last executing test programs: 9.190257616s ago: executing program 3 (id=2566): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="050000000100", 0x6) 8.488055902s ago: executing program 3 (id=2570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x28, 0x2c, 0x0, @local, @mcast2, {[], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}, 0x5e) 7.564428939s ago: executing program 3 (id=2574): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x2df) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)='4', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0x0, 0x0, 0x0) 6.758310327s ago: executing program 3 (id=2579): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180100002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000000002500f8ff060000"], &(0x7f0000000280)='GPL\x00', 0x8}, 0x90) socket$inet6(0xa, 0x3, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r6, 0x3, r3, 0x5}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) r9 = dup(r8) bind$unix(r9, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r11 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r11, 0x107, 0x17, 0x0, 0x20600000) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES64=r7, @ANYRES32=r5, @ANYRESOCT=r10, @ANYRES8=r7, @ANYRESHEX=r0], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r12}, 0x0, &(0x7f0000000400)=r13}, 0x20) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000032000103600000000000000001000000"], 0x14}}, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x2}) socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, 0x0, 0x0) 5.440051687s ago: executing program 1 (id=2586): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) dup2(r0, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) 5.208589814s ago: executing program 0 (id=2588): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x401}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@cgroup, r1, 0x26}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010003b0c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b00010065727370616e00001800028006000f0000000000040012000601110000000000"], 0x48}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @random="56460a7cef90", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 5.073512174s ago: executing program 3 (id=2589): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800"], 0x20}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'xfrm0\x00', 0x0}) r4 = socket(0x11, 0x3, 0x0) sendto$packet(r4, &(0x7f0000000380)="6fa4bf90aa8a2fa38a8f6c8fa168f069adfc79fefab38d472b35afef1abf5976aa851156780bb0fe39e1880b", 0x2c, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="0786dbd848f5"}, 0x14) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)="9dbe44f632c72137820ca3215935b741b669af55cdc581eec182ea3d7fcf7232e02142cdc6c5d4acfffd36f914871683b533cdb42cf6be04643044d7991b2fd65403926c8787900e25311dec663a76601cefd1acd496bcc5d507e285d26bd817b736b75780fe981b147295c326ce065bc41e54fdd8e38fc15fe229031899a44ac490a4344a8d18c18420cc020b5bf34595823382201d36b7b882710723bce22b832883ffb74915472c7a167585847478792aee8b4c765e1ec5ca320079cb5d67f2b81f9d514dc93a", 0xc8}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000fdffffff030000000200000000000000000000070020"], 0x0, 0x26}, 0x20) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) 4.807628506s ago: executing program 2 (id=2590): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x40000000, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 4.687659094s ago: executing program 1 (id=2591): unshare(0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140), 0x4) 4.364847742s ago: executing program 0 (id=2592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000300)={@val, @void, @eth={@random="d3c22fb73e47", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x26, 0x0, @wg=@data={0x4, 0x0, 0x8, "bf7e9225487b9d58120586c654a1"}}}}}}}, 0x4c) 4.300774295s ago: executing program 3 (id=2593): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x848000000015, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f0000000540), 0xd, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r4, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x92}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0x8}, {&(0x7f0000001500)="cd07e85142f8ead499f3ef72f2227c53dd9255de4766b5f33ef218a7c39a97bbd4f8385f1852a08a0e900c7f9183f6c74e7e3407bac0d64f2fe763278fbc7ea1e7111be746ae2748fc96288a8b288a6d1baf35514905bee7b70175dd6a5b1b43735e06d236ee53c79aa6f817e833618ba7321afdf30656589fb5d92a67f70e2cb1dd98e48ff65bb2569a258f78bca3682750e0584ea00629c67c6411cd532d62be01f143fe9ce39012147357e8abe37baa6cfad28b949c343c17567015b2811ea8dfd577749855bcc1cbdae064318ac83c505129a407543c355a4e902e6d43e92cf7d4a538400b7741304b9179bc8357b82081d7141a388f8659108dbd3142dca4483efd112eae795c780aa14fde5d3ad8a29f57cbbe4929ced3ec0c45c4964e627d283b4c8302ab1eac4796a40ff79106ab2b28a1a72028a56a6b4e7e44f9578970f37fc3edfdf4b51bece98270e1b3b8da8f4bad2d38d0d04220f53e70f88f9431cd8184995253d38f27fbece66f45558a0941277de0308ed8a3bd8cbaa2f12406458086f37d447d9cb471c3b075bef79673e3b27d707f1483be8949600e9259a4edb962ff5e2a47a369468814971d2a81bbdf6222dfd7334912d33b51080cecb1eb5ca9ee573abc277b75e15b8fe9b242abd74ea74a4f83bd96e3b1ae924d927bb45a7b4b879f6a689f4977d0dbd4eaa0cfe64dacb82cf3784e21cd4e136ee610c2672eaedf35918d3c82eec28ea5753ea137f8a5d2f2f8a7aceffa1d71ac75bef177945d757ddc904c46a8a69336861cf08a5c51996807008e58ebf23a7e597bb07cce48e40b8a172144c4e649090fba0ec62152f85c3c4b843bde0f6eafbaa12bd1449801d2c4bfb51317bbc4d521ea1015e73a8c9146eb37eb9583a2443d8eea2293c808efc19a5735408281f16f590e00415c43ac2ce1c3432d41525dd0137eb991d9c56c163c0d4ab2d4ce2a418ff537bf20e6152bbd81d4a2a3570a7c3053f2ceb5e9797d2c60fb069cdcb03e06aedf63ff47f7ef9551e26cf08740c74b273bcda959a1e9a84c0fa05416b99d73d402fb81754e1ccf796d9da53399d6dce3ce83303ccb4166cf36ccb0c9bddbe0e34dfbcae31b4ce8fe513570e036844ab516cf4d6293bdd388112084e6aefcc6e7967fe99aabd72a207bb4ec8fc02d5bc229ca68c9db99529208146f49f29fda53c49707d76a649aa5df7607c3ee514eb820f4d0cc55d547ecd3193c4946525af9f68f8ec2d0a6b0ccfbd8ae0a265249255c98e9e6ab3d8d82dbfb8c15a8ef69b78cc9b4f0ad5a2ce9d6793ada0b6163d9d1ed3e50f9c819ca46b40ff40b375f5e2ce6caa996af36324cbbaa63635b0e107ad01174baa553b86dba12e8ad9586727a70aee6785121e9edb5a98e01b7848734d3e044c494a4061493e1ae7fd73a2ed9b83d286e24a732966faee7705d8a2d360159acbdf18616028134c25d1a92bb45f06207701454390b87d5bcb66ec73d8c3c53049f42c85de0acc45a9379302203be199ce55154b739bfb3d27929b12163e2078905137774974b90c07960fd410fd58394bc53e7745f5627de2f0361418173763c69f8a11d93a104ad382cf385b0c6c7c3c5fc8236e6f18ae9be0543d28d54050b9e60f2f774a16be4904243d482ad3252edaccce56dcd350b6e249fe686d5adc07bc57c71aebdc243eac56f29fa24e69b8d444c54a95522beafac6230a3c4e89c6d55654a4a077f7f854d6b24f8b45da2baa5dc3e4df15c56263c7fa80642789ea712a9562a70379afe5ac584c891178d71a558e73456e53e7f9256f4c0b27daa3eab32f1e56b3dd9280053c1ec57e86fd87a725ab9a5d93e3f8e6e848afbdadb859c744f40a86486fbbd1da6a18c834bf43594aac9d0340521dea06befad18bb868e9e63578ed66c70ecfeb31ce55755a5d48de4113c7e29975643cbc53f114ed522231e410f1fe4b910e6af3d4b56918952f7f25204813b3283e20a54fd285a80988494576bd738e685edda5177eeb0e2c9816dac60302b12ec046c9feb770dec403fd4fadd1628aa4978647e8dac1825166a5be8b580b195387d901ecbf03b70d4301f6de69f691009a659c03186b8431e226022f811a6d2ce73c8bce19b09e04728b739da06054690f30c71bb3326f8d4fc80cf654a42fc6134967206e110558a6f9e9c434bf175def183da8a5c135975dd7eac8fcea1343710cd92fdcba2152b32e014cb8e87d3c500e8f439e1522da6866105e937663d8044527982d147df983ca83eaa7fb4dd5c0c79232dd687e02dc135d3067547cafb1934b5769114472beb906646ffdc44291289bc27478262295c2fa517ccd553804e73eb9150f5d451afd79f175e14b563a5e6c86e9a0eacd450be530a3e506297a751bc5800f3c45a3e18b93c21aa8c0f2d144122803361d4b59e2a21bb462c0b8bf9d8f4c91610c633fefced62b8de88bd2e56e58eb538f30b1710f8cf5e6e54db33adc53d2519351696028edda2e915a3f575ee3488b6ac2d96856fe5742ae57679e11e7baeeb7446aa3d92a834086b8b2eba58a16e54a2df19f4be02fb9ed80f9547c327ca69bfc027852c0f54eea05b0982f0a08548f16a80d17121b5c3536d072b6dd78965d7fcb1d13d8435c003050de3900f43ec378070ff24e9fe463451cd2ca1d81532121fa6a010df9e471dbd068c9de5698eb986a43640843e6ab2ae9c849603cc1ed6799cd80a9dc8937127ef006edd442b68fc79a7d31d80f255ce9593e12a219d4a38a84c2a77ae3c604ac33614aea6c8523e4f553866b801cfdbf3545370555685f2f6ae4a05745713bac8452e86536807b986037d28953cc093122c7e400f4ebd876282e831b5e45c2e2dab9c7620ef9aa3c3f733baef8eee8242e0edfc20c9f58127739c978fbda24af4068e36a0c556cf2e60be433e6c86fcaafaab94124385c14dff932713044432cfc6ce7c6ae88c1fe32097d2e223616818eb1df981cd70a9a35ad7776745b660dec25e93cf5d6157cc161b808097f49a7713c5a164cd5cd61cb44b155edd38b72c5788b5328a1090cc366fb114d658eb4f045740fa95c19a9b6fc4c758036b9ba3d566e93073a5387f850f70db48d7c4a071d2b6bcdc67113b242688fbddffcff2c369680a4f5e7f0bafc27241a95695ff39c828f5d2b4e2a5955414aae21358971a9bd5d27fb3b4980d7a2058f5a686a65a95245aa418df589d6191ddf8e2a75b80c78dece49e7cdb6dc038944c8badeb86ab903a7a2db35cff18dd46ffbc02c36461205df47e93ab492ee2c49b489c22e9d0a44766f855cc1bc37622c72ab452908860cc054e9cd245cef29667e078e09403f395a0ff222272fd39bcf8c657de071fa6b02efb062e133f4ca14dbc3041fc3d0d7f44a30c955fbe5088ec222355d0b533f506ac75cadbb646b437eccdffef7f521ff14b3716f945c3a0b532616e3fa4dd88ecff416b0c91798aac7072c610adef4e076f5609bc0a4431de4de4a7318115a3f45dd7105f0d25cf2f2eccfb949b7e9b1c6f051f1c8f61b95f665c219d1f32b7af585818e51a937f5d90b0dd2d1e68f4a9f94f8da2ab42b3c91c95871537d94fc2a191862cbbe28433c7773a3dabe82a371c47c905e46f74f4964fe4ff3551588cb97d089465d1df16daaf5617d5b677e2e77541f64ea33ad75611e1516f230d4f207f58494458b3e25a3ce1d1d098ae8a8db11fbb7783d6f3960e237c0a24e33043c21a552cedc8aa7a0838cb034070a5af237acaaacf0a4398b036cf32ddd2d614d26c53a3fdbd0fe8cd1e0064c8777ac8f9755e02ca4bf869bc94cd6bea3bab112f57aecc27e6011d4b4c8c3926abf995a39b4384f9bf410c4e3525a47d4db05f3c6c253c8adb2678c5f86dd2e5e3ffca798b5b756c0207e65a248449cd09abad3b3b8fcda337124bb66079dd1ac77949f3c8ddac7396eaf8348544164edb99e178d59c13878b8b8dbd0759cbf4b6b6d3dcb5adb4b6bf8402b93aa4a6b53789b627f68b772618cb8a9689ad282a230d6e5e125da910b4f26f72caf1eca8362b977f83bc16a798e05dfc6c7675cac8262e781db9db2250958ab6bda85ebd7c4d06681ee0f30bd062a08294ce0d459e10e3a0c2323373ec84ac3e6d99ec6134ee395b6ca8ad6e6a53dfba9a07747944cb2be0ed2fcac5c4e7c43a5da76031cec5169b3f445099322b704a5198c1018a3bce33a155e7881fac59fc526c32e954a700c4b6db8f25467b714d4b723224c1f1bcf59b2b75c577fe4acd95aea1c8ec9075945442a129a3efd5e64aa3d668be55e3c43580526e596a74baf605576606c7bab5005957371f075dbe44333465564af0eb35dfe14465d87035ee896e6fe8138ee43bc2d383e6ee51fe4ed62341d2a68ed64385ec31867f28ab33a8e0e0da7c6587432df0286d44a24ca0e85ae151307a24222fffc971b476e412a450c58d69b7b4a5d89c5f55170dc5f3689089f49894cf6d034f680067b28582ca2066d2578dec3528041289c7340355425064441b647a51bb4be746c165c10c0a2a82c8644a832a32877ea81e24a50c2e3f0fbc5b763656b6c7278cc83a94c65bbca431cefde888cd42b03299b591c756aca38f03ca7a8f61aa9a69de2ca81d7e5005fbd6c328493e2833d45fcb68cdfa761842b48aebf3570cec220dab6ab3b58e1214cf843b7201a8387077b5c1462f2b025f9c6a56f8", 0xd0b}], 0x4}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5, r3}) write(r4, 0x0, 0x0) 4.19241349s ago: executing program 2 (id=2594): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 4.119706719s ago: executing program 1 (id=2595): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) 3.938761706s ago: executing program 4 (id=2596): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)="a439332544a911dd253cba530700", 0xe}, {&(0x7f0000000300)}], 0x2) 3.616210048s ago: executing program 4 (id=2597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.538772141s ago: executing program 2 (id=2598): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x6a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a802e8c6394f90424fc60100005000b000900053582c137153e37000c0280fc0b1d02f80b", 0x33fe0}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000040)={r3, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={r3, 0x81}, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@rr={0x7, 0xb, 0x0, [@multicast2, @broadcast]}, @lsrr={0x83, 0x3}, @cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @generic={0x0, 0x10, "c48fb4aa6de357c9742739381d65"}]}}}}}}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r7, 0x10c, 0x3, &(0x7f0000000000)=0xddb5, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000001080)=""/4096, 0x1000, 0x0, &(0x7f0000000280)=""/206, 0xce}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 3.487724071s ago: executing program 1 (id=2599): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180100002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000000002500f8ff060000"], &(0x7f0000000280)='GPL\x00', 0x8}, 0x90) socket$inet6(0xa, 0x3, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r6, 0x3, r3, 0x5}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) r9 = dup(r8) bind$unix(r9, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r11 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r11, 0x107, 0x17, 0x0, 0x20600000) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES64=r7, @ANYRES32=r5, @ANYRESOCT=r10, @ANYRES8=r7, @ANYRESHEX=r0], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r12}, 0x0, &(0x7f0000000400)=r13}, 0x20) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000032000103600000000000000001000000"], 0x14}}, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x2}) socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, 0x0, 0x0) 3.290147061s ago: executing program 0 (id=2600): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000000), 0x4) 2.704903841s ago: executing program 4 (id=2601): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) dup2(r0, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) 2.660394977s ago: executing program 0 (id=2602): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x401}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@cgroup, r1, 0x26}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010003b0c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b00010065727370616e00001800028006000f0000000000040012000601110000000000"], 0x48}}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @random="56460a7cef90", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.444763034s ago: executing program 2 (id=2603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.096321007s ago: executing program 4 (id=2604): socket$inet6(0xa, 0x40000080806, 0x0) setresuid(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e25, 0x0, @local}, 0x15) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000027c0)=ANY=[@ANYRES32=r1], 0x14) 1.829784307s ago: executing program 0 (id=2605): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f00000003c0)=ANY=[], 0xfe, 0x267, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) ftruncate(r1, 0x7fff) io_setup(0x3, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x0, 0x4}]) 1.744265285s ago: executing program 1 (id=2606): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000340)="c796bab467f3068794dee57f04a0caa16edf5059d79b2fa8324cb02707eb0410ab", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="650d10e4955fd036", 0x8}, {&(0x7f0000000240)="7a16d923", 0x4}], 0x2}}], 0x3, 0x8008801) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet(r5, &(0x7f0000000400)="ffe29b03000000000000b98a5926fddbee33f239159fa642f01ad66920a51a9441046726cdc64641e82646f1fe856a52bb0ad4809d7fee90d21e54c96e791aaf7ea64c178d3654c956339258edcf5a38bacf92b5c09edba1b38783f9ba34ee89ec452db71160d7421d1a0e7cd7c51ab8ea55f9fb9b0b9959dc1bb8", 0xffffffffffffff21, 0x20000080, 0x0, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) connect$netlink(r5, &(0x7f0000000000)=@unspec, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r6) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYRES16=r8, @ANYBLOB="030100000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB='\t\x00\x00'], 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000008380000003800000003000000ffffffff080000000000000200000000020000000000000802000000020000000000000e030000000000000000005f00"/84], 0x0, 0x54}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0000000000000000140006801800049c527e4d88987f2ff127e89045c008ed8f7af8d29d3238e84c7f4e213ddaaa0ed54e14f2f3845bd8c4f3"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket(0x10, 0x3, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r12, @ANYBLOB="08001f"], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="48065e1f73284fe46214138c", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf254100000008000300", @ANYRES32=r3, @ANYBLOB="0c00990040db58456f000000080027000300000008009f00060000000800a1007f000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) 933.451545ms ago: executing program 2 (id=2607): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000012c0)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) 815.428318ms ago: executing program 0 (id=2608): r0 = socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180100002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000000002500f8ff0600000095"], &(0x7f0000000280)='GPL\x00', 0x7}, 0x90) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x28, r2, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x40090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) bind$ax25(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090dc4c6000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050008"], 0x58}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x29, 0x0, @rand_addr, @private}}}}) 628.47893ms ago: executing program 4 (id=2609): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0x48c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@TCA_RATE={0x6, 0x5, {0x0, 0x80}}, @filter_kind_options=@f_basic={{0xa}, {0x454, 0x2, [@TCA_BASIC_EMATCHES={0x2a8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x14, 0x3, 0x0, 0x0, {{0xfffb, 0x0, 0x2}, "d17e0a07ec13"}}, @TCF_EM_IPT={0x3c, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x17}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x3ff, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xd}, {0x9, 0x8, 0x21, 0x5, 0x6, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x3ff}, {0xcdd, 0x3, 0x0, "e19f2d"}}}, @TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0x4800, 0x0, 0x7}, "5d7958754833311aa0fe15ef43873661eb8cd148da908e455af3c935a420349649f4cb04222227ee5c7ad50aa9850bec352587c2fb0c2ae9e562fee9ed28a1bdb8b2e7ebad8d2b840511787159a4fd31980083fa9d7dedebc5ad12944dae13a031086d4066dccb2e18f6"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x80, 0x7, 0x8001}, {{}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x90, 0x3, 0x9}, {0x7, 0x1, 0x10000, 0x20f}}}]}, @TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xb26d, 0x1, 0x1cb1}, {0x3, 0x7fffffff, 0x6, 0x3, 0x4, 0x1}}}, @TCF_EM_CONTAINER={0xe8, 0x2, 0x0, 0x0, {{0x70, 0x0, 0x8000}, "391cbbc93ffab43803d39a018755e8ea55d1a2921bf7aebcb3e36f8c4973865e10ba0598a89d8f88fec3e7b07cb7bcc44048d5fc8fb7193e7a93be501387bd19776902f11229e920baee530df41dd9049413273f290564133c5fb7dc62e6211601ca9ba4fbe4c97aa2342e07188328606809a631fdb8a1350b45305873e8afc859cc50a47a50f87f43df3dd2e343852359c0ef9ce2e66b8e35e63c573c1dacd0d9fd2e5dd94849e836324138e31d6d091ae44b62406e2b53f6420ab856164182063c3114d9c536a589367e0b5b08221cb2dbb0ced5245463495554"}}, @TCF_EM_CONTAINER={0x50, 0x2, 0x0, 0x0, {{0x1, 0x0, 0xfff8}, "47dcd5f078afe9a7427fe2ebf21489fd73889cf7149e5e7e83f4294c22f459674d8f27b4477012bfe5a2506892bf8912ce71e01f63199e52fa11e0b97379c2f79d15"}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xfff1}}, @TCA_BASIC_ACT={0x19c, 0x3, [@m_ctinfo={0x134, 0x16, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xd}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x401}]}, {0xf5, 0x6, "27b1a64c80d956bfc97761d697380620557a75fef12f85f9f35d40a64b98e771ed64ae38a2b596983787a77192b0ace14ff23dda6374e1008e83f6422a5011df6c8c3465a242d54634b6528359ec32075578a784daff936498f46c8b5b9444277700898f586549f9e82d5b64f0c7110f56521bc774416a294d04bd304963341aa4dd908ed34808072c142cc0cf2bc3bbed803beaecbc641eeeb869a5f86ad7a2f136ba80d2d66aba90322c8d3722a839db2007e52d0cfebbe434242db474255ed867ed79f7118526788d8f368981a0d40f72ac0d4fa010cad2a142643ce527957a62229216f15f071aee3c4ff1476f19ec"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x38, 0x1f, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x2}]}, {0x6, 0x6, 'MT'}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BASIC_POLICE={0x4}]}}]}, 0x48c}}, 0x0) 140.72856ms ago: executing program 2 (id=2610): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007e9, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 128.943715ms ago: executing program 1 (id=2611): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 0s ago: executing program 4 (id=2612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) kernel console output (not intermixed with test programs): _pagetables:0kB all_unreclaimable? no [ 1030.004667][T11813] Node 0 DMA free:4096kB boost:0kB min:160kB low:200kB high:240kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1030.036293][T11813] lowmem_reserve[]: 0 893 1206 0 0 [ 1030.041993][T11813] Node 0 DMA32 free:652836kB boost:0kB min:36132kB low:45164kB high:54196kB reserved_highatomic:0KB active_anon:7596kB inactive_anon:0kB active_file:2944kB inactive_file:54716kB unevictable:0kB writepending:84kB present:3129332kB managed:953632kB mlocked:0kB bounce:0kB free_pcp:7812kB local_pcp:3636kB free_cma:0kB [ 1030.073297][T11813] lowmem_reserve[]: 0 0 313 0 0 [ 1030.078891][T11813] Node 0 Normal free:15772kB boost:0kB min:12660kB low:15824kB high:18988kB reserved_highatomic:0KB active_anon:12620kB inactive_anon:0kB active_file:852kB inactive_file:110788kB unevictable:1536kB writepending:52kB present:1048576kB managed:320544kB mlocked:0kB bounce:0kB free_pcp:1460kB local_pcp:1100kB free_cma:0kB [ 1030.109894][T11813] lowmem_reserve[]: 0 0 0 0 0 [ 1030.118725][T11813] Node 1 Normal free:984104kB boost:0kB min:41152kB low:51440kB high:61728kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:1041672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1030.149110][T11813] lowmem_reserve[]: 0 0 0 0 0 [ 1030.154433][T11813] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1030.167734][T11813] Node 0 DMA32: 601*4kB (UME) 542*8kB (UME) 233*16kB (UME) 168*32kB (UME) 103*64kB (UME) 107*128kB (UME) 93*256kB (UME) 54*512kB (UME) 32*1024kB (UME) 8*2048kB (UME) 126*4096kB (UM) = 652836kB [ 1030.188758][T11813] Node 0 Normal: 3*4kB (UME) 66*8kB (UME) 52*16kB (UME) 36*32kB (UME) 15*64kB (UME) 14*128kB (UM) 9*256kB (UM) 6*512kB (UME) 1*1024kB (E) 2*2048kB (U) 0*4096kB = 15772kB [ 1030.207706][T11813] Node 1 Normal: 2*4kB (U) 8*8kB (UM) 8*16kB (U) 9*32kB (U) 5*64kB (U) 8*128kB (UM) 3*256kB (UM) 1*512kB (M) 4*1024kB (U) 3*2048kB (U) 237*4096kB (UM) = 984104kB [ 1030.229579][T11813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1030.240493][T11813] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1030.250187][T11813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1030.260110][T11813] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1030.269849][T11813] 44391 total pagecache pages [ 1030.274721][T11813] 0 pages in swap cache [ 1030.279231][T11813] Free swap = 124472kB [ 1030.283565][T11813] Total swap = 124996kB [ 1030.288022][T11813] 2097051 pages RAM [ 1030.292025][T11813] 0 pages HighMem/MovableOnly [ 1030.296992][T11813] 1517065 pages reserved [ 1030.301421][T11813] 0 pages cma reserved [ 1030.354491][T11692] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1030.451582][T11692] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1030.557097][T11692] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1030.645623][T11692] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1030.745997][T11820] loop2: detected capacity change from 0 to 164 [ 1031.407632][T11826] loop3: detected capacity change from 0 to 256 [ 1031.642905][T11826] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1032.239049][T11692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.584753][T11692] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.684021][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.691924][ T8726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.825080][ T8726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.832955][ T8726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.953994][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1033.963079][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1033.970848][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1033.979392][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1033.987239][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1033.995165][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.007055][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.014736][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.023396][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.031137][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.038940][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.046677][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.054328][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.062230][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.070054][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.077814][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.085569][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.093223][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.100979][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.112778][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.121472][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.129253][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.137005][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.144692][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.152546][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.160311][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.168092][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.176151][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.183867][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.191676][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.199505][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.201333][T11850] bond0: entered promiscuous mode [ 1034.207283][ T8726] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1034.224415][T11850] bond_slave_0: entered promiscuous mode [ 1034.231407][T11850] bond_slave_1: entered promiscuous mode [ 1034.482375][ T8726] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1034.605241][ T44] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1034.828441][ T44] usb 3-1: config 0 has no interfaces? [ 1034.834343][ T44] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1034.843822][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.903548][ T44] usb 3-1: config 0 descriptor?? [ 1035.029875][T11848] bond0: left promiscuous mode [ 1035.035096][T11848] bond_slave_0: left promiscuous mode [ 1035.041570][T11848] bond_slave_1: left promiscuous mode [ 1035.166878][ T25] usb 3-1: USB disconnect, device number 19 [ 1035.523934][T11861] loop3: detected capacity change from 0 to 164 [ 1035.666240][T11692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.357550][T11692] veth0_vlan: entered promiscuous mode [ 1036.516763][T11692] veth1_vlan: entered promiscuous mode [ 1037.050645][T11692] veth0_macvtap: entered promiscuous mode [ 1037.199089][T11692] veth1_macvtap: entered promiscuous mode [ 1037.483438][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.498642][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.509968][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.520868][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.531557][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.542407][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.552679][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.563610][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.579521][T11692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.879779][T11884] loop2: detected capacity change from 0 to 1024 [ 1037.969524][T11884] EXT4-fs: Ignoring removed orlov option [ 1037.975732][T11884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1038.106002][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.117768][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.128696][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.139561][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.150669][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.161526][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.171735][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.182595][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.215223][T11692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.345562][T11892] bond0: entered promiscuous mode [ 1038.350966][T11892] bond_slave_0: entered promiscuous mode [ 1038.365770][T11892] bond_slave_1: entered promiscuous mode [ 1038.437490][T11884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.453432][T11692] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.463417][T11692] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.472663][T11692] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.482552][T11692] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.632480][ T29] audit: type=1800 audit(1722545926.820:173): pid=11884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2052" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1038.997869][T11887] bond0: left promiscuous mode [ 1039.002949][T11887] bond_slave_0: left promiscuous mode [ 1039.010321][T11887] bond_slave_1: left promiscuous mode [ 1039.164132][T11899] loop0: detected capacity change from 0 to 164 [ 1039.247310][T10988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.622382][T11903] pim6reg1: entered promiscuous mode [ 1039.629351][T11903] pim6reg1: entered allmulticast mode [ 1040.918074][T11916] loop3: detected capacity change from 0 to 1024 [ 1040.954125][T11916] EXT4-fs: Ignoring removed oldalloc option [ 1041.016615][T11916] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1041.028490][T11921] loop0: detected capacity change from 0 to 512 [ 1041.105603][T11921] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1041.222653][T11916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.223707][T11921] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2063: iget: bad i_size value: -67835469387268086 [ 1041.288704][T11921] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2063: couldn't read orphan inode 15 (err -117) [ 1041.337560][T11921] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.350500][T11921] ext2 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.630010][ T8600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.259676][T11935] loop3: detected capacity change from 0 to 1024 [ 1042.310604][T11935] EXT4-fs: Ignoring removed orlov option [ 1042.316942][T11935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1042.339427][T11937] warn_alloc: 2 callbacks suppressed [ 1042.339506][T11937] syz.2.2067: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1042.361085][T11937] CPU: 0 UID: 0 PID: 11937 Comm: syz.2.2067 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1042.372224][T11937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1042.382572][T11937] Call Trace: [ 1042.386069][T11937] [ 1042.389222][T11937] dump_stack_lvl+0x216/0x2d0 [ 1042.394324][T11937] dump_stack+0x1e/0x30 [ 1042.398790][T11937] warn_alloc+0x455/0x650 [ 1042.403450][T11937] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.408987][T11937] ? __vmalloc_node_range_noprof+0xd6/0x2890 [ 1042.415312][T11937] __vmalloc_node_range_noprof+0x130/0x2890 [ 1042.421580][T11937] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.427138][T11937] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.433304][T11937] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.438844][T11937] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.444373][T11937] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.449911][T11937] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.456090][T11937] ? kmsan_get_metadata+0x13e/0x1c0 [ 1042.461632][T11937] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.467823][T11937] vmalloc_user_noprof+0x90/0xb0 [ 1042.473082][T11937] ? xskq_create+0x105/0x270 [ 1042.477985][T11937] xskq_create+0x105/0x270 [ 1042.482722][T11937] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1042.488920][T11937] xsk_init_queue+0x115/0x1f0 [ 1042.493916][T11937] xsk_setsockopt+0x882/0xcc0 [ 1042.498946][T11937] do_sock_setsockopt+0x4bb/0x7d0 [ 1042.504316][T11937] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1042.509862][T11937] __sys_setsockopt+0x33a/0x4b0 [ 1042.515067][T11937] __ia32_sys_setsockopt+0xe2/0x160 [ 1042.520599][T11937] ia32_sys_call+0x3d22/0x40d0 [ 1042.525733][T11937] __do_fast_syscall_32+0xb0/0x110 [ 1042.531161][T11937] ? irqentry_exit+0x16/0x60 [ 1042.536125][T11937] do_fast_syscall_32+0x38/0x80 [ 1042.541291][T11937] do_SYSENTER_32+0x1f/0x30 [ 1042.546121][T11937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1042.552889][T11937] RIP: 0023:0xf7f91579 [ 1042.557217][T11937] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1042.577149][T11937] RSP: 002b:00000000f574657c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1042.585912][T11937] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 1042.594163][T11937] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 1042.602419][T11937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1042.610672][T11937] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1042.618880][T11937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1042.627095][T11937] [ 1042.633665][T11937] Mem-Info: [ 