last executing test programs: 1m39.974679409s ago: executing program 0 (id=46): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=@sha1={0x1, "7e07128d323dd8163fbaeaa28d48e9032c762e38"}, 0x15, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) 1m38.762754436s ago: executing program 0 (id=51): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x3, 0x0, 0x989, 0x0, 0x14, 0x4}, 0x9c) 1m37.272145104s ago: executing program 0 (id=58): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x204410, &(0x7f0000000800)={[{@minixdf}, {@minixdf}, {@inlinecrypt}, {@prjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@norecovery}, {@dioread_lock}, {@noblock_validity}]}, 0xfe, 0x4a1, &(0x7f00000001c0)="$eJzs3M1vVFUbAPDn3mnLN+3Li6h8SBWNjR8tLags3Gh0p4mJLnBjUttCKgM1tCRCiFZjcGlI3BvdGKJ/gSvdGHVl4lb3hoQoMQFdmDF35t4yU2ZKW6YdcH6/5JZz5p7pOc+ce+499x6mAXStwexHErE1In6JiP5atrHAYO2f61fPT/x19fxEEpXKq78n1XLXrp6fKIoW79uSZ4bSiPTDJK+k0ezZcyfGy+Wp03l+ZO7k2yOzZ889OX1y/PjU8alTY0eOHD40+szTY0+1Jc4srmu7353Zm/S8fvHliaMX3/zhqzQidu2r7a+P47akWxaSg1ngf1SqFhd7pC2V3Tm21aWTng42hBUpRUTWXb3V8d8fpbjRef3x4gcdbRywprJr04bWu+crwH9YEp1uAdAZxYU+u/8ttnWaetwRrjxXuwHK4r6eb7U9PZHmZXrXsP77IuLo/N+fZlvk/fDP1jWsEADoet9k858nms3/0thVV257voYyEBH/i4gdEfH/iNgZEfdEVMvem89nVqK2NFRayN88/0wvrzq4Zcjmf8/ma1uN879i9hcDpTy3rRp/b3Jsujx1MP9MhqJ3Q5YfXaKOb1/4+eNW+wbr5n/ZltVfzAXzdlzuWfSAbnJ8brxdk9Ir70fs7mkWf7KwEpBExP0RsXtlv3p7kZh+7NLeVoVuHf8S2rDOVPks4tFa/8/HovgLydLrkyMbozx1cKQ4Km72408XXmle+8bbi78Nsv7f3Hj8LyrR/2dSv147u/I6Lvz6Uct7ytUe/33Ja9Ux2Ze/9s743Nzp0Yi+5KVqvuH1sRvvLfJF+Sz+oQPNx/+O/D1Z/HsiIjuI90XEAxGxP2/7gxHxUEQcWCL+759/+K0VxT+9vv0/2fT8t3D8DzT2/8oTpRPffd2q/jz+4mTbov8PV1ND+SvV898ttG5OlKciKpVVH80AAABw98luvLdGkg4vpNN0eLj2f/h3xua0PDM79/ixmTOnJmvfERiI3rR40tWfPw/N7rZHk/n8N9aej47lz4qL56WH8ufGn5Q2VfPDEzPlyQ7HDt1uS4vxn/mt1OnWAWvO97Wgey0e/2mH2gGsP9d/6F7GP3Qv4x+6V934//LMhT3VxHvVn/sXdjRdC1jiL4cAd4dF1/9Ln3eqIcC6M/+H7mX8Q/cy/qEr3c73+juT2JS3/FaF+zrf1NUlvuidLWXx1e1KeiI637DGRKRLlXkjmu8ajIg1aljcER9LuxPJMg715SaOHc+HznIKd/KsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D7/BgAA//9ajd4t") mount$nfs(0x0, 0x0, 0x0, 0x3000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r0, 0x402, 0x5) 1m35.741926598s ago: executing program 0 (id=64): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000c80)=ANY=[], 0x6, 0xa80, &(0x7f0000000180)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000009, 0x28011, r0, 0x0) 1m33.908803978s ago: executing program 0 (id=69): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @remote}, 0xa}}, 0x26) 1m32.671216837s ago: executing program 0 (id=73): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902"], 0x0) ptrace(0x10, r0) 1m29.536874107s ago: executing program 32 (id=73): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902"], 0x0) ptrace(0x10, r0) 47.780269961s ago: executing program 1 (id=207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x80801, 0x1) unshare(0x22020600) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdd) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, 0x0, &(0x7f0000000200)) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 46.081986024s ago: executing program 1 (id=214): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001140)=""/5, 0x5}}, 0x120) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 44.762008506s ago: executing program 1 (id=219): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 43.929627402s ago: executing program 1 (id=224): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000c80)=ANY=[], 0x6, 0xa80, &(0x7f0000000180)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000009, 0x28011, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 42.392923736s ago: executing program 1 (id=229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 41.775409434s ago: executing program 1 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) unlinkat(0xffffffffffffffff, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 39.155839498s ago: executing program 33 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) unlinkat(0xffffffffffffffff, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 10.844313531s ago: executing program 3 (id=349): mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x0, 0xa2) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./bus\x00', 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 10.268250547s ago: executing program 5 (id=352): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x2, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 10.022390153s ago: executing program 3 (id=353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000480)) r2 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x9450) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.819725545s ago: executing program 5 (id=357): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x36c18523, 0x401, 0x4, 0x403, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x20000000000, {0x0, 0xe4344d65f2857863}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7.812648049s ago: executing program 2 (id=361): r0 = syz_open_dev$loop(0x0, 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000080)="94020eadd8911f759be1e818d7948786d5b15a1f8c1c582ed30726a1fee6e0e79487f0265204d36b455d9b21f8044a92ff7f6e10136be3084df09796aa9ec21909", 0x41) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x8000000000006]}}) 7.765259031s ago: executing program 3 (id=362): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x0, 0xa2) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./bus\x00', 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 7.478987123s ago: executing program 4 (id=363): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4371, 0xb, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) 7.256472224s ago: executing program 5 (id=365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fc00000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001c001880080002400000071c08000340fffffffd040001"], 0xb0}}, 0x8040) 7.065948907s ago: executing program 2 (id=366): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x141, 0xaf, 0xb4, 0xf2, 0x10, 0x525, 0xa4a0, 0x2bf1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xfe, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0xeb, 0x2, 0x2, 0x7f, 0x9c, 0x1f, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x20, 0x2, 0x0, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x1, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 6.81345202s ago: executing program 3 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="600000000206050000000000000000000100000405000400000000000900020073797a310000000014000780050015000a00000008001240000000000500050002000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.732753054s ago: executing program 4 (id=368): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6.317119758s ago: executing program 5 (id=370): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001740)={0x90, r0, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_b, @initial, {0x6}}, 0x9, @default, 0x1971, @val, @void, @val={0x3, 0x1, 0xb5}, @void, @val={0x6, 0x2, 0xe}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0x30, 0xb6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0xb}}, @val={0x76, 0x6, {0x4, 0x2, 0x7, 0x5}}}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x24000080) 6.080298875s ago: executing program 3 (id=371): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x40) 6.009487384s ago: executing program 4 (id=372): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=0x0}}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 5.512510873s ago: executing program 5 (id=374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc811"], 0xffe) 5.211152337s ago: executing program 4 (id=375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r2]) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r3]) 4.9119556s ago: executing program 6 (id=376): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000080)="94020eadd8911f759be1e818d7948786d5b15a1f8c1c582ed30726a1fee6e0e79487f0265204d36b455d9b21f8044a92ff7f6e10136be3084df09796aa9ec21909", 0x41) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x8000000000006]}}) 4.208954448s ago: executing program 2 (id=377): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x0, 0xa2) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./bus\x00', 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 4.204641422s ago: executing program 5 (id=378): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69e30103010902240001000010000904b8070296d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001280)={0x40, 0xf, 0x4, "6496c0a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c00)={0x20, 0x30, 0x4, "aa8208d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000013c0)={0x34, &(0x7f00000012c0)={0x40, 0xe, 0x4, "4ccf8ee5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.091283715s ago: executing program 6 (id=379): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)}}], 0x2, 0x14018891) 3.801124721s ago: executing program 4 (id=380): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x52, 0x1, 0x0, 0x10000, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 3.570532095s ago: executing program 2 (id=381): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3.348640233s ago: executing program 6 (id=382): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="600000000206050000000000000000000100000405000400000000000900020073797a310000000014000780050015000a00000008001240000000000500050002000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.004763957s ago: executing program 4 (id=383): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001280)={0x40, 0xf, 0x4, "6496c0a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c00)={0x20, 0x30, 0x4, "aa8208d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x20, 0x9, 0x4, "e12995f2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.311308102s ago: executing program 6 (id=384): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000000c0)={0x4, 0x4, {0x8, @usage=0x3ff, 0x0, 0xfffffffffffff156, 0x8000000000000000, 0x0, 0x1, 0x8000000000000001, 0x72, @struct={0x5, 0xf6f}, 0x40, 0x4, [0x3, 0x40, 