last executing test programs: 1m23.964585986s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)) 1m22.191670995s ago: executing program 0 (id=9): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25000029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m17.509833152s ago: executing program 0 (id=16): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file3\x00', 0x400) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x5) 1m15.459876518s ago: executing program 0 (id=23): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 1m14.520737996s ago: executing program 0 (id=26): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="000317000000170378b9"], &(0x7f00000001c0), 0x0}, 0x0) 1m12.270942656s ago: executing program 32 (id=26): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="000317000000170378b9"], &(0x7f00000001c0), 0x0}, 0x0) 17.230031446s ago: executing program 5 (id=173): r0 = io_uring_setup(0x28fe, &(0x7f0000000300)={0x0, 0xc3f5, 0x80, 0x0, 0x3}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x11, &(0x7f00000002c0), 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 15.283748434s ago: executing program 5 (id=179): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="2bd1598df75c98a6936444aa68d948213365771a20eb8b0338634fc5b0ef9432584af949108856571424758106273e2a06a088a30c2b700286f933c1b5a338e8f15fff2559eb545e1e8cfcb73d18c15dfaf04550bbd479aca9d59f408a7f8647ee014f5c0325ae447fc915d6a5ba5ddd204b1d4f3c83fc3a8b2e79726653e96d", 0x80}], 0x1}}], 0x1, 0x4) 14.492228399s ago: executing program 5 (id=183): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x2c}}, 0x0) 13.055428379s ago: executing program 5 (id=188): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) 12.637041507s ago: executing program 2 (id=189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 12.049798959s ago: executing program 4 (id=192): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") unlink(&(0x7f0000000140)='./file1\x00') syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 11.602347244s ago: executing program 5 (id=193): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$int_in(r0, 0x40000000af01, 0x0) 11.55112872s ago: executing program 2 (id=194): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other'], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004940)="dc912584304f82cea1f73ca4219d51b18dffb727eb8b95c84bfbbc9153925581e098e3ddcad7eacb00ac0b169db3a6b7c2b618e0a22281a91a9c5ae25f31c6bc57e89d196c9306bdebf3853d1e8ef729358e71804e21168154316510413d16df8fcb0a2017154cdd3b3034e86f8797c3709a2d305496ab38f626e749e3b3b6e02fbaa5d54a73d4766146331009bef439e9ae20c12a9cb5440d3d69db27881d28f6a7a626a9df193dd74b06518872f85dd8a5ce13cbc420ecd5d5a2235830fd54e51614ef7b409638a22e6d8b3a84624756ca930f4e589263ce211a1b6562bc7459a5a9d0fe13fcac0a8894c4558ba4df27818da6e3e91a03b763de28a87c1985886ed608afe2c67385db425b3c293326ae9848855410225766670ac205