1042.638107][T11937] active_anon:5195 inactive_anon:0 isolated_anon:0 [ 1042.638107][T11937] active_file:949 inactive_file:41406 isolated_file:0 [ 1042.638107][T11937] unevictable:768 dirty:19 writeback:0 [ 1042.638107][T11937] slab_reclaimable:4248 slab_unreclaimable:22111 [ 1042.638107][T11937] mapped:22633 shmem:2323 pagetables:699 [ 1042.638107][T11937] sec_pagetables:0 bounce:0 [ 1042.638107][T11937] kernel_misc_reclaimable:0 [ 1042.638107][T11937] free:414967 free_pcp:3456 free_cma:0 [ 1042.683505][T11937] Node 0 active_anon:20984kB inactive_anon:0kB active_file:3796kB inactive_file:165552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90872kB dirty:76kB writeback:0kB shmem:8096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5024kB pagetables:2788kB sec_pagetables:0kB all_unreclaimable? no [ 1042.719645][T11937] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:0kB pagetables:8kB sec_pagetables:0kB all_unreclaimable? no [ 1042.751328][T11937] Node 0 DMA free:4096kB boost:0kB min:160kB low:200kB high:240kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1042.779387][T11937] lowmem_reserve[]: 0 893 1206 0 0 [ 1042.785233][T11937] Node 0 DMA32 free:655848kB boost:0kB min:36132kB low:45164kB high:54196kB reserved_highatomic:0KB active_anon:9376kB inactive_anon:0kB active_file:2944kB inactive_file:54784kB unevictable:0kB writepending:64kB present:3129332kB managed:953632kB mlocked:0kB bounce:0kB free_pcp:10764kB local_pcp:9456kB free_cma:0kB [ 1042.819678][T11937] lowmem_reserve[]: 0 0 313 0 0 [ 1042.825240][T11937] Node 0 Normal free:15820kB boost:0kB min:12660kB low:15824kB high:18988kB reserved_highatomic:0KB active_anon:11744kB inactive_anon:0kB active_file:852kB inactive_file:110768kB unevictable:1536kB writepending:12kB present:1048576kB managed:320544kB mlocked:0kB bounce:0kB free_pcp:2736kB local_pcp:468kB free_cma:0kB [ 1042.856504][T11937] lowmem_reserve[]: 0 0 0 0 0 [ 1042.862971][T11937] Node 1 Normal free:984104kB boost:0kB min:41152kB low:51440kB high:61728kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:1041672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1042.893006][T11937] lowmem_reserve[]: 0 0 0 0 0 [ 1042.898391][T11937] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1042.914479][T11937] Node 0 DMA32: 52*4kB (UE) 377*8kB (UME) 341*16kB (UM) 209*32kB (UME) 101*64kB (UME) 103*128kB (UME) 101*256kB (UME) 56*512kB (UME) 31*1024kB (UME) 9*2048kB (UME) 126*4096kB (UM) = 655816kB [ 1042.938568][T11937] Node 0 Normal: 95*4kB (UME) 72*8kB (UME) 35*16kB (UME) 29*32kB (UME) 15*64kB (UME) 15*128kB (UM) 9*256kB (UM) 6*512kB (UME) 1*1024kB (E) 2*2048kB (U) 0*4096kB = 15820kB [ 1042.957601][T11937] Node 1 Normal: 2*4kB (U) 8*8kB (UM) 8*16kB (U) 9*32kB (U) 5*64kB (U) 8*128kB (UM) 3*256kB (UM) 1*512kB (M) 4*1024kB (U) 3*2048kB (U) 237*4096kB (UM) = 984104kB [ 1042.981935][T11937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1042.991946][T11937] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1043.004561][T11937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1043.018582][T11937] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1043.029156][T11937] 44778 total pagecache pages [ 1043.034009][T11937] 0 pages in swap cache [ 1043.038501][T11937] Free swap = 124472kB [ 1043.042852][T11937] Total swap = 124996kB [ 1043.047396][T11937] 2097051 pages RAM [ 1043.051437][T11937] 0 pages HighMem/MovableOnly [ 1043.056500][T11937] 1517065 pages reserved [ 1043.060930][T11937] 0 pages cma reserved [ 1043.108060][T11935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.314785][ T29] audit: type=1800 audit(1722545931.440:174): pid=11935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2066" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1043.477839][T11944] bond0: entered promiscuous mode [ 1043.483159][T11944] bond_slave_0: entered promiscuous mode [ 1043.490123][T11944] bond_slave_1: entered promiscuous mode [ 1043.874572][ T8600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.079572][T11943] bond0: left promiscuous mode [ 1044.082323][T11954] loop2: detected capacity change from 0 to 164 [ 1044.084516][T11943] bond_slave_0: left promiscuous mode [ 1044.098448][T11943] bond_slave_1: left promiscuous mode [ 1044.984140][ T8616] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 1045.755613][T11971] loop4: detected capacity change from 0 to 256 [ 1045.946436][T11971] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1046.659352][ T9729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.667567][ T9729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.871972][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.880264][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.056404][T11981] loop3: detected capacity change from 0 to 1024 [ 1047.065741][T11981] EXT4-fs: Ignoring removed orlov option [ 1047.071761][T11981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1047.267461][T11989] bond0: entered promiscuous mode [ 1047.272795][T11989] bond_slave_0: entered promiscuous mode [ 1047.279851][T11989] bond_slave_1: entered promiscuous mode [ 1047.288095][T11981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.545367][ T29] audit: type=1800 audit(1722545935.700:175): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2079" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1047.935241][ T5905] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1047.994593][ T8600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.006039][T11996] loop0: detected capacity change from 0 to 164 [ 1048.045450][T11984] bond0: left promiscuous mode [ 1048.050567][T11984] bond_slave_0: left promiscuous mode [ 1048.059665][T11984] bond_slave_1: left promiscuous mode [ 1048.152611][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.164073][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.175806][ T5905] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1048.186023][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.285383][ T5905] usb 2-1: config 0 descriptor?? [ 1048.823562][ T5905] arvo 0003:1E7D:30D4.000D: collection stack underflow [ 1048.830923][ T5905] arvo 0003:1E7D:30D4.000D: item 0 4 0 12 parsing failed [ 1048.893429][ T5905] arvo 0003:1E7D:30D4.000D: parse failed [ 1048.900824][ T5905] arvo 0003:1E7D:30D4.000D: probe with driver arvo failed with error -22 [ 1049.011271][ T5905] usb 2-1: USB disconnect, device number 10 [ 1050.961472][T12017] loop4: detected capacity change from 0 to 1024 [ 1051.214129][T12017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.400585][T12023] loop1: detected capacity change from 0 to 1024 [ 1051.457646][T12023] EXT4-fs: Ignoring removed orlov option [ 1051.463692][T12023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1051.495716][T12025] bond0: entered promiscuous mode [ 1051.501129][T12025] bond_slave_0: entered promiscuous mode [ 1051.508682][T12025] bond_slave_1: entered promiscuous mode [ 1051.653220][T12023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.795066][ T29] audit: type=1800 audit(1722545939.940:176): pid=12023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2093" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1051.927841][T10930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.152854][T11692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.238037][T12022] bond0: left promiscuous mode [ 1052.243100][T12022] bond_slave_0: left promiscuous mode [ 1052.251516][T12022] bond_slave_1: left promiscuous mode [ 1052.265631][T12033] loop0: detected capacity change from 0 to 164 [ 1053.890273][T12048] loop1: detected capacity change from 0 to 1024 [ 1054.037070][T12048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1054.335011][ T29] audit: type=1326 audit(1722545942.480:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.1.2101" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x0 [ 1054.357254][ T29] audit: type=1800 audit(1722545942.560:178): pid=12057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2101" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1054.609472][T12061] loop3: detected capacity change from 0 to 256 [ 1054.681326][T12060] warn_alloc: 2 callbacks suppressed [ 1054.681414][T12060] syz.0.2103: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1054.708623][T12060] CPU: 1 UID: 0 PID: 12060 Comm: syz.0.2103 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1054.719769][T12060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1054.730048][T12060] Call Trace: [ 1054.733499][T12060] [ 1054.736621][T12060] dump_stack_lvl+0x216/0x2d0 [ 1054.741594][T12060] dump_stack+0x1e/0x30 [ 1054.746024][T12060] warn_alloc+0x455/0x650 [ 1054.750646][T12060] ? kmsan_get_metadata+0x13e/0x1c0 [ 1054.756136][T12060] ? __vmalloc_node_range_noprof+0xd6/0x2890 [ 1054.762452][T12060] __vmalloc_node_range_noprof+0x130/0x2890 [ 1054.768661][T12060] ? kmsan_get_metadata+0x13e/0x1c0 [ 1054.774148][T12060] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1054.780288][T12060] ? kmsan_get_metadata+0x13e/0x1c0 [ 1054.785830][T12060] ? kmsan_get_metadata+0x13e/0x1c0 [ 1054.791331][T12060] ? kmsan_get_metadata+0x13e/0x1c0 [ 1054.796886][T12060] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1054.803023][T12060] ? kmsan_get_metadata+0x13e/0x1c0 [ 1054.808504][T12060] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1054.814613][T12060] vmalloc_user_noprof+0x90/0xb0 [ 1054.819833][T12060] ? xskq_create+0x105/0x270 [ 1054.824706][T12060] xskq_create+0x105/0x270 [ 1054.829378][T12060] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1054.835491][T12060] xsk_init_queue+0x115/0x1f0 [ 1054.840439][T12060] xsk_setsockopt+0x882/0xcc0 [ 1054.845419][T12060] do_sock_setsockopt+0x4bb/0x7d0 [ 1054.850740][T12060] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1054.856210][T12060] __sys_setsockopt+0x33a/0x4b0 [ 1054.861364][T12060] __ia32_sys_setsockopt+0xe2/0x160 [ 1054.866858][T12060] ia32_sys_call+0x3d22/0x40d0 [ 1054.871929][T12060] __do_fast_syscall_32+0xb0/0x110 [ 1054.877324][T12060] do_fast_syscall_32+0x38/0x80 [ 1054.882458][T12060] do_SYSENTER_32+0x1f/0x30 [ 1054.887211][T12060] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1054.893854][T12060] RIP: 0023:0xf7f97579 [ 1054.898140][T12060] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1054.918034][T12060] RSP: 002b:00000000f574657c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1054.926746][T12060] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 1054.934942][T12060] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 1054.943161][T12060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1054.951378][T12060] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1054.959596][T12060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1054.967817][T12060] [ 1054.971600][T12060] Mem-Info: [ 1054.979923][T12060] active_anon:4285 inactive_anon:0 isolated_anon:0 [ 1054.979923][T12060] active_file:949 inactive_file:41402 isolated_file:0 [ 1054.979923][T12060] unevictable:768 dirty:37 writeback:0 [ 1054.979923][T12060] slab_reclaimable:4252 slab_unreclaimable:22400 [ 1054.979923][T12060] mapped:21722 shmem:1380 pagetables:692 [ 1054.979923][T12060] sec_pagetables:0 bounce:0 [ 1054.979923][T12060] kernel_misc_reclaimable:0 [ 1054.979923][T12060] free:414084 free_pcp:5027 free_cma:0 [ 1055.031279][T12060] Node 0 active_anon:17220kB inactive_anon:0kB active_file:3796kB inactive_file:165580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86932kB dirty:160kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5040kB pagetables:2796kB sec_pagetables:0kB all_unreclaimable? no [ 1055.065192][T12060] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:0kB pagetables:8kB sec_pagetables:0kB all_unreclaimable? no [ 1055.095866][T12060] Node 0 DMA free:4096kB boost:0kB min:160kB low:200kB high:240kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1055.127963][T12060] lowmem_reserve[]: 0 893 1206 0 0 [ 1055.133638][T12060] Node 0 DMA32 free:652084kB boost:0kB min:36132kB low:45164kB high:54196kB reserved_highatomic:0KB active_anon:5220kB inactive_anon:0kB active_file:2944kB inactive_file:54812kB unevictable:0kB writepending:128kB present:3129332kB managed:953632kB mlocked:0kB bounce:0kB free_pcp:17644kB local_pcp:16940kB free_cma:0kB [ 1055.165734][T12060] lowmem_reserve[]: 0 0 313 0 0 [ 1055.171220][T12060] Node 0 Normal free:15784kB boost:0kB min:12660kB low:15824kB high:18988kB reserved_highatomic:0KB active_anon:11988kB inactive_anon:0kB active_file:852kB inactive_file:110768kB unevictable:1536kB writepending:32kB present:1048576kB managed:320544kB mlocked:0kB bounce:0kB free_pcp:2508kB local_pcp:2420kB free_cma:0kB [ 1055.202122][T12060] lowmem_reserve[]: 0 0 0 0 0 [ 1055.212537][T12060] Node 1 Normal free:984104kB boost:0kB min:41152kB low:51440kB high:61728kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:1041672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1055.243367][T12060] lowmem_reserve[]: 0 0 0 0 0 [ 1055.248840][T12060] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1055.262140][T12060] Node 0 DMA32: 295*4kB (UME) 171*8kB (UME) 220*16kB (UME) 203*32kB (UME) 100*64kB (UME) 100*128kB (UME) 99*256kB (UME) 56*512kB (UME) 31*1024kB (UME) 9*2048kB (UME) 126*4096kB (UM) = 652052kB [ 1055.283375][T12060] Node 0 Normal: 132*4kB (UME) 69*8kB (UE) 35*16kB (UME) 22*32kB (UME) 16*64kB (UME) 15*128kB (UM) 9*256kB (UM) 6*512kB (UME) 1*1024kB (E) 2*2048kB (U) 0*4096kB = 15784kB [ 1055.307792][T12060] Node 1 Normal: 2*4kB (U) 8*8kB (UM) 8*16kB (U) 9*32kB (U) 5*64kB (U) 8*128kB (UM) 3*256kB (UM) 1*512kB (M) 4*1024kB (U) 3*2048kB (U) 237*4096kB (UM) = 984104kB [ 1055.327333][T12060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1055.337271][T12060] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1055.346962][T12060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1055.357010][T12060] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1055.366708][T12060] 43707 total pagecache pages [ 1055.371612][T12060] 0 pages in swap cache [ 1055.376101][T12060] Free swap = 124472kB [ 1055.380480][T12060] Total swap = 124996kB [ 1055.384989][T12060] 2097051 pages RAM [ 1055.389006][T12060] 0 pages HighMem/MovableOnly [ 1055.393913][T12060] 1517065 pages reserved [ 1055.398524][T12060] 0 pages cma reserved [ 1055.457585][T11692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.503170][T12061] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1055.625163][T12069] bond0: entered promiscuous mode [ 1055.630666][T12069] bond_slave_0: entered promiscuous mode [ 1055.638075][T12069] bond_slave_1: entered promiscuous mode [ 1055.920797][T12069] bond0: left promiscuous mode [ 1055.926242][T12069] bond_slave_0: left promiscuous mode [ 1055.932931][T12069] bond_slave_1: left promiscuous mode [ 1056.132067][T12072] loop1: detected capacity change from 0 to 1024 [ 1056.178619][T12072] EXT4-fs: Ignoring removed orlov option [ 1056.184674][T12072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1056.299715][T12072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1056.485429][ T29] audit: type=1800 audit(1722545944.660:179): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2107" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1056.509737][T12079] loop4: detected capacity change from 0 to 164 [ 1057.057275][T11692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.634341][T12087] loop2: detected capacity change from 0 to 256 [ 1057.893047][ T29] audit: type=1800 audit(1722545946.060:180): pid=12087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2114" name="bus" dev="loop2" ino=1048671 res=0 errno=0 [ 1057.915499][ T29] audit: type=1800 audit(1722545946.070:181): pid=12087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2114" name="bus" dev="loop2" ino=1048671 res=0 errno=0 [ 1058.755683][ T5903] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1058.968880][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 1059.068435][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.080490][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1059.097616][ T5903] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1059.108282][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.173053][ T5903] usb 2-1: config 0 descriptor?? [ 1059.844712][ T5903] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000E/input/input10 [ 1059.942052][T12103] bond0: entered promiscuous mode [ 1059.947595][T12103] bond_slave_0: entered promiscuous mode [ 1059.954474][T12103] bond_slave_1: entered promiscuous mode [ 1060.068640][ T5903] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1060.189479][T12103] bond0: left promiscuous mode [ 1060.194557][T12103] bond_slave_0: left promiscuous mode [ 1060.201561][T12103] bond_slave_1: left promiscuous mode [ 1060.254991][ T5903] usb 2-1: USB disconnect, device number 11 [ 1060.329214][T12105] loop3: detected capacity change