0x3, 0x9, 0x50b4, 0x6170]}, {0xffffffffffffff81, @usage=0xd9, 0x0, 0x2df01c63, 0x7, 0x8, 0x5, 0xc, 0xc, @usage=0x10001, 0x8, 0x5, [0x80000000, 0x0, 0x1, 0x6, 0x7, 0xfffffffffffffff7]}, {0x0, @usage=0x2, 0x0, 0x806, 0x5, 0x38000000000, 0x90, 0xffffffffffffaaac, 0x86, @usage=0x1, 0x3aae, 0x3ff, [0x7, 0x2, 0x6, 0x3ff, 0x3, 0x1000]}, {0x1, 0x0, 0x2}}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, 0xffffffffffffffff, 0x7dfff000) 1.552817238s ago: executing program 2 (id=385): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=0x0}}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 1.103011749s ago: executing program 6 (id=386): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) shutdown(r0, 0x1) 701.26723ms ago: executing program 3 (id=387): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x34000}], 0x1}}], 0x1, 0x0) 268.755909ms ago: executing program 2 (id=388): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0xff04, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 0s ago: executing program 6 (id=389): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000080)="94020eadd8911f759be1e818d7948786d5b15a1f8c1c582ed30726a1fee6e0e79487f0265204d36b455d9b21f8044a92ff7f6e10136be3084df09796aa9ec21909", 0x41) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x8000000000006]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 178.346837][ T5777] cgroup: Unknown subsys name 'net' [ 178.482296][ T5777] cgroup: Unknown subsys name 'cpuset' [ 178.508573][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.469308][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.476006][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.063043][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 230.160850][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.169452][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.191943][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.200555][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.210325][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.222991][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.230984][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.238994][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.246733][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.260879][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.274880][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.283052][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.288382][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.292211][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.299417][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.314159][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.321109][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.322838][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.340725][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.352659][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.361969][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.376855][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.386300][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.394871][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.416072][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.475831][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 232.248820][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 232.342187][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 232.349019][ T5816] Bluetooth: hci1: command tx timeout [ 232.368266][ T5816] Bluetooth: hci0: command tx timeout [ 232.415269][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 232.448148][ T5816] Bluetooth: hci2: command tx timeout [ 232.531339][ T5816] Bluetooth: hci4: command tx timeout [ 232.597754][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.605468][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.613305][ T5800] bridge_slave_0: entered allmulticast mode [ 232.622805][ T5800] bridge_slave_0: entered promiscuous mode [ 232.638016][ T5816] Bluetooth: hci3: command tx timeout [ 232.740794][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 232.761794][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.772820][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.782649][ T5800] bridge_slave_1: entered allmulticast mode [ 232.795173][ T5800] bridge_slave_1: entered promiscuous mode [ 233.203889][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.397242][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.405132][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.413186][ T5807] bridge_slave_0: entered allmulticast mode [ 233.422579][ T5807] bridge_slave_0: entered promiscuous mode [ 233.443033][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.496987][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.505085][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.513649][ T5807] bridge_slave_1: entered allmulticast mode [ 233.523104][ T5807] bridge_slave_1: entered promiscuous mode [ 233.736725][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.748755][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.756254][ T5804] bridge_slave_0: entered allmulticast mode [ 233.765521][ T5804] bridge_slave_0: entered promiscuous mode [ 233.824556][ T5800] team0: Port device team_slave_0 added [ 233.913879][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.922376][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.930188][ T5804] bridge_slave_1: entered allmulticast mode [ 233.939529][ T5804] bridge_slave_1: entered promiscuous mode [ 233.964208][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.015318][ T5800] team0: Port device team_slave_1 added [ 234.032174][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.041935][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.050085][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.057723][ T5808] bridge_slave_0: entered allmulticast mode [ 234.067169][ T5808] bridge_slave_0: entered promiscuous mode [ 234.192704][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.202493][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.210199][ T5808] bridge_slave_1: entered allmulticast mode [ 234.218994][ T5808] bridge_slave_1: entered promiscuous mode [ 234.323650][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.332120][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.359750][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.374666][ T5816] Bluetooth: hci1: command tx timeout [ 234.447196][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.448264][ T5816] Bluetooth: hci0: command tx timeout [ 234.501750][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.509083][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.535626][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.545028][ T5816] Bluetooth: hci2: command tx timeout [ 234.593553][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.609605][ T5807] team0: Port device team_slave_0 added [ 234.617367][ T5816] Bluetooth: hci4: command tx timeout [ 234.626352][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.643249][ T5807] team0: Port device team_slave_1 added [ 234.651056][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.658839][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.666419][ T5799] bridge_slave_0: entered allmulticast mode [ 234.675593][ T5799] bridge_slave_0: entered promiscuous mode [ 234.718716][ T5816] Bluetooth: hci3: command tx timeout [ 234.758217][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.842652][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.850365][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.858117][ T5799] bridge_slave_1: entered allmulticast mode [ 234.867257][ T5799] bridge_slave_1: entered promiscuous mode [ 234.919214][ T5804] team0: Port device team_slave_0 added [ 235.061840][ T5804] team0: Port device team_slave_1 added [ 235.118913][ T5800] hsr_slave_0: entered promiscuous mode [ 235.127585][ T5800] hsr_slave_1: entered promiscuous mode [ 235.139105][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.146579][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.174520][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.259582][ T5808] team0: Port device team_slave_0 added [ 235.314045][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.321461][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.348604][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.364149][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.371472][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.398008][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.412122][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.420904][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.448212][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.468462][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.486158][ T5808] team0: Port device team_slave_1 added [ 235.585615][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.672666][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.679966][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.706429][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.813509][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.821176][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.847643][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.962414][ T5799] team0: Port device team_slave_0 added [ 235.979820][ T5799] team0: Port device team_slave_1 added [ 236.166127][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.174081][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.200549][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.244573][ T5804] hsr_slave_0: entered promiscuous mode [ 236.255101][ T5804] hsr_slave_1: entered promiscuous mode [ 236.263490][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.271360][ T5804] Cannot create hsr debugfs directory [ 236.291745][ T5807] hsr_slave_0: entered promiscuous mode [ 236.301032][ T5807] hsr_slave_1: entered promiscuous mode [ 236.309146][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.316878][ T5807] Cannot create hsr debugfs directory [ 236.369813][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.376958][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.403388][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.449066][ T5816] Bluetooth: hci1: command tx timeout [ 236.533056][ T5816] Bluetooth: hci0: command tx timeout [ 236.608111][ T5816] Bluetooth: hci2: command tx timeout [ 236.646124][ T5808] hsr_slave_0: entered promiscuous mode [ 236.654648][ T5808] hsr_slave_1: entered promiscuous mode [ 236.662880][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.670774][ T5808] Cannot create hsr debugfs directory [ 236.688105][ T5816] Bluetooth: hci4: command tx timeout [ 236.769334][ T5816] Bluetooth: hci3: command tx timeout [ 236.979126][ T5799] hsr_slave_0: entered promiscuous mode [ 236.989138][ T5799] hsr_slave_1: entered promiscuous mode [ 236.997612][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.005504][ T5799] Cannot create hsr debugfs directory [ 237.964076][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.050316][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.102754][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 238.229290][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.248574][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 238.288299][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.390351][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.445320][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.537580][ T5816] Bluetooth: hci1: command tx timeout [ 238.544972][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.608326][ T5816] Bluetooth: hci0: command tx timeout [ 238.688298][ T5816] Bluetooth: hci2: command tx timeout [ 238.720883][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.755235][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 238.770914][ T5816] Bluetooth: hci4: command tx timeout [ 238.807540][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 238.826699][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 238.848160][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.856742][ T5816] Bluetooth: hci3: command tx timeout [ 238.879725][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.918316][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 238.991424][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.068899][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.114989][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 239.203081][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.635252][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.838935][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.860740][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.902182][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.980510][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.988188][ T4046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.080812][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.088484][ T4046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.136407][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.182106][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.271137][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.278767][ T4046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.485915][ T5800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.497465][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.553358][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.575585][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.583208][ T4046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.608150][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.615798][ T4046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.654400][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.662139][ T4046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.900030][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.050780][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.058554][ T4046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.161439][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.169087][ T4046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.235382][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.554524][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.674941][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.682747][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.707376][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.715205][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.130906][ T5799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.797051][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.275677][ T5800] veth0_vlan: entered promiscuous mode [ 243.351530][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.400292][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.420938][ T5800] veth1_vlan: entered promiscuous mode [ 243.816588][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.865431][ T5800] veth0_macvtap: entered promiscuous mode [ 243.968182][ T5804] veth0_vlan: entered promiscuous mode [ 243.992151][ T5800] veth1_macvtap: entered promiscuous mode [ 244.009394][ T5807] veth0_vlan: entered promiscuous mode [ 244.026783][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.137497][ T5807] veth1_vlan: entered promiscuous mode [ 244.155616][ T5804] veth1_vlan: entered promiscuous mode [ 244.174161][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.319375][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.414349][ T5800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.423642][ T5800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.435296][ T5800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.444554][ T5800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.541531][ T5804] veth0_macvtap: entered promiscuous mode [ 244.647129][ T5799] veth0_vlan: entered promiscuous mode [ 244.672022][ T5807] veth0_macvtap: entered promiscuous mode [ 244.708518][ T5804] veth1_macvtap: entered promiscuous mode [ 244.729368][ T5807] veth1_macvtap: entered promiscuous mode [ 244.800930][ T5799] veth1_vlan: entered promiscuous mode [ 244.939344][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.962451][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.053541][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.086037][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.183970][ T5804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.194100][ T5804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.204316][ T5804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.213713][ T5804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.251829][ T5807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.262339][ T5807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.272498][ T5807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.281691][ T5807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.304563][ T5799] veth0_macvtap: entered promiscuous mode [ 245.406464][ T5799] veth1_macvtap: entered promiscuous mode [ 245.632034][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.739181][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.799000][ T5799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.812760][ T5799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.822045][ T5799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.831139][ T5799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.642832][ T5808] veth0_vlan: entered promiscuous mode [ 246.762018][ T5808] veth1_vlan: entered promiscuous mode [ 247.048808][ T5808] veth0_macvtap: entered promiscuous mode [ 247.167419][ T5808] veth1_macvtap: entered promiscuous mode [ 247.335246][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.447161][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.577045][ T5808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.586478][ T5808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.597392][ T5808] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.606612][ T5808] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.095597][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.104001][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.363749][ T3915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.372122][ T3915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.795388][ T5800] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 251.953055][ T1893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.953141][ T1893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.258957][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.267047][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.404666][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.412867][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.463851][ T5979] overlayfs: failed to get inode (-116) [ 252.514065][ T5979] overlayfs: failed to look up (bus) for ino (-116) [ 252.683765][ T4046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.694708][ T4046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.910674][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.918871][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.955592][ T3827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.964784][ T3827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.655685][ T5989] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 253.839307][ T5991] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 254.506986][ T3827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.515417][ T3827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.725918][ T6001] loop1: detected capacity change from 0 to 64 [ 254.935667][ T3827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.944457][ T3827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.193578][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 255.896184][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 256.687314][ T6010] sctp: failed to load transform for md5: -2 [ 257.009376][ T1973] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 