last executing test programs: 10m49.732663186s ago: executing program 0 (id=1): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000600)=""/152, 0x5a, 0x98, 0x1}, 0x28) 10m48.920550102s ago: executing program 0 (id=6): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 10m48.281944641s ago: executing program 0 (id=9): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x7, @remote, 0x34}]}, &(0x7f0000002100)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x3}, 0x94) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x1e8e}, 0x8) 10m46.254096676s ago: executing program 0 (id=13): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) 10m44.278394958s ago: executing program 0 (id=19): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006911510000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 10m42.63479337s ago: executing program 0 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 10m39.251652388s ago: executing program 32 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 4m22.7319687s ago: executing program 5 (id=852): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x48}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_LSEEK(r5, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x6}}, 0x18) 4m19.397766707s ago: executing program 5 (id=861): bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060300052400a2000d240f01f9fffffffdff08000006241a"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3bc3, 0x6, 0x2, 0x7, 0x55, 0xfffe, 0x9, 0x7, 0x40, 0x1, 0x1ff, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4m14.330244741s ago: executing program 5 (id=871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000fcffffff180100000020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800001c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 4m12.644924235s ago: executing program 5 (id=873): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 4m7.625053784s ago: executing program 5 (id=879): getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x92, "d6a6bd81575269ea7eb3a9217176de85cb980ebf76e7990b4df331db0885a99ddb974c3bf90575f936337a4f22e0a6b858ea998c7627da68a6f7044563908e888be0a75bd4626ea18046ea162205735d1f6ccf8daddb9163b3b249977393d254acac7a8e7e49ab10f74f00bca442510718df39c5030205341250fd078e32370fdf6f06556da6a57c970f3a1cec32d5c6e1d5"}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000300"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) 4m4.650888759s ago: executing program 5 (id=882): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x70d5}]}]}, 0x58}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 3m47.857793621s ago: executing program 33 (id=882): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x70d5}]}]}, 0x58}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 3m38.557736267s ago: executing program 3 (id=26): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x6, "5e037948"}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 2m58.014330405s ago: executing program 3 (id=26): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x6, "5e037948"}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 2m18.435225213s ago: executing program 3 (id=26): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x6, "5e037948"}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 2m9.248311462s ago: executing program 1 (id=1098): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 2m8.53620402s ago: executing program 1 (id=1101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d40100004000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a1990000df9e190a587bed507002e83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000240000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4988a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f6324bb7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387f74d1ffbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f009f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459110500a09b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477effff26af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8e45c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5f0436ead88d7acf0166dbd9f30a9b259c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c0057addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cfe9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d11c9b4be91c60932bae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b152a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952bd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e222dbd9a323a889f295e5d3bae64fc48ba123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49798ce2fc6f639735e0222cd08075418239042bfe47c363973d3245ce507e838dfd90ae442a96fa1343029be56de31c2eff226c05f0ae3dbe2281e7bc02db39342d5b54ad3616733a5aa7753613423a0c4d2844a6e08fa5b76e18f7e24e967f6f83c546718d0f20959376427cdd449a4be3d75fd3e51e1b7f8690855af8eddbd3fd556b4460d009e95dabee1e3623933f1a11db14aea54af6c49725bfa51fed222dc379995f48b1aab94441767c8bccbfd966d814715203bd8f549cd57d6a87295bf16aa25fb4e7fcaa8cec5e5c03b0095861bf2fed70ffb46bbb78ba90ca272ead9b3d2959fd9dbaabd1d51a60b474cef4c700faf718b810e4d3527a4663ee9fbc0000000000000000000000000000000000000000000000000061abf7a66b7b3f57ff"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m7.688257532s ago: executing program 1 (id=1104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000060000000030a010100000000000040000100000008000b400000000014000480080002400000000008000140000000000900010073797a300000000008000a40000000021c000880"], 0xa8}}, 0x0) 1m23.495234757s ago: executing program 3 (id=26): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x6, "5e037948"}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 1m17.466810279s ago: executing program 1 (id=1104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000060000000030a010100000000000040000100000008000b400000000014000480080002400000000008000140000000000900010073797a300000000008000a40000000021c000880"], 0xa8}}, 0x0) 46.803308998s ago: executing program 3 (id=26): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x6, "5e037948"}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 42.654545316s ago: executing program 1 (id=1104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000060000000030a010100000000000040000100000008000b400000000014000480080002400000000008000140000000000900010073797a300000000008000a40000000021c000880"], 0xa8}}, 0x0) 11.217031864s ago: executing program 4 (id=1346): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) 10.538250809s ago: executing program 2 (id=1348): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) 9.993948267s ago: executing program 2 (id=1350): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x0, 0xc, 0x2, 'jN'}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000440)={0x40, 0xb, 0x2, '!f'}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x19, 0x2, "32e1"}, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x8}}) recvmsg(0xffffffffffffffff, 0x0, 0x40000103) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x0, 0x62, 0x0, 0x1}, 0x28) 9.540198631s ago: executing program 3 (id=26): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x6, "5e037948"}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 5.884999274s ago: executing program 1 (id=1104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000060000000030a010100000000000040000100000008000b400000000014000480080002400000000008000140000000000900010073797a300000000008000a40000000021c000880"], 0xa8}}, 0x0) 5.266106491s ago: executing program 2 (id=1353): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x12) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8851}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 5.216156643s ago: executing program 4 (id=1354): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="e03f03002a000b", 0x7}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b', @ANYRES32=r1], 0x44}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 5.215757166s ago: executing program 6 (id=1355): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf001}}}}}}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r2}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4.595709826s ago: executing program 6 (id=1356): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3d0af9a79bd53705, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x82000, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 4.050846164s ago: executing program 4 (id=1357): bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060300052400a2000d240f01f9fffffffdff08000006241a"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.92071315s ago: executing program 2 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000020aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516", 0x5d}, {&(0x7f0000001d00)="0092e9a7e64c32c40a81fa0f64bd9906f29b6a0aa0e850e7eb26dd111c83b33cf6f3f5bfdf52e23faac8580b58c35613a51fec2e1500747c8a72eb20d3d6b9e4e75d266a5440ad6fa037d9055e6a4a6760575b9459419cfc252cb04e3a624aaaa02bf155303808bcb8ec989fd7db312bb9807d1efe0dab699418e3", 0x7b}], 0x2, 0x0, 0x0, 0x7400}, 0x40000) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2.688774412s ago: executing program 6 (id=1359): socket$packet(0x11, 0x3, 0x300) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r1, 0x0, 0xfce1) 2.683049969s ago: executing program 4 (id=1360): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) 1.787327075s ago: executing program 4 (id=1361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4cb, &(0x7f00000005c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xc) 1.72027897s ago: executing program 6 (id=1362): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.382517949s ago: executing program 2 (id=1363): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x0, 0xc, 0x2, 'jN'}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000440)={0x40, 0xb, 0x2, '!f'}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x19, 0x2, "32e1"}, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x8}}) recvmsg(0xffffffffffffffff, 0x0, 0x40000103) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x0, 0x62, 0x0, 0x1}, 0x28) 965.988293ms ago: executing program 4 (id=1364): r0 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) shmdt(r0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000190c0)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000210001000000000002000000fc0200000000000000000000000000007f000001000000000067aaf9e5f2011f12000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000000000000050001100000000000000000000000000000000000a0101000000000000000000000000000a010100"/58], 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="01150000406000002c0012800a00010069706f69620000001c", @ANYRES32=r11], 0x68}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 764.497284ms ago: executing program 6 (id=1365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x90) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dde3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 196.59274ms ago: executing program 2 (id=1366): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}], 0x1, 0x4011) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) 0s ago: executing program 6 (id=1367): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b', @ANYRES32=r2], 0x44}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f0000000040)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): g 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 630.044211][ T8890] loop5: detected capacity change from 0 to 256 [ 630.118610][ T8890] exfat: Invalid uid '0x00000000ffffffff' [ 630.484810][ T5874] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.494464][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.748169][ T5874] usb 3-1: can't set config #1, error -71 [ 630.807931][ T5874] usb 3-1: USB disconnect, device number 10 [ 631.509298][ T8901] loop1: detected capacity change from 0 to 2048 [ 631.535831][ T42] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 631.652033][ T8901] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 631.771067][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.782596][ T42] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 631.792055][ T42] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.836053][ T8901] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 631.889499][ T42] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.899179][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.907792][ T42] usb 6-1: Product: syz [ 631.912162][ T42] usb 6-1: Manufacturer: syz [ 631.917200][ T42] usb 6-1: SerialNumber: syz [ 631.979391][ T42] usb 6-1: selecting invalid altsetting 1 [ 632.619369][ T42] usb 6-1: selecting invalid altsetting 1 [ 632.625810][ T42] cdc_ncm 6-1:1.0: bind() failure [ 632.803074][ T24] usb 6-1: USB disconnect, device number 6 [ 632.936794][ T42] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 633.043156][ T8919] loop2: detected capacity change from 0 to 512 [ 633.140369][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 633.190826][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.201905][ T42] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 633.211644][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.255627][ T8919] Quota error (device loop2): v2_read_file_info: Number of blocks too big for quota file size (268288 > 6144). [ 633.268370][ T8919] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 633.340741][ T8919] EXT4-fs (loop2): mount failed [ 633.377679][ T42] usb 2-1: config 0 descriptor?? [ 633.441070][ T42] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 633.811139][ T8930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.898944][ T8944] xt_TPROXY: Can be used only with -p tcp or -p udp [ 635.926440][ T42] usb 2-1: USB disconnect, device number 13 [ 636.784590][ T42] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 636.846877][ T8958] loop2: detected capacity change from 0 to 512 [ 637.021842][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.033080][ T42] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 637.042566][ T42] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 637.104493][ T8958] Quota error (device loop2): v2_read_file_info: Number of blocks too big for quota file size (268288 > 6144). [ 637.117951][ T8958] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 637.134213][ T8958] EXT4-fs (loop2): mount failed [ 637.247968][ T42] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.258705][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.267275][ T42] usb 2-1: Product: syz [ 637.271696][ T42] usb 2-1: Manufacturer: syz [ 637.281221][ T42] usb 2-1: SerialNumber: syz [ 637.450647][ T42] usb 2-1: selecting invalid altsetting 1 [ 637.516946][ T7382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.525404][ T7382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.692681][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.701657][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.126173][ T42] usb 2-1: selecting invalid altsetting 1 [ 638.132524][ T42] cdc_ncm 2-1:1.0: bind() failure [ 638.327818][ T42] usb 2-1: USB disconnect, device number 14 [ 638.338791][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 638.568956][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 638.650752][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.661695][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 638.673102][ T24] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 638.686555][ T24] usb 3-1: config 0 interface 0 has no altsetting 1 [ 