062ec65d49160169f7b13164496904d07018e1e5570d071d7c6cf45524b3e6da8b6d1110de91e4ec0c92a3f765e1be070903615bcb731bb9e938c4613993b7348054467bbddf41c4acc5c49c47390882d640e2caf71a96097e908ebdff1cd29ea675774800e92f4284d907092dc2c5699c7590b7d7eec48a0f7fe83e1502273affd197d0995df430ee9f4167d86643d359d7940dc9b9f6780c4dd8a0f85e40a15841847cc3fc9ad8a01b3e96b5f600f65cacfab5a5fe8f976e787170318cb81cc5d5c710fc112127b1cf307c301312b12d1b03e2f7990c96805e5cbdac07c2a10ada43450ab7bb406e2df75669b092a26b5704976a8cbaf536b4da49591bd627a998f65fee123a4fbcca65beeb55fc009d851c17fae46e11cbba6be6981a8b7cbc3dda2b47dbea502410f9acb85a6bd6251598a9e463b075e3f9f6678f3a0f77cbf7e0f38050a46a3bb7dabb9eddb4548632e24533e4cbcc5a7411bf58d88c9bd757207aaed5e46ef449903bc915ba86445d372e61e08c51c42ef3a4640f22f63058cd7854f15a5790cd6bdcc35220b5322807264219ac16476ff373cde9a880e939666018e9d10bc5ea8909d4e1cdc8391cb11fa9f4513184d911647effd9b3ad3ddcb45b7b49036ce4d9b8a341967710ffbe7530be3cbedcf6dd6ee60b3a9bcf5611aa881d42ecb0bd35a7c3fe8f359967b2e8141e837f615b02cdf98d09c39fc03d1aab5a08fa8c6e5708b6e4555a8af0efc1f3fd6093e11f9887d906ba5ebc12dfc1c1cbe3820d77c4f47a5c6f17219c645cb9eebfd46a27c85d8be102e7f0aa9d0780ed13933c577fd2a9ea7738aaf2a5783c06a4b48c921e42c560e2ba834c8f2b5c344ec27e8bd95a295da9fdb3b93d7788b5f361dae99fb4eeb0f046f3556e16c045cd99e46726588622172bfa91b498ec70aa438f552ea4707b86a10a78a3c40683de58db0b0c3aacd56b7fc0cc045e7aaff34f9c53a88826a67f743db164b108d936d50a8be33e27436976293df4b3a21f0659835522eebacb7c9549a8cf58d225ee2a5d1d5db5d429de94726463db637e964f39895e2e0503a0e8761ee476e5aef6239b9ff2b7c3f983666f9975e3193bf27673fddf88956f001b2f5100ebd315241262129cc89becb8e879bff4d65acd6263e0693471fb3dfe79f165e16e13742e2e01617e310e1d836e3ef44108943ae3494716a0d8ed801220d1a152938a7655607ef2510a97c1618040a0638a10cb46197de9717274b5da653a8ee5845372051771d395580f5986155c8bff537a71bab092dacfb5939599e222da8535e990dae5fb6a10cd8225d00cd3ecbed7a9d15038cdeccb6513397143d7e146b2335f1de8992c8e729de02dc4d175dfc592942bfa04fe30474e493a99cef6b649a4fd769626ee31e641da81aebd51cf11727e3b359a51912b9e7da9c8cdd9c47cc5358a5b39c292330fd3cbd904283d8e6a36df7afcac0471b79dac31a34c4ed05e623f5e5b4cb582c92be6111aeec631aa0fd301083f8082d3d687883e8b6a7cf49db912211510f86f8b7297e1a34ef58c96f4908a032f77be17e0222e7b0fed629c356fb89e1f57bc43da9c10c0634591eb093780167a2b1152201e9220622455f34d539141deeccee4ccfb019fea9e721246703f39312139124077c0f9937f418d04f70711ac799f0acd44d5c853c13b8e4467781aacd52e65e0545963171b0cf794cec4a647f4c2bc3724fc1459ce6826c0f7d139e17d228d27201a408b9f0b5f2d0f622a57b6696574342b838fa3b94f4006ec5593a261c87c8b276115d59550d71641a78c3e0109fc6a94d1373f2bb88526afe24bb8da8f47098b68da4667a10cea06e0eb2bb52014d66f9700f0ef64bcc2b37e3b6f4e45c12fbaea479856983a311f66f555abb26afaeda266cefb8aecf39c804316fb0f73e8b6c61a33a483ba8f307cbbf271427d50bba35e29295413a96d9726b4c6bd5e0aed11ac365ab6fd6c491cdf1517c93a99de87f7bdf2b7572dbcc5b2d929cc5dbd60e30dfe12