257.188190][ T1973] usb 4-1: Using ep0 maxpacket: 32 [ 257.234367][ T1973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.245982][ T1973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.257497][ T1973] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 257.267683][ T1973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.304068][ T1973] usb 4-1: config 0 descriptor?? [ 257.339383][ T1973] hub 4-1:0.0: USB hub found [ 257.623449][ T1973] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 257.887750][ T1973] hid-generic 0003:046D:C31C.0001: item fetching failed at offset 0/1 [ 257.931812][ T1973] hid-generic 0003:046D:C31C.0001: probe with driver hid-generic failed with error -22 [ 258.189246][ T1632] usb 4-1: USB disconnect, device number 2 [ 258.618377][ T1632] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 258.850809][ T1632] usb 2-1: Using ep0 maxpacket: 16 [ 258.919458][ T1632] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 258.985349][ T1632] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 258.995017][ T1632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.003618][ T1632] usb 2-1: Product: syz [ 259.010703][ T1632] usb 2-1: Manufacturer: syz [ 259.015568][ T1632] usb 2-1: SerialNumber: syz [ 259.136190][ T1632] usb 2-1: config 0 descriptor?? [ 259.198714][ T1632] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 259.208782][ T1632] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 260.082974][ T1632] em28xx 2-1:0.0: chip ID is em2800 [ 260.429221][ T1632] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 260.437535][ T1632] em28xx 2-1:0.0: board has no eeprom [ 260.453552][ T6053] ======================================================= [ 260.453552][ T6053] WARNING: The mand mount option has been deprecated and [ 260.453552][ T6053] and is ignored by this kernel. Remove the mand [ 260.453552][ T6053] option from the mount to silence this warning. [ 260.453552][ T6053] ======================================================= [ 260.495613][ T6053] syz.0.26: attempt to access beyond end of device [ 260.495613][ T6053] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 260.510342][ T6053] MINIX-fs: unable to read superblock [ 260.631072][ T1632] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 260.639920][ T1632] em28xx 2-1:0.0: dvb set to bulk mode. [ 260.647721][ T24] em28xx 2-1:0.0: Binding DVB extension [ 260.812012][ T1632] usb 2-1: USB disconnect, device number 2 [ 260.820349][ T1632] em28xx 2-1:0.0: Disconnecting em28xx [ 261.252301][ T24] em28xx 2-1:0.0: Registering input extension [ 261.318275][ T1632] em28xx 2-1:0.0: Closing input extension [ 261.412765][ T1632] em28xx 2-1:0.0: Freeing device [ 261.548297][ T6059] syz.2.29 (6059): /proc/6058/oom_adj is deprecated, please use /proc/6058/oom_score_adj instead. [ 264.812553][ T6093] overlayfs: failed to resolve './file0': -2 [ 265.616452][ T6099] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 265.623278][ T6099] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.631438][ T6099] vhci_hcd vhci_hcd.0: Device attached [ 265.789324][ T6103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.822500][ T6103] bond0: (slave rose0): Enslaving as an active interface with an up link [ 265.831720][ T1973] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 265.898147][ T1632] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 266.088467][ T1973] usb 4-1: Using ep0 maxpacket: 16 [ 266.130634][ T1973] usb 4-1: config 0 has no interfaces? [ 266.163815][ T1973] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 266.173283][ T1973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.181707][ T1973] usb 4-1: Product: syz [ 266.186112][ T1973] usb 4-1: Manufacturer: syz [ 266.191054][ T1973] usb 4-1: SerialNumber: syz [ 266.291328][ T1973] usb 4-1: config 0 descriptor?? [ 266.538717][ T6101] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 266.554570][ T1973] usb 4-1: USB disconnect, device number 3 [ 266.562614][ T54] vhci_hcd: stop threads [ 266.567072][ T54] vhci_hcd: release socket [ 266.572035][ T54] vhci_hcd: disconnect device [ 268.079239][ T6135] tmpfs: Bad value for 'mpol' [ 268.708781][ T1973] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 268.763765][ T6146] overlayfs: failed to resolve './file0': -2 [ 268.908279][ T1973] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 268.917002][ T1973] usb 5-1: config 0 has no interface number 0 [ 269.002034][ T1973] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 269.011832][ T1973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.020256][ T1973] usb 5-1: Product: syz [ 269.024663][ T1973] usb 5-1: Manufacturer: syz [ 269.029576][ T1973] usb 5-1: SerialNumber: syz [ 269.122990][ T6149] loop0: detected capacity change from 0 to 512 [ 269.160898][ T1973] usb 5-1: config 0 descriptor?? [ 269.220659][ T6149] EXT4-fs: inline encryption not supported [ 269.260067][ T1973] yurex 5-1:0.50: Could not find endpoints [ 269.406667][ T6149] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.58: corrupted in-inode xattr: invalid ea_ino [ 269.521829][ T6149] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.58: couldn't read orphan inode 15 (err -117) [ 269.549242][ T6149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.708084][ T6149] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.58: Directory hole found for htree leaf block 0 [ 270.156827][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.366054][ T6164] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 270.372872][ T6164] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 270.382411][ T6164] vhci_hcd vhci_hcd.0: Device attached [ 270.668800][ T24] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 270.768299][ T5860] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 270.959096][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 270.969514][ T6173] loop0: detected capacity change from 0 to 2048 [ 271.018454][ T1632] vhci_hcd: vhci_device speed not set [ 271.024427][ T5860] usb 2-1: config 0 has no interfaces? [ 271.082025][ T5860] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 271.091814][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.100673][ T5860] usb 2-1: Product: syz [ 271.105088][ T5860] usb 2-1: Manufacturer: syz [ 271.110186][ T5860] usb 2-1: SerialNumber: syz [ 271.150264][ T6176] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.220927][ T5860] usb 2-1: config 0 descriptor?? [ 271.318042][ T30] audit: type=1800 audit(1750741537.954:2): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.64" name="file1" dev="loop0" ino=2097152 res=0 errno=0 [ 271.507758][ T1973] usb 2-1: USB disconnect, device number 3 [ 271.530045][ T6165] vhci_hcd: connection reset by peer [ 271.578367][ T1893] vhci_hcd: stop threads [ 271.583109][ T1893] vhci_hcd: release socket [ 271.588912][ T1893] vhci_hcd: disconnect device [ 272.007450][ T5800] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 272.039995][ T5800] Remounting filesystem read-only [ 272.074358][ T5800] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 272.148200][ T1973] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 272.205839][ T5859] usb 5-1: USB disconnect, device number 2 [ 272.379591][ T1973] usb 4-1: Using ep0 maxpacket: 32 [ 272.416482][ T1973] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 272.425044][ T1973] usb 4-1: config 0 has no interface number 0 [ 272.431832][ T1973] usb 4-1: config 0 interface 184 has no altsetting 0 [ 272.498484][ T1973] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 272.507947][ T1973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.516221][ T1973] usb 4-1: Product: syz [ 272.520838][ T1973] usb 4-1: Manufacturer: syz [ 272.525664][ T1973] usb 4-1: SerialNumber: syz [ 272.552764][ T1973] usb 4-1: config 0 descriptor?? [ 272.578048][ T1973] smsc75xx v1.0.0 [ 272.813961][ T6193] overlayfs: failed to resolve './file0': -2 [ 272.898457][ T5800] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 272.943978][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.063508][ T6197] netlink: 763 bytes leftover after parsing attributes in process `syz.4.71'. [ 273.212037][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.246135][ T1973] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 273.257407][ T1973] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 273.456458][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.753698][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.598512][ T14] bridge_slave_1: left allmulticast mode [ 274.604446][ T14] bridge_slave_1: left promiscuous mode [ 274.611400][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.769193][ T14] bridge_slave_0: left allmulticast mode [ 274.775120][ T14] bridge_slave_0: left promiscuous mode [ 274.782488][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.420551][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.493678][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.545357][ T14] bond0 (unregistering): Released all slaves [ 275.646457][ T1973] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 275.663902][ T1973] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 275.679378][ T1973] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 275.689909][ T1973] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 275.799984][ T1973] usb 4-1: USB disconnect, device number 4 [ 275.828471][ T24] vhci_hcd: vhci_device speed not set [ 276.147335][ T14] hsr_slave_0: left promiscuous mode [ 276.189214][ T14] hsr_slave_1: left promiscuous mode [ 276.197354][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.205326][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.269441][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.277189][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.361220][ T14] veth1_macvtap: left promiscuous mode [ 276.367024][ T14] veth0_macvtap: left promiscuous mode [ 276.373237][ T14] veth1_vlan: left promiscuous mode [ 276.378966][ T14] veth0_vlan: left promiscuous mode [ 278.320420][ T6220] loop3: detected capacity change from 0 to 4096 [ 