638.882274][ T263] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.012879][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 639.025892][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.035594][ T24] usb 3-1: Product: syz [ 639.041104][ T24] usb 3-1: Manufacturer: syz [ 639.046319][ T24] usb 3-1: SerialNumber: syz [ 639.247415][ T263] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.297368][ T24] usb 3-1: config 0 descriptor?? [ 639.363944][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 639.561683][ T8978] loop5: detected capacity change from 0 to 512 [ 639.604652][ T263] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.675110][ T24] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 639.718408][ T8978] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 639.728357][ T8978] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 639.778611][ T24] usb 3-1: USB disconnect, device number 11 [ 639.891711][ T263] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.914475][ T8978] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 639.979255][ T8978] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 640.006720][ T8978] System zones: 0-2, 18-18, 34-34 [ 640.022514][ T8980] netem: change failed [ 640.058737][ T8978] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.850: iget: bad i_size value: 360287970189639680 [ 640.184009][ T8978] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.850: couldn't read orphan inode 15 (err -117) [ 640.377541][ T8978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.619720][ T263] bridge_slave_1: left allmulticast mode [ 640.626109][ T263] bridge_slave_1: left promiscuous mode [ 640.632792][ T263] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.719123][ T30] audit: type=1800 audit(1750850691.716:145): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.850" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 640.778515][ T263] bridge_slave_0: left allmulticast mode [ 640.785475][ T263] bridge_slave_0: left promiscuous mode [ 640.792281][ T263] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.020229][ T6037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.332732][ T263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.353918][ T263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.389941][ T263] bond0 (unregistering): Released all slaves [ 641.699172][ T263] hsr_slave_0: left promiscuous mode [ 641.712284][ T263] hsr_slave_1: left promiscuous mode [ 641.720330][ T263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.729210][ T263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.741516][ T263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.749426][ T263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.788286][ T263] veth1_macvtap: left promiscuous mode [ 641.794335][ T263] veth0_macvtap: left promiscuous mode [ 641.800153][ T263] veth1_vlan: left promiscuous mode [ 641.807511][ T263] veth0_vlan: left promiscuous mode [ 642.372240][ T263] team0 (unregistering): Port device team_slave_1 removed [ 642.427811][ T263] team0 (unregistering): Port device team_slave_0 removed [ 643.283286][ T5874] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 643.513220][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 643.571695][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.582841][ T5874] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 643.592375][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.867591][ T5874] usb 2-1: config 0 descriptor?? [ 643.949734][ T5874] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 644.000596][ T8993] loop2: detected capacity change from 0 to 4096 [ 645.988931][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 645.999044][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 646.009583][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 646.036616][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 646.050240][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 646.179281][ T5874] usb 2-1: USB disconnect, device number 15 [ 646.505222][ T9017] loop2: detected capacity change from 0 to 512 [ 646.526229][ T9017] EXT4-fs: Ignoring removed mblk_io_submit option [ 646.594791][ T24] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 646.613447][ T9017] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 646.700465][ T9017] loop2: detected capacity change from 0 to 512 [ 646.777303][ T9022] loop1: detected capacity change from 0 to 1024 [ 646.790634][ T9022] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869) [ 646.804791][ T9022] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 646.809105][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.826368][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 646.835824][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 646.886735][ T9017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.887800][ T9022] EXT4-fs (loop1): invalid journal inode [ 646.903292][ T9017] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.922934][ T9022] EXT4-fs (loop1): can't get journal size [ 646.952693][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 646.962078][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.970644][ T24] usb 6-1: Product: syz [ 646.975206][ T24] usb 6-1: Manufacturer: syz [ 646.980045][ T24] usb 6-1: SerialNumber: syz [ 647.141516][ T9022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 647.674878][ T24] usb 6-1: selecting invalid altsetting 1 [ 648.644134][ T24] usb 6-1: selecting invalid altsetting 1 [ 648.650267][ T24] cdc_ncm 6-1:1.0: bind() failure [ 648.680785][ T5803] Bluetooth: hci4: command tx timeout [ 648.750403][ T9025] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 648.887804][ T24] usb 6-1: USB disconnect, device number 7 [ 650.548741][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.692679][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.716273][ T5803] Bluetooth: hci4: command tx timeout [ 650.823142][ T9008] chnl_net:caif_netlink_parms(): no params data found [ 651.994624][ T9052] loop1: detected capacity change from 0 to 512 [ 652.173279][ T9052] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (268288 > 6144). [ 652.185931][ T9052] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 652.347522][ T9052] EXT4-fs (loop1): mount failed [ 652.650134][ T9008] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.657932][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.666081][ T9008] bridge_slave_0: entered allmulticast mode [ 652.675551][ T9008] bridge_slave_0: entered promiscuous mode [ 652.760138][ T9053] loop2: detected capacity change from 0 to 4096 [ 652.820832][ T5803] Bluetooth: hci4: command tx timeout [ 652.830889][ T9008] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.844495][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.852497][ T9008] bridge_slave_1: entered allmulticast mode [ 652.862490][ T9008] bridge_slave_1: entered promiscuous mode [ 653.101873][ T9008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.189230][ T9008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.212650][ T5874] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 653.403117][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 653.427429][ T5874] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.438318][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.455801][ T5874] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 653.466335][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.573452][ T9008] team0: Port device team_slave_0 added [ 653.604935][ T9008] team0: Port device team_slave_1 added [ 653.634276][ T5874] usb 6-1: config 0 descriptor?? [ 653.704873][ T5874] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 654.871625][ T5803] Bluetooth: hci4: command tx timeout [ 654.892908][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 655.148544][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.155892][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.183895][ T9008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.282870][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.290067][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.320678][ T9008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.538322][ T9008] hsr_slave_0: entered promiscuous mode [ 656.547060][ T9008] hsr_slave_1: entered promiscuous mode [ 656.554941][ T9008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.562776][ T9008] Cannot create hsr debugfs directory [ 657.637484][ T24] usb 6-1: USB disconnect, device number 8 [ 660.661745][ T9084] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 660.671107][ T4970] Bluetooth: hci5: Frame reassembly failed (-84) [ 660.688303][ T9088] loop1: detected capacity change from 0 to 47 [ 660.808210][ T9088] input: syz0 as /devices/virtual/input/input10 [ 661.101731][ T9087] delete_channel: no stack [ 662.066181][ T9008] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 662.101131][ T9008] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 662.175245][ T9008] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 662.223760][ T9008] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 662.710027][ T5803] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 662.961573][ T9102] loop1: detected capacity change from 0 to 4096 [ 663.148656][ T9008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.300689][ T9008] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.356917][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.364611][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.366310][ T9108] loop2: detected capacity change from 0 to 512 [ 663.457414][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.462991][ T9108] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 663.464996][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.710610][ T9008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 667.203498][ T9008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.298498][ T9129] nfs: Unexpected value for 'acl' [ 667.675323][ T9008] veth0_vlan: entered promiscuous mode [ 667.810741][ T9008] veth1_vlan: entered promiscuous mode [ 668.268344][ T9008] veth0_macvtap: entered promiscuous mode [ 668.361112][ T9008] veth1_macvtap: entered promiscuous mode [ 668.521540][ T9008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.612363][ T9008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.691340][ T9008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.700721][ T9008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.714211][ T9008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.724676][ T9008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.440547][ T9139] loop1: detected capacity change from 0 to 4096 [ 670.132664][ T9139] EXT4-fs (loop1): Test dummy encryption mode enabled [ 670.308252][ T9139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.173173][ T9161] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 671.173173][ T9161] program syz.2.903 not setting count and/or reply_len properly [ 674.205736][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.851728][ T6417] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.067953][ T6417] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.294003][ T6417] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.595619][ T6417] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.000805][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 680.067868][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 680.089046][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 680.189308][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 680.202896][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 680.290248][ T6417] bridge_slave_1: left allmulticast mode [ 680.296174][ T6417] bridge_slave_1: left promiscuous mode [ 680.309609][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.357861][ T6417] bridge_slave_0: left allmulticast mode [ 680.363789][ T6417] bridge_slave_0: left promiscuous mode [ 680.370615][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.356915][ T5806] Bluetooth: hci2: command tx timeout [ 682.674596][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.711300][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.739614][ T6417] bond0 (unregistering): Released all slaves [ 682.842238][ T9207] loop1: detected capacity change from 0 to 4096 [ 683.632241][ T6417] hsr_slave_0: left promiscuous mode [ 683.690319][ T6417] hsr_slave_1: left promiscuous mode [ 683.698682][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.879098][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.887597][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.914271][ T6417] veth1_macvtap: left promiscuous mode [ 683.920596][ T6417] veth0_macvtap: left promiscuous mode [ 683.926830][ T6417] veth1_vlan: left promiscuous mode [ 683.932436][ T6417] veth0_vlan: left promiscuous mode [ 684.387754][ T5806] Bluetooth: hci2: command tx timeout [ 684.534778][ T9227] loop2: detected capacity change from 0 to 512 [ 684.573131][ T9227] EXT4-fs (loop2): DAX unsupported by block device. [ 684.763127][ T9229] loop1: detected capacity change from 0 to 512 [ 684.920920][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 684.994305][ T9229] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 684.997992][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 685.003775][ T9229] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 685.120223][ T9229] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 685.141717][ T9229] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 685.240016][ T9229] System zones: 0-2, 18-18, 34-34 [ 685.254210][ T9229] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.923: iget: bad i_size value: 360287970189639680 [ 685.344841][ T9229] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.923: couldn't read orphan inode 15 (err -117) [ 685.381982][ T9229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.583163][ T30] audit: type=1800 audit(1750850736.554:146): pid=9228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.923" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 685.654817][ T3877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.663236][ T3877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.795863][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.807524][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.894947][ T9199] chnl_net:caif_netlink_parms(): no params data found [ 685.966858][ T5874] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 686.170894][ T9240] loop2: detected capacity change from 0 to 2048 [ 686.177192][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 686.206452][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 686.245010][ T9240] loop2: p1 p2 < > p3 < p5 > [ 686.250519][ T9240] loop2: partition table partially beyond EOD, truncated [ 686.258689][ T9240] loop2: p1 start 4043309312 is beyond EOD, truncated [ 686.265926][ T9240] loop2: p2 start 4278190080 is beyond EOD, truncated [ 686.287905][ T5874] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 686.297613][ T5874] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 686.306277][ T5874] usb 2-1: Product: syz [ 686.310711][ T5874] usb 2-1: Manufacturer: syz [ 686.311747][ T9240] loop2: p5 start 4043309312 is beyond EOD, [ 686.318109][ T5874] usb 2-1: SerialNumber: syz [ 686.330553][ T9240] truncated [ 686.466141][ T5806] Bluetooth: hci2: command tx timeout [ 686.815266][ T5874] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 