a14147d2bd6b3f3fbc817f6c020127ba24d64b0da8e99af9b12b9ee6275bde3891eec35ac924449790e621f4bdee28e6521111b83618bba99d2171b3e299ac416d3e32cb6791f1d7a8a283ac19930610c60fc0ea32dfeb4b0348970fb0b9793394343c70fc2316c732d54f77e538bfa6e689a4030c0c9f77724dd34cdb846b9e48a01e533e54e9990754197e6a2e6cdb939b10e836273a75efb9e3cd25e1a5ed66fbe2b1e5647c4acff47e8089fcb91791cdd583b09193d2557a37d3b11e2b0386e626b62eb353eac7e97710f354846a83feb63c34ee72901d73219d0974bd8c68b36ef5231af0e0acce78f9b44356462eb705acca9eb3eb9f5278244803eb5aacca7943cdbe22649b643f61aed89a940631cb4b013529571fdfaffb7bef64c3f0948eea2cffa6ddd44e3b5f496dedca42c86fd9d4f43597b7ae784156e2441c33a5a2539622e79f759923109d800cbf87de7d6cfc88cb03181f627d3f99d49315bd17d196ab7ff519481d5f6272f40778fbac561dd2517ba7862eb38f0044b63bb44e4b4a00cf5cae974ae8a5aaec925f40725835bb7676c1276e590a0a39cb09a2fe3a40ed91a0ea24e4665dc99bf42e6ce7374487c644c65a1be0965f910aeea80e7c0fee939dcec00e090bf14ae488ad950801e78de332d174e0eb3abc25766e04962760a392a4f4e2b89dfa6422482b66ec30926836a1dc8963404d99ee805fd66ba11f496556993f1b8b16ff7647a066f987e4b932d8841a057be27c1e4e96614706f4a66bd5709b535aa519b8d799012511e1c5633bde3c4d0b7fc7a3c7ae128cb9ea0cffd1508cff3813d5fb7361626806704bb4fd32fa061e9b93ad00cfb03ad73cc78885988c657e6653f96960cac0bb30a43121b82e45bb41aa86f63b56767b6169e261c87aeba1b8e796c84c6d846406aa6c7d204a2c8152eb5ad0920bd9ea26931f1944d388ec111bffdbc98c301a2b3894e88133951fd6fc2f296bdde45a5a4ff81916d201185606789493ab1b89af6605eaa20ce98d77909285a700d35dea8094374b50df0e57154fc186573bbe62d5934c87c1089a42e8ca1e2adc4c51addd372a205d125ffa642bbc56e286fd34f29fdf8e6cf139b71a855c6e5695addbce811c4f940e5aff4c001c05d296367985c4dff60da5c81831816b458e243f02c27232b4d7f09061c5f65acd5add2a6cd6ab524a75d403246e81c6eca52f2628d5e7183d94a8deb9309adfcb1bb1700094e76734930854e22a438df84bf7bf620e787f5c1777b2a80bec4f65142a6bb1f92090da0ad1cde5d41b3c6a9f04a74ba51f05a031e8ac8d1273384dfe0861b52aac3f7cc11321c1a430bdf39b23db992151dc06e1950814dd742bd6c2fab6acd6f67e48c962015d0d412de2def61c580b149d358ab2937a09efd3f7ff358fd36142bca6a45aea48221ef2c0c197284f02bfb730ee1ed135371736066221d417f1a4924600f472f10453d3cbd3f27590d2c15fee9778e2839ba332f277587c3abe0052912f7f491625c26e219cf9f6da0b29b8c2afab9f2c3a79add232bfb7a838634fbb18183d2a5046563039fcfc74d12c44926501eb039ab5222de62c14e05bad6b33430f8b5bd77e30411321a6166c6a570288eead6e9b01dd8e1e5cd985c64a57bbaa22f67a4bd39b62f1ce1577b1ca711cda42e4a2e1487c9ed2a574f2ffa352ffa74f84403b1343e888d645293daf44cbe1407974ba0e9188b3575480ca420a0a4b9cd7b29ad3af814c3d5c1f8e37bff9336a1ae8f4d58d9a6743fcc6c58935e7610b057fd4da82ded0e95c23f27b86902e916b0648fde87ef0dbc260e3eb41eac60ef4ce64608213eabd7c230f0bba6547194a786998e67fe65ca1db96bc636bd825ef7216204a33c5d443fdcff64ca2703ed75e66e749c55c5a5ccc6d57b179cb4aee88f659a4891f836c94e06383adce7712a1550c9d38b73631ef14b1bab1839fb80688f62378c29307e36177fd00419d0fd85bf48402d84a9a2bda4c6165a75006def007476cb35d5e