278.734367][ T6232] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 278.741185][ T6232] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.749655][ T6232] vhci_hcd vhci_hcd.0: Device attached [ 278.859334][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 278.906897][ T6237] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.926933][ T14] team0 (unregistering): Port device team_slave_1 removed [ 279.096591][ T5860] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 279.220241][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 279.314511][ T14] team0 (unregistering): Port device team_slave_0 removed [ 279.556493][ T24] usb 2-1: config 0 has no interfaces? [ 279.730962][ T24] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 279.743841][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.753776][ T24] usb 2-1: Product: syz [ 279.758362][ T24] usb 2-1: Manufacturer: syz [ 279.770416][ T24] usb 2-1: SerialNumber: syz [ 280.023629][ T24] usb 2-1: config 0 descriptor?? [ 280.295355][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.321083][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.336665][ T24] usb 2-1: USB disconnect, device number 4 [ 280.383794][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.399237][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.411617][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.431765][ T6233] vhci_hcd: connection reset by peer [ 280.466739][ T4379] vhci_hcd: stop threads [ 280.472418][ T4379] vhci_hcd: release socket [ 280.478162][ T4379] vhci_hcd: disconnect device [ 281.828197][ T6259] overlayfs: failed to resolve './file0': -2 [ 282.369923][ T6268] warning: `syz.3.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 282.608476][ T5801] Bluetooth: hci1: command tx timeout [ 282.646769][ T6241] chnl_net:caif_netlink_parms(): no params data found [ 284.348861][ T5860] vhci_hcd: vhci_device speed not set [ 284.700428][ T5801] Bluetooth: hci1: command tx timeout [ 285.529217][ T6306] netlink: 104 bytes leftover after parsing attributes in process `syz.1.98'. [ 285.943610][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.950961][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.275761][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.286756][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.298585][ T6241] bridge_slave_0: entered allmulticast mode [ 286.308339][ T6241] bridge_slave_0: entered promiscuous mode [ 286.344604][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.352422][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.360476][ T6241] bridge_slave_1: entered allmulticast mode [ 286.412133][ T6241] bridge_slave_1: entered promiscuous mode [ 286.751451][ T6314] overlayfs: failed to resolve './file0': -2 [ 286.765272][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.800071][ T5801] Bluetooth: hci1: command tx timeout [ 286.865591][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.889474][ T6316] capability: warning: `syz.1.102' uses deprecated v2 capabilities in a way that may be insecure [ 287.060806][ T6241] team0: Port device team_slave_0 added [ 287.127320][ T6241] team0: Port device team_slave_1 added [ 287.205188][ T6321] loop6: detected capacity change from 0 to 1 [ 287.214678][ T6321] Dev loop6: unable to read RDB block 1 [ 287.214948][ T6321] loop6: unable to read partition table [ 287.215710][ T6321] loop6: partition table beyond EOD, truncated [ 287.215829][ T6321] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 287.501061][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.508519][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.539006][ T6241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.672461][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.680085][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.706661][ T6241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.088956][ T6241] hsr_slave_0: entered promiscuous mode [ 288.103867][ T6241] hsr_slave_1: entered promiscuous mode [ 288.588579][ T5860] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 288.758408][ T5860] usb 5-1: Using ep0 maxpacket: 8 [ 288.795006][ T5860] usb 5-1: unable to get BOS descriptor or descriptor too short [ 288.841475][ T5860] usb 5-1: config 9 has an invalid interface number: 70 but max is 0 [ 288.853517][ T5860] usb 5-1: config 9 has no interface number 0 [ 288.861927][ T5860] usb 5-1: config 9 interface 70 has no altsetting 0 [ 288.870333][ T5801] Bluetooth: hci1: command tx timeout [ 288.925031][ T5860] usb 5-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=98.46 [ 288.935997][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.944490][ T5860] usb 5-1: Product: syz [ 288.949034][ T5860] usb 5-1: Manufacturer: syz [ 288.957038][ T5860] usb 5-1: SerialNumber: syz [ 289.266143][ T5860] hub 5-1:9.70: bad descriptor, ignoring hub [ 289.273202][ T5860] hub 5-1:9.70: probe with driver hub failed with error -5 [ 289.290110][ T5860] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 289.300928][ T5860] dvb-usb: bulk message failed: -22 (2/0) [ 289.306896][ T5860] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 289.506581][ T5860] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 289.518026][ T5860] usb 5-1: media controller created [ 289.584431][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.678488][ T5860] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 289.687529][ T5860] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 290.278210][ T5860] rc_core: IR keymap rc-dtt200u not found [ 290.289398][ T5860] Registered IR keymap rc-empty [ 290.296761][ T5860] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 290.339340][ T6241] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 290.390060][ T1973] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 290.421309][ T6241] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 290.477571][ T5860] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 290.527044][ T6241] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 290.578070][ T5860] dvb-usb: schedule remote query interval to 300 msecs. [ 290.585267][ T5860] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 290.598184][ T1973] usb 4-1: Using ep0 maxpacket: 32 [ 290.608496][ T1973] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.621832][ T1973] usb 4-1: config 0 interface 0 has no altsetting 0 [ 290.628964][ T1973] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 290.638372][ T1973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.660450][ T6241] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 290.742388][ T5860] usb 5-1: USB disconnect, device number 3 [ 290.883541][ T1973] usb 4-1: config 0 descriptor?? [ 291.087541][ T5860] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 291.472418][ T1973] hid-retrode 0003:0403:97C1.0002: item fetching failed at offset 0/5 [ 291.563392][ T1973] hid-retrode 0003:0403:97C1.0002: probe with driver hid-retrode failed with error -22 [ 291.696174][ T1973] usb 4-1: USB disconnect, device number 5 [ 292.593564][ T6241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.932544][ T6241] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.079008][ T3827] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.086586][ T3827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.197905][ T3827] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.205496][ T3827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.798562][ T5860] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 295.852569][ T6241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.039922][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 296.106173][ T5860] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.123328][ T5860] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.132371][ T5860] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 296.141857][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.250975][ T5860] usb 5-1: config 0 descriptor?? [ 296.576306][ T6418] syz.1.130 (6418): drop_caches: 2 [ 296.723990][ T5860] usbhid 5-1:0.0: can't add hid device: -71 [ 296.730886][ T5860] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 296.841736][ T5860] usb 5-1: USB disconnect, device number 4 [ 296.919357][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 297.119717][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 297.253527][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.265012][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.275412][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 297.284973][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.475058][ T24] usb 4-1: config 0 descriptor?? [ 298.130079][ T5801] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 298.139178][ T5801] Bluetooth: hci2: Injecting HCI hardware error event [ 298.147247][ T5816] Bluetooth: hci2: hardware error 0x00 [ 299.340445][ T5860] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 299.631602][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 299.643623][ T5860] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 299.655706][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 299.676904][ T6241] veth0_vlan: entered promiscuous mode [ 299.787556][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 299.794463][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 299.820771][ T6241] veth1_vlan: entered promiscuous mode [ 299.858460][ T5860] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 299.869060][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.877338][ T5860] usb 5-1: Product: syz [ 299.882400][ T5860] usb 5-1: Manufacturer: syz [ 299.887245][ T5860] usb 5-1: SerialNumber: syz [ 299.939234][ T24] usb 4-1: USB disconnect, device number 6 [ 300.066637][ T5860] usb 5-1: config 0 descriptor?? [ 300.079162][ T6446] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 300.142519][ T6446] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 300.208539][ T5816] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 300.241722][ T5860] usb 5-1: ucan: probing device on interface #0 [ 300.281531][ T6241] veth0_macvtap: entered promiscuous