from 0 to 1024 [ 1060.401129][T12105] EXT4-fs: Ignoring removed orlov option [ 1060.407941][T12105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1060.580534][T12109] loop2: detected capacity change from 0 to 164 [ 1060.664728][T12105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1060.756735][T12093] Bluetooth: hci0: command 0x0406 tx timeout [ 1060.998176][ T29] audit: type=1800 audit(1722545949.160:182): pid=12105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2122" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1061.382006][T12116] loop0: detected capacity change from 0 to 8 [ 1061.530407][ T8600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.668754][T12120] loop1: detected capacity change from 0 to 256 [ 1061.735274][T12116] loop0: detected capacity change from 0 to 512 [ 1061.951302][ T29] audit: type=1800 audit(1722545950.140:183): pid=12120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2127" name="bus" dev="loop1" ino=1048672 res=0 errno=0 [ 1061.976984][ T29] audit: type=1800 audit(1722545950.140:184): pid=12120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2127" name="bus" dev="loop1" ino=1048672 res=0 errno=0 [ 1062.175741][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1062.410207][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 1062.438552][T12129] netlink: 'syz.2.2130': attribute type 5 has an invalid length. [ 1062.464624][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 27751, setting to 1024 [ 1062.479132][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1062.490148][ T25] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1062.499542][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.588477][ T25] usb 1-1: config 0 descriptor?? [ 1062.596422][T12116] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1062.710933][ T25] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1062.722449][ T25] usb 1-1: Detected SIO [ 1062.791345][ T25] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1062.963308][T12131] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1062.991517][ T5903] usb 1-1: USB disconnect, device number 16 [ 1063.044687][ T5903] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1063.058388][ T5903] ftdi_sio 1-1:0.0: device disconnected [ 1063.878967][T12138] bond0: entered promiscuous mode [ 1063.884584][T12138] bond_slave_0: entered promiscuous mode [ 1063.892602][T12138] bond_slave_1: entered promiscuous mode [ 1064.128235][T12138] bond0: left promiscuous mode [ 1064.133377][T12138] bond_slave_0: left promiscuous mode [ 1064.140604][T12138] bond_slave_1: left promiscuous mode [ 1064.482551][T12146] loop2: detected capacity change from 0 to 164 [ 1065.248191][T12150] loop0: detected capacity change from 0 to 1024 [ 1065.281765][T12150] EXT4-fs: Ignoring removed orlov option [ 1065.288537][T12150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1065.412257][T12150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.695346][ T29] audit: type=1800 audit(1722545953.870:185): pid=12150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2138" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1065.890604][T12163] loop1: detected capacity change from 0 to 256 [ 1066.198052][ T29] audit: type=1800 audit(1722545954.390:186): pid=12163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2142" name="bus" dev="loop1" ino=1048673 res=0 errno=0 [ 1066.211209][ T8616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.219366][ T29] audit: type=1800 audit(1722545954.410:187): pid=12163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2142" name="bus" dev="loop1" ino=1048673 res=0 errno=0 [ 1067.030536][ T5190] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1067.982642][T12181] pim6reg1: entered promiscuous mode [ 1067.998747][T12181] pim6reg1: entered allmulticast mode [ 1068.369323][T12184] loop0: detected capacity change from 0 to 164 [ 1068.437114][T12185] bond0: entered promiscuous mode [ 1068.442680][T12185] bond_slave_0: entered promiscuous mode [ 1068.450520][T12185] bond_slave_1: entered promiscuous mode [ 1068.711021][T12185] bond0: left promiscuous mode [ 1068.720433][T12185] bond_slave_0: left promiscuous mode [ 1068.728367][T12185] bond_slave_1: left promiscuous mode [ 1069.722172][T12192] loop3: detected capacity change from 0 to 1024 [ 1069.769353][T12192] EXT4-fs: Ignoring removed orlov option [ 1069.775577][T12192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1069.926732][T12192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1070.139204][ T29] audit: type=1800 audit(1722545958.310:188): pid=12192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2154" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1070.552473][T12203] loop0: detected capacity change from 0 to 256 [ 1070.647284][ T8600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.817455][ T29] audit: type=1800 audit(1722545958.960:189): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2157" name="bus" dev="loop0" ino=1048674 res=0 errno=0 [ 1070.840425][ T29] audit: type=1800 audit(1722545958.980:190): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2157" name="bus" dev="loop0" ino=1048674 res=0 errno=0 [ 1070.995897][T12093] Bluetooth: hci2: command 0x0406 tx timeout [ 1073.152978][T12093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1073.166501][T12093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1073.175991][T12093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1073.237038][T12093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1073.250563][T12093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1073.252390][T12222] bond0: entered promiscuous mode [ 1073.263249][T12222] bond_slave_0: entered promiscuous mode [ 1073.270178][T12222] bond_slave_1: entered promiscuous mode [ 1073.281798][T12093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1073.548969][T12222] bond0: left promiscuous mode [ 1073.554257][T12222] bond_slave_0: left promiscuous mode [ 1073.562062][T12222] bond_slave_1: left promiscuous mode [ 1074.434453][T12230] loop2: detected capacity change from 0 to 1024 [ 1074.489341][T12230] EXT4-fs: Ignoring removed orlov option [ 1074.495587][T12230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1074.613604][T12219] chnl_net:caif_netlink_parms(): no params data found [ 1074.674705][T12230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.061764][ T29] audit: type=1800 audit(1722545963.210:191): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2168" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1075.396840][T12093] Bluetooth: hci4: command tx timeout [ 1075.460351][T10988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.268677][T12256] loop2: detected capacity change from 0 to 512 [ 1076.342148][T12256] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1076.352848][T12256] EXT4-fs (loop2): blocks per group (64) and clusters per group (32768) inconsistent [ 1076.369077][T12219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.378401][T12219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.386645][T12219] bridge_slave_0: entered allmulticast mode [ 1076.404350][T12219] bridge_slave_0: entered promiscuous mode [ 1076.464995][T12259] loop0: detected capacity change from 0 to 256 [ 1076.489106][T12259] exfat: Deprecated parameter 'utf8' [ 1076.495909][T12259] exfat: Deprecated parameter 'namecase' [ 1076.506174][T12259] exfat: Deprecated parameter 'utf8' [ 1076.562587][T12219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.570514][T12219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.578250][T12219] bridge_slave_1: entered allmulticast mode [ 1076.586772][T12219] bridge_slave_1: entered promiscuous mode [ 1076.861906][T12259] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 1077.053541][T12219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.154158][T12219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.475140][T12093] Bluetooth: hci4: command tx timeout [ 1077.499847][T12219] team0: Port device team_slave_0 added [ 1077.607218][T12219] team0: Port device team_slave_1 added [ 1077.972013][T12219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.979697][T12219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.007873][T12219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.197742][T12219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.205377][T12219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.231806][T12219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.899599][T12219] hsr_slave_0: entered promiscuous mode [ 1078.967690][T12219] hsr_slave_1: entered promiscuous mode [ 1079.025729][T12219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1079.033555][T12219] Cannot create hsr debugfs directory [ 1079.432744][T12282] loop2: detected capacity change from 0 to 256 [ 1079.583669][T12093] Bluetooth: hci4: command tx timeout [ 1079.716421][ T29] audit: type=1800 audit(1722545967.850:192): pid=12282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2183" name="bus" dev="loop2" ino=1048675 res=0 errno=0 [ 1079.738268][ T29] audit: type=1800 audit(1722545967.870:193): pid=12282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2183" name="bus" dev="loop2" ino=1048675 res=0 errno=0 [ 1079.934399][T12284] loop3: detected capacity change from 0 to 512 [ 1080.379098][T12219] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.722916][T12219] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.912799][T12219] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.045262][ T5903] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1081.100088][T12219] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.336677][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.348833][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.359381][ T5903] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1081.368931][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.471028][ T5903] usb 3-1: config 0 descriptor?? [ 1081.635186][T12093] Bluetooth: hci4: command tx timeout [ 1081.961921][T12293] loop1: detected capacity change from 0 to 1024 [ 1082.007089][ T5903] hid (null): bogus close delimiter [ 1082.048415][T12293] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1082.157863][T12219] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1082.267066][T12219] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1082.297537][ T5903] usb 3-1: string descriptor 0 read error: -22 [ 1082.308403][T12219] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1082.346400][T12219] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1082.374393][T12293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.476184][T12293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.752703][ T5903] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #100: -71 [ 1082.765511][ T5903] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 [ 1082.773758][ T5903] uclogic 0003:256C:006D.000F: failed probing pen v1 parameters: -71 [ 1082.782198][ T5903] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 1082.790211][ T5903] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -71 [ 1083.006279][ T5903] usb 3-1: USB disconnect, device number 20 [ 1084.158271][T12219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.457417][T12219] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.577448][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.585213][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.723437][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.731141][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.435528][T12313] loop0: detected capacity change from 0 to 256 [ 1085.823449][ T29] audit: type=1800 audit(1722545973.990:194): pid=12313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2196" name="bus" dev="loop0" ino=1048676 res=0 errno=0 [ 1085.845205][ T29] audit: type=1800 audit(1722545973.990:195): pid=12313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2196" name="bus" dev="loop0" ino=1048676 res=0 errno=0 [ 1087.482746][T12331] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1087.638861][T12219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.206515][T12336] team0: Device ipvlan0 failed to register rx_handler [ 1089.513601][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.520474][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1090.737803][ T9729] bridge_slave_1: left allmulticast mode [ 1090.743842][ T9729] bridge_slave_1: left promiscuous mode [ 1090.750547][ T9729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.846619][ T9729] bridge_slave_0: left allmulticast mode [ 1090.852550][ T9729] bridge_slave_0: left promiscuous mode [ 1090.859326][ T9729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.930225][T12363] loop0: detected capacity change from 0 to 256 [ 1091.466994][ T29] audit: type=1800 audit(1722545979.520:196): pid=12363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2209" name="bus" dev="loop0" ino=1048677 res=0 errno=0 [ 1091.491662][ T29] audit: type=1800 audit(1722545979.520:197): pid=12363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2209" name="bus" dev="loop0" ino=1048677 res=0 errno=0 [ 1091.819182][ T9729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.845200][ T9729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.885167][ T9729] bond0 (unregistering): Released all slaves [ 1092.639274][T12380] team0: Device ipvlan0 failed to register rx_handler [ 1092.842503][ T9729] hsr_slave_0: left promiscuous mode [ 1092.865695][ T9729] hsr_slave_1: left promiscuous mode [ 1092.889504][ T9729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1092.899307][ T9729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.993141][ T9729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.001583][ T9729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.133875][ T9729] veth1_macvtap: left promiscuous mode [ 1093.140091][ T9729] veth0_macvtap: left promiscuous mode [ 1093.146184][ T9729] veth1_vlan: left promiscuous mode [ 1093.151808][ T9729] veth0_vlan: left promiscuous mode [ 1093.513934][T12384] vivid-000: ================= START STATUS ================= [ 1093.522242][T12384] vivid-000: Test Pattern: 75% Colorbar [ 1093.528288][T12384] vivid-000: Fill Percentage of Frame: 100 [ 1093.534439][T12384] vivid-000: Horizontal Movement: No Movement [ 1093.541093][T12384] vivid-000: Vertical Movement: No Movement [ 1093.547476][T12384] vivid-000: OSD Text Mode: All [ 1093.552689][T12384] vivid-000: Show Border: false [ 1093.562342][T12384] vivid-000: Show Square: false [ 1093.568260][T12384] vivid-000: Sensor Flipped Horizontally: false [ 1093.575138][T12384] vivid-000: Sensor Flipped Vertically: false [ 1093.581585][T12384] vivid-000: Insert SAV Code in Image: false [ 1093.588162][T12384] vivid-000: Insert EAV Code in Image: false [ 1093.594519][T12384] vivid-000: Insert Video Guard Band: false [ 1093.604513][T12384] vivid-000: Reduced Framerate: false [ 1093.611427][T12384] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1093.619708][T12384] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1093.628162][T12384] vivid-000: Enable Capture Cropping: true [ 1093.634345][T12384] vivid-000: Enable Capture Composing: true [ 1093.641536][T12384] vivid-000: Enable Capture Scaler: true [ 1093.647662][T12384] vivid-000: Timestamp Source: End of Frame [ 1093.653925][T12384] vivid-000: Colorspace: sRGB [ 1093.659146][T12384] vivid-000: Transfer Function: Default [ 1093.665298][T12384] vivid-000: Y'CbCr Encoding: Default [ 1093.671038][T12384] vivid-000: HSV Encoding: Hue 0-179 [ 1093.676868][T12384] vivid-000: Quantization: Default [ 1093.682351][T12384] vivid-000: Apply Alpha To Red Only: false [ 1093.688790][T12384] vivid-000: Standard Aspect Ratio: 4x3 [ 1093.694697][T12384] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1093.706374][T12384] vivid-000: DV Timings: 640x480p59 inactive [ 1093.712798][T12384] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1093.721643][T12384] vivid-000: Maximum EDID Blocks: 2 [ 1093.727463][T12384] vivid-000: Limited RGB Range (16-235): false [ 1093.734009][T12384] vivid-000: Rx RGB Quantization Range: Automatic [ 1093.741000][T12384] vivid-000: Power Present: 0x00000001 [ 1093.746967][T12384] tpg source WxH: 640x360 (Y'CbCr) [ 1093.752321][T12384] tpg field: 1 [ 1093.756075][T12384] tpg crop: 640x360@0x0 [ 1093.760476][T12384] tpg compose: 640x360@0x0 [ 1093.765386][T12384] tpg colorspace: 8 [ 1093.769396][T12384] tpg transfer function: 0/0 [ 1093.774206][T12384] tpg Y'CbCr encoding: 0/0 [ 1093.779009][T12384] tpg quantization: 0/0 [ 1093.783385][T12384] tpg RGB range: 0/2 [ 1093.788041][T12384] vivid-000: ================== END STATUS ================== [ 1094.817688][ T9729] team0 (unregistering): Port device team_slave_1 removed [ 1094.873698][ T9729] team0 (unregistering): Port device