9bf8f8ff2fab3b84bc70a5a1f63f1c3aeb230315e7f1de665224a73521cef8ce49d918e1e6a88609b4da1bdf5e9af8d7da10a5e4d7d33623a3b84806dd7f73b962f94a9f2181fd44e29fea39c4acb7ef55401f12c9ca0150ef03303f2d9e0e8fa2e5cb2a66d00e9917f20c2881e7329f86cf31f848a34f53103705f084a2cc75e3b2c0f12280ce22d2429036450ea169521a8e5383c8497657b9967ac57502b5adf033f1ee1e6c9ff962e9184a6855a7a43f8b9cf1fd5b86f97d58a70b5d85aa5e8b24889f989d7f25a02c5f06abf39a5e3872aa84a1406916f529d7702b2cc703b073a05229662354a9bbe89ad13ecec6e4b4082c808bb4359aca1520fcce24a655930e1110477c41589dd9792b6a0697fe47b41747e965d403c6d6daf23b910b1868967be9dde1010846d41b4ee2d82af7444b24f634e1e1330a5cf27f410f434468a86cc680a4bea496d7243958f87fac51064944787790b63a4c2b92c22fa020b23cec0caea4313780cf11d313008f4638cbd1b6544ed52a35f5b0572c5cdc3613fcd9891cc40e1ec98da4dbf64d4026bdcb3dbe5781bda5f21283826ac0f88ad98787eee3326b2c4731e10872c87a36251b53fa23eb73d4e5c8e934c5789920c61bca826962cef766d798e61fe58e49cc0f4fae8c6be48622404ac32717aa69f3d8f19decb8d2afdba9becccd085ec013df787719d93975f3eeae6e143c9dbc3057796b57ea1a1ce490717b589b91fe060dd95bffd0729afc27f8fd98ffe6fa82f4838e5a8bbae0a0ff8e11232aa5bcd219191aa2e36af82cbf97af56c63aa1f4448dc2050c3dd5b70c343c1a6ce98fa6ce4fbdcc5e94c5ec028a8298f4f178ab80b284c935e83657308b48ccad52a4359a2dca7301c9d96ca29d0aa25ddaa7271f7457bf0828f0099390a92e066d821aebcf10acc07d5625a60d179458478bc5de4c3a033a21a7dfb7be3a72c001179ca351893ed2369b6c75cfef9714ae46608beb61933bde80fc66af1cd34b48cb180ebf1ad57a99d4e8ea79655c03984e3aee901ed05eae75bd684eeb2d7a3138bd77a13b144472692aa11ec1817af892b102fde517123c228d3e570416b97b29592154d5f1506773c4efedf625b626b687a6a577db24709ffa03d2eb98f63859a40796c3f87180e4b8102abad926db195c2543803df68c26e1c690d57d1caaeeaa21c418763ba708ead8080361c1c17d9eb7df97390db7329f652ef4882ff2382dc3c89be99d38af0c3123c7dad8c5ba3ab1830bac740910ae88f180e3cc541ff34c15a838a03c334dfc13d1b8714bd62a87b150b56b65142d4ae06610140598910f23c5b293f05bf30b4a806a13e0b35389af002d700ab76b7d48e3f0265ae711324140b069651475adbddb78b0825bc7f297dbdfe39863628cc56fb29d2a551978ade89f8e04a18740ebb9ac25040bc04465846d7f70b99a0ca9918afcb11dad05fc21d18be621eb77721c7cb0d9414524a4be37c048ce4a5cd60ddcb300f3c6d65431e2bfab92df44c6fa0342602b3196a4827cca205c8d77ddf7c337e6eff8d59d5c59776c80149035a5111bd9db45248c1c0291588b985c54609ff2c0c88a7813de67aca7b3599762c6f46f2a752db0512327a47ed9ae9a4346f2809598d454cc25ef166c35cf453747471d6e4863800e1bb47675f43f82392e3da201f1a47a447daf4a315116b7cd795a018db1194393ecfa9bc9478c7f53172ebcb7164e81542201f74976590888eb40cbce820685890148d95a6fa80556ebe2e5329c479702449b5d3abe096fa45ac8f928ef3466b3b022c136e459467a5d79ad3da1ae12cea457a31bdd2e6afb41a5384211a999678f5caf0be3879a934568c57bf250043e7a38d19530b8c4c1321175023be256f52590913468fb2e30f474347b1da2d3d1b9c6ee344afdac385e72bbc998f1f6bab46f959af9bf6c944c5e8d4532fd9af97e6c6a051c7b86537a17c6a9476e30efee03d74ba2b62c83fabc2cc8cf7dc4744994a78937e9d9551c6dcd99f2bd18d40