mode [ 300.361641][ T6241] veth1_macvtap: entered promiscuous mode [ 300.544446][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.684261][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.694921][ T5860] usb 5-1: ucan: device reported invalid device info [ 300.702707][ T5860] usb 5-1: ucan: probe failed; try to update the device firmware [ 300.819624][ T6241] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.829438][ T6241] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.842904][ T6241] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.853360][ T6241] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.899718][ T24] usb 5-1: USB disconnect, device number 5 [ 304.770434][ T5860] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 304.990102][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 305.001918][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 305.015445][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 305.250030][ T5860] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 305.259724][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.268254][ T5860] usb 3-1: Product: syz [ 305.272647][ T5860] usb 3-1: Manufacturer: syz [ 305.277475][ T5860] usb 3-1: SerialNumber: syz [ 305.405691][ T5860] usb 3-1: config 0 descriptor?? [ 305.414090][ T6499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 305.449022][ T6499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 305.513793][ T5860] usb 3-1: ucan: probing device on interface #0 [ 306.018786][ T5860] usb 3-1: ucan: failed to retrieve device info [ 306.025325][ T5860] usb 3-1: ucan: probe failed; try to update the device firmware [ 306.140091][ T5860] usb 3-1: USB disconnect, device number 2 [ 308.779816][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.167'. [ 309.263446][ T4046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.271716][ T4046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.588289][ T5860] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 309.645221][ T3854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.653524][ T3854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.819456][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 309.830825][ T5860] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 309.847267][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 310.098654][ T5860] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 310.108156][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.116420][ T5860] usb 2-1: Product: syz [ 310.121160][ T5860] usb 2-1: Manufacturer: syz [ 310.126008][ T5860] usb 2-1: SerialNumber: syz [ 310.301614][ T5860] usb 2-1: config 0 descriptor?? [ 310.320270][ T6567] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 310.400091][ T6567] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 310.420837][ T5860] usb 2-1: ucan: probing device on interface #0 [ 310.731287][ T6583] loop5: detected capacity change from 0 to 512 [ 310.801821][ T6583] EXT4-fs: inline encryption not supported [ 310.933523][ T5860] usb 2-1: ucan: failed to retrieve device info [ 310.940349][ T5860] usb 2-1: ucan: probe failed; try to update the device firmware [ 310.988850][ T6583] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.75: corrupted in-inode xattr: invalid ea_ino [ 311.088278][ T6583] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.75: couldn't read orphan inode 15 (err -117) [ 311.149675][ T5860] usb 2-1: USB disconnect, device number 5 [ 311.178049][ T6583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.340009][ T6583] EXT4-fs error (device loop5): ext4_add_entry:2417: inode #2: comm syz.5.75: Directory hole found for htree leaf block 0 [ 311.950567][ T6241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.222093][ T6602] overlayfs: failed to resolve './file1': -2 [ 312.538492][ T5860] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 312.822072][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 312.858382][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.869750][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.880273][ T5860] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 312.889863][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.074664][ T5860] usb 2-1: config 0 descriptor?? [ 313.142914][ T5860] hub 2-1:0.0: USB hub found [ 313.328769][ T5860] hub 2-1:0.0: 1 port detected [ 314.011276][ T5860] hub 2-1:0.0: activate --> -90 [ 314.445438][ T5860] usb 2-1-port1: cannot disable (err = -71) [ 314.458868][ T24] usb 2-1: USB disconnect, device number 6 [ 314.475007][ T6631] netlink: 104 bytes leftover after parsing attributes in process `syz.2.189'. [ 314.493430][ T5860] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 314.500702][ T5860] usb 2-1-port1: connect-debounce failed [ 315.205790][ T6639] loop2: detected capacity change from 0 to 512 [ 315.241077][ T6639] EXT4-fs: inline encryption not supported [ 315.344490][ T6639] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.192: corrupted in-inode xattr: invalid ea_ino [ 315.380905][ T6639] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.192: couldn't read orphan inode 15 (err -117) [ 315.490978][ T6639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.719673][ T6639] EXT4-fs error (device loop2): ext4_add_entry:2417: inode #2: comm syz.2.192: Directory hole found for htree leaf block 0 [ 315.934541][ T6649] overlayfs: failed to resolve './file1': -2 [ 316.232741][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.818952][ T6689] loop4: detected capacity change from 0 to 512 [ 318.912078][ T6689] EXT4-fs: inline encryption not supported [ 319.019212][ T6689] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.209: corrupted in-inode xattr: invalid ea_ino [ 319.147365][ T6689] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.209: couldn't read orphan inode 15 (err -117) [ 319.207367][ T6689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.614490][ T6699] loop3: detected capacity change from 0 to 512 [ 319.719292][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.754341][ T6699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.768903][ T6699] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.320650][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 320.328648][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 320.336404][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 320.344449][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 320.352339][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 320.505210][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.569517][ T24] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 320.662017][ T6713] fuse: Unknown parameter '0x0000000000000003' [ 321.982948][ T6714] fido_id[6714]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 322.347203][ T6736] can0: slcan on ptm0. [ 322.389201][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 322.420636][ T6735] loop1: detected capacity change from 0 to 2048 [ 322.509428][ T6732] can0 (unregistered): slcan off ptm0. [ 322.625472][ T6739] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.626130][ T24] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 322.649116][ T24] usb 5-1: config 0 has no interface number 0 [ 322.655475][ T24] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.868361][ T30] audit: type=1800 audit(1750741589.514:3): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.224" name="file1" dev="loop1" ino=2097152 res=0 errno=0 [ 322.929916][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 322.939459][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.952773][ T24] usb 5-1: Product: syz [ 322.957194][ T24] usb 5-1: Manufacturer: syz [ 322.963686][ T24] usb 5-1: SerialNumber: syz [ 323.065290][ T24] usb 5-1: config 0 descriptor?? [ 323.240816][ T24] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 323.352548][ T6745] loop2: detected capacity change from 0 to 512 [ 323.441941][ T24] usb 5-1: USB disconnect, device number 6 [ 323.491845][ T5804] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 323.494540][ T24] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 323.579243][ T5804] Remounting filesystem read-only [ 323.584888][ T5804] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 323.680403][ T6745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.693595][ T6745] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.980357][ T5804] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 324.020098][ T6753] netlink: 104 bytes leftover after parsing attributes in process `syz.5.228'. [ 324.393642][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.737433][ T4379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.954356][ T4379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.184579][ T4379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.416099][ T4379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.659061][ T4379] bridge_slave_1: left allmulticast mode [ 325.664977][ T4379] bridge_slave_1: left promiscuous mode [ 325.673761][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.783726][ T4379] bridge_slave_0: left allmulticast mode [ 325.791415][ T4379] bridge_slave_0: left promiscuous mode [ 325.798304][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.274831][ T4379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.309389][ T4379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.339268][ T4379] bond0 (unregistering): Released all slaves [ 326.831740][ T4379] hsr_slave_0: left promiscuous mode [ 326.868146][ T4379] hsr_slave_1: left promiscuous mode [ 326.899782][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.907510][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.948712][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.956414][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.095711][ T4379] veth1_macvtap: left promiscuous mode [ 327.103174][ T4379] veth0_macvtap: left promiscuous mode [ 327.109407][ T4379] veth1_vlan: left promiscuous mode [ 327.115017][ T4379] veth0_vlan: left promiscuous mode [ 