fs: Ignoring removed nobh option [ 360.166227][ T30] audit: type=1800 audit(1745536323.515:7): pid=7124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.384" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 360.194247][ T30] audit: type=1800 audit(1745536323.575:8): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.384" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 360.224725][ T7126] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 360.314944][ T7126] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 360.729602][ T5787] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.094018][ T7133] loop1: detected capacity change from 0 to 2048 [ 361.385803][ T7133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.149396][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.563478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 367.734378][ T3071] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 367.894014][ T7168] loop1: detected capacity change from 0 to 736 [ 367.958987][ T3071] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.969598][ T3071] usb 5-1: New USB device found, idVendor=04e6, idProduct=0001, bcdDevice= 2.00 [ 367.978953][ T3071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.015388][ T7168] iso9660: Bad value for 'mode' [ 368.062431][ T3071] usb 5-1: config 0 descriptor?? [ 368.085131][ T3071] usb-storage 5-1:0.0: USB Mass Storage device detected [ 368.352461][ T5850] usb 5-1: USB disconnect, device number 4 [ 369.044978][ T7178] loop1: detected capacity change from 0 to 128 [ 369.115465][ T7178] EXT4-fs: Ignoring removed nobh option [ 369.304512][ T7178] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.336907][ T7178] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 369.562318][ T5841] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 369.642152][ T7186] loop0: detected capacity change from 0 to 164 [ 369.790352][ T5841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.801032][ T5841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.953995][ T5841] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 369.963590][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.972117][ T5841] usb 5-1: SerialNumber: syz [ 370.064334][ T5793] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.356919][ T5841] usb 5-1: 0:2 : does not exist [ 370.578659][ T5841] usb 5-1: USB disconnect, device number 5 [ 370.853908][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.982477][ T7219] loop4: detected capacity change from 0 to 128 [ 374.055383][ T7219] EXT4-fs: Ignoring removed nobh option [ 374.171213][ T7219] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.249154][ T7219] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.616186][ T7223] loop2: detected capacity change from 0 to 512 [ 374.708337][ T7223] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 374.972184][ T7223] loop2: detected capacity change from 0 to 512 [ 375.003875][ T7223] journal_path: Non-blockdev passed as './file1/file0' [ 375.011114][ T7223] EXT4-fs: error: could not find journal device path [ 375.049929][ T5787] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.719661][ T7235] loop2: detected capacity change from 0 to 128 [ 377.213080][ T7258] loop1: detected capacity change from 0 to 128 [ 377.239711][ T7258] EXT4-fs: Ignoring removed nobh option [ 377.462430][ T7258] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.496388][ T7259] rtc_cmos 00:00: Alarms can be up to one day in the future [ 377.541661][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future [ 377.550244][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future [ 377.558816][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future [ 377.567048][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future [ 377.575124][ T5850] rtc rtc0: __rtc_set_alarm: err=-22 [ 377.638891][ T7258] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 378.656427][ T5793] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.803381][ T7268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'. [ 380.806247][ T5850] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 380.996480][ T5850] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 381.005175][ T5850] usb 2-1: config 0 has no interface number 0 [ 381.011546][ T5850] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 381.023365][ T5850] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 381.037456][ T5850] usb 2-1: config 0 interface 255 has no altsetting 0 [ 381.044710][ T5850] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 381.054115][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.100480][ T5850] usb 2-1: config 0 descriptor?? [ 