team_slave_0 removed [ 1095.025470][ T5901] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1095.257316][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 1095.308572][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1095.320381][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1095.332216][ T5901] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1095.344488][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.480691][ T5901] usb 2-1: config 0 descriptor?? [ 1095.489093][T12400] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1095.696685][T12219] veth0_vlan: entered promiscuous mode [ 1095.884021][T12219] veth1_vlan: entered promiscuous mode [ 1096.015865][ T5901] usbhid 2-1:0.0: can't add hid device: -71 [ 1096.022654][ T5901] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1096.151879][ T5901] usb 2-1: USB disconnect, device number 12 [ 1096.261323][T12407] loop0: detected capacity change from 0 to 256 [ 1096.430582][T12219] veth0_macvtap: entered promiscuous mode [ 1096.488306][ T29] audit: type=1800 audit(1722545984.630:198): pid=12407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2223" name="bus" dev="loop0" ino=1048678 res=0 errno=0 [ 1096.509922][ T29] audit: type=1800 audit(1722545984.630:199): pid=12407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2223" name="bus" dev="loop0" ino=1048678 res=0 errno=0 [ 1096.612331][T12219] veth1_macvtap: entered promiscuous mode [ 1096.845461][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.856895][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.867070][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.882164][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.893578][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.904378][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.914572][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.926080][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.941742][T12219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.322652][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.333833][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.345112][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.355856][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.366094][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.376933][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.387091][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.402017][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.420762][T12219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.810942][T12219] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.820549][T12219] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.829690][T12219] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.838840][T12219] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.092041][T12421] netlink: 'syz.1.2229': attribute type 16 has an invalid length. [ 1100.166498][T12445] loop1: detected capacity change from 0 to 256 [ 1100.422973][ T29] audit: type=1800 audit(1722545988.580:200): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2236" name="bus" dev="loop1" ino=1048679 res=0 errno=0 [ 1100.423233][ T29] audit: type=1800 audit(1722545988.590:201): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2236" name="bus" dev="loop1" ino=1048679 res=0 errno=0 [ 1100.684300][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.796681][T12487] loop2: detected capacity change from 0 to 256 [ 1105.048230][ T29] audit: type=1800 audit(1722545993.290:202): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2249" name="bus" dev="loop2" ino=1048680 res=0 errno=0 [ 1105.073434][ T29] audit: type=1800 audit(1722545993.290:203): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2249" name="bus" dev="loop2" ino=1048680 res=0 errno=0 [ 1105.767330][ T9700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.776186][ T9700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.110142][ T9724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.118615][ T9724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.640195][T12505] loop4: detected capacity change from 0 to 164 [ 1109.770992][T12519] loop1: detected capacity change from 0 to 256 [ 1109.776978][T12520] fuse: Bad value for 'fd' [ 1110.011687][ T5190] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1110.036274][ T5190] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1110.100523][ T5190] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1110.136977][ T5190] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1110.205074][ T29] audit: type=1800 audit(1722545998.270:204): pid=12519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2261" name="bus" dev="loop1" ino=1048684 res=0 errno=0 [ 1110.230516][ T5190] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1110.243454][ T5190] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1111.291564][T12529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2263'. [ 1112.445515][T12093] Bluetooth: hci0: command tx timeout [ 1112.737458][T12536] loop4: detected capacity change from 0 to 164 [ 1113.217541][T12522] chnl_net:caif_netlink_parms(): no params data found [ 1114.515411][ T5190] Bluetooth: hci0: command tx timeout [ 1115.301499][T12553] fuse: Bad value for 'fd' [ 1116.005028][T12522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.012658][T12522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.020217][T12522] bridge_slave_0: entered allmulticast mode [ 1116.032698][T12522] bridge_slave_0: entered promiscuous mode [ 1116.120514][T12555] loop3: detected capacity change from 0 to 256 [ 1116.277912][T12522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.290435][T12522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.298290][T12522] bridge_slave_1: entered allmulticast mode [ 1116.306729][T12522] bridge_slave_1: entered promiscuous mode [ 1116.604489][ T5190] Bluetooth: hci0: command tx timeout [ 1116.835456][ T29] audit: type=1800 audit(1722546004.900:205): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2272" name="bus" dev="loop3" ino=1048685 res=0 errno=0 [ 1116.861980][ T29] audit: type=1800 audit(1722546004.900:206): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2272" name="bus" dev="loop3" ino=1048685 res=0 errno=0 [ 1117.105730][T12522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.247412][T12522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.549327][T12093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1117.713353][T12093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1117.723333][T12093] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1117.738325][T12093] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1117.750042][T12093] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1117.759918][T12093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1117.822920][T12522] team0: Port device team_slave_0 added [ 1118.045578][T12522] team0: Port device team_slave_1 added [ 1118.595121][T12522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.602581][T12522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.634100][T12522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.705218][ T5190] Bluetooth: hci0: command tx timeout [ 1118.762038][T12567] loop3: detected capacity change from 0 to 164 [ 1118.937155][T12522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.944410][T12522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.970925][T12522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.023946][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2274'. [ 1119.804261][T12522] hsr_slave_0: entered promiscuous mode [ 1119.842394][T12522] hsr_slave_1: entered promiscuous mode [ 1120.035205][ T5190] Bluetooth: hci5: command tx timeout [ 1121.293356][T12562] chnl_net:caif_netlink_parms(): no params data found [ 1122.115916][ T5190] Bluetooth: hci5: command tx timeout [ 1122.225904][T12522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.503071][T12522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.807163][T12522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.197454][T12522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.099586][T12522] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1124.209371][ T5190] Bluetooth: hci5: command tx timeout [ 1124.267522][T12522] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1124.481616][ T4318] bridge_slave_1: left allmulticast mode [ 1124.487556][ T4318] bridge_slave_1: left promiscuous mode [ 1124.493866][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.565180][ T4318] bridge_slave_0: left allmulticast mode [ 1124.571014][ T4318] bridge_slave_0: left promiscuous mode [ 1124.577461][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.981710][T12600] fuse: Unknown parameter '00000000000000000000003' [ 1125.378479][T12602] loop3: detected capacity change from 0 to 256 [ 1125.596544][ T4318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.695489][ T4318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.726082][ T4318] bond0 (unregistering): Released all slaves [ 1125.800825][ T29] audit: type=1800 audit(1722546013.960:207): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2284" name="bus" dev="loop3" ino=1048686 res=0 errno=0 [ 1125.822631][ T29] audit: type=1800 audit(1722546014.020:208): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2284" name="bus" dev="loop3" ino=1048686 res=0 errno=0 [ 1125.823285][T12604] loop4: detected capacity change from 0 to 164 [ 1125.898010][T12522] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1126.127696][T12562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.135852][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.143407][T12562] bridge_slave_0: entered allmulticast mode [ 1126.155725][T12562] bridge_slave_0: entered promiscuous mode [ 1126.194654][T12522] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1126.276603][ T5190] Bluetooth: hci5: command tx timeout [ 1126.444661][T12562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.455854][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.464031][T12562] bridge_slave_1: entered allmulticast mode [ 1126.480642][T12562] bridge_slave_1: entered promiscuous mode [ 1126.998672][ T4318] hsr_slave_0: left promiscuous mode [ 1127.042882][ T4318] hsr_slave_1: left promiscuous mode [ 1127.097107][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.105902][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.156076][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.163856][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.280476][ T4318] veth1_macvtap: left promiscuous mode [ 1127.286877][ T4318] veth0_macvtap: left promiscuous mode [ 1127.298029][ T4318] veth1_vlan: left promiscuous mode [ 1127.303602][ T4318] veth0_vlan: left promiscuous mode [ 1128.908897][ T4318] team0 (unregistering): Port device team_slave_1 removed [ 1128.945258][ T4318] team0 (unregistering): Port device team_slave_0 removed [ 1129.725023][T12562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.832016][T12562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.130375][T12562] team0: Port device team_slave_0 added [ 1130.235484][T12562] team0: Port device team_slave_1 added [ 1130.538070][T12562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.545443][T12562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.575075][T12562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.824122][T12562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.831530][T12562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.858214][T12562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.305325][T12562] hsr_slave_0: entered promiscuous mode [ 1131.347315][T12562] hsr_slave_1: entered promiscuous mode [ 1131.366583][T12562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1131.374421][T12562] Cannot create hsr debugfs directory [ 1131.892731][T12522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.152956][T12522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.538878][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.546565][ T5905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.616250][T12627] fuse: Unknown parameter '00000000000000000000003' [ 1132.654722][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.662689][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.856458][T12628] loop3: detected capacity change from 0 to 164 [ 1133.002551][T12562] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.199639][T12630] loop1: detected capacity change from 0 to 256 [ 1133.244080][T12562] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.463332][T12562] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.517079][ T29] audit: type=1800 audit(1722546021.660:209): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2296" name="bus" dev="loop1" ino=1048687 res=0 errno=0 [ 1133.541623][ T29] audit: type=1800 audit(1722546021.700:210): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2296" name="bus" dev="loop1" ino=1048687 res=0 errno=0 [ 1133.732773][T12562] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.704331][T12562] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1134.833917][T12562] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1135.011693][T12562] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1135.103516][T12562] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1135.827537][ T9737] bridge_slave_1: left allmulticast mode [ 1135.833439][ T9737] bridge_slave_1: left promiscuous mode [ 1135.842363][ T9737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.956071][ T9737] bridge_slave_0: left allmulticast mode [ 1135.961960][ T9737] bridge_slave_0: left promiscuous mode [ 1135.968713][ T9737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.800661][ T4558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1136.823696][ T4558] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1136.837721][ T4558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1136.891723][ T4558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1136.950311][ T4558] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1136.976333][ T4558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1137.158913][ T9737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.254229][ T9737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.323095][ T9737] bond0 (unregistering): Released all slaves [ 1137.575891][ T5190] Bluetooth: hci3: command 0x0406 tx timeout [ 1137.667358][T12664] fuse: Unknown parameter '00000000000000000000003' [ 1138.058692][T12522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.386121][ T8600] bridge0: port 3(syz_tun) entered disabled state [ 1138.495892][ T8600] syz_tun (unregistering): left allmulticast mode [ 1138.498481][T12667] loop1: detected capacity change from 0 to 164 [ 1138.502569][ T8600] syz_tun (unregistering): left promiscuous mode [ 1138.517394][ T8600] bridge0: port 3(syz_tun) entered disabled state [ 1138.685134][T12667] loop1: detected capacity change from 164 to 0 [ 1138.765736][ T9737] hsr_slave_0: left promiscuous mode [ 1138.785947][ T9737] hsr_slave_1: left promiscuous mode [ 1138.806850][ T9737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.814518][ T9737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.858706][ T9737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.871254][ T9737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.898975][ T9737] veth1_macvtap: left promiscuous mode [ 1138.904703][ T9737] veth0_macvtap: left promiscuous mode [ 1138.911114][ T9737] veth1_vlan: left promiscuous mode [ 1138.917087][ T9737] veth0_vlan: left promiscuous mode [ 1139.093268][T12671] loop4: detected capacity change from 0 to 256 [ 1139.113692][T12093] Bluetooth: hci2: command tx timeout [ 1139.376830][ T29] audit: type=1800 audit(1722546027.570:211): pid=12671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2307" name="bus" dev="loop4" ino=1048688 res=0 errno=0 [ 1139.398986][ T29] audit: type=1800 audit(1722546027.580:212): pid=12671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2307" name="bus" dev="loop4" ino=1048688 res=0 errno=0 [ 1139.946960][ T9737] team0 (unregistering): Port device team_slave_1 removed [ 1139.996467][ T9737] team0 (unregistering): Port device team_slave_0 removed [ 1141.156880][T12093] Bluetooth: hci2: command tx timeout [ 1141.289583][T12689] fuse: Unknown parameter '00000000000000000000003' [ 1141.371363][T12522] veth0_vlan: entered promiscuous mode [ 1141.530089][T12522] veth1_vlan: entered promiscuous mode [ 1141.561762][T12562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.784634][T12659] chnl_net:caif_netlink_parms(): no params data found [ 1141.938069][ T9737] team0: Port device netdevsim3 removed [ 1141.950561][ T9737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.992294][T12562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.073943][T12695] loop4: detected capacity change from 0 to 164 [ 1142.106010][ T9737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.183314][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.191181][ T5907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.230776][T12522] veth0_macvtap: entered promiscuous mode [ 1142.266551][T12695] loop4: detected capacity change from 164 to 0 [ 1142.284130][T12522] veth1_macvtap: entered promiscuous mode [ 1142.321479][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.329256][ T5907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.410980][ T9737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.657239][ T9737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.982609][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.996071][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.009487][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.021158][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.031463][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.042325][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.057275][T12522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.231975][ T9737] bridge_slave_1: left allmulticast mode [ 1143.238040][ T9737] bridge_slave_1: left promiscuous mode [ 1143.244659][ T9737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.245227][T12093] Bluetooth: hci2: command tx timeout [ 1143.302944][ T9737] bridge_slave_0: left allmulticast mode [ 1143.311659][ T9737] bridge_slave_0: left promiscuous mode [ 1143.318372][ T9737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.996503][T12703] loop4: detected capacity change from 0 to 256 [ 1144.071203][ T29] audit: type=1800 audit(1722546032.290:213): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2317" name="bus" dev="loop4" ino=1048689 res=0 errno=0 [ 1144.095983][ T29] audit: type=1800 audit(1722546032.290:214): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2317" name="bus" dev="loop4" ino=1048689 res=0 errno=0 [ 1144.326777][ T9737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1144.386269][ T9737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1144.439685][ T9737] bond0 (unregistering): Released all slaves [ 1144.611721][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.622623][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.632734][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.643505][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.653594][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.664325][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.679858][T12522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.878064][T12522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.888256][T12522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.897436][T12522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.908962][T12522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.315374][T12093] Bluetooth: hci2: command tx timeout [ 1145.595284][ T9737] hsr_slave_0: left promiscuous mode [ 1145.646180][ T9737] hsr_slave_1: left promiscuous mode [ 1145.692740][ T9737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1145.703317][ T9737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.777736][ T9737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1145.785846][ T9737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1145.906457][ T9737] veth1_macvtap: left promiscuous mode [ 1145.912269][ T9737] veth0_macvtap: left promiscuous mode [ 1145.919445][ T9737] veth1_vlan: left promiscuous mode [ 1145.925173][ T9737] veth0_vlan: left promiscuous mode [ 1146.609406][T12726] fuse: Unknown parameter '00000000000000000000003' [ 1146.969932][ T9737] team0 (unregistering): Port device team_slave_1 removed [ 1147.020783][ T9737] team0 (unregistering): Port device team_slave_0 removed [ 1147.232071][T12730] loop1: detected capacity change from 0 to 164 [ 1147.398376][T12730] loop1: detected capacity change from 164 to 0 [ 1147.633385][T12659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.645797][T12659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.653494][T12659] bridge_slave_0: entered allmulticast mode [ 1147.662780][T12659] bridge_slave_0: entered promiscuous mode [ 1147.843622][T12659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.853437][T12659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.861471][T12659] bridge_slave_1: entered allmulticast mode [ 1147.940712][T12659] bridge_slave_1: entered promiscuous mode [ 1148.370466][T12659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.509587][T12659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.548561][T12744] loop4: detected capacity change from 0 to 256 [ 1148.885750][ T29] audit: type=1800 audit(1722546037.030:215): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2325" name="bus" dev="loop4" ino=1048690 res=0 errno=0 [ 1148.908950][ T29] audit: type=1800 audit(1722546037.040:216): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2325" name="bus" dev="loop4" ino=1048690 res=0 errno=0 [ 1148.909984][T12659] team0: Port device team_slave_0 added [ 1149.083082][T12562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.114017][T12659] team0: Port device team_slave_1 added [ 1149.406814][T12659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.418832][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.446870][T12659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.683044][T12659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.690391][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.719902][T12659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.980669][T12562] veth0_vlan: entered promiscuous mode [ 1150.327674][T12659] hsr_slave_0: entered promiscuous mode [ 1150.374673][T12659] hsr_slave_1: entered promiscuous mode [ 1150.445305][T12659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1150.453102][T12659] Cannot create hsr debugfs directory [ 1150.530766][T12562] veth1_vlan: entered promiscuous mode [ 1150.888410][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1150.895497][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.280538][T12562] veth0_macvtap: entered promiscuous mode [ 1151.532472][T12562] veth1_macvtap: entered promiscuous mode [ 1151.735623][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.749593][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.763055][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.775325][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.785782][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.797330][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.813257][T12562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.082126][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.097056][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.110501][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.126147][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.139386][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1152.150154][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.165339][T12562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.187152][T12769] fuse: Unknown parameter '00000000000000000000003' [ 1152.499014][T12562] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.508321][T12562] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.517515][T12562] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.526689][T12562] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.076712][T12777] loop4: detected capacity change from 0 to 164 [ 1153.088907][T12659] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1153.213834][T12659] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1153.236506][T12777] loop4: detected capacity change from 164 to 0 [ 1153.350665][T12659] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1153.467519][T12659] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1155.072951][T12800] loop4: detected capacity change from 0 to 256 [ 1155.167718][T12659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.292527][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.301948][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.336817][ T29] audit: type=1800 audit(1722546043.480:217): pid=12800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2334" name="bus" dev="loop4" ino=1048691 res=0 errno=0 [ 1155.360961][ T29] audit: type=1800 audit(1722546043.510:218): pid=12800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2334" name="bus" dev="loop4" ino=1048691 res=0 errno=0 [ 1155.581710][T12659] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.618757][ T9724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.628003][ T9724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.723574][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.731438][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.863823][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.871694][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.186102][T12822] fuse: Unknown parameter 'fd00000000000000000000003' [ 1157.783760][T12832] loop0: detected capacity change from 0 to 164 [ 1157.969813][T12832] loop0: detected capacity change from 164 to 0 [ 1158.450627][T12659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.247442][T12659] veth0_vlan: entered promiscuous mode [ 1159.367654][T12659] veth1_vlan: entered promiscuous mode [ 1159.772948][T12659] veth0_macvtap: entered promiscuous mode [ 1159.893046][T12659] veth1_macvtap: entered promiscuous mode [ 1160.024611][T12852] loop0: detected capacity change from 0 to 256 [ 1160.230142][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.241398][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.251616][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.265964][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.277194][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.287957][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.298115][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.308874][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.324471][T12659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1160.382320][ T29] audit: type=1800 audit(1722546048.500:219): pid=12852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2344" name="bus" dev="loop0" ino=1048695 res=0 errno=0 [ 1160.406943][ T29] audit: type=1800 audit(1722546048.520:220): pid=12852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2344" name="bus" dev="loop0" ino=1048695 res=0 errno=0 [ 1160.505051][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.515998][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.526283][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.544157][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.554408][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.565265][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.579071][T12659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.590844][T12659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.607209][T12659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1160.934604][T12659] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.943822][T12659] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.953024][T12659] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.962214][T12659] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.686302][T12824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.694398][T12824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.077039][ T9729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.085307][ T9729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.546590][T12876] loop0: detected capacity change from 0 to 164 [ 1162.787667][T12876] loop0: detected capacity change from 164 to 0 [ 1163.340827][T12884] fuse: Unknown parameter 'fd00000000000000000000003' [ 1164.596859][T12901] loop0: detected capacity change from 0 to 256 [ 1164.881631][ T29] audit: type=1800 audit(1722546053.040:221): pid=12901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2355" name="bus" dev="loop0" ino=1048699 res=0 errno=0 [ 1164.881881][ T29] audit: type=1800 audit(1722546053.050:222): pid=12901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2355" name="bus" dev="loop0" ino=1048699 res=0 errno=0 [ 1167.133656][T12936] fuse: Unknown parameter 'fd00000000000000000000003' [ 1168.716468][T12958] loop0: detected capacity change from 0 to 256 [ 1168.957301][ T29] audit: type=1800 audit(1722546057.130:223): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2369" name="bus" dev="loop0" ino=1048700 res=0 errno=0 [ 1168.981522][ T29] audit: type=1800 audit(1722546057.150:224): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2369" name="bus" dev="loop0" ino=1048700 res=0 errno=0 [ 1170.499325][ T9734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.511738][ T9734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.684917][ T9737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.692996][ T9737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.680273][T13012] loop4: detected capacity change from 0 to 256 [ 1172.719755][T13011] netlink: 'syz.0.2384': attribute type 4 has an invalid length. [ 1172.889026][T13014] netlink: 'syz.0.2384': attribute type 4 has an invalid length. [ 1172.976061][ T29] audit: type=1800 audit(1722546061.140:225): pid=13012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2383" name="bus" dev="loop4" ino=1048704 res=0 errno=0 [ 1172.998157][ T29] audit: type=1800 audit(1722546061.150:226): pid=13012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2383" name="bus" dev="loop4" ino=1048704 res=0 errno=0 [ 1174.328475][T13023] loop4: detected capacity change from 0 to 1024 [ 1174.592449][T13023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.638220][T13023] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: inode #11: comm syz.4.2387: missing EA_INODE flag [ 1174.826818][T13023] EXT4-fs (loop4): Remounting filesystem read-only [ 1175.335216][T12219] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.604499][T13054] loop4: detected capacity change from 0 to 256 [ 1176.720688][ T29] audit: type=1800 audit(1722546064.910:227): pid=13054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2397" name="bus" dev="loop4" ino=1048705 res=0 errno=0 [ 1176.742743][ T29] audit: type=1800 audit(1722546064.910:228): pid=13054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2397" name="bus" dev="loop4" ino=1048705 res=0 errno=0 [ 1176.804705][T13057] loop2: detected capacity change from 0 to 256 [ 1176.936483][T13058] netlink: 'syz.0.2398': attribute type 4 has an invalid length. [ 1177.098342][T13060] netlink: 'syz.0.2398': attribute type 4 has an invalid length. [ 1178.843390][T13078] loop1: detected capacity change from 0 to 1024 [ 1178.998256][T13078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1179.174529][T13078] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: inode #11: comm syz.1.2403: missing EA_INODE flag [ 1179.263197][T13078] EXT4-fs (loop1): Remounting filesystem read-only [ 1179.736711][T11692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.558198][T13103] loop1: detected capacity change from 0 to 256 [ 1180.894518][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2411'. [ 1181.143588][T13109] netlink: 'syz.3.2412': attribute type 4 has an invalid length. [ 1181.500771][T13109] netlink: 'syz.3.2412': attribute type 4 has an invalid length. [ 1184.859663][T13148] loop2: detected capacity change from 0 to 256 [ 1185.069971][ T29] audit: type=1800 audit(1722546073.260:229): pid=13148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2424" name="bus" dev="loop2" ino=1048708 res=0 errno=0 [ 1185.073935][T13145] loop3: detected capacity change from 0 to 2048 [ 1185.091738][ T29] audit: type=1800 audit(1722546073.270:230): pid=13148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2424" name="bus" dev="loop2" ino=1048708 res=0 errno=0 [ 1185.358922][T13145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1186.060007][T12659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.353082][T13188] loop1: detected capacity change from 0 to 256 [ 1188.575546][ T29] audit: type=1800 audit(1722546076.720:231): pid=13188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2444" name="bus" dev="loop1" ino=1048709 res=0 errno=0 [ 1188.598498][ T29] audit: type=1800 audit(1722546076.740:232): pid=13188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2444" name="bus" dev="loop1" ino=1048709 res=0 errno=0 [ 1188.797185][T13190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1189.013545][T13191] loop0: detected capacity change from 0 to 2048 [ 1189.185032][T13191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1190.205339][T12522] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.265870][T13216] warn_alloc: 