a1c7c3d4efc601bb564f10c196a289985565c7e60cc48869af0ff1fa0a983117e8b667cd0b744ac56a84d3aba74e1df7d8a334ad679af462deff477f2c8d18c00960b07f7fe4a896bb894eac1ce1b2dc2a1850ca76cbbd60e5d2ebb5c24f9e7b8b000716708ead5b46fce91b9fe582b6644131c2aefa3c7e4705a61902a5d12fb14615a865a774dec6800205344ebd917f9c2c3809044760bf6ea2143e4e8e01e5ed034f7bd7e3474d03bcb1bb3903e95b49532bca8e6e7dc1a783f3c6208573e3937a7ce56a73dc25a23d9779eed178b4056b68571318911fc38cf8b56a158303fb538507851932f2d17b96f1ec361d2adae6a2ae67d26863d1c57fa652146f014b40316aec6d0185353bc91c75b752d8188fd51de32052cd13dcd523df6449c17aee716bc21a9258db0c7aa18bc62792a331ad6681a0ba0c5d3c2686ac6050622080cf870bcf538ad848d4c4794f67c170341d73d3692d08826dd4e42dc36e23917794c2aa5ea14b05f2060d768779702e152871fd6632fb6fc80aafd924426010d5aa9a942baf5a12871af117e7f14f35ed8b48fe3628db7368226d8ceec22f053316b86e62f59f1288768dbe72d7c7b988f3e6761d9fd6df82a008266406056ea798b022343618a5719ee4e30adafe25414d63952e8e3fb9c358211057d733b4b393d1f0477f2d6782a2090951c9002d4e5f1143a84a5a530529cc513e9f263e216655916719bbbb93afacd37db0ddf48ff01c2e62543d31decad878210e4c31c82bcbe727f64ba1670caec3774b1061ccb639d0f9bc0eb36f836da08aa655075d5d002ec14c8cd8da2402cde1099aeab3ff6d2c6d8630546774b641b9e13f854513e3758ebf6c295404776db618d3eb7774694b040da13d0ffc9e3e9e702fd7fb209cccc2c0c7df1b7f48cdd0fce594be3d358ef70aaea191b39819e7e1620fa56d7ff184e1a22a1f8504106908ea8fdfa9d275cf58c87ac85ab61c3a0dd7ded0098283c1548cbffb22958aecc84737314682fc908b3bcebe7444b602cc1103cdb6f4d863f50e31bf0796deb1c7635ffccca8196106ddcf7bc0f0870b47b6136cca26f48ae54e0704c052c03a99d88969ebe4b40f38b14fbf59c0324751445871755a800a98066ac958a9a9e0e503b79a1f3ee48847c9d89a2c76c4468b3663f6c44b4303fc9d8a5a516fa3cda5813bba0bc4e297352e52587086173cf254eb2c1eebda3de2cb6c1d83ea6d949209bf5a630713d85bc348fe77e3dbb78783c26ce34673ed6cd8bdb7a17864562113517551b23d86df1df405922bb91e332d7664454904e271d2f776562cd781a961a61d1930d91e9d741ffef3a2d78e8caa6214925431271a5eca70c5c14d95aa2becf741f6e8c6ccc454baaafbb9cd4cd92ce1cbdabe9beaadc2d9bf9c2cb741f20e9f16a52af14f6876641c9475a0e0dc9676b52b0b1ef0196646097f735ec3014f174330348451c4d0b70ce6b6d64ff870122a0e28ea27de32ee943ccb0d35868595d51a891e3a41d9b2fa78f1712499b75b7c1f8653a5af4c8a9325d89d56a884c31817e39d5e4f92a426b2ae32f3e3b2920f9d2c0c42f0b1f20543f3d80ae6e4db384d5e2e6b249a36f60c1b6be0c3c1db165a3f0a23fd3a45ad3b5b26d7e9507896b4402ffc2038312551f31aab3870ae8580738a03a7f82808600cb2b91dd175c161a68b12d64a6c2ca7e6c8b13ea6ba009ebf888ab6c814766168f0627811e67ded683ec8576eb71f045fbdb582271d941eb9a98e9bdfc40378ccb6b2e1976a274ac1b93a9c3f7661c9841e1951a76c0f083a1ca37987fb783cfd8e8b60bc30592afa53e76ae1b10c25b97136a1d14899d6f1991111cff34c87c38f2d8729c6a516aea425e69ca7235a4f972e49443c9aad8e7e1c7c00d149d92ac8d4848683f395708d31752b1d8b2a2110437a054efa0c92d8eb65545306f6fd381b7d4dae86c3ac64cd82a01bc2379b551c53585a35c847e634c5fdf2e0affcf06f986dd10a0ad276d3fc9756cc6181d66d4be024b3e9c