381.119097][ T5850] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 381.331503][ T5850] usb 2-1: USB disconnect, device number 4 [ 382.917816][ T7305] loop4: detected capacity change from 0 to 128 [ 382.944118][ T7305] EXT4-fs: Ignoring removed nobh option [ 383.013744][ T7305] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 383.045190][ T7305] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 383.308445][ T5787] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 383.913273][ T7311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.449'. [ 384.669736][ T5850] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 384.800885][ T7319] syz_tun: entered allmulticast mode [ 384.931004][ T7312] syz_tun: left allmulticast mode [ 384.980460][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 386.086265][ T7325] ===================================================== [ 386.094110][ T7325] BUG: KMSAN: uninit-value in sctp_inq_pop+0x14dc/0x19e0 [ 386.101742][ T7325] sctp_inq_pop+0x14dc/0x19e0 [ 386.106910][ T7325] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 386.112243][ T7325] sctp_inq_push+0x2a3/0x350 [ 386.117084][ T7325] sctp_backlog_rcv+0x3c7/0xda0 [ 386.122368][ T7325] sk_backlog_rcv+0x13f/0x420 [ 386.127285][ T7325] __release_sock+0x1d3/0x330 [ 386.132320][ T7325] release_sock+0x6b/0x270 [ 386.137102][ T7325] sctp_wait_for_connect+0x458/0x820 [ 386.142855][ T7325] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 386.148447][ T7325] sctp_sendmsg+0x3910/0x49f0 [ 386.154226][ T7325] inet_sendmsg+0x269/0x2a0 [ 386.158985][ T7325] __sock_sendmsg+0x278/0x3d0 [ 386.164115][ T7325] __sys_sendto+0x590/0x710 [ 386.168846][ T7325] __x64_sys_sendto+0x130/0x200 [ 386.174119][ T7325] x64_sys_call+0x3c0b/0x3db0 [ 386.179080][ T7325] do_syscall_64+0xd9/0x1b0 [ 386.183946][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.190059][ T7325] [ 386.192753][ T7325] Uninit was stored to memory at: [ 386.198045][ T7325] sctp_inq_pop+0x144a/0x19e0 [ 386.204909][ T7325] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 386.210111][ T7325] sctp_inq_push+0x2a3/0x350 [ 386.215048][ T7325] sctp_backlog_rcv+0x3c7/0xda0 [ 386.220120][ T7325] sk_backlog_rcv+0x13f/0x420 [ 386.225134][ T7325] __release_sock+0x1d3/0x330 [ 386.230008][ T7325] release_sock+0x6b/0x270 [ 386.234775][ T7325] sctp_wait_for_connect+0x458/0x820 [ 386.240281][ T7325] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 386.245993][ T7325] sctp_sendmsg+0x3910/0x49f0 [ 386.250868][ T7325] inet_sendmsg+0x269/0x2a0 [ 386.255779][ T7325] __sock_sendmsg+0x278/0x3d0 [ 386.260675][ T7325] __sys_sendto+0x590/0x710 [ 386.265593][ T7325] __x64_sys_sendto+0x130/0x200 [ 386.270695][ T7325] x64_sys_call+0x3c0b/0x3db0 [ 386.275742][ T7325] do_syscall_64+0xd9/0x1b0 [ 386.280484][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.286759][ T7325] [ 386.289195][ T7325] Uninit was created at: [ 386.294006][ T7325] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 386.300821][ T7325] kmalloc_reserve+0x22f/0x4b0 [ 386.306009][ T7325] __alloc_skb+0x347/0x7d0 [ 386.310685][ T7325] sctp_packet_transmit+0x189e/0x4560 [ 386.316494][ T7325] sctp_outq_flush+0x1c7d/0x67c0 [ 386.321678][ T7325] sctp_outq_uncork+0x9e/0xc0 [ 386.326810][ T7325] sctp_do_sm+0x8c8e/0x9720 [ 386.331572][ T7325] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 386.336949][ T7325] sctp_inq_push+0x2a3/0x350 [ 386.341760][ T7325] sctp_backlog_rcv+0x3c7/0xda0 [ 386.346992][ T7325] sk_backlog_rcv+0x13f/0x420 [ 386.352200][ T7325] __release_sock+0x1d3/0x330 [ 386.357099][ T7325] release_sock+0x6b/0x270 [ 386.361743][ T7325] sctp_wait_for_connect+0x458/0x820 [ 386.367417][ T7325] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 386.373166][ T7325] sctp_sendmsg+0x3910/0x49f0 [ 386.378037][ T7325] inet_sendmsg+0x269/0x2a0 [ 386.382929][ T7325] __sock_sendmsg+0x278/0x3d0 [ 386.387827][ T7325] __sys_sendto+0x590/0x710 [ 386.392846][ T7325] __x64_sys_sendto+0x130/0x200 [ 386.397950][ T7325] x64_sys_call+0x3c0b/0x3db0 [ 386.403037][ T7325] do_syscall_64+0xd9/0x1b0 [ 386.407770][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.413999][ T7325] [ 386.416507][ T7325] CPU: 0 UID: 0 PID: 7325 Comm: syz.4.455 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(undef) [ 386.428909][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 386.439359][ T7325] ===================================================== [ 386.446560][ T7325] Disabling lock debugging due to kernel taint [ 386.452953][ T7325] Kernel panic - not syncing: kmsan.panic set ... [ 386.459545][ T7325] CPU: 0 UID: 0 PID: 7325 Comm: syz.4.455 Tainted: G B 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(undef) [ 