2 callbacks suppressed [ 1191.265954][T13216] syz.4.2453: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1191.287205][T13216] CPU: 1 UID: 0 PID: 13216 Comm: syz.4.2453 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1191.298305][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1191.308628][T13216] Call Trace: [ 1191.312116][T13216] [ 1191.315259][T13216] dump_stack_lvl+0x216/0x2d0 [ 1191.320274][T13216] dump_stack+0x1e/0x30 [ 1191.324719][T13216] warn_alloc+0x455/0x650 [ 1191.329358][T13216] ? kmsan_get_metadata+0x13e/0x1c0 [ 1191.334885][T13216] ? __vmalloc_node_range_noprof+0xd6/0x2890 [ 1191.341272][T13216] __vmalloc_node_range_noprof+0x130/0x2890 [ 1191.347529][T13216] ? kmsan_get_metadata+0x13e/0x1c0 [ 1191.353086][T13216] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1191.359293][T13216] ? kmsan_get_metadata+0x13e/0x1c0 [ 1191.364838][T13216] ? kmsan_get_metadata+0x13e/0x1c0 [ 1191.370365][T13216] ? kmsan_get_metadata+0x13e/0x1c0 [ 1191.375909][T13216] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1191.382102][T13216] ? kmsan_get_metadata+0x13e/0x1c0 [ 1191.387678][T13216] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1191.393887][T13216] vmalloc_user_noprof+0x90/0xb0 [ 1191.399154][T13216] ? xskq_create+0x105/0x270 [ 1191.404041][T13216] xskq_create+0x105/0x270 [ 1191.408766][T13216] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1191.414953][T13216] xsk_init_queue+0x115/0x1f0 [ 1191.419973][T13216] xsk_setsockopt+0x882/0xcc0 [ 1191.424987][T13216] do_sock_setsockopt+0x4bb/0x7d0 [ 1191.430332][T13216] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1191.435834][T13216] __sys_setsockopt+0x33a/0x4b0 [ 1191.441038][T13216] __ia32_sys_setsockopt+0xe2/0x160 [ 1191.446597][T13216] ia32_sys_call+0x3d22/0x40d0 [ 1191.451733][T13216] __do_fast_syscall_32+0xb0/0x110 [ 1191.457180][T13216] ? irqentry_exit+0x16/0x60 [ 1191.462131][T13216] do_fast_syscall_32+0x38/0x80 [ 1191.467333][T13216] do_SYSENTER_32+0x1f/0x30 [ 1191.472145][T13216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1191.478844][T13216] RIP: 0023:0xf73cd579 [ 1191.483171][T13216] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1191.503115][T13216] RSP: 002b:00000000f56e657c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1191.511901][T13216] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 1191.520178][T13216] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 1191.528424][T13216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1191.536656][T13216] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1191.544874][T13216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1191.553139][T13216] [ 1191.560863][T13216] Mem-Info: [ 1191.564206][T13216] active_anon:4224 inactive_anon:0 isolated_anon:0 [ 1191.564206][T13216] active_file:6212 inactive_file:41464 isolated_file:0 [ 1191.564206][T13216] unevictable:768 dirty:69 writeback:0 [ 1191.564206][T13216] slab_reclaimable:4301 slab_unreclaimable:22518 [ 1191.564206][T13216] mapped:21771 shmem:1235 pagetables:693 [ 1191.564206][T13216] sec_pagetables:0 bounce:0 [ 1191.564206][T13216] kernel_misc_reclaimable:0 [ 1191.564206][T13216] free:412062 free_pcp:1725 free_cma:0 [ 1191.615261][T13216] Node 0 active_anon:16896kB inactive_anon:0kB active_file:24848kB inactive_file:165784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87084kB dirty:276kB writeback:0kB shmem:3404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4672kB pagetables:2764kB sec_pagetables:0kB all_unreclaimable? no [ 1191.649656][T13216] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:0kB pagetables:8kB sec_pagetables:0kB all_unreclaimable? no [ 1191.680448][T13216] Node 0 DMA free:4096kB boost:0kB min:160kB low:200kB high:240kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1191.713181][T13216] lowmem_reserve[]: 0 893 1206 0 0 [ 1191.720396][T13216] Node 0 DMA32 free:641036kB boost:0kB min:36132kB low:45164kB high:54196kB reserved_highatomic:0KB active_anon:5168kB inactive_anon:0kB active_file:23380kB inactive_file:54880kB unevictable:0kB writepending:152kB present:3129332kB managed:953632kB mlocked:0kB bounce:0kB free_pcp:6288kB local_pcp:4972kB free_cma:0kB [ 1191.751070][T13216] lowmem_reserve[]: 0 0 313 0 0 [ 1191.756750][T13216] Node 0 Normal free:19012kB boost:0kB min:12660kB low:15824kB high:18988kB reserved_highatomic:0KB active_anon:11556kB inactive_anon:0kB active_file:1468kB inactive_file:110904kB unevictable:1536kB writepending:124kB present:1048576kB managed:320544kB mlocked:0kB bounce:0kB free_pcp:828kB local_pcp:132kB free_cma:0kB [ 1191.787702][T13216] lowmem_reserve[]: 0 0 0 0 0 [ 1191.792998][T13216] Node 1 Normal free:984104kB boost:0kB min:41152kB low:51440kB high:61728kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:1041672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1191.832706][T13216] lowmem_reserve[]: 0 0 0 0 0 [ 1191.845970][T13216] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1191.859320][T13216] Node 0 DMA32: 1289*4kB (UME) 1055*8kB (UME) 583*16kB (UME) 410*32kB (UME) 315*64kB (UME) 81*128kB (UME) 60*256kB (UME) 34*512kB (UME) 29*1024kB (UME) 12*2048kB (UME) 119*4096kB (UM) = 641036kB [ 1191.880625][T13216] Node 0 Normal: 215*4kB (UME) 155*8kB (UME) 73*16kB (UME) 69*32kB (UME) 48*64kB (UME) 7*128kB (M) 8*256kB (UM) 6*512kB (UME) 1*1024kB (E) 2*2048kB (U) 0*4096kB = 19684kB [ 1191.899956][T13216] Node 1 Normal: 2*4kB (U) 8*8kB (UM) 8*16kB (U) 9*32kB (U) 5*64kB (U) 8*128kB (UM) 3*256kB (UM) 1*512kB (M) 4*1024kB (U) 3*2048kB (U) 237*4096kB (UM) = 984104kB [ 1191.923047][T13216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1191.934398][T13216] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1191.944260][T13216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1191.954233][T13216] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1191.963995][T13216] 48874 total pagecache pages [ 1191.969014][T13216] 0 pages in swap cache [ 1191.973372][T13216] Free swap = 124472kB [ 1191.977921][T13216] Total swap = 124996kB [ 1191.982307][T13216] 2097051 pages RAM [ 1191.986448][T13216] 0 pages HighMem/MovableOnly [ 1191.991355][T13216] 1517065 pages reserved [ 1191.995899][T13216] 0 pages cma reserved [ 1192.387905][T13226] loop0: detected capacity change from 0 to 256 [ 1192.577938][ T29] audit: type=1800 audit(1722546080.790:233): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2457" name="bus" dev="loop0" ino=1048710 res=0 errno=0 [ 1192.600203][ T29] audit: type=1800 audit(1722546080.800:234): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2457" name="bus" dev="loop0" ino=1048710 res=0 errno=0 [ 1192.939904][T13230] bond0: entered promiscuous mode [ 1192.945483][T13230] bond_slave_0: entered promiscuous mode [ 1192.952464][T13230] bond_slave_1: entered promiscuous mode [ 1193.196147][T13230] bond0: left promiscuous mode [ 1193.201494][T13230] bond_slave_0: left promiscuous mode [ 1193.208388][T13230] bond_slave_1: left promiscuous mode [ 1193.622043][T13234] loop3: detected capacity change from 0 to 2048 [ 1193.879525][T13234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.102169][T12659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.761797][T13276] loop0: detected capacity change from 0 to 256 [ 1196.773412][T13275] bond0: entered promiscuous mode [ 1196.778821][T13275] bond_slave_0: entered promiscuous mode [ 1196.786028][T13275] bond_slave_1: entered promiscuous mode [ 1196.936124][T13275] bond0: left promiscuous mode [ 1196.941190][T13275] bond_slave_0: left promiscuous mode [ 1196.947906][T13275] bond_slave_1: left promiscuous mode [ 1196.986783][ T29] audit: type=1800 audit(1722546085.140:235): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2473" name="bus" dev="loop0" ino=1048711 res=0 errno=0 [ 1197.008635][ T29] audit: type=1800 audit(1722546085.150:236): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2473" name="bus" dev="loop0" ino=1048711 res=0 errno=0 [ 1198.518530][T13287] loop0: detected capacity change from 0 to 2048 [ 1198.660418][T13287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1198.995712][ T5190] Bluetooth: hci4: command 0x0406 tx timeout [ 1199.326996][T13308] 9pnet_fd: Insufficient options for proto=fd [ 1199.838617][T12522] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.073648][T13321] loop2: detected capacity change from 0 to 256 [ 1201.282078][ C0] eth0: bad gso: type: 1, size: 1408 [ 1201.305031][T13324] bond0: entered promiscuous mode [ 1201.309595][ T29] audit: type=1800 audit(1722546089.500:237): pid=13321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2489" name="bus" dev="loop2" ino=1048712 res=0 errno=0 [ 1201.310259][T13324] bond_slave_0: entered promiscuous mode [ 1201.338122][ T29] audit: type=1800 audit(1722546089.510:238): pid=13321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2489" name="bus" dev="loop2" ino=1048712 res=0 errno=0 [ 1201.344097][T13324] bond_slave_1: entered promiscuous mode [ 1201.658082][T13326] bond0: left promiscuous mode [ 1201.663146][T13326] bond_slave_0: left promiscuous mode [ 1201.670088][T13326] bond_slave_1: left promiscuous mode [ 1202.445887][T13331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2493'. [ 1202.459377][T13331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2493'. [ 1202.649098][T13333] warn_alloc: 2 callbacks suppressed [ 1202.649173][T13333] syz.1.2494: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1202.678049][T13333] CPU: 1 UID: 0 PID: 13333 Comm: syz.1.2494 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1202.689210][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1202.699531][T13333] Call Trace: [ 1202.703042][T13333] [ 1202.706257][T13333] dump_stack_lvl+0x216/0x2d0 [ 1202.711223][T13333] dump_stack+0x1e/0x30 [ 1202.715685][T13333] warn_alloc+0x455/0x650 [ 1202.720322][T13333] ? kmsan_get_metadata+0x13e/0x1c0 [ 1202.725833][T13333] ? __vmalloc_node_range_noprof+0xd6/0x2890 [ 1202.732146][T13333] __vmalloc_node_range_noprof+0x130/0x2890 [ 1202.738410][T13333] ? kmsan_get_metadata+0x13e/0x1c0 [ 1202.743933][T13333] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1202.750073][T13333] ? kmsan_get_metadata+0x13e/0x1c0 [ 1202.755600][T13333] ? kmsan_get_metadata+0x13e/0x1c0 [ 1202.761152][T13333] ? kmsan_get_metadata+0x13e/0x1c0 [ 1202.766719][T13333] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1202.772871][T13333] ? kmsan_get_metadata+0x13e/0x1c0 [ 1202.778373][T13333] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1202.784514][T13333] vmalloc_user_noprof+0x90/0xb0 [ 1202.789769][T13333] ? xskq_create+0x105/0x270 [ 1202.794670][T13333] xskq_create+0x105/0x270 [ 1202.799411][T13333] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1202.805554][T13333] xsk_init_queue+0x115/0x1f0 [ 1202.810531][T13333] xsk_setsockopt+0x882/0xcc0 [ 1202.815517][T13333] do_sock_setsockopt+0x4bb/0x7d0 [ 1202.820850][T13333] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1202.826482][T13333] __sys_setsockopt+0x33a/0x4b0 [ 1202.831713][T13333] __ia32_sys_setsockopt+0xe2/0x160 [ 1202.837261][T13333] ia32_sys_call+0x3d22/0x40d0 [ 1202.842368][T13333] __do_fast_syscall_32+0xb0/0x110 [ 1202.847800][T13333] ? irqentry_exit+0x16/0x60 [ 1202.852709][T13333] do_fast_syscall_32+0x38/0x80 [ 1202.857880][T13333] do_SYSENTER_32+0x1f/0x30 [ 1202.862690][T13333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1202.869384][T13333] RIP: 0023:0xf741d579 [ 1202.873686][T13333] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1202.893589][T13333] RSP: 002b:00000000f573657c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1202.902339][T13333] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 1202.910577][T13333] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 1202.918762][T13333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1202.927054][T13333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1202.935342][T13333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1202.943594][T13333] [ 1202.947527][T13333] Mem-Info: [ 1202.950835][T13333] active_anon:4439 inactive_anon:0 isolated_anon:0 [ 1202.950835][T13333] active_file:6212 inactive_file:41468 isolated_file:0 [ 1202.950835][T13333] unevictable:768 dirty:96 writeback:0 [ 1202.950835][T13333] slab_reclaimable:4297 slab_unreclaimable:22621 [ 1202.950835][T13333] mapped:21776 shmem:1470 pagetables:680 [ 1202.950835][T13333] sec_pagetables:0 bounce:0 [ 1202.950835][T13333] kernel_misc_reclaimable:0 [ 1202.950835][T13333] free:406997 free_pcp:6395 free_cma:0 [ 1203.001400][T13333] Node 0 active_anon:17484kB inactive_anon:0kB active_file:24848kB inactive_file:165800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87104kB dirty:384kB writeback:0kB shmem:4072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4672kB pagetables:2644kB sec_pagetables:0kB all_unreclaimable? no [ 1203.035852][T13333] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:0kB pagetables:8kB sec_pagetables:0kB all_unreclaimable? no [ 1203.070770][T13333] Node 0 DMA free:4096kB boost:0kB min:160kB low:200kB high:240kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.101741][T13333] lowmem_reserve[]: 0 893 1206 0 0 [ 1203.108018][T13333] Node 0 DMA32 free:623868kB boost:0kB min:36132kB low:45164kB high:54196kB reserved_highatomic:0KB active_anon:5280kB inactive_anon:0kB active_file:23380kB inactive_file:54888kB unevictable:0kB writepending:240kB present:3129332kB managed:953632kB mlocked:0kB bounce:0kB free_pcp:23024kB local_pcp:1400kB free_cma:0kB [ 1203.139035][T13333] lowmem_reserve[]: 0 0 313 0 0 [ 1203.144440][T13333] Node 0 Normal free:16064kB boost:0kB min:12660kB low:15824kB high:18988kB reserved_highatomic:0KB active_anon:11616kB inactive_anon:0kB active_file:1468kB inactive_file:110912kB unevictable:1536kB writepending:144kB present:1048576kB managed:320544kB mlocked:0kB bounce:0kB free_pcp:3512kB local_pcp:148kB free_cma:0kB [ 1203.179794][T13333] lowmem_reserve[]: 0 0 0 0 0 [ 1203.186415][T13333] Node 1 Normal free:984104kB boost:0kB min:41152kB low:51440kB high:61728kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:1041672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.215776][T13333] lowmem_reserve[]: 0 0 0 0 0 [ 1203.220991][T13333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1203.234250][T13333] Node 0 DMA32: 461*4kB (UE) 873*8kB (UME) 584*16kB (UME) 402*32kB (UME) 317*64kB (UME) 81*128kB (UME) 60*256kB (UME) 34*512kB (UME) 29*1024kB (UME) 10*2048kB (UME) 117*4096kB (UM) = 623868kB [ 1203.256208][T13333] Node 0 Normal: 62*4kB (UME) 47*8kB (UME) 19*16kB (UME) 47*32kB (UME) 45*64kB (UME) 4*128kB (UM) 8*256kB (UM) 6*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 16064kB [ 1203.278761][T13333] Node 1 Normal: 2*4kB (U) 8*8kB (UM) 8*16kB (U) 9*32kB (U) 5*64kB (U) 8*128kB (UM) 3*256kB (UM) 1*512kB (M) 4*1024kB (U) 3*2048kB (U) 237*4096kB (UM) = 984104kB [ 1203.298090][T13333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1203.308129][T13333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1203.318885][T13333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1203.328854][T13333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1203.338505][T13333] 48889 total pagecache pages [ 1203.343374][T13333] 0 pages in swap cache [ 1203.347906][T13333] Free swap = 124472kB [ 1203.352270][T13333] Total swap = 124996kB [ 1203.356772][T13333] 2097051 pages RAM [ 1203.360766][T13333] 0 pages HighMem/MovableOnly [ 1203.365781][T13333] 1517065 pages reserved [ 1203.370217][T13333] 0 pages cma reserved [ 1203.871380][T13344] 9pnet_fd: Insufficient options for proto=fd [ 1204.926013][ T5905] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1205.166745][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 1205.190208][ T5905] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1205.199735][ T5905] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1205.210924][ T5905] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1205.226135][ T5905] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1205.239152][ T5905] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1205.309778][T13364] bond0: entered promiscuous mode [ 1205.315506][T13364] bond_slave_0: entered promiscuous mode [ 1205.328339][T13364] bond_slave_1: entered promiscuous mode [ 1205.416804][ T5905] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1205.431285][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.441459][ T5905] usb 4-1: Product: syz [ 1205.446003][ T5905] usb 4-1: Manufacturer: syz [ 1205.450842][ T5905] usb 4-1: SerialNumber: syz [ 1205.469717][T13365] bond0: left promiscuous mode [ 1205.475448][T13365] bond_slave_0: left promiscuous mode [ 1205.482109][T13365] bond_slave_1: left promiscuous mode [ 1206.130673][ T5905] usb 4-1: USB disconnect, device number 18 [ 1206.848252][T13378] 9pnet_fd: Insufficient