686.824445][ T5874] visor 2-1:1.0: probe with driver visor failed with error -110 [ 687.172408][ T14] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.353261][ T14] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.555644][ T5806] Bluetooth: hci2: command tx timeout [ 688.576219][ T14] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.653277][ T5874] usb 2-1: USB disconnect, device number 16 [ 688.761521][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.852219][ T9199] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.860093][ T9199] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.868791][ T9199] bridge_slave_0: entered allmulticast mode [ 688.882269][ T9199] bridge_slave_0: entered promiscuous mode [ 688.940649][ T14] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.965063][ T9199] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.965854][ T5850] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 688.972873][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.992501][ T9199] bridge_slave_1: entered allmulticast mode [ 689.003507][ T9199] bridge_slave_1: entered promiscuous mode [ 689.175408][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 689.195714][ T9199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.196765][ T5850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.217692][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 689.231115][ T5850] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 689.240736][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.260886][ T5850] usb 3-1: config 0 descriptor?? [ 689.289646][ T5850] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 689.334300][ T9199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.349394][ T14] bridge_slave_1: left allmulticast mode [ 689.355419][ T14] bridge_slave_1: left promiscuous mode [ 689.362051][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.379057][ T14] bridge_slave_0: left allmulticast mode [ 689.384983][ T14] bridge_slave_0: left promiscuous mode [ 689.396238][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.826198][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.856864][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.894408][ T14] bond0 (unregistering): Released all slaves [ 690.099690][ T9199] team0: Port device team_slave_0 added [ 690.124255][ T9199] team0: Port device team_slave_1 added [ 690.347922][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.355346][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.381929][ T9199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.418875][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.426248][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.453585][ T9199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.514754][ T14] hsr_slave_0: left promiscuous mode [ 690.526510][ T14] hsr_slave_1: left promiscuous mode [ 690.534309][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.544534][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.558892][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.567454][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.619283][ T14] veth1_macvtap: left promiscuous mode [ 690.626197][ T14] veth0_macvtap: left promiscuous mode [ 690.632158][ T14] veth1_vlan: left promiscuous mode [ 690.638043][ T14] veth0_vlan: left promiscuous mode [ 691.237801][ T14] team0 (unregistering): Port device team_slave_1 removed [ 691.324179][ T14] team0 (unregistering): Port device team_slave_0 removed [ 692.042729][ T5848] usb 3-1: USB disconnect, device number 12 [ 692.117154][ T9199] hsr_slave_0: entered promiscuous mode [ 692.127652][ T9199] hsr_slave_1: entered promiscuous mode [ 692.136505][ T9199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.144559][ T9199] Cannot create hsr debugfs directory [ 692.369754][ T9263] loop1: detected capacity change from 0 to 4096 [ 692.398034][ T9268] loop2: detected capacity change from 0 to 512 [ 692.462313][ T9268] EXT4-fs (loop2): DAX unsupported by block device. [ 692.591167][ T9271] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 692.602571][ T9271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 692.615413][ T9271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 692.628718][ T9271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 692.639941][ T9271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 693.476304][ T9199] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 693.503382][ T9199] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 693.608632][ T9199] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 693.685280][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 693.700670][ T9199] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 693.835944][ T9269] chnl_net:caif_netlink_parms(): no params data found [ 693.860323][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 694.590550][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 694.600833][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 694.612719][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.629798][ T24] usb 3-1: config 0 descriptor?? [ 694.646269][ T24] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 694.789157][ T9271] Bluetooth: hci4: command tx timeout [ 695.302808][ T9199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.611182][ T9199] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.759203][ T3670] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.766923][ T3670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.826560][ T9294] loop1: detected capacity change from 0 to 128 [ 695.945904][ T3670] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.953482][ T3670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.994512][ T9271] Bluetooth: hci4: command tx timeout [ 697.548914][ T5850] usb 3-1: USB disconnect, device number 13 [ 698.199034][ T5850] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 698.378829][ T9269] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.387784][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.398479][ T9269] bridge_slave_0: entered allmulticast mode [ 698.410575][ T9269] bridge_slave_0: entered promiscuous mode [ 698.444246][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 698.494741][ T5850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.507907][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 698.522361][ T5850] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 698.532078][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.698414][ T9269] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.712690][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.720757][ T9269] bridge_slave_1: entered allmulticast mode [ 698.730590][ T9269] bridge_slave_1: entered promiscuous mode [ 698.751924][ T5850] usb 3-1: config 0 descriptor?? [ 698.808844][ T5850] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 699.049243][ T9271] Bluetooth: hci4: command tx timeout [ 699.109610][ T9269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.218114][ T9269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.571783][ T9269] team0: Port device team_slave_0 added [ 699.669176][ T9269] team0: Port device team_slave_1 added [ 699.872733][ T9269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.881753][ T9269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.910303][ T9269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.954548][ T9269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.961760][ T9269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.989031][ T9269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.018458][ T9308] loop1: detected capacity change from 0 to 512 [ 700.071109][ T9308] EXT4-fs (loop1): DAX unsupported by block device. [ 700.338463][ T9269] hsr_slave_0: entered promiscuous mode [ 700.353633][ T9269] hsr_slave_1: entered promiscuous mode [ 700.362343][ T9269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.370272][ T9269] Cannot create hsr debugfs directory [ 701.144101][ T9271] Bluetooth: hci4: command tx timeout [ 701.226947][ T24] usb 3-1: USB disconnect, device number 14 [ 701.729796][ T9199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.599174][ T9269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 703.659810][ T9269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 703.739162][ T9269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 703.796441][ T9269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 704.237031][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 704.423572][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 704.466310][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 704.478079][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 704.488433][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 704.497875][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.593548][ T24] usb 3-1: config 0 descriptor?? [ 704.710628][ T9199] veth0_vlan: entered promiscuous mode [ 704.844317][ T24] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 704.902054][ T9199] veth1_vlan: entered promiscuous mode [ 704.990530][ T9269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.085752][ T24] usb 3-1: USB disconnect, device number 15 [ 705.234153][ T9269] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.312269][ T4001] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.319954][ T4001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.415561][ T9199] veth0_macvtap: entered promiscuous mode [ 705.457118][ T4001] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.464875][ T4001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.589248][ T9199] veth1_macvtap: entered promiscuous mode [ 705.968825][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.053799][ T9269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 706.133743][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.276567][ T9199] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.289718][ T9199] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.300508][ T9199] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.310814][ T9199] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.687607][ T9269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.531486][ T9269] veth0_vlan: entered promiscuous mode [ 709.681026][ T9269] veth1_vlan: entered promiscuous mode [ 709.917962][ T9269] veth0_macvtap: entered promiscuous mode [ 709.979694][ T9269] veth1_macvtap: entered promiscuous mode [ 710.225864][ T9269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.320938][ T9269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.423184][ T9371] loop1: detected capacity change from 0 to 4096 [ 710.465036][ T9269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.474361][ T9269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.486903][ T9269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.497111][ T9269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.671751][ T9389] loop2: detected capacity change from 0 to 40427 [ 713.690134][ T9389] F2FS-fs (loop2): build fault injection rate: 771 [ 713.700229][ T9389] F2FS-fs (loop2): invalid crc value [ 714.088423][ T9389] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 715.450643][ T9406] capability: warning: `syz.4.968' uses 32-bit capabilities (legacy support in use) [ 715.536749][ T30] audit: type=1326 audit(1750850766.399:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab018e929 code=0x7ffc0000 [ 715.560037][ T30] audit: type=1326 audit(1750850766.399:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab018e929 code=0x7ffc0000 [ 715.582896][ T30] audit: type=1326 audit(1750850766.399:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ab018e929 code=0x7ffc0000 [ 715.607889][ T30] audit: type=1326 audit(1750850766.399:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab018e929 code=0x7ffc0000 [ 715.631509][ T30] audit: type=1326 audit(1750850766.399:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab018e929 code=0x7ffc0000 [ 715.654341][ T30] audit: type=1326 audit(1750850766.399:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5ab018e929 code=0x7ffc0000 [ 715.677122][ T30] audit: type=1326 audit(1750850766.399:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab018e929 code=0x7ffc0000 [ 715.702199][ T30] audit: type=1326 audit(1750850766.399:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab018e929 code=0x7ffc0000 [ 715.725696][ T30] audit: type=1326 audit(1750850766.409:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ab018e929 code=0x7ffc0000 [ 715.748310][ T30] audit: type=1326 audit(1750850766.409:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab018e929 code=0x7ffc0000 [ 716.070145][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.143035][ T5792] syz-executor: attempt to access beyond end of device [ 716.143035][ T5792] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 716.159111][ T5792] CPU: 0 UID: 0 PID: 5792 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 716.159271][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 716.159355][ T5792] Call Trace: [ 716.159408][ T5792] [ 716.159459][ T5792] __dump_stack+0x26/0x30 [ 716.159634][ T5792] dump_stack_lvl+0x1df/0x270 [ 716.159814][ T5792] dump_stack+0x1e/0x25 [ 716.159968][ T5792] f2fs_handle_critical_error+0xa6f/0xc20 [ 716.160203][ T5792] f2fs_stop_checkpoint+0x65/0x80 [ 716.160401][ T5792] f2fs_write_end_io+0xb4b/0x1920 [ 716.160558][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 716.160774][ T5792] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 716.160909][ T5792] bio_endio+0xe27/0xf80 [ 716.161092][ T5792] submit_bio_noacct+0x214/0x2710 [ 716.161317][ T5792] submit_bio+0x5a9/0x5d0 [ 716.161498][ T5792] f2fs_submit_write_bio+0x92/0x250 [ 716.161687][ T5792] __submit_merged_bio+0x16f/0x6a0 [ 716.161871][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 716.162074][ T5792] __submit_merged_write_cond+0x458/0x9a0 [ 716.162285][ T5792] f2fs_write_data_pages+0x4bb2/0x5480 [ 716.162613][ T5792] ? kmsan_get_metadata+0xfb/0x160 [ 716.162809][ T5792] ? kmsan_get_metadata+0xfb/0x160 [ 716.162995][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 716.163193][ T5792] ? lru_cache_disable+0x11/0x40 [ 716.163332][ T5792] ? filter_irq_stacks+0x49/0x190 [ 716.163481][ T5792] ? stack_depot_save_flags+0x35/0x7b0 [ 716.163659][ T5792] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 716.163850][ T5792] ? kmsan_get_metadata+0xfb/0x160 [ 716.164033][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 716.164224][ T5792] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 716.164422][ T5792] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 716.164618][ T5792] do_writepages+0x3f2/0x860 [ 716.164799][ T5792] ? _raw_spin_unlock+0x30/0x50 [ 716.164971][ T5792] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 716.165149][ T5792] filemap_fdatawrite+0x207/0x260 [ 716.165422][ T5792] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 716.165606][ T5792] f2fs_write_checkpoint+0xfe2/0x2b00 [ 716.165899][ T5792] kill_f2fs_super+0x2ff/0x970 [ 716.166070][ T5792] ? __pfx_kill_f2fs_super+0x10/0x10 [ 716.166227][ T5792] deactivate_locked_super+0xcb/0x3c0 [ 716.166417][ T5792] deactivate_super+0x12f/0x140 [ 716.166590][ T5792] cleanup_mnt+0x6fb/0x780 [ 716.166734][ T5792] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 716.166928][ T5792] ? __pfx___cleanup_mnt+0x10/0x10 [ 716.167074][ T5792] __cleanup_mnt+0x22/0x30 [ 716.167215][ T5792] task_work_run+0x209/0x2b0 [ 716.167385][ T5792] exit_to_user_mode_loop+0x2a6/0x330 [ 716.167558][ T5792] do_syscall_64+0x1e3/0x210 [ 716.167706][ T5792] ? irqentry_exit+0x16/0x60 [ 716.167829][ T5792] ? clear_bhb_loop+0x40/0x90 [ 716.167979][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.168128][ T5792] RIP: 0033:0x7f873598fc57 [ 716.168234][ T5792] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 716.168357][ T5792] RSP: 002b:00007ffcc9355318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 716.168491][ T5792] RAX: 0000000000000000 RBX: 00007f8735a10925 RCX: 00007f873598fc57 [ 716.168587][ T5792] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc93553d0 [ 716.168675][ T5792] RBP: 00007ffcc93553d0 R08: 0000000000000000 R09: 0000000000000000 [ 716.168770][ T5792] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc9356460 [ 716.168864][ T5792] R13: 00007f8735a10925 R14: 00000000000aecc2 R15: 00007ffcc93564a0 [ 716.168993][ T5792] [ 716.529993][ T5792] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 716.540011][ T5792] CPU: 0 UID: 0 PID: 5792 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 716.540169][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 716.540253][ T5792] Call Trace: [ 716.540308][ T5792] [ 716.540358][ T5792] __dump_stack+0x26/0x30 [ 716.540534][ T5792] dump_stack_lvl+0x1df/0x270 [ 716.540714][ T5792] dump_stack+0x1e/0x25 [ 716.540870][ T5792] f2fs_handle_critical_error+0xa6f/0xc20 [ 716.541125][ T5792] f2fs_stop_checkpoint+0x65/0x80 [ 716.541324][ T5792] f2fs_write_end_io+0xb4b/0x1920 [ 716.541502][ T5792] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 716.541641][ T5792] bio_endio+0xe27/0xf80 [ 716.541830][ T5792] submit_bio_noacct+0x214/0x2710 [ 716.542056][ T5792] submit_bio+0x5a9/0x5d0 [ 716.542238][ T5792] f2fs_submit_write_bio+0x92/0x250 [ 716.542428][ T5792] __submit_merged_bio+0x16f/0x6a0 [ 716.542608][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 716.542821][ T5792] __submit_merged_write_cond+0x458/0x9a0 [ 716.543032][ T5792] f2fs_write_data_pages+0x4bb2/0x5480 [ 716.543362][ T5792] ? kmsan_get_metadata+0xfb/0x160 [ 716.543551][ T5792] ? kmsan_get_metadata+0xfb/0x160 [ 716.543744][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 716.543945][ T5792] ? lru_cache_disable+0x11/0x40 [ 716.544089][ T5792] ? filter_irq_stacks+0x49/0x190 [ 716.544240][ T5792] ? stack_depot_save_flags+0x35/0x7b0 [ 716.544416][ T5792] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 716.544602][ T5792] ? kmsan_get_metadata+0xfb/0x160 [ 716.544794][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 716.544987][ T5792] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 716.545187][ T5792] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 716.545391][ T5792] do_writepages+0x3f2/0x860 [ 716.545564][ T5792] ? _raw_spin_unlock+0x30/0x50 [ 716.545747][ T5792] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 716.545927][ T5792] filemap_fdatawrite+0x207/0x260 [ 716.546199][ T5792] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 716.546386][ T5792] f2fs_write_checkpoint+0xfe2/0x2b00 [ 716.546681][ T5792] kill_f2fs_super+0x2ff/0x970 [ 716.546853][ T5792] ? __pfx_kill_f2fs_super+0x10/0x10 [ 716.547007][ T5792] deactivate_locked_super+0xcb/0x3c0 [ 716.547198][ T5792] deactivate_super+0x12f/0x140 [ 716.547372][ T5792] cleanup_mnt+0x6fb/0x780 [ 716.547513][ T5792] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 716.547710][ T5792] ? __pfx___cleanup_mnt+0x10/0x10 [ 716.547860][ T5792] __cleanup_mnt+0x22/0x30 [ 716.548001][ T5792] task_work_run+0x209/0x2b0 [ 716.548171][ T5792] exit_to_user_mode_loop+0x2a6/0x330 [ 716.548348][ T5792] do_syscall_64+0x1e3/0x210 [ 716.548492][ T5792] ? irqentry_exit+0x16/0x60 [ 716.548613][ T5792] ? clear_bhb_loop+0x40/0x90 [ 716.548771][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.548921][ T5792] RIP: 0033:0x7f873598fc57 [ 716.549024][ T5792] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 716.549148][ T5792] RSP: 002b:00007ffcc9355318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 716.549283][ T5792] RAX: 0000000000000000 RBX: 00007f8735a10925 RCX: 00007f873598fc57 [ 716.549384][ T5792] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc93553d0 [ 716.549472][ T5792] RBP: 00007ffcc93553d0 R08: 0000000000000000 R09: 0000000000000000 [ 716.549558][ T5792] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc9356460 [ 716.549651][ T5792] R13: 00007f8735a10925 R14: 00000000000aecc2 R15: 00007ffcc93564a0 [ 716.549787][ T5792] [ 716.904423][ T5792] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 719.044754][ T9430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.973'. [ 719.724572][ T4970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.732933][ T4970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.375834][ T4970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.384271][ T4970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.304640][ T9448] loop2: detected capacity change from 0 to 32768 [ 723.313872][ T9448] XFS: ikeep mount option is deprecated. [ 723.937037][ T9448] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 724.372596][ T9462] atomic_op ffff888044f97928 conn xmit_atomic 0000000000000000 [ 724.512206][ T3670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.520771][ T3670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.898886][ T9448] XFS (loop2): Ending clean mount [ 724.923296][ T9448] XFS (loop2): Quotacheck needed: Please wait. [ 725.056340][ T9448] XFS (loop2): Quotacheck: Done. [ 725.230046][ T5792] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 725.309926][ T6417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.318259][ T6417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.386914][ T14] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.755681][ T14] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.098215][ T14] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.275577][ T14] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.641129][ T14] bridge_slave_1: left allmulticast mode [ 728.647171][ T14] bridge_slave_1: left promiscuous mode [ 728.654130][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.682805][ T14] bridge_slave_0: left allmulticast mode [ 728.688826][ T14] bridge_slave_0: left promiscuous mode [ 728.696063][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.160550][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.179411][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.204694][ T14] bond0 (unregistering): Released all slaves [ 731.239198][ T14] hsr_slave_0: left promiscuous mode [ 731.248827][ T14] hsr_slave_1: left promiscuous mode [ 731.256904][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.271028][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.289727][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.297799][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.325604][ T14] veth1_macvtap: left promiscuous mode [ 731.331751][ T14] veth0_macvtap: left promiscuous mode [ 731.337505][ T14] veth1_vlan: left promiscuous mode [ 731.346688][ T14] veth0_vlan: left promiscuous mode [ 732.062889][ T14] team0 (unregistering): Port device team_slave_1 removed [ 732.143548][ T14] team0 (unregistering): Port device team_slave_0 removed [ 733.331385][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 733.495193][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 733.508236][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 733.522184][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 733.545503][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 733.558328][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 734.838706][ T9500] chnl_net:caif_netlink_parms(): no params data found [ 735.660835][ T5806] Bluetooth: hci4: command tx timeout [ 737.246738][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.255298][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.263864][ T9500] bridge_slave_0: entered allmulticast mode [ 737.273458][ T9500] bridge_slave_0: entered promiscuous mode [ 737.288885][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.297904][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.310041][ T9500] bridge_slave_1: entered allmulticast mode [ 737.319905][ T9500] bridge_slave_1: entered promiscuous mode [ 737.430880][ T5850] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 737.580875][ T5850] usb 3-1: device descriptor read/64, error -71 [ 737.687877][ T9500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.700007][ T9547] nfs: Unexpected value for 'acl' [ 737.750570][ T5806] Bluetooth: hci4: command tx timeout [ 737.787769][ T9500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.890592][ T5850] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 737.984003][ T9500] team0: Port device team_slave_0 added [ 738.010888][ T9500] team0: Port device team_slave_1 added [ 738.050526][ T5850] usb 3-1: device descriptor read/64, error -71 [ 738.211681][ T5850] usb usb3-port1: attempt power cycle [ 738.294475][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.303628][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.333632][ T9500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.377303][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.386029][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.413098][ T9500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.641010][ T5850] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 738.688363][ T9555] loop1: detected capacity change from 0 to 512 [ 738.714785][ T5850] usb 3-1: device descriptor read/8, error -71 [ 738.761753][ T9555] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 738.830388][ T9500] hsr_slave_0: entered promiscuous mode [ 738.844875][ T9500] hsr_slave_1: entered promiscuous mode [ 738.853712][ T9500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.861745][ T9500] Cannot create hsr debugfs directory [ 739.022270][ T5850] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 739.132234][ T5850] usb 3-1: device descriptor read/8, error -71 [ 739.279929][ T5850] usb usb3-port1: unable to enumerate USB device [ 739.831630][ T5806] Bluetooth: hci4: command tx timeout [ 742.430729][ T5806] Bluetooth: hci4: command tx timeout [ 744.119229][ T9586] nfs: Unexpected value for 'acl' [ 744.738100][ T9590] loop6: detected capacity change from 0 to 2048 [ 744.949405][ T9590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 745.168263][ T9500] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 745.233588][ T9500] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 745.290802][ T9500] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 745.351558][ T9500] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 745.440741][ T9199] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.528170][ T9500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.978149][ T9500] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.113423][ T7381] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.121345][ T7381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.307410][ T7381] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.315132][ T7381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.445770][ T42] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 747.687306][ T42] usb 3-1: device descriptor read/64, error -71 [ 748.038198][ T42] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 748.230761][ T42] usb 3-1: device descriptor read/64, error -71 [ 748.354875][ T42] usb usb3-port1: attempt power cycle [ 749.580609][ T42] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 749.651559][ T9624] nfs: Unexpected value for 'acl' [ 749.666113][ T42] usb 3-1: device descriptor read/8, error -71 [ 749.960708][ T42] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 750.974242][ T9634] mac80211_hwsim hwsim6 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 751.218238][ T42] usb 3-1: device descriptor read/8, error -71 [ 752.225433][ T42] usb usb3-port1: unable to enumerate USB device [ 752.278385][ T9500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.963471][ T9500] veth0_vlan: entered promiscuous mode [ 753.026397][ T9500] veth1_vlan: entered promiscuous mode [ 753.037958][ T42] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 753.231987][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 753.309631][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 753.321327][ T42] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 753.330887][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.352895][ T9500] veth0_macvtap: entered promiscuous mode [ 753.390980][ T9500] veth1_macvtap: entered promiscuous mode [ 753.417874][ T42] usb 3-1: config 0 descriptor?? [ 753.563034][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.686950][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.706887][ T42] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 753.824683][ T9500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.834241][ T9500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.845772][ T9500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.856986][ T9500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.922561][ T9660] nfs: Unexpected value for 'acl' [ 754.237913][ T42] usb 3-1: USB disconnect, device number 24 [ 754.606824][ T9659] loop1: detected capacity change from 0 to 32768 [ 754.810588][ T9659] JBD2: Ignoring recovery information on journal [ 755.023727][ T9659] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 755.091665][ T9659] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71 [ 755.099729][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 755.099803][ T30] audit: type=1800 audit(1750851062.086:181): pid=9659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1046" name="file0" dev="loop1" ino=17058 res=0 errno=0 [ 755.109994][ T9659] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 755.153735][ T9659] OCFS2: File system is now read-only. [ 755.159431][ T9659] (syz.1.1046,9659,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -30 [ 755.168460][ T9659] (syz.1.1046,9659,0):ocfs2_reserve_cluster_bitmap_bits:1139 ERROR: status = -30 [ 755.177989][ T9659] (syz.1.1046,9659,0):ocfs2_local_alloc_reserve_for_window:1119 ERROR: status = -30 [ 755.188837][ T9659] (syz.1.1046,9659,0):ocfs2_local_alloc_reserve_for_window:1135 ERROR: status = -30 [ 755.198738][ T9659] (syz.1.1046,9659,0):ocfs2_local_alloc_slide_window:1250 ERROR: status = -30 [ 755.208184][ T9659] (syz.1.1046,9659,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30 [ 755.217478][ T9659] (syz.1.1046,9659,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 755.229209][ T9659] (syz.1.1046,9659,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 755.238535][ T9659] (syz.1.1046,9659,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30 [ 755.249143][ T9659] (syz.1.1046,9659,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30 [ 755.259178][ T9659] (syz.1.1046,9659,0):ocfs2_lock_allocators:2775 ERROR: status = -30 [ 755.267742][ T9659] (syz.1.1046,9659,0):ocfs2_write_begin_nolock:1722 ERROR: status = -30 [ 755.276661][ T9659] (syz.1.1046,9659,0):ocfs2_dio_wr_get_block:2215 ERROR: status = -30 [ 755.285868][ T9659] (syz.1.1046,9659,0):ocfs2_dio_end_io:2398 ERROR: Direct IO failed, bytes = -30 [ 755.352702][ T3440] wlan1: Trigger new scan to find an IBSS to join [ 755.768737][ T5800] ocfs2: Unmounting device (7,1) on (node local) [ 756.770901][ T9684] syz.6.1049: attempt to access beyond end of device [ 756.770901][ T9684] loop13: rw=0, sector=0, nr_sectors = 1 limit=0 [ 756.785478][ T9684] FAT-fs (loop13): unable to read boot sector [ 757.083110][ T7382] wlan0: Trigger new scan to find an IBSS to join [ 757.247135][ T30] audit: type=1326 audit(1750851063.766:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde78e929 code=0x7ffc0000 [ 757.270185][ T30] audit: type=1326 audit(1750851063.766:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde78e929 code=0x7ffc0000 [ 757.294673][ T30] audit: type=1326 audit(1750851063.766:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcde78e929 code=0x7ffc0000 [ 757.320534][ T30] audit: type=1326 audit(1750851063.766:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde78e929 code=0x7ffc0000 [ 757.343804][ T30] audit: type=1326 audit(1750851063.766:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde78e929 code=0x7ffc0000 [ 757.366693][ T30] audit: type=1326 audit(1750851063.766:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcde78e929 code=0x7ffc0000 [ 757.391324][ T30] audit: type=1326 audit(1750851063.776:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde78e929 code=0x7ffc0000 [ 757.415427][ T30] audit: type=1326 audit(1750851063.776:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde78e929 code=0x7ffc0000 [ 757.438507][ T30] audit: type=1326 audit(1750851063.776:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fbcde78e929 code=0x7ffc0000 [ 759.868439][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1055'. [ 759.878208][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1055'. [ 759.946144][ T9693] loop6: detected capacity change from 0 to 512 [ 760.081386][ T9693] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 760.234146][ T9693] EXT4-fs (loop6): 1 truncate cleaned up [ 760.245058][ T9693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.712961][ T9199] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.911016][ T3877] wlan0: Creating new IBSS network, BSSID 32:2a:56:cc:8f:35 [ 761.344343][ T7382] wlan1: Trigger new scan to find an IBSS to join [ 761.623419][ T42] kernel write not supported for file bpf-prog (pid: 42 comm: kworker/1:1) [ 761.682733][ T5850] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 761.874299][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 761.941206][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 761.952617][ T5850] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 761.962953][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.989716][ T5850] usb 3-1: config 0 descriptor?? [ 762.272021][ T5850] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 762.326348][ T3670] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 762.678719][ T5850] usb 3-1: USB disconnect, device number 25 [ 763.413942][ T5850] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 765.513911][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.524531][ T5850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 765.539692][ T5850] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 765.549409][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 765.557926][ T5850] usb 2-1: SerialNumber: syz [ 765.907449][ T6417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.915658][ T6417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.031698][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.040238][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.361344][ T5850] usb 2-1: 0:2 : does not exist [ 766.500400][ T5850] usb 2-1: USB disconnect, device number 17 [ 766.623137][ T9760] loop1: detected capacity change from 0 to 256 [ 766.739578][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 766.739658][ T30] audit: type=1804 audit(1750851073.726:196): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1076" name="/newroot/278/file1/file0" dev="loop1" ino=1048674 res=1 errno=0 [ 766.946815][ T6417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.178610][ T6417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.372889][ T6417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.543929][ T6417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.598522][ T5850] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 767.816410][ T6417] bridge_slave_1: left allmulticast mode [ 767.825571][ T6417] bridge_slave_1: left promiscuous mode [ 767.833768][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.853770][ T5850] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 767.864285][ T5850] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 767.877725][ T5850] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 767.887208][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.913654][ T6417] bridge_slave_0: left allmulticast mode [ 767.919781][ T6417] bridge_slave_0: left promiscuous mode [ 767.929733][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.196710][ T5850] usb 2-1: usb_control_msg returned -32 [ 768.202844][ T5850] usbtmc 2-1:16.0: can't read capabilities [ 768.492045][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.592004][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 768.602848][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.641243][ T6417] bond0 (unregistering): Released all slaves [ 768.708254][ T9770] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 769.167639][ T6417] hsr_slave_0: left promiscuous mode [ 769.179473][ T6417] hsr_slave_1: left promiscuous mode [ 769.192529][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.200477][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.213742][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.223408][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.256462][ T6417] veth1_macvtap: left promiscuous mode [ 769.262537][ T6417] veth0_macvtap: left promiscuous mode [ 769.268521][ T6417] veth1_vlan: left promiscuous mode [ 769.278207][ T6417] veth0_vlan: left promiscuous mode [ 769.877637][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 769.949601][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 770.429285][ T8472] usb 2-1: USB disconnect, device number 18 [ 771.093318][ T9777] loop6: detected capacity change from 0 to 16 [ 771.099874][ T9780] loop2: detected capacity change from 0 to 128 [ 771.162002][ T9777] erofs (device loop6): mounted with root inode @ nid 36. [ 771.251594][ T9777] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 771.341861][ T9777] erofs (device loop6): failed to decompress -23 in[64, 4032] out[1851] [ 771.351071][ T9777] erofs (device loop6): read error -117 @ 43 of nid 36 [ 771.362727][ T30] audit: type=1800 audit(1750851078.326:197): pid=9780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1083" name="file1" dev="loop2" ino=1048675 res=0 errno=0 [ 772.951729][ T9271] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 772.963976][ T9271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 772.987789][ T9271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 773.002111][ T9271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 773.013829][ T9271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 773.201406][ T9790] hub 6-0:1.0: USB hub found [ 773.261607][ T9790] hub 6-0:1.0: 1 port detected [ 775.103807][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 775.129614][ T9808] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 775.208899][ T9271] Bluetooth: hci4: command tx timeout [ 775.788848][ T9785] chnl_net:caif_netlink_parms(): no params data found [ 777.433476][ T9271] Bluetooth: hci4: command tx timeout [ 777.463087][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.636837][ T4970] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.821055][ T4970] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.181770][ T4970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.262079][ T4970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.922897][ T9271] Bluetooth: hci4: command tx timeout [ 780.814303][ T4970] bridge_slave_1: left allmulticast mode [ 780.820786][ T4970] bridge_slave_1: left promiscuous mode [ 780.829791][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.853001][ T4970] bridge_slave_0: left allmulticast mode [ 780.858956][ T4970] bridge_slave_0: left promiscuous mode [ 780.867925][ T4970] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.526590][ T4970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.568921][ T4970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.591118][ T4970] bond0 (unregistering): Released all slaves [ 781.612544][ T9785] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.620385][ T9785] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.628151][ T9785] bridge_slave_0: entered allmulticast mode [ 781.637816][ T9785] bridge_slave_0: entered promiscuous mode [ 781.714106][ T9785] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.721953][ T9785] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.729707][ T9785] bridge_slave_1: entered allmulticast mode [ 781.739417][ T9785] bridge_slave_1: entered promiscuous mode [ 781.869100][ T9785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.958622][ T9785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.984493][ T9271] Bluetooth: hci4: command tx timeout [ 782.216229][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 782.319503][ T9785] team0: Port device team_slave_0 added [ 782.362436][ T9785] team0: Port device team_slave_1 added [ 782.458867][ T4970] hsr_slave_0: left promiscuous mode [ 782.497381][ T4970] hsr_slave_1: left promiscuous mode [ 782.505740][ T4970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.514496][ T4970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.569854][ T4970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.578019][ T4970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.708094][ T4970] veth1_macvtap: left promiscuous mode [ 782.714094][ T4970] veth0_macvtap: left promiscuous mode [ 782.720438][ T4970] veth1_vlan: left promiscuous mode [ 782.726076][ T4970] veth0_vlan: left promiscuous mode [ 783.443081][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 783.456048][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 783.473262][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 783.498565][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 783.516505][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 785.790512][ T5806] Bluetooth: hci3: command tx timeout [ 787.073406][ T4970] team0 (unregistering): Port device team_slave_1 removed [ 787.164814][ T4970] team0 (unregistering): Port device team_slave_0 removed [ 787.854502][ T5806] Bluetooth: hci3: command tx timeout [ 788.093793][ T9785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.103496][ T9785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.131714][ T9785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.190789][ T9785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.199896][ T9785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.228610][ T9785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.588505][ T9785] hsr_slave_0: entered promiscuous mode [ 788.598709][ T9785] hsr_slave_1: entered promiscuous mode [ 788.610737][ T9785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.618561][ T9785] Cannot create hsr debugfs directory [ 790.033959][ T5806] Bluetooth: hci3: command tx timeout [ 790.428953][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 790.477658][ T9950] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 791.975299][ T9855] chnl_net:caif_netlink_parms(): no params data found [ 792.054354][ T9785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 792.064007][ T9271] Bluetooth: hci3: command tx timeout [ 792.120276][ T9785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 792.180756][ T9785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 792.225360][ T9785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 795.271611][T10024] wlan0 speed is unknown, defaulting to 1000 [ 795.278019][T10024] wlan0 speed is unknown, defaulting to 1000 [ 795.287496][T10024] wlan0 speed is unknown, defaulting to 1000 [ 795.314698][T10024] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 795.353030][T10024] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 795.358945][ T9785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.687711][T10024] wlan0 speed is unknown, defaulting to 1000 [ 795.698788][T10024] wlan0 speed is unknown, defaulting to 1000 [ 795.709471][T10024] wlan0 speed is unknown, defaulting to 1000 [ 795.718824][T10024] wlan0 speed is unknown, defaulting to 1000 [ 795.727988][T10024] wlan0 speed is unknown, defaulting to 1000 [ 795.750394][ T9855] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.758113][ T9855] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.766086][ T9855] bridge_slave_0: entered allmulticast mode [ 795.778560][ T9855] bridge_slave_0: entered promiscuous mode [ 795.811842][ T9785] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.882109][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.890329][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.960458][ T9855] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.968195][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.976174][ T9855] bridge_slave_1: entered allmulticast mode [ 795.988888][ T9855] bridge_slave_1: entered promiscuous mode [ 796.015020][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.022701][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.257238][T10029] loop6: detected capacity change from 0 to 512 [ 796.296540][T10029] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 796.398457][T10036] nfs: Unexpected value for 'acl' [ 796.430673][ T9855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.471454][T10029] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 796.480571][T10029] System zones: 0-2, 18-18, 34-34 [ 796.496652][ T9855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.685090][T10029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.701184][T10029] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.766988][ T9855] team0: Port device team_slave_0 added [ 796.812835][ T9855] team0: Port device team_slave_1 added [ 797.072465][ T9855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.079685][ T9855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.109517][ T9855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.205746][ T9855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.215285][ T9855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.242570][ T9855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.294546][ T9199] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.691923][T10049] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 798.040620][ T5874] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 799.160817][ T9855] hsr_slave_0: entered promiscuous mode [ 799.171174][ T9855] hsr_slave_1: entered promiscuous mode [ 799.181542][ T9855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 799.189346][ T9855] Cannot create hsr debugfs directory [ 800.135031][ T5874] usb 7-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 800.145090][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.153698][ T5874] usb 7-1: Product: syz [ 800.158129][ T5874] usb 7-1: Manufacturer: syz [ 800.163286][ T5874] usb 7-1: SerialNumber: syz [ 800.503123][ T5874] usb 7-1: config 0 descriptor?? [ 800.566833][ T5874] ldusb 7-1:0.0: Interrupt in endpoint not found [ 801.711803][ T5874] usb 7-1: USB disconnect, device number 2 [ 802.883279][ T9785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.007520][T10131] nfs: Unexpected value for 'acl' [ 803.116194][ T9855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 803.193720][ T9855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 803.306406][ T9855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 803.402970][ T9855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 803.491257][ T9785] veth0_vlan: entered promiscuous mode [ 803.586923][ T9785] veth1_vlan: entered promiscuous mode [ 804.191462][ T9785] veth0_macvtap: entered promiscuous mode [ 804.313515][ T9785] veth1_macvtap: entered promiscuous mode [ 804.532440][ T9785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.694652][ T9785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.805815][ T9785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.816335][ T9785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.827979][ T9785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.837263][ T9785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.868397][ T9855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.091658][ T9855] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.107735][ T9271] Bluetooth: hci2: command 0x0406 tx timeout [ 805.908207][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.915979][ T7379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.936465][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.944203][ T7379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.462618][ T9855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 807.601632][T10200] netlink: 'syz.4.1152': attribute type 9 has an invalid length. [ 809.166813][ T9855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.480247][T10224] syz.6.1158: attempt to access beyond end of device [ 809.480247][T10224] loop13: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 809.494227][T10224] SQUASHFS error: Failed to read block 0x0: -5 [ 810.171752][T10232] nfs: Unexpected value for 'acl' [ 810.287286][ T9855] veth0_vlan: entered promiscuous mode [ 810.550785][ T9855] veth1_vlan: entered promiscuous mode [ 811.101379][T10235] loop6: detected capacity change from 0 to 1024 [ 811.201182][ T9855] veth0_macvtap: entered promiscuous mode [ 811.263667][T10235] EXT4-fs: Ignoring removed orlov option [ 811.269846][T10235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 811.484890][ T9855] veth1_macvtap: entered promiscuous mode [ 811.658177][T10235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.812918][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.932011][T10242] fuse: Bad value for 'fd' [ 811.945126][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.040924][ T9855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.050028][ T9855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.061528][ T9855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.071502][ T9855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.396855][ T9199] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.561072][T10255] netlink: 'syz.2.1164': attribute type 27 has an invalid length. [ 820.012402][T10336] blktrace: Concurrent blktraces are not allowed on loop12 [ 820.568867][ T3670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.578265][ T3670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.706696][ T3670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.714998][ T3670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.981402][ T8472] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 821.187587][ T8472] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 821.199684][ T8472] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 821.213979][ T8472] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 821.223594][ T8472] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.814717][ T8472] usb 7-1: usb_control_msg returned -32 [ 821.820959][ T8472] usbtmc 7-1:16.0: can't read capabilities [ 821.884887][ T3670] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.912958][ T3670] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.864551][ T42] usb 7-1: USB disconnect, device number 3 [ 823.886360][ T3670] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.254204][ T3670] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.506913][ T3670] bridge_slave_1: left allmulticast mode [ 824.513097][ T3670] bridge_slave_1: left promiscuous mode [ 824.519729][ T3670] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.565277][ T3670] bridge_slave_0: left allmulticast mode [ 824.573902][ T3670] bridge_slave_0: left promiscuous mode [ 824.580948][ T3670] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.997310][ T3670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.018487][ T3670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.038909][ T3670] bond0 (unregistering): Released all slaves [ 825.447267][ T3670] hsr_slave_0: left promiscuous mode [ 825.456705][ T3670] hsr_slave_1: left promiscuous mode [ 825.466596][ T3670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.476536][ T3670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.489327][ T3670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.500245][ T3670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.554412][ T3670] veth1_macvtap: left promiscuous mode [ 825.560496][ T3670] veth0_macvtap: left promiscuous mode [ 825.566429][ T3670] veth1_vlan: left promiscuous mode [ 825.572314][ T3670] veth0_vlan: left promiscuous mode [ 826.171144][ T3670] team0 (unregistering): Port device team_slave_1 removed [ 826.209026][ T3670] team0 (unregistering): Port device team_slave_0 removed [ 826.678272][T10373] loop6: detected capacity change from 0 to 1024 [ 826.928669][ T3824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.936887][ T3824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.096051][ T6401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.104682][ T6401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.490459][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 827.510612][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 827.544744][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 827.581044][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 827.618401][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 827.777986][T10381] wlan0 speed is unknown, defaulting to 1000 [ 827.951391][T10385] loop6: detected capacity change from 0 to 1024 [ 827.983999][T10385] EXT4-fs: Ignoring removed orlov option [ 828.013278][T10385] EXT4-fs (loop6): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 828.057689][ T3670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.165210][T10385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.282404][ T3670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.515133][ T3670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.691563][ T3670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.728605][ T9199] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.006159][ T3670] bridge_slave_1: left allmulticast mode [ 829.012471][ T3670] bridge_slave_1: left promiscuous mode [ 829.019162][ T3670] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.041137][ T3670] bridge_slave_0: left allmulticast mode [ 829.047065][ T3670] bridge_slave_0: left promiscuous mode [ 829.054050][ T3670] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.522036][ T3670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.612482][ T3670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.662591][ T3670] bond0 (unregistering): Released all slaves [ 829.671396][ T5806] Bluetooth: hci4: command tx timeout [ 829.794846][T10381] chnl_net:caif_netlink_parms(): no params data found [ 830.412471][ T9271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 830.453477][ T9271] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 830.468690][ T9271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 830.492673][ T9271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 830.505824][ T9271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 830.555371][ T3670] hsr_slave_0: left promiscuous mode [ 830.621442][ T3670] hsr_slave_1: left promiscuous mode [ 830.629637][ T3670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.637734][ T3670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.749848][ T3670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.757939][ T3670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.863220][ T3670] veth1_macvtap: left promiscuous mode [ 830.869029][ T3670] veth0_macvtap: left promiscuous mode [ 830.875456][ T3670] veth1_vlan: left promiscuous mode [ 830.881216][ T3670] veth0_vlan: left promiscuous mode [ 831.915140][ T9271] Bluetooth: hci4: command tx timeout [ 832.041335][ T3670] team0 (unregistering): Port device team_slave_1 removed [ 832.071284][ T3670] team0 (unregistering): Port device team_slave_0 removed [ 832.644103][ T9271] Bluetooth: hci3: command tx timeout [ 832.882588][T10409] wlan0 speed is unknown, defaulting to 1000 [ 833.875033][T10432] bridge0: port 3(syz_tun) entered blocking state [ 833.882019][T10432] bridge0: port 3(syz_tun) entered disabled state [ 833.888836][T10432] syz_tun: entered allmulticast mode [ 833.897080][T10432] syz_tun: entered promiscuous mode [ 833.903931][T10432] bridge0: port 3(syz_tun) entered blocking state [ 833.910975][T10432] bridge0: port 3(syz_tun) entered forwarding state [ 833.980591][ T9271] Bluetooth: hci4: command tx timeout [ 834.612988][T10441] loop6: detected capacity change from 0 to 128 [ 834.667273][T10381] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.675162][T10381] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.683123][T10381] bridge_slave_0: entered allmulticast mode [ 834.695941][T10381] bridge_slave_0: entered promiscuous mode [ 834.700563][T10441] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 834.714707][ T9271] Bluetooth: hci3: command tx timeout [ 834.793740][T10381] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.801494][T10381] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.809247][T10381] bridge_slave_1: entered allmulticast mode [ 834.820722][T10381] bridge_slave_1: entered promiscuous mode [ 835.077917][T10381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.173517][T10381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.197804][T10409] chnl_net:caif_netlink_parms(): no params data found [ 835.438850][ T9271] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 835.442171][T10381] team0: Port device team_slave_0 added [ 835.536194][T10381] team0: Port device team_slave_1 added [ 835.866169][T10381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.873556][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.900313][T10381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.012465][T10381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.021719][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.049057][T10381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.067806][ T9271] Bluetooth: hci4: command tx timeout [ 836.374123][T10381] hsr_slave_0: entered promiscuous mode [ 836.384765][T10381] hsr_slave_1: entered promiscuous mode [ 836.394662][T10381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.402650][T10381] Cannot create hsr debugfs directory [ 836.626536][T10409] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.636906][T10409] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.646241][T10409] bridge_slave_0: entered allmulticast mode [ 836.657580][T10409] bridge_slave_0: entered promiscuous mode [ 836.780853][ T9271] Bluetooth: hci3: command tx timeout [ 836.815184][T10409] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.824660][T10409] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.832682][T10409] bridge_slave_1: entered allmulticast mode [ 836.845083][T10409] bridge_slave_1: entered promiscuous mode [ 837.284114][T10467] loop6: detected capacity change from 0 to 4096 [ 837.607367][T10467] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 838.755850][T10467] ntfs3(loop6): ino=0, attr_set_size [ 838.774192][T10467] ntfs3(loop6): ino=0, attr_set_size [ 838.892328][ T9271] Bluetooth: hci3: command tx timeout [ 838.903072][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 839.046900][T10409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.177786][T10409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.496035][ T5806] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 839.831727][T10409] team0: Port device team_slave_0 added [ 839.854934][T10381] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 839.947705][T10409] team0: Port device team_slave_1 added [ 840.001551][T10381] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 840.215047][ T5848] kernel write not supported for file bpf-prog (pid: 5848 comm: kworker/1:3) [ 840.303748][T10381] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 840.353778][T10409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.361094][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.387739][T10409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.399817][T10381] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 840.527469][T10409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.536252][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.563756][T10409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.514722][T10409] hsr_slave_0: entered promiscuous mode [ 842.525070][T10409] hsr_slave_1: entered promiscuous mode [ 842.534404][T10409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 842.542411][T10409] Cannot create hsr debugfs directory [ 843.706854][ T5806] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 843.839162][T10381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.269391][T10381] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.433129][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.440918][ T6409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.503688][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.511498][ T6411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.647634][T10381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 845.658629][T10381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 846.436323][T10409] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 846.661265][T10409] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 846.874786][T10409] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 847.083815][T10409] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 848.090610][ T8472] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 848.230298][T10381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.281884][ T8472] usb 7-1: Using ep0 maxpacket: 32 [ 848.313436][ T8472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.325465][ T8472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.336678][ T8472] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 848.346511][ T8472] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.469078][T10409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.512662][ T8472] usb 7-1: config 0 descriptor?? [ 848.598580][ T8472] hub 7-1:0.0: USB hub found [ 848.762013][ T8472] hub 7-1:0.0: 1 port detected [ 848.775781][T10409] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.904903][ T3912] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.912603][ T3912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.925657][T10381] veth0_vlan: entered promiscuous mode [ 849.032345][ T3912] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.039919][ T3912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.053176][ T5806] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 