83cbd768a9990c91fa8abe6e27c636817b8b8560078ae2f9d0f079439f0519b9f99468ee3ce568a3c78c2608919c114771b5bc3b540085228e08434e4f52cf1dac507860f003f836a80d116f778cfc1a588c7829171efbc970fe43945ecb32c2d438c32029593495b3d8fbf6ec0acd826c790b3688bae4fcb8a28fd755e848a4204b2a1ebb78249bb53ad1399234f729dce6d65dc6aef065510585a78e59153b29941e8c04c43500181892ce86ae1c5aecde682d02d65cf7a0ba56afb3baf0eb460a697bb249cfe88f4118281587f2e90f49dbc1c6139cddd3d309b8f77bcafbdc432f06144489d34d0dba1f93d64ced672380e88e86bd211118a26f3d9f0806e782610873a7c950ee88ee20ef83ca787168c502aa14c4f0c038c5e78e2099f746aa96a5805cc91f797f5ec7f723dafca0acde0b5e9da61f62d4c943baf63f02e9b189619527b537900d9d4ad8bb96d11c6f54fb73452229e15b941c57d09435ba930bfaa99d1fc7f401db5af075e69b74019d69e2f3d7a020c6c26797f5f6c60a18e58d7eefd07403e023ad3f33bfcc91a5c11590acbe20770d5c4213d32091c1c5a3d29dfe3bbcd17f1ffb49030630cfd25815f3215c76e2ad32098e7631bd242376e8e486a634e057c51ab546699529bdb9858b74a466fbfa5e2cb1b2f70c7b2166daf58f90d4cfac45a52249e5b53d3bacfa7949e8824532a2fee83dae33ce2ee48dfc2c196aaf5a610aae77f611d9ffd413e0264ada542528430f904df70727be0a3219839771770da0d0fb5a5f431fd59761a3d57e703fb5e46b53a8595fec0bbe39689c75265c5aa6545aa3676f297affcd5c40d39e64cb9f9616571a9df3d7fd947fd71db39fc9bbe38e510fc040f312848b97efb86e457b600a2edf2fdcf0da4e4b979f2d46ce5404a93d677cc753398d03115f7c462e73000e516b1c0906b21889e2662d887dd4cf0fed781e39efbbf199c7abba15137dc67cc5da6992f2816f27b70f4fdea41f145cf89d36305afea2c9825ed66f2f1a03feeb8ae154dc74fdb0105aa1cd34f061a8dbd3f2517e2c89e6f5e1d95553d4ff38840e4a5cc8b1beae49019ad80028ac05989b11375ce6645923ba25060914c59e623c1c437b865caf0eda1c6c4e3dca02795c41e2e9841ecef6576b7b30041b9bf637a37226e9dcea76238b2b5f48bbb740107ddfd49a44f78aad8ec8cb98455d608be9d132eea797ac2e5b8c85ba23618fc98362f5811259709755798758dc7d8598ba56e5736e4eab116f17363d9f3b06ce8c0ee74e77f56bf973f68a884a43ac27180529e861433ba26c1990062f96e06ddb710579f73bb2c3c2c1a5d5a46344a80c293499591061bcad966f04f2ad1739db06fcd57546c8d7d512453c140a2203b51cbed9ed733d853efa1c6e4ec2ca7c2fa26a6d20bcd08768fd1047c4813a9d9996241c2ac4a2c760f9509cd7056854e1a272bbd31b252cafcde18e9eddc2bdbf8820416c0a8d0311ea21bf5a2f348bfad5c807fb001609d47b99fff0c10ff47da7bddf13aea2c604b020534e01503473506c9f32c46cbc552e2948856aeb0f3f616dd1c65e623907efd3790f3c6e3a8abde41214f172005484cf954b705996f1416c289b96f0e20f621a575337ddc9b78fee461744cd1c5024fca290479465bb97cd21b6136a9156ce9ddee3edab1b509304f745a216d90638b9271d86b17d61b26e9af9cf5866638b7c8863f67304e8ff3cb925f000192bf311d00e218d4716cbe04a210ce5f51ea4664ae551729eca08564cdcffd2bacb6c6e1c7d9f2ee786365483f60323fd10e5d2df56b2fa58d7895215b6f2705cdc747617199de0d1e7d424e1e28a2a740a54ecf5ea977bf9ee1a86c20bef686473400524bd46b915e0d64ac6b70b5ab8d6086bfaa8cc950146fcd447c509907c1b5785208bd3109a913b012b4d7cc607945656d54d1e06fd469b48d22aea1887401104981872798b7d064441c222cc8e6da2c29a98c4cd9b79dac58bf691ed5c5d3f6735f24a6e803bdd79ca308