328.303277][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.329429][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.339652][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.353384][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.367396][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.390274][ T4379] team0 (unregistering): Port device team_slave_1 removed [ 328.444407][ T4379] team0 (unregistering): Port device team_slave_0 removed [ 329.242577][ T6795] loop2: detected capacity change from 0 to 512 [ 329.381463][ T6797] netlink: 104 bytes leftover after parsing attributes in process `syz.4.243'. [ 329.459352][ T6795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.472522][ T6795] ext4 filesystem being mounted at /52/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.189561][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.448298][ T5801] Bluetooth: hci2: command tx timeout [ 330.614668][ T6785] chnl_net:caif_netlink_parms(): no params data found [ 330.782587][ T30] audit: type=1804 audit(1750741597.434:4): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.250" name="/newroot/53/bus/file1" dev="overlay" ino=339 res=1 errno=0 [ 331.992599][ T6838] netlink: 104 bytes leftover after parsing attributes in process `syz.4.255'. [ 332.538931][ T5801] Bluetooth: hci2: command tx timeout [ 332.797697][ T6850] loop4: detected capacity change from 0 to 512 [ 332.924181][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.932155][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.940054][ T6785] bridge_slave_0: entered allmulticast mode [ 332.949681][ T6785] bridge_slave_0: entered promiscuous mode [ 333.004277][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.011998][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.019893][ T6785] bridge_slave_1: entered allmulticast mode [ 333.030694][ T6785] bridge_slave_1: entered promiscuous mode [ 333.079539][ T6850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.097245][ T6850] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.111349][ T5801] Bluetooth: hci1: command tx timeout [ 333.531560][ T6785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.614482][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.627487][ T6785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.117397][ T6785] team0: Port device team_slave_0 added [ 334.233388][ T6785] team0: Port device team_slave_1 added [ 334.609125][ T5801] Bluetooth: hci2: command tx timeout [ 334.731589][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.739243][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.765911][ T6785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.933051][ T6880] netlink: 104 bytes leftover after parsing attributes in process `syz.2.268'. [ 334.973674][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.981768][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.008691][ T6785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.776171][ T6785] hsr_slave_0: entered promiscuous mode [ 335.786654][ T6785] hsr_slave_1: entered promiscuous mode [ 335.795917][ T6785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.803837][ T6785] Cannot create hsr debugfs directory [ 336.166503][ T6896] loop5: detected capacity change from 0 to 512 [ 336.388866][ T6896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.402051][ T6896] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.695353][ T5801] Bluetooth: hci2: command tx timeout [ 337.001317][ T6241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.527500][ T6917] netlink: 104 bytes leftover after parsing attributes in process `syz.5.281'. [ 338.026008][ T6785] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 338.189357][ T6785] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 338.269388][ T6785] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 338.370703][ T6785] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 339.811317][ T6785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.901922][ T6946] loop4: detected capacity change from 0 to 512 [ 339.983218][ T6950] netlink: 104 bytes leftover after parsing attributes in process `syz.3.292'. [ 340.040412][ T6785] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.113159][ T6946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.127074][ T6946] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.221663][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.229395][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.269519][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.362534][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.370177][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.148406][ T6959] loop4: detected capacity change from 0 to 2048 [ 341.301091][ T6962] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.378088][ T30] audit: type=1800 audit(1750741608.024:5): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.293" name="file1" dev="loop4" ino=2097152 res=0 errno=0 [ 341.404213][ T30] audit: type=1804 audit(1750741608.054:6): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.293" name="/newroot/64/file0/bus" dev="loop4" ino=2097153 res=1 errno=0 [ 343.004355][ T6983] loop2: detected capacity change from 0 to 512 [ 343.080797][ T6785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.279079][ T6983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.292404][ T6983] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.490755][ T6996] netlink: 104 bytes leftover after parsing attributes in process `syz.4.304'. [ 344.011694][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.702065][ T7009] loop2: detected capacity change from 0 to 2048 [ 344.931690][ T7014] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 345.079371][ T30] audit: type=1800 audit(1750741611.714:7): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.307" name="file1" dev="loop2" ino=2097152 res=0 errno=0 [ 345.224595][ T30] audit: type=1804 audit(1750741611.774:8): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.307" name="/newroot/69/file0/bus" dev="loop2" ino=2097153 res=1 errno=0 [ 346.237714][ T6785] veth0_vlan: entered promiscuous mode [ 346.415481][ T6785] veth1_vlan: entered promiscuous mode [ 346.703282][ T7034] loop5: detected capacity change from 0 to 512 [ 346.787607][ T6785] veth0_macvtap: entered promiscuous mode [ 346.893058][ T7034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.894512][ T6785] veth1_macvtap: entered promiscuous mode [ 346.906380][ T7034] ext4 filesystem being mounted at /32/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.148500][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.258112][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.332602][ T6785] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.341900][ T6785] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.351127][ T6785] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.359506][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.360114][ T6785] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.366604][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.433918][ T6241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.912474][ T7062] overlayfs: failed to resolve './file0': -2 [ 348.966350][ T7058] loop5: detected capacity change from 0 to 2048 [ 349.094827][ T7064] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 349.318110][ T30] audit: type=1800 audit(1750741615.944:9): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.322" name="file1" dev="loop5" ino=2097152 res=0 errno=0 [ 349.458434][ T30] audit: type=1804 audit(1750741615.994:10): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.322" name="/newroot/34/file0/bus" dev="loop5" ino=2097153 res=1 errno=0 [ 350.105809][ T7077] netlink: 'syz.4.328': attribute type 6 has an invalid length. [ 350.115190][ T7077] netlink: 'syz.4.328': attribute type 5 has an invalid length. [ 350.194652][ T7080] netlink: 'syz.2.330': attribute type 6 has an invalid length. [ 351.692808][ T7102] overlayfs: failed to resolve './file0': -2 [ 352.493590][ T7106] loop3: detected capacity change from 0 to 2048 [ 352.683937][ T7117] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.824721][ T30] audit: type=1800 audit(1750741619.454:11): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.338" name="file1" dev="loop3" ino=2097152 res=0 errno=0 [ 354.015761][ T7122] sctp: failed to load transform for md5: -2 [ 354.528983][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 354.529535][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 354.535284][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 355.432060][ T7152] overlayfs: failed to resolve './file0': -2 [ 355.770001][ T1893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.778240][ T1893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.011462][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.019674][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.030844][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.039627][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.047368][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.055845][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.063655][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.071482][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.079276][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.086997][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.094808][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.103156][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.111065][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.118902][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.129691][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.138459][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.146169][ T5859] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 356.247201][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.255453][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.593175][ T5859] hid-generic 0002:0004:0009.0004: hidraw0: HID v0.04 Device [syz0] on syz0 [ 357.516032][ T7175] fido_id[7175]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 