386.473432][ T7325] Tainted: [B]=BAD_PAGE [ 386.477719][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 386.487954][ T7325] Call Trace: [ 386.491376][ T7325] [ 386.494444][ T7325] __dump_stack+0x26/0x30 [ 386.499041][ T7325] dump_stack_lvl+0x53/0x270 [ 386.503963][ T7325] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 386.510035][ T7325] dump_stack+0x1e/0x25 [ 386.514416][ T7325] panic+0x4bd/0xd50 [ 386.518616][ T7325] kmsan_report+0x29d/0x2a0 [ 386.523386][ T7325] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 386.529516][ T7325] ? __msan_warning+0x96/0x120 [ 386.534499][ T7325] ? sctp_inq_pop+0x14dc/0x19e0 [ 386.539588][ T7325] ? sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 386.544934][ T7325] ? sctp_inq_push+0x2a3/0x350 [ 386.549924][ T7325] ? sctp_backlog_rcv+0x3c7/0xda0 [ 386.555271][ T7325] ? sk_backlog_rcv+0x13f/0x420 [ 386.560387][ T7325] ? __release_sock+0x1d3/0x330 [ 386.565426][ T7325] ? release_sock+0x6b/0x270 [ 386.570228][ T7325] ? sctp_wait_for_connect+0x458/0x820 [ 386.575886][ T7325] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 386.581623][ T7325] ? sctp_sendmsg+0x3910/0x49f0 [ 386.586684][ T7325] ? inet_sendmsg+0x269/0x2a0 [ 386.591577][ T7325] ? __sock_sendmsg+0x278/0x3d0 [ 386.596676][ T7325] ? __sys_sendto+0x590/0x710 [ 386.601577][ T7325] ? __x64_sys_sendto+0x130/0x200 [ 386.606827][ T7325] ? x64_sys_call+0x3c0b/0x3db0 [ 386.611903][ T7325] ? do_syscall_64+0xd9/0x1b0 [ 386.616837][ T7325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.623096][ T7325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.629447][ T7325] ? sched_clock_cpu+0x59/0xa80 [ 386.634518][ T7325] ? kmsan_get_metadata+0x105/0x1b0 [ 386.639946][ T7325] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 386.646476][ T7325] ? kmsan_get_metadata+0x105/0x1b0 [ 386.651965][ T7325] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 386.658076][ T7325] ? kmsan_get_metadata+0x105/0x1b0 [ 386.663488][ T7325] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 386.669510][ T7325] ? kmsan_get_metadata+0x105/0x1b0 [ 386.674913][ T7325] __msan_warning+0x96/0x120 [ 386.679691][ T7325] sctp_inq_pop+0x14dc/0x19e0 [ 386.684613][ T7325] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 386.689773][ T7325] ? __schedule+0x26ef/0x7720 [ 386.694640][ T7325] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 386.700759][ T7325] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 386.706427][ T7325] sctp_inq_push+0x2a3/0x350 [ 386.711235][ T7325] sctp_backlog_rcv+0x3c7/0xda0 [ 386.716288][ T7325] ? kmsan_get_metadata+0x105/0x1b0 [ 386.721701][ T7325] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 386.727287][ T7325] sk_backlog_rcv+0x13f/0x420 [ 386.732188][ T7325] __release_sock+0x1d3/0x330 [ 386.737072][ T7325] release_sock+0x6b/0x270 [ 386.741703][ T7325] sctp_wait_for_connect+0x458/0x820 [ 386.747288][ T7325] ? __pfx_autoremove_wake_function+0x10/0x10 [ 386.753609][ T7325] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 386.759468][ T7325] ? kmsan_get_metadata+0x105/0x1b0 [ 386.764887][ T7325] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 386.770959][ T7325] sctp_sendmsg+0x3910/0x49f0 [ 386.775835][ T7325] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 386.782434][ T7325] ? __pfx_sctp_sendmsg+0x10/0x10 [ 386.787650][ T7325] inet_sendmsg+0x269/0x2a0 [ 386.792392][ T7325] __sock_sendmsg+0x278/0x3d0 [ 386.797300][ T7325] __sys_sendto+0x590/0x710 [ 386.802029][ T7325] ? kmsan_get_metadata+0x105/0x1b0 [ 386.807466][ T7325] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 386.813610][ T7325] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 386.820280][ T7325] __x64_sys_sendto+0x130/0x200 [ 386.825409][ T7325] x64_sys_call+0x3c0b/0x3db0 [ 386.830326][ T7325] do_syscall_64+0xd9/0x1b0 [ 386.835057][ T7325] ? irqentry_exit+0x16/0x60 [ 386.839851][ T7325] ? clear_bhb_loop+0x25/0x80 [ 386.844731][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.850831][ T7325] RIP: 0033:0x7f5281b8e969 [ 386.855420][ T7325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.875597][ T7325] RSP: 002b:00007f527f9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 386.884209][ T7325] RAX: ffffffffffffffda RBX: 00007f5281db5fa0 RCX: 00007f5281b8e969 [ 386.892347][ T7325] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000003 [ 386.900483][ T7325] RBP: 00007f5281c10ab1 R08: 000020000005ffe4 R09: 000000000000001c [ 386.908609][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.916726][ T7325] R13: 0000000000000000 R14: 00007f5281db5fa0 R15: 00007ffd5954ca48 [ 386.924884][ T7325] [ 386.928328][ T7325] Kernel Offset: disabled [ 386.932803][ T7325] Rebooting in 86400 seconds..