options for proto=fd [ 1206.877061][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1208.055679][T13396] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1208.554256][T13402] bond0: entered promiscuous mode [ 1208.560168][T13402] bond_slave_0: entered promiscuous mode [ 1208.567030][T13402] bond_slave_1: entered promiscuous mode [ 1208.746060][T13402] bond0: left promiscuous mode [ 1208.751257][T13402] bond_slave_0: left promiscuous mode [ 1208.758054][T13402] bond_slave_1: left promiscuous mode [ 1209.266148][T13412] 9pnet_fd: Insufficient options for proto=fd [ 1211.248369][T13436] syz.4.2534 uses obsolete (PF_INET,SOCK_PACKET) [ 1212.228477][T13451] bond0: entered promiscuous mode [ 1212.233898][T13451] bond_slave_0: entered promiscuous mode [ 1212.241206][T13451] bond_slave_1: entered promiscuous mode [ 1212.320772][T13450] 9pnet_fd: Insufficient options for proto=fd [ 1212.343715][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.351946][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.415253][T13452] bond0: left promiscuous mode [ 1212.420274][T13452] bond_slave_0: left promiscuous mode [ 1212.426967][T13452] bond_slave_1: left promiscuous mode [ 1213.726058][T13467] warn_alloc: 3 callbacks suppressed [ 1213.726133][T13467] syz.0.2549: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1213.747489][T13467] CPU: 1 UID: 0 PID: 13467 Comm: syz.0.2549 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1213.758558][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1213.768936][T13467] Call Trace: [ 1213.772450][T13467] [ 1213.775560][T13467] dump_stack_lvl+0x216/0x2d0 [ 1213.780484][T13467] dump_stack+0x1e/0x30 [ 1213.784902][T13467] warn_alloc+0x455/0x650 [ 1213.789484][T13467] ? kmsan_get_metadata+0x13e/0x1c0 [ 1213.794981][T13467] ? __vmalloc_node_range_noprof+0xd6/0x2890 [ 1213.801276][T13467] __vmalloc_node_range_noprof+0x130/0x2890 [ 1213.807497][T13467] ? kmsan_get_metadata+0x13e/0x1c0 [ 1213.813026][T13467] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1213.819191][T13467] ? kmsan_get_metadata+0x13e/0x1c0 [ 1213.824744][T13467] ? kmsan_get_metadata+0x13e/0x1c0 [ 1213.830304][T13467] ? kmsan_get_metadata+0x13e/0x1c0 [ 1213.835803][T13467] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1213.841938][T13467] ? kmsan_get_metadata+0x13e/0x1c0 [ 1213.847450][T13467] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1213.853592][T13467] vmalloc_user_noprof+0x90/0xb0 [ 1213.858817][T13467] ? xskq_create+0x105/0x270 [ 1213.863661][T13467] xskq_create+0x105/0x270 [ 1213.868330][T13467] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1213.874479][T13467] xsk_init_queue+0x115/0x1f0 [ 1213.879438][T13467] xsk_setsockopt+0x882/0xcc0 [ 1213.884412][T13467] do_sock_setsockopt+0x4bb/0x7d0 [ 1213.889758][T13467] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1213.895257][T13467] __sys_setsockopt+0x33a/0x4b0 [ 1213.900379][T13467] __ia32_sys_setsockopt+0xe2/0x160 [ 1213.905888][T13467] ia32_sys_call+0x3d22/0x40d0 [ 1213.910953][T13467] __do_fast_syscall_32+0xb0/0x110 [ 1213.916327][T13467] ? irqentry_exit+0x16/0x60 [ 1213.921263][T13467] do_fast_syscall_32+0x38/0x80 [ 1213.926425][T13467] do_SYSENTER_32+0x1f/0x30 [ 1213.931194][T13467] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1213.937852][T13467] RIP: 0023:0xf7f50579 [ 1213.942136][T13467] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1213.962050][T13467] RSP: 002b:00000000f570657c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1213.970779][T13467] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 1213.978979][T13467] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 1213.987155][T13467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1213.995318][T13467] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1214.003482][T13467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1214.011686][T13467] [ 1214.020732][T13467] Mem-Info: [ 1214.029324][T13467] active_anon:4168 inactive_anon:0 isolated_anon:0 [ 1214.029324][T13467] active_file:6212 inactive_file:41472 isolated_file:0 [ 1214.029324][T13467] unevictable:768 dirty:83 writeback:0 [ 1214.029324][T13467] slab_reclaimable:4295 slab_unreclaimable:22440 [ 1214.029324][T13467] mapped:21743 shmem:1235 pagetables:671 [ 1214.029324][T13467] sec_pagetables:0 bounce:0 [ 1214.029324][T13467] kernel_misc_reclaimable:0 [ 1214.029324][T13467] free:410949 free_pcp:2438 free_cma:0 [ 1214.076061][T13467] Node 0 active_anon:16764kB inactive_anon:0kB active_file:24848kB inactive_file:165816kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86924kB dirty:348kB writeback:0kB shmem:3404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4656kB pagetables:2704kB sec_pagetables:0kB all_unreclaimable? no [ 1214.109218][T13467] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:0kB pagetables:8kB sec_pagetables:0kB all_unreclaimable? no [ 1214.143893][T13467] Node 0 DMA free:4096kB boost:0kB min:160kB low:200kB high:240kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1214.172710][T13467] lowmem_reserve[]: 0 893 1206 0 0 [ 1214.178457][T13467] Node 0 DMA32 free:637352kB boost:0kB min:36132kB low:45164kB high:54196kB reserved_highatomic:0KB active_anon:5164kB inactive_anon:0kB active_file:23380kB inactive_file:54888kB unevictable:0kB writepending:180kB present:3129332kB managed:953632kB mlocked:0kB bounce:0kB free_pcp:9348kB local_pcp:9348kB free_cma:0kB [ 1214.212749][T13467] lowmem_reserve[]: 0 0 313 0 0 [ 1214.220677][T13467] Node 0 Normal free:18104kB boost:0kB min:12660kB low:15824kB high:18988kB reserved_highatomic:0KB active_anon:11728kB inactive_anon:0kB active_file:1468kB inactive_file:110928kB unevictable:1536kB writepending:168kB present:1048576kB managed:320544kB mlocked:0kB bounce:0kB free_pcp:204kB local_pcp:112kB free_cma:0kB [ 1214.255621][T13467] lowmem_reserve[]: 0 0 0 0 0 [ 1214.260871][T13467] Node 1 Normal free:984104kB boost:0kB min:41152kB low:51440kB high:61728kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:1041672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1214.291408][T13467] lowmem_reserve[]: 0 0 0 0 0 [ 1214.297264][T13467] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1214.310503][T13467] Node 0 DMA32: 1238*4kB (UME) 1052*8kB (UME) 599*16kB (UME) 412*32kB (UME) 318*64kB (UME) 82*128kB (UME) 60*256kB (UME) 34*512kB (UME) 29*1024kB (UME) 10*2048kB (UME) 119*4096kB (UM) = 637352kB [ 1214.336575][T13467] Node 0 Normal: 156*4kB (UME) 141*8kB (UME) 59*16kB (UME) 27*32kB (UME) 49*64kB (UME) 8*128kB (UM) 8*256kB (UM) 6*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 17960kB [ 1214.361532][T13467] Node 1 Normal: 2*4kB (U) 8*8kB (UM) 8*16kB (U) 9*32kB (U) 5*64kB (U) 8*128kB (UM) 3*256kB (UM) 1*512kB (M) 4*1024kB (U) 3*2048kB (U) 237*4096kB (UM) = 984104kB [ 1214.379867][T13467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.389813][T13467] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1214.399480][T13467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.409357][T13467] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1214.420036][T13467] 48882 total pagecache pages [ 1214.425927][T13467] 0 pages in swap cache [ 1214.430543][T13467] Free swap = 124472kB [ 1214.439269][T13467] Total swap = 124996kB [ 1214.446425][T13467] 2097051 pages RAM [ 1214.451040][T13467] 0 pages HighMem/MovableOnly [ 1214.455989][T13467] 1517065 pages reserved [ 1214.460424][T13467] 0 pages cma reserved [ 1214.698254][T13481] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1215.326713][T13486] 9pnet_fd: Insufficient options for proto=fd [ 1216.306097][T13502] bond0: entered promiscuous mode [ 1216.311566][T13502] bond_slave_0: entered promiscuous mode [ 1216.320356][T13502] bond_slave_1: entered promiscuous mode [ 1216.497230][T13504] bond0: left promiscuous mode [ 1216.502288][T13504] bond_slave_0: left promiscuous mode [ 1216.508970][T13504] bond_slave_1: left promiscuous mode [ 1219.929374][T13543] bond0: entered promiscuous mode [ 1219.936344][T13543] bond_slave_0: entered promiscuous mode [ 1219.945225][T13543] bond_slave_1: entered promiscuous mode [ 1220.095889][T13543] bond0: left promiscuous mode [ 1220.100909][T13543] bond_slave_0: left promiscuous mode [ 1220.107745][T13543] bond_slave_1: left promiscuous mode [ 1220.155705][T13547] dccp_v4_rcv: dropped packet with invalid checksum [ 1221.335224][T13562] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2588'. [ 1223.099568][T13586] bond0: entered promiscuous mode [ 1223.105081][T13586] bond_slave_0: entered promiscuous mode [ 1223.112011][T13586] bond_slave_1: entered promiscuous mode [ 1223.173968][T13584] dccp_v4_rcv: dropped packet with invalid checksum [ 1223.807606][T13595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2602'. [ 1223.845133][T13585] bond0: left promiscuous mode [ 1223.850235][T13585] bond_slave_0: left promiscuous mode [ 1223.862176][T13585] bond_slave_1: left promiscuous mode [ 1224.590026][T13604] loop0: detected capacity change from 0 to 256 [ 1224.787567][ T29] audit: type=1800 audit(1722546112.960:239): pid=13604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2605" name="bus" dev="loop0" ino=1048713 res=0 errno=0 [ 1224.809249][ T29] audit: type=1800 audit(1722546112.970:240): pid=13604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2605" name="bus" dev="loop0" ino=1048713 res=0 errno=0 [ 1226.058991][T13620] netlink: 'syz.0.2608': attribute type 11 has an invalid length. [ 1226.444658][T13626] ===================================================== [ 1226.452097][T13626] BUG: KMSAN: uninit-value in tcf_ct_flow_table_get+0x611/0x2260 [ 1226.460141][T13626] tcf_ct_flow_table_get+0x611/0x2260 [ 1226.465751][T13626] tcf_ct_init+0xa67/0x2890 [ 1226.470368][T13626] tcf_action_init_1+0x6cc/0xb30 [ 1226.475537][T13626] tcf_action_init+0x458/0xf00 [ 1226.480459][T13626] tc_ctl_action+0x4be/0x19d0 [ 1226.485395][T13626] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1226.490633][T13626] netlink_rcv_skb+0x375/0x650 [ 1226.495654][T13626] rtnetlink_rcv+0x34/0x40 [ 1226.500511][T13626] netlink_unicast+0xf52/0x1260 [ 1226.505632][T13626] netlink_sendmsg+0x10da/0x11e0 [ 1226.510683][T13626] __sock_sendmsg+0x30f/0x380 [ 1226.521551][T13626] ____sys_sendmsg+0x877/0xb60 [ 1226.527784][T13626] ___sys_sendmsg+0x28d/0x3c0 [ 1226.532678][T13626] __sys_sendmsg+0x225/0x3c0 [ 1226.537463][T13626] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 1226.543040][T13626] ia32_sys_call+0x3aac/0x40d0 [ 1226.549249][T13626] __do_fast_syscall_32+0xb0/0x110 [ 1226.554479][T13626] do_fast_syscall_32+0x38/0x80 [ 1226.559636][T13626] do_SYSENTER_32+0x1f/0x30 [ 1226.564260][T13626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1226.570825][T13626] [ 1226.573197][T13626] Local variable key created at: [ 1226.578318][T13626] tcf_ct_flow_table_get+0x4a/0x2260 [ 1226.583724][T13626] tcf_ct_init+0xa67/0x2890 [ 1226.588451][T13626] [ 1226.590837][T13626] CPU: 0 UID: 0 PID: 13626 Comm: syz.1.2611 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1226.601850][T13626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1226.612114][T13626] ===================================================== [ 1226.624450][T13626] Disabling lock debugging due to kernel taint [ 1226.632088][T13626] Kernel panic - not syncing: kmsan.panic set ... [ 1226.638599][T13626] CPU: 0 UID: 0 PID: 13626 Comm: syz.1.2611 Tainted: G B 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 1226.650977][T13626] Tainted: [B]=BAD_PAGE [ 1226.655185][T13626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1226.665323][T13626] Call Trace: [ 1226.668665][T13626] [ 1226.671667][T13626] dump_stack_lvl+0x216/0x2d0 [ 1226.676465][T13626] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1226.682447][T13626] dump_stack+0x1e/0x30 [ 1226.686700][T13626] panic+0x4e2/0xcd0 [ 1226.690736][T13626] ? kmsan_get_metadata+0x71/0x1c0 [ 1226.695994][T13626] kmsan_report+0x2c7/0x2d0 [ 1226.700637][T13626] ? pcpu_alloc_area+0x114e/0x12c0 [ 1226.705869][T13626] ? __msan_warning+0x95/0x120 [ 1226.710767][T13626] ? tcf_ct_flow_table_get+0x611/0x2260 [ 1226.716466][T13626] ? tcf_ct_init+0xa67/0x2890 [ 1226.721329][T13626] ? tcf_action_init_1+0x6cc/0xb30 [ 1226.726678][T13626] ? tcf_action_init+0x458/0xf00 [ 1226.731753][T13626] ? tc_ctl_action+0x4be/0x19d0 [ 1226.736767][T13626] ? rtnetlink_rcv_msg+0x12fc/0x1410 [ 1226.742201][T13626] ? netlink_rcv_skb+0x375/0x650 [ 1226.747269][T13626] ? rtnetlink_rcv+0x34/0x40 [ 1226.751984][T13626] ? netlink_unicast+0xf52/0x1260 [ 1226.757126][T13626] ? netlink_sendmsg+0x10da/0x11e0 [ 1226.762384][T13626] ? __sock_sendmsg+0x30f/0x380 [ 1226.767396][T13626] ? ____sys_sendmsg+0x877/0xb60 [ 1226.772461][T13626] ? ___sys_sendmsg+0x28d/0x3c0 [ 1226.777429][T13626] ? __sys_sendmsg+0x225/0x3c0 [ 1226.782314][T13626] ? __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 1226.788102][T13626] ? ia32_sys_call+0x3aac/0x40d0 [ 1226.793200][T13626] ? __do_fast_syscall_32+0xb0/0x110 [ 1226.798600][T13626] ? do_fast_syscall_32+0x38/0x80 [ 1226.803731][T13626] ? do_SYSENTER_32+0x1f/0x30 [ 1226.808517][T13626] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1226.815165][T13626] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1226.821669][T13626] ? kmsan_get_metadata+0x13e/0x1c0 [ 1226.827102][T13626] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1226.833066][T13626] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1226.839033][T13626] ? kmsan_get_metadata+0x13e/0x1c0 [ 1226.844374][T13626] ? kmsan_get_metadata+0x13e/0x1c0 [ 1226.849714][T13626] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1226.855692][T13626] ? kmsan_get_metadata+0x13e/0x1c0 [ 1226.861051][T13626] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1226.867043][T13626] __msan_warning+0x95/0x120 [ 1226.871781][T13626] tcf_ct_flow_table_get+0x611/0x2260 [ 1226.877303][T13626] ? nf_ct_tmpl_alloc+0xbd/0x2d0 [ 1226.882399][T13626] ? kmsan_get_metadata+0x13e/0x1c0 [ 1226.887750][T13626] tcf_ct_init+0xa67/0x2890 [ 1226.892395][T13626] ? kmsan_get_shadow_origin_ptr+0x30/0xb0 [ 1226.898383][T13626] tcf_action_init_1+0x6cc/0xb30 [ 1226.903465][T13626] ? __pfx_tcf_ct_init+0x10/0x10 [ 1226.908559][T13626] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1226.914534][T13626] tcf_action_init+0x458/0xf00 [ 1226.919446][T13626] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1226.926025][T13626] tc_ctl_action+0x4be/0x19d0 [ 1226.930921][T13626] ? kmsan_get_metadata+0x13e/0x1c0 [ 1226.936301][T13626] ? __pfx_tc_ctl_action+0x10/0x10 [ 1226.941554][T13626] ? __pfx_tc_ctl_action+0x10/0x10 [ 1226.946826][T13626] rtnetlink_rcv_msg+0x12fc/0x1410 [ 1226.952065][T13626] ? kmsan_get_metadata+0x13e/0x1c0 [ 1226.957423][T13626] netlink_rcv_skb+0x375/0x650 [ 1226.962315][T13626] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1226.967958][T13626] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 1226.973173][T13626] rtnetlink_rcv+0x34/0x40 [ 1226.977691][T13626] netlink_unicast+0xf52/0x1260 [ 1226.982670][T13626] netlink_sendmsg+0x10da/0x11e0 [ 1226.987744][T13626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1226.993135][T13626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1226.998539][T13626] __sock_sendmsg+0x30f/0x380 [ 1227.003350][T13626] ____sys_sendmsg+0x877/0xb60 [ 1227.008237][T13626] ___sys_sendmsg+0x28d/0x3c0 [ 1227.013022][T13626] ? kmsan_get_metadata+0x13e/0x1c0 [ 1227.018340][T13626] ? kmsan_get_metadata+0x13e/0x1c0 [ 1227.023656][T13626] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1227.029621][T13626] ? __rcu_read_unlock+0x7b/0xe0 [ 1227.034785][T13626] ? __fget_files+0x4fe/0x5d0 [ 1227.039587][T13626] ? kmsan_get_metadata+0x13e/0x1c0 [ 1227.044931][T13626] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1227.050944][T13626] __sys_sendmsg+0x225/0x3c0 [ 1227.055671][T13626] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 1227.061282][T13626] ia32_sys_call+0x3aac/0x40d0 [ 1227.066214][T13626] __do_fast_syscall_32+0xb0/0x110 [ 1227.071461][T13626] ? irqentry_exit+0x16/0x60 [ 1227.076204][T13626] do_fast_syscall_32+0x38/0x80 [ 1227.081151][T13626] do_SYSENTER_32+0x1f/0x30 [ 1227.085780][T13626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.092242][T13626] RIP: 0023:0xf741d579 [ 1227.096413][T13626] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1227.116136][T13626] RSP: 002b:00000000f573657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1227.124652][T13626] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 1227.132738][T13626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1227.140798][T13626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1227.148859][T13626] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1227.156906][T13626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1227.164966][T13626] [ 1227.168492][T13626] Kernel Offset: disabled [ 1227.172889][T13626] Rebooting in 86400 seconds..