849.083215][T10381] veth1_vlan: entered promiscuous mode [ 849.402035][ T5850] hub 7-1:0.0: activate --> -90 [ 849.620846][T10381] veth0_macvtap: entered promiscuous mode [ 849.744669][T10381] veth1_macvtap: entered promiscuous mode [ 849.827951][ T5874] usb 7-1: USB disconnect, device number 4 [ 849.934642][T10381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.014863][T10381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.040874][ T5850] usb 7-1-port1: config error [ 850.117276][T10381] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.128543][T10381] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.138002][T10381] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.147950][T10381] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.213989][T10409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.735291][T10409] veth0_vlan: entered promiscuous mode [ 851.916450][T10409] veth1_vlan: entered promiscuous mode [ 852.253391][T10409] veth0_macvtap: entered promiscuous mode [ 852.312941][T10409] veth1_macvtap: entered promiscuous mode [ 852.484117][T10409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.585431][T10409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.703943][T10409] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.715538][T10409] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.725442][T10409] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.736151][T10409] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.049246][ T5806] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 856.402694][ T5806] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 857.280518][ T3670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.288643][ T3670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.451745][ T6409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.459852][ T6409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.847028][ T6409] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.126284][ T6409] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.311930][ T6409] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.455603][ T6409] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.757306][ T6409] bridge_slave_1: left allmulticast mode [ 859.763970][ T6409] bridge_slave_1: left promiscuous mode [ 859.770993][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.841304][ T6409] bridge_slave_0: left allmulticast mode [ 859.847240][ T6409] bridge_slave_0: left promiscuous mode [ 859.855472][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.415970][ T6409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.451921][ T6409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.478329][ T6409] bond0 (unregistering): Released all slaves [ 860.877881][ T3912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.886280][ T3912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.988504][ T3912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.997233][ T3912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.203587][ T6409] hsr_slave_0: left promiscuous mode [ 861.234769][ T6409] hsr_slave_1: left promiscuous mode [ 861.244476][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.252615][ T6409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.294162][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.302171][ T6409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.358027][ T6409] veth1_macvtap: left promiscuous mode [ 861.364076][ T6409] veth0_macvtap: left promiscuous mode [ 861.370191][ T6409] veth1_vlan: left promiscuous mode [ 861.375942][ T6409] veth0_vlan: left promiscuous mode [ 862.017587][ T6409] team0 (unregistering): Port device team_slave_1 removed [ 862.093196][ T6409] team0 (unregistering): Port device team_slave_0 removed [ 862.849773][ T5806] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 863.276042][ T3824] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.315554][ T9271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 863.325859][ T9271] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 863.345687][ T9271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 863.371738][ T3824] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.405429][ T9271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 863.442621][ T9271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 863.516844][ T3824] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.641789][ T3824] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.676451][T10680] wlan0 speed is unknown, defaulting to 1000 [ 864.109604][ T3824] bridge_slave_1: left allmulticast mode [ 864.115772][ T3824] bridge_slave_1: left promiscuous mode [ 864.122827][ T3824] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.138852][ T3824] bridge_slave_0: left allmulticast mode [ 864.145733][ T3824] bridge_slave_0: left promiscuous mode [ 864.152747][ T3824] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.601532][ T3824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.638014][ T3824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.677027][ T3824] bond0 (unregistering): Released all slaves [ 865.503128][ T9271] Bluetooth: hci3: command tx timeout [ 866.007830][ T3824] hsr_slave_0: left promiscuous mode [ 866.077425][ T3824] hsr_slave_1: left promiscuous mode [ 866.085991][ T3824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.093930][ T3824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.318322][ T3824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.327551][ T3824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.503150][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 866.513487][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 866.523056][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 866.538854][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 866.550755][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 866.591130][ T3824] veth1_macvtap: left promiscuous mode [ 866.596933][ T3824] veth0_macvtap: left promiscuous mode [ 866.603140][ T3824] veth1_vlan: left promiscuous mode [ 866.608744][ T3824] veth0_vlan: left promiscuous mode [ 867.492902][ T3824] team0 (unregistering): Port device team_slave_1 removed [ 867.570562][ T3824] team0 (unregistering): Port device team_slave_0 removed [ 867.600718][ T5806] Bluetooth: hci3: command tx timeout [ 867.959638][T10680] chnl_net:caif_netlink_parms(): no params data found [ 868.085577][ T5874] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 868.219831][T10698] wlan0 speed is unknown, defaulting to 1000 [ 868.264033][ T5874] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 868.276446][ T5874] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 868.286349][ T5874] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 868.412560][ T5874] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.422222][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.430755][ T5874] usb 7-1: Product: syz [ 868.435170][ T5874] usb 7-1: Manufacturer: syz [ 868.440020][ T5874] usb 7-1: SerialNumber: syz [ 868.573657][ T5874] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing [ 868.583891][ T5874] cdc_ncm 7-1:1.0: bind() failure [ 868.620960][ T5806] Bluetooth: hci4: command tx timeout [ 869.158595][ T5806] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 869.418332][T10698] chnl_net:caif_netlink_parms(): no params data found [ 869.454504][T10680] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.463353][T10680] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.471668][T10680] bridge_slave_0: entered allmulticast mode [ 869.480799][T10680] bridge_slave_0: entered promiscuous mode [ 869.522524][T10680] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.531756][T10680] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.539672][T10680] bridge_slave_1: entered allmulticast mode [ 869.549748][T10680] bridge_slave_1: entered promiscuous mode [ 869.664863][ T5806] Bluetooth: hci3: command tx timeout [ 869.852428][T10680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.904437][T10680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.222155][T10680] team0: Port device team_slave_0 added [ 870.264659][T10680] team0: Port device team_slave_1 added [ 870.503857][ T5874] usb 7-1: USB disconnect, device number 5 [ 870.642319][T10680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.649535][T10680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.677182][T10680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.710818][ T5806] Bluetooth: hci4: command tx timeout [ 870.778265][T10698] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.786138][T10698] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.794310][T10698] bridge_slave_0: entered allmulticast mode [ 870.804031][T10698] bridge_slave_0: entered promiscuous mode [ 870.818320][T10680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.825631][T10680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.854213][T10680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.876129][T10698] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.886774][T10698] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.894736][T10698] bridge_slave_1: entered allmulticast mode [ 870.904473][T10698] bridge_slave_1: entered promiscuous mode [ 871.488241][T10680] hsr_slave_0: entered promiscuous mode [ 871.498652][T10680] hsr_slave_1: entered promiscuous mode [ 871.507674][T10680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 871.515588][T10680] Cannot create hsr debugfs directory [ 871.577849][T10698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.704481][T10698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.821341][ T5806] Bluetooth: hci3: command tx timeout [ 872.259797][T10698] team0: Port device team_slave_0 added [ 872.315030][T10698] team0: Port device team_slave_1 added [ 872.554965][T10698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.563566][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.590487][T10698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.743781][T10698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.751117][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.779178][T10698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.794916][ T5806] Bluetooth: hci4: command tx timeout [ 873.257634][T10698] hsr_slave_0: entered promiscuous mode [ 873.268237][T10698] hsr_slave_1: entered promiscuous mode [ 873.277540][T10698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 873.285660][T10698] Cannot create hsr debugfs directory [ 873.848314][T10680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 873.926905][T10680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 875.741966][ T5806] Bluetooth: hci4: command tx timeout [ 875.798157][T10765] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1308'. [ 875.979164][T10680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 876.275003][T10680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 877.129884][T10698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 877.212329][T10698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 877.290593][T10698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 877.363882][T10698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 877.536031][T10680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.612435][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'. [ 877.699417][T10680] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.788404][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.796121][ T6411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.920606][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.928382][ T6411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.403301][T10802] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1320'. [ 880.699434][T10698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.731990][T10698] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.459354][ T3824] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.467110][ T3824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.634049][ T3824] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.641780][ T3824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.909709][T10698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 882.922773][T10698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 883.011494][ T5848] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 883.217126][ T5848] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 883.230780][ T5848] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 883.239997][ T5848] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 883.305436][T10680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.339951][ T5848] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 883.350857][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.359165][ T5848] usb 7-1: Product: syz [ 883.364131][ T5848] usb 7-1: Manufacturer: syz [ 883.368987][ T5848] usb 7-1: SerialNumber: syz [ 883.485130][ T5848] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing [ 883.493247][ T5848] cdc_ncm 7-1:1.0: bind() failure [ 883.746782][T10680] veth0_vlan: entered promiscuous mode [ 883.826707][T10680] veth1_vlan: entered promiscuous mode [ 884.113546][T10680] veth0_macvtap: entered promiscuous mode [ 884.154180][T10680] veth1_macvtap: entered promiscuous mode [ 884.297003][T10680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.382281][T10680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.437307][T10680] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.446658][T10680] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.457990][T10680] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.468363][T10680] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.505568][T10698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.013769][T10698] veth0_vlan: entered promiscuous mode [ 885.098916][T10698] veth1_vlan: entered promiscuous mode [ 885.331822][T10698] veth0_macvtap: entered promiscuous mode [ 885.392965][T10698] veth1_macvtap: entered promiscuous mode [ 885.527511][T10698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.632461][ T5850] usb 7-1: USB disconnect, device number 6 [ 885.786163][T10698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.866926][T10698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.878519][T10698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.890971][T10698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.901219][T10698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.080411][T10847] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1331'. [ 888.642270][T10864] loop6: detected capacity change from 0 to 128 [ 888.723325][T10864] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 890.561614][ T42] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 890.763479][ T42] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 890.774179][ T42] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 890.783657][ T42] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 890.867952][ T42] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 890.877625][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.887296][ T42] usb 7-1: Product: syz [ 890.892676][ T42] usb 7-1: Manufacturer: syz [ 890.898396][ T42] usb 7-1: SerialNumber: syz [ 890.983605][ T42] usb 7-1: selecting invalid altsetting 1 [ 891.456561][ T42] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 891.463317][ T42] cdc_ncm 7-1:1.0: bind() failure [ 