e675947b06cb75ad05711459032111940c1f9592167e33c447994ed8382ac8ef1d072668cf3dc88ac5034df573381f36966aee0eae45806e98e2d5bcd73ab07d0016f316130b00b15f01955fd1a573f8c0658eca82db08d91798ba4f3f1b88f18a13fd35c729db35d0d09588baf4cbea9c6e5beb5ba76429b5b06820b22ab2517ae1ef24c7969c530d7bcd8e3a99927ab620086509001000d9a3015acf374354875a75e90af54e787c2e9b84a436b838792c3b5e64f307ce3692e986a18ff0b67d0f1756cf45d26f327f13d03f6d54673a875d576e4f5b310dbc58566dcb4dcb8ee297261d15fc74cfe7360460d4041d92ca00907a2b25ba7b94a4336b9d93a9958f20c7d92b536427ee2d0a87dac8f9d4abd8771f8f22145e09673b362f8707b7ac9e92d9b771fab7e0452d295969d00f225f636223e4de24341754c7fcf17e44b7611fa41378fe3b246bd4a148af0d4ec52932d04c0f8a07babb0221fd06baa1d5d278987109e39adca1fa9eb375aa6f1a8778d84902465db6ebbc725a81c170f29703b3e1e6cb5a04306bfc4489b2531d911041c888a5277ed88b82dcaa60da080a4ec9a755373ac65396cf8d07308034013ccac2df4156e491f0dcd3a6ea685a2a887c6a6e2763c40b7ea7fcef17cc4ac65ec840dfa06c50ec561e4d96071e8b3c9c26ccf8c2e09c9e00b29e8a4451c616a78858ea58162de49ab0cc44b9c9103a975024b7ef1a90046177d7fe2ca167349929e1d8847dd101ed2d3cb2955a4df13dd47461027422632bb858ce28803badbedc5b4e99836fc0a971358b96a8f60c7b9d0ba031a7dbc1c3bd876600540a8b578303482fe64ee2336154518582e3402ffe45e9150b1c03ce33438112ca3777e8e6dc35417cd9a4da15579282a1958356a6a0d3c7499bbc5ef48191283c6f01454934408fbe3fc11796acc189c95623b42b4279d7b", 0x2000, &(0x7f0000006c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, 0x0) 10.591480376s ago: executing program 2 (id=196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x2, 0x3, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x80, 0x2, 0x7}]}}}}}}}}, 0x0) 10.343521449s ago: executing program 5 (id=197): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f000000b280)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000ac0)="e9d7", 0x2}], 0x1}}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 7.30912278s ago: executing program 33 (id=197): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f000000b280)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000ac0)="e9d7", 0x2}], 0x1}}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 7.259907406s ago: executing program 2 (id=202): timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0xf542}], 0x1, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) 7.202753084s ago: executing program 4 (id=204): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340009100000109022400010000b00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x2, '0'}]}}, 0x0}, 0x0) 6.475314151s ago: executing program 3 (id=206): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed62c852a57a2b44a478283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984f36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b05702abe43d9c2c30aed4da0b8cc18c6b36df086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x189, &(0x7f00000027c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) fdatasync(r1) 