358.606877][ T7193] overlayfs: failed to resolve './file0': -2 [ 359.069243][ T7199] netlink: 'syz.5.365': attribute type 1 has an invalid length. [ 359.438331][ T5859] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 359.638612][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 359.695908][ T5859] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 359.704852][ T5859] usb 3-1: config 254 has no interface number 0 [ 359.714723][ T5859] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 359.726276][ T5859] usb 3-1: config 254 interface 235 has no altsetting 0 [ 359.871332][ T5859] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 359.880866][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.889452][ T5859] usb 3-1: Product: syz [ 359.893866][ T5859] usb 3-1: Manufacturer: syz [ 359.898918][ T5859] usb 3-1: SerialNumber: syz [ 360.057017][ T7202] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 360.401080][ T7202] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 360.464815][ T5859] usbtest 3-1:254.235: Linux gadget zero [ 360.471053][ T5859] usbtest 3-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 360.674009][ T5859] usb 3-1: USB disconnect, device number 3 [ 361.971726][ T7235] overlayfs: failed to resolve './file0': -2 [ 362.313544][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 362.508583][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 362.534248][ T24] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 362.543368][ T24] usb 6-1: config 0 has no interface number 0 [ 362.550034][ T24] usb 6-1: config 0 interface 184 has no altsetting 0 [ 362.671184][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 362.685620][ T24] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 362.706230][ T24] usb 6-1: Product: syz [ 362.715646][ T24] usb 6-1: Manufacturer: syz [ 362.720758][ T24] usb 6-1: SerialNumber: syz [ 363.043799][ T24] usb 6-1: config 0 descriptor?? [ 363.100142][ T24] smsc75xx v1.0.0 [ 363.620886][ T5860] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 363.727204][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 363.738802][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 363.888918][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 363.932978][ T5860] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 363.941976][ T5860] usb 5-1: config 0 has no interface number 0 [ 363.948619][ T5860] usb 5-1: config 0 interface 184 has no altsetting 0 [ 364.123292][ T5860] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 364.134525][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.143656][ T5860] usb 5-1: Product: syz [ 364.148291][ T5860] usb 5-1: Manufacturer: syz [ 364.153312][ T5860] usb 5-1: SerialNumber: syz [ 364.444684][ T5860] usb 5-1: config 0 descriptor?? [ 364.504001][ T5860] smsc75xx v1.0.0 [ 365.201074][ T5860] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 365.214071][ T5860] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 366.030186][ T7262] ===================================================== [ 366.038526][ T7262] BUG: KMSAN: uninit-value in sctp_assoc_bh_rcv+0x34e/0xbc0 [ 366.046490][ T7262] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 366.052059][ T7262] sctp_inq_push+0x2a6/0x350 [ 366.056998][ T7262] sctp_backlog_rcv+0x3c7/0xda0 [ 366.068780][ T7262] sk_backlog_rcv+0x142/0x420 [ 366.073696][ T7262] __release_sock+0x1d3/0x330 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 366.080899][ T7262] release_sock+0x6b/0x270 [ 366.086407][ T7262] sctp_wait_for_connect+0x458/0x820 [ 366.092191][ T7262] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 366.097934][ T7262] sctp_sendmsg+0x3910/0x49f0 [ 366.102876][ T7262] inet_sendmsg+0x269/0x2a0 [ 366.107569][ T7262] __sock_sendmsg+0x278/0x3d0 [ 366.112590][ T7262] __sys_sendto+0x593/0x720 [ 366.117324][ T7262] __x64_sys_sendto+0x130/0x200 [ 366.122535][ T7262] x64_sys_call+0x3c0b/0x3db0 [ 366.127437][ T7262] do_syscall_64+0xd9/0x210 [ 366.134988][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.141276][ T7262] [ 366.143711][ T7262] Uninit was created at: [ 366.148805][ T7262] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 366.155521][ T7262] kmalloc_reserve+0x22f/0x4b0 [ 366.166678][ T7262] __alloc_skb+0x347/0x7d0 [ 366.173240][ T7262] sctp_packet_transmit+0x18a1/0x46d0 [ 366.179083][ T7262] sctp_outq_flush+0x1c7d/0x67c0 [ 366.184234][ T7262] sctp_outq_uncork+0x9e/0xc0 [ 366.189266][ T7262] sctp_do_sm+0x8c8e/0x9720 [ 366.193986][ T7262] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 366.199327][ T7262] sctp_inq_push+0x2a6/0x350 [ 366.204123][ T7262] sctp_backlog_rcv+0x3c7/0xda0 [ 366.210026][ T7262] sk_backlog_rcv+0x142/0x420 [ 366.214944][ T7262] __release_sock+0x1d3/0x330 [ 366.220102][ T7262] release_sock+0x6b/0x270 [ 366.224758][ T7262] sctp_wait_for_connect+0x458/0x820 [ 366.230467][ T7262] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 366.236053][ T7262] sctp_sendmsg+0x3910/0x49f0 [ 366.241475][ T7262] inet_sendmsg+0x269/0x2a0 [ 366.246182][ T7262] __sock_sendmsg+0x278/0x3d0 [ 366.251297][ T7262] __sys_sendto+0x593/0x720 [ 366.256036][ T7262] __x64_sys_sendto+0x130/0x200 [ 366.261297][ T7262] x64_sys_call+0x3c0b/0x3db0 [ 366.272364][ T7262] do_syscall_64+0xd9/0x210 [ 366.279148][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.285258][ T7262] [ 366.288031][ T7262] CPU: 1 UID: 0 PID: 7262 Comm: syz.3.387 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(undef) [ 366.300373][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.310840][ T7262] ===================================================== [ 366.318069][ T7262] Disabling lock debugging due to kernel taint [ 366.324357][ T7262] Kernel panic - not syncing: kmsan.panic set ... [ 366.330946][ T7262] CPU: 1 UID: 0 PID: 7262 Comm: syz.3.387 Tainted: G B 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(undef) [ 366.344744][ T7262] Tainted: [B]=BAD_PAGE [ 366.349023][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.359255][ T7262] Call Trace: [ 366.362672][ T7262] [ 366.365750][ T7262] __dump_stack+0x26/0x30 [ 366.370305][ T7262] dump_stack_lvl+0x53/0x270 [ 366.375120][ T7262] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 366.381173][ T7262] dump_stack+0x1e/0x25 [ 366.385525][ T7262] panic+0x4bd/0xd50 [ 366.389671][ T7262] kmsan_report+0x31c/0x320 [ 366.394398][ T7262] ? __msan_warning+0x1b/0x30 [ 366.399272][ T7262] ? sctp_assoc_bh_rcv+0x34e/0xbc0 [ 366.404587][ T7262] ? sctp_inq_push+0x2a6/0x350 [ 366.409544][ T7262] ? sctp_backlog_rcv+0x3c7/0xda0 [ 366.414768][ T7262] ? sk_backlog_rcv+0x142/0x420 [ 366.419828][ T7262] ? __release_sock+0x1d3/0x330 [ 366.424874][ T7262] ? release_sock+0x6b/0x270 [ 366.429675][ T7262] ? sctp_wait_for_connect+0x458/0x820 [ 366.435336][ T7262] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 366.441087][ T7262] ? sctp_sendmsg+0x3910/0x49f0 [ 366.446130][ T7262] ? inet_sendmsg+0x269/0x2a0 [ 366.450988][ T7262] ? __sock_sendmsg+0x278/0x3d0 [ 366.456038][ T7262] ? __sys_sendto+0x593/0x720 [ 366.460930][ T7262] ? __x64_sys_sendto+0x130/0x200 [ 366.466119][ T7262] ? x64_sys_call+0x3c0b/0x3db0 [ 366.471185][ T7262] ? do_syscall_64+0xd9/0x210 [ 366.476038][ T7262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.482308][ T7262] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 366.488360][ T7262] ? kmsan_get_metadata+0xfb/0x160 [ 366.493696][ T7262] ? kmsan_get_metadata+0xfb/0x160 [ 366.499052][ T7262] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 366.505092][ T7262] ? kmsan_get_metadata+0xfb/0x160 [ 366.510430][ T7262] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 366.516481][ T7262] ? sctp_inq_pop+0x15ea/0x19e0 [ 366.521539][ T7262] ? kmsan_get_metadata+0xfb/0x160 [ 366.526886][ T7262] __msan_warning+0x1b/0x30 [ 366.531596][ T7262] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 366.536797][ T7262] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 366.542461][ T7262] sctp_inq_push+0x2a6/0x350 [ 366.547264][ T7262] sctp_backlog_rcv+0x3c7/0xda0 [ 366.552314][ T7262] ? kmsan_get_metadata+0xfb/0x160 [ 366.557658][ T7262] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 366.563238][ T7262] sk_backlog_rcv+0x142/0x420 [ 366.568146][ T7262] __release_sock+0x1d3/0x330 [ 366.573039][ T7262] release_sock+0x6b/0x270 [ 366.577686][ T7262] sctp_wait_for_connect+0x458/0x820 [ 366.583193][ T7262] ? __pfx_autoremove_wake_function+0x10/0x10 [ 366.589522][ T7262] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 366.595092][ T7262] ? kmsan_get_metadata+0xfb/0x160 [ 366.600428][ T7262] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 366.606511][ T7262] sctp_sendmsg+0x3910/0x49f0 [ 366.611368][ T7262] ? kmsan_save_stack_with_flags+0x10/0x60 [ 366.617466][ T7262] ? __pfx_sctp_sendmsg+0x10/0x10 [ 366.622672][ T7262] inet_sendmsg+0x269/0x2a0 [ 366.627375][ T7262] __sock_sendmsg+0x278/0x3d0 [ 366.632265][ T7262] __sys_sendto+0x593/0x720 [ 366.637001][ T7262] ? do_futex+0x3a1/0x480 [ 366.641544][ T7262] ? kmsan_get_metadata+0xfb/0x160 [ 366.646881][ T7262] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 366.652956][ T7262] __x64_sys_sendto+0x130/0x200 [ 366.658003][ T7262] x64_sys_call+0x3c0b/0x3db0 [ 366.662900][ T7262] do_syscall_64+0xd9/0x210 [ 366.667582][ T7262] ? irqentry_exit+0x16/0x60 [ 366.672335][ T7262] ? clear_bhb_loop+0x40/0x90 [ 366.677211][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.683309][ T7262] RIP: 0033:0x7f8044b8e929 [ 366.687876][ T7262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.707687][ T7262] RSP: 002b:00007f804595a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 366.716314][ T7262] RAX: ffffffffffffffda RBX: 00007f8044db5fa0 RCX: 00007f8044b8e929 [ 366.724460][ T7262] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000003 [ 366.732586][ T7262] RBP: 00007f8044c10b39 R08: 000020000005ffe4 R09: 000000000000001c [ 366.740716][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.748829][ T7262] R13: 0000000000000000 R14: 00007f8044db5fa0 R15: 00007fffce3a3788 [ 366.757001][ T7262] [ 366.760380][ T7262] Kernel Offset: disabled [ 366.764793][ T7262] Rebooting in 86400 seconds..