894.065298][T10909] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1345'. [ 894.570421][ T42] usb 7-1: USB disconnect, device number 7 [ 894.763405][ T6409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.771884][ T6409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.881831][T10912] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.015495][ T6409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.026054][ T6409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.156525][T10912] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.445797][T10912] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.588016][T10923] loop6: detected capacity change from 0 to 1024 [ 895.598703][T10923] EXT4-fs: Ignoring removed orlov option [ 895.624361][T10923] EXT4-fs (loop6): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 895.679741][T10912] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.770483][T10923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.869955][ T3951] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.937557][ T9199] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.142835][ T3951] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.233225][T10912] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.270678][T10912] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.300881][T10912] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.334062][T10912] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.403567][ T3951] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.432893][T10930] loop6: detected capacity change from 0 to 512 [ 896.510962][T10930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 896.567394][ T6401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.575689][ T6401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.591394][T10930] EXT4-fs (loop6): orphan cleanup on readonly fs [ 896.683545][ T3951] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.724464][T10930] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1351: bg 0: block 248: padding at end of block bitmap is not set [ 896.755857][T10930] Quota error (device loop6): write_blk: dquota write failed [ 896.765899][T10930] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 896.777061][T10930] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1351: Failed to acquire dquot type 1 [ 896.784021][ T6409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.797305][ T6409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.828977][T10930] EXT4-fs (loop6): 1 truncate cleaned up [ 896.847489][T10930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 897.024071][ T3951] bridge_slave_1: left allmulticast mode [ 897.030681][ T3951] bridge_slave_1: left promiscuous mode [ 897.037339][ T3951] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.114815][ T3951] bridge_slave_0: left allmulticast mode [ 897.121009][ T3951] bridge_slave_0: left promiscuous mode [ 897.127710][ T3951] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.224098][ T9199] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.707690][ T3951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.732431][ T3951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.760299][ T3951] bond0 (unregistering): Released all slaves [ 898.170921][ T3951] hsr_slave_0: left promiscuous mode [ 898.200802][ T3951] hsr_slave_1: left promiscuous mode [ 898.209108][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.220018][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.231722][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.239519][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.268362][ T3951] veth1_macvtap: left promiscuous mode [ 898.274799][ T3951] veth0_macvtap: left promiscuous mode [ 898.283109][ T3951] veth1_vlan: left promiscuous mode [ 898.288739][ T3951] veth0_vlan: left promiscuous mode [ 899.062922][ T3951] team0 (unregistering): Port device team_slave_1 removed [ 899.092368][ T3951] team0 (unregistering): Port device team_slave_0 removed [ 899.814984][ T3951] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.911659][ T3951] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.014785][ T3951] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.017086][ T9271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 900.042339][ T9271] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 900.111242][ T9271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 900.129039][ T9271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 900.153132][ T9271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 900.178323][ T3951] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.335905][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.415686][T10935] wlan0 speed is unknown, defaulting to 1000 [ 900.779568][ T3951] bridge_slave_1: left allmulticast mode [ 900.786781][ T3951] bridge_slave_1: left promiscuous mode [ 900.793869][ T3951] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.843742][ T9271] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 900.853910][ T9271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 900.866977][ T9271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 900.868579][ T3951] bridge_slave_0: left allmulticast mode [ 900.881075][ T3951] bridge_slave_0: left promiscuous mode [ 900.887737][ T3951] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.920198][ T9271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 900.948392][ T9271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 901.462133][ T3951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.512109][ T3951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.527792][ T3951] bond0 (unregistering): Released all slaves [ 901.699545][T10957] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1358'. [ 901.971229][T10947] wlan0 speed is unknown, defaulting to 1000 [ 902.326780][ T9271] Bluetooth: hci3: command tx timeout [ 903.020335][ T5806] Bluetooth: hci4: command tx timeout [ 903.083352][ T3951] hsr_slave_0: left promiscuous mode [ 903.106879][ T3951] hsr_slave_1: left promiscuous mode [ 903.117725][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.125746][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.257765][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.266152][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.456771][ T3951] veth1_macvtap: left promiscuous mode [ 903.462928][ T3951] veth0_macvtap: left promiscuous mode [ 903.468991][ T3951] veth1_vlan: left promiscuous mode [ 903.474891][ T3951] veth0_vlan: left promiscuous mode [ 904.368222][ T3951] team0 (unregistering): Port device team_slave_1 removed [ 904.381281][ T5806] Bluetooth: hci3: command tx timeout [ 904.465311][ T3951] team0 (unregistering): Port device team_slave_0 removed [ 904.766542][T10935] chnl_net:caif_netlink_parms(): no params data found [ 905.169543][ T5806] Bluetooth: hci4: command tx timeout [ 905.721101][T10985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1364'. [ 905.735143][T10985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1364'. [ 905.744633][T10985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1364'. [ 905.861371][T10986] ===================================================== [ 905.868661][T10986] BUG: KMSAN: uninit-value in sctp_inq_pop+0x14dc/0x19e0 [ 905.876132][T10986] sctp_inq_pop+0x14dc/0x19e0 [ 905.882479][T10986] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 905.887653][T10986] sctp_inq_push+0x2a6/0x350 [ 905.892733][T10986] sctp_backlog_rcv+0x3c7/0xda0 [ 905.897796][T10986] sk_backlog_rcv+0x142/0x420 [ 905.902783][T10986] __release_sock+0x1d3/0x330 [ 905.907656][T10986] release_sock+0x6b/0x270 [ 905.912369][T10986] sctp_wait_for_connect+0x458/0x820 [ 905.917870][T10986] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 905.923564][T10986] sctp_sendmsg+0x3910/0x49f0 [ 905.928429][T10986] inet_sendmsg+0x269/0x2a0 [ 905.933208][T10986] __sock_sendmsg+0x278/0x3d0 [ 905.938104][T10986] __sys_sendto+0x593/0x720 [ 905.942924][T10986] __x64_sys_sendto+0x130/0x200 [ 905.947952][T10986] x64_sys_call+0x3c0b/0x3db0 [ 905.952968][T10986] do_syscall_64+0xd9/0x210 [ 905.959650][T10986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.966440][T10986] [ 905.968877][T10986] Uninit was stored to memory at: [ 905.974264][T10986] sctp_inq_pop+0x144a/0x19e0 [ 905.980252][T10986] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 905.985418][T10986] sctp_inq_push+0x2a6/0x350 [ 905.990781][T10986] sctp_backlog_rcv+0x3c7/0xda0 [ 905.995855][T10986] sk_backlog_rcv+0x142/0x420 [ 906.000845][T10986] __release_sock+0x1d3/0x330 [ 906.005732][T10986] release_sock+0x6b/0x270 [ 906.010444][T10986] sctp_wait_for_connect+0x458/0x820 [ 906.015945][T10986] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 906.021605][T10986] sctp_sendmsg+0x3910/0x49f0 [ 906.026471][T10986] inet_sendmsg+0x269/0x2a0 [ 906.031285][T10986] __sock_sendmsg+0x278/0x3d0 [ 906.036174][T10986] __sys_sendto+0x593/0x720 [ 906.040987][T10986] __x64_sys_sendto+0x130/0x200 [ 906.046041][T10986] x64_sys_call+0x3c0b/0x3db0 [ 906.051141][T10986] do_syscall_64+0xd9/0x210 [ 906.055845][T10986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.064332][T10986] [ 906.066790][T10986] Uninit was created at: [ 906.072146][T10986] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 906.078956][T10986] kmalloc_reserve+0x22f/0x4b0 [ 906.085210][T10986] __alloc_skb+0x347/0x7d0 [ 906.089915][T10986] sctp_packet_transmit+0x18a1/0x46d0 [ 906.096069][T10986] sctp_outq_flush+0x1c7d/0x67c0 [ 906.101349][T10986] sctp_outq_uncork+0x9e/0xc0 [ 906.106274][T10986] sctp_do_sm+0x8c8e/0x9720 [ 906.111109][T10986] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 906.116266][T10986] sctp_inq_push+0x2a6/0x350 [ 906.121146][T10986] sctp_backlog_rcv+0x3c7/0xda0 [ 906.126203][T10986] sk_backlog_rcv+0x142/0x420 [ 906.131178][T10986] __release_sock+0x1d3/0x330 [ 906.136052][T10986] release_sock+0x6b/0x270 [ 906.142062][T10986] sctp_wait_for_connect+0x458/0x820 [ 906.147563][T10986] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 906.153241][T10986] sctp_sendmsg+0x3910/0x49f0 [ 906.158115][T10986] inet_sendmsg+0x269/0x2a0 [ 906.164915][T10986] __sock_sendmsg+0x278/0x3d0 [ 906.169912][T10986] __sys_sendto+0x593/0x720 [ 906.175362][T10986] __x64_sys_sendto+0x130/0x200 [ 906.180480][T10986] x64_sys_call+0x3c0b/0x3db0 [ 906.186449][T10986] do_syscall_64+0xd9/0x210 [ 906.192003][T10986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.198124][T10986] [ 906.200682][T10986] CPU: 0 UID: 0 PID: 10986 Comm: syz.4.1364 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 906.213193][T10986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 906.223633][T10986] ===================================================== [ 906.230816][T10986] Disabling lock debugging due to kernel taint [ 906.237112][T10986] Kernel panic - not syncing: kmsan.panic set ... [ 906.243713][T10986] CPU: 0 UID: 0 PID: 10986 Comm: syz.4.1364 Tainted: G B 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 906.257712][T10986] Tainted: [B]=BAD_PAGE [ 906.262004][T10986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 906.272242][T10986] Call Trace: [ 906.275663][T10986] [ 906.278728][T10986] __dump_stack+0x26/0x30 [ 906.283286][T10986] dump_stack_lvl+0x53/0x270 [ 906.288105][T10986] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 906.294198][T10986] dump_stack+0x1e/0x25 [ 906.298584][T10986] panic+0x4bd/0xd50 [ 906.302866][T10986] kmsan_report+0x31c/0x320 [ 906.307619][T10986] ? __msan_warning+0x1b/0x30 [ 906.312523][T10986] ? sctp_inq_pop+0x14dc/0x19e0 [ 906.317590][T10986] ? sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 906.322934][T10986] ? sctp_inq_push+0x2a6/0x350 [ 906.327910][T10986] ? sctp_backlog_rcv+0x3c7/0xda0 [ 906.333151][T10986] ? sk_backlog_rcv+0x142/0x420 [ 906.338501][T10986] ? __release_sock+0x1d3/0x330 [ 906.343570][T10986] ? release_sock+0x6b/0x270 [ 906.348400][T10986] ? sctp_wait_for_connect+0x458/0x820 [ 906.354074][T10986] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 906.359835][T10986] ? sctp_sendmsg+0x3910/0x49f0 [ 906.364879][T10986] ? inet_sendmsg+0x269/0x2a0 [ 906.369767][T10986] ? __sock_sendmsg+0x278/0x3d0 [ 906.374851][T10986] ? __sys_sendto+0x593/0x720 [ 906.379782][T10986] ? __x64_sys_sendto+0x130/0x200 [ 906.384997][T10986] ? x64_sys_call+0x3c0b/0x3db0 [ 906.390082][T10986] ? do_syscall_64+0xd9/0x210 [ 906.394960][T10986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.401240][T10986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.407527][T10986] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 906.413852][T10986] ? kmsan_get_metadata+0xfb/0x160 [ 906.419210][T10986] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 906.425786][T10986] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 906.432098][T10986] ? kmsan_get_metadata+0xfb/0x160 [ 906.437458][T10986] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 906.443524][T10986] ? kmsan_get_metadata+0xfb/0x160 [ 906.448892][T10986] __msan_warning+0x1b/0x30 [ 906.453617][T10986] sctp_inq_pop+0x14dc/0x19e0 [ 906.458552][T10986] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 906.463748][T10986] ? kmsan_get_metadata+0xfb/0x160 [ 906.469112][T10986] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 906.475188][T10986] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 906.480901][T10986] sctp_inq_push+0x2a6/0x350 [ 906.485723][T10986] sctp_backlog_rcv+0x3c7/0xda0 [ 906.490810][T10986] ? kmsan_get_metadata+0xfb/0x160 [ 906.496181][T10986] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 906.501795][T10986] sk_backlog_rcv+0x142/0x420 [ 906.506744][T10986] __release_sock+0x1d3/0x330 [ 906.511755][T10986] release_sock+0x6b/0x270 [ 906.516414][T10986] sctp_wait_for_connect+0x458/0x820 [ 906.521939][T10986] ? __pfx_autoremove_wake_function+0x10/0x10 [ 906.528292][T10986] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 906.533894][T10986] ? kmsan_get_metadata+0xfb/0x160 [ 906.539270][T10986] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 906.545383][T10986] sctp_sendmsg+0x3910/0x49f0 [ 906.550264][T10986] ? kmsan_save_stack_with_flags+0x10/0x60 [ 906.556384][T10986] ? __pfx_sctp_sendmsg+0x10/0x10 [ 906.561615][T10986] inet_sendmsg+0x269/0x2a0 [ 906.566343][T10986] __sock_sendmsg+0x278/0x3d0 [ 906.571253][T10986] __sys_sendto+0x593/0x720 [ 906.576016][T10986] ? do_futex+0x3a1/0x480 [ 906.580573][T10986] ? kmsan_get_metadata+0xfb/0x160 [ 906.585945][T10986] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 906.592052][T10986] __x64_sys_sendto+0x130/0x200 [ 906.597131][T10986] x64_sys_call+0x3c0b/0x3db0 [ 906.602059][T10986] do_syscall_64+0xd9/0x210 [ 906.606768][T10986] ? irqentry_exit+0x16/0x60 [ 906.611554][T10986] ? clear_bhb_loop+0x40/0x90 [ 906.616459][T10986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.622564][T10986] RIP: 0033:0x7f5ab018e929 [ 906.627131][T10986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.646957][T10986] RSP: 002b:00007f5ab0f55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 906.655579][T10986] RAX: ffffffffffffffda RBX: 00007f5ab03b6240 RCX: 00007f5ab018e929 [ 906.663733][T10986] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 906.671863][T10986] RBP: 00007f5ab0210b39 R08: 000020000005ffe4 R09: 000000000000001c [ 906.679997][T10986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.688131][T10986] R13: 0000000000000000 R14: 00007f5ab03b6240 R15: 00007ffe0e1b0008 [ 906.696315][T10986] [ 906.699791][T10986] Kernel Offset: disabled [ 906.704187][T10986] Rebooting in 86400 seconds..