5.944204868s ago: executing program 2 (id=207): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.999170169s ago: executing program 3 (id=208): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x0) 4.880311219s ago: executing program 1 (id=209): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000040)=""/43, 0x2b) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 4.271710496s ago: executing program 1 (id=210): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000002c0021e22508000000dbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 4.140299161s ago: executing program 4 (id=211): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x230, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8000, 0x2, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x0, 0x1e}}}}}]}}]}}, 0x0) 4.114578963s ago: executing program 3 (id=212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r2, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0xdeff) 2.927331062s ago: executing program 1 (id=213): r0 = io_uring_setup(0x5f41, &(0x7f0000000500)={0x0, 0x0, 0x2, 0xfffffffe}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, r3], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r2, 0x0, 0x7, 0x0, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) close_range(r0, 0xffffffffffffffff, 0x0) 2.879372741s ago: executing program 3 (id=214): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@noblock_validity}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x460, &(0x7f00000008c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000380)=""/85, 0x55) 2.763787174s ago: executing program 4 (id=215): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="a132", 0x2}], 0x1}}], 0x1, 0x1) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="123416", 0x3}], 0x1}}], 0x3, 0x4c190) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/206, 0xce, 0x1, 0x0}, &(0x7f0000000540)=0x40) 2.15997099s ago: executing program 2 (id=216): syz_mount_image$hfsplus(&(0x7f00000004c0), &(0x7f0000000040)='./file0\x00', 0x4008, &(0x7f00000002c0)=ANY=[], 0x1, 0x68e, &(0x7f0000000bc0)="$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") r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x40, 0xc, 0x77, "d6b3a5990f3996f54263d9a76743cbdc74e38080a7c1953794180c36f287e3dc084cd45a806a02c92c4f4169b9407f48c0cef6db91f7a19d795fd0b09fac1aa2d3953174cc88b25115bf3f595be3c1eafb2998c5982d53eeff893debf637a7e54268080c821e358074cb4b2f47a423de3af7f93634fc27"}, &(0x7f0000000080)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x83, 0x1, 'R'}, &(0x7f0000000540)={0x20, 0x84, 0x1, '8'}, 0x0}) 2.082169027s ago: executing program 1 (id=217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='htcp\x00', 0x5) shutdown(r0, 0x1) 1.856813982s ago: executing program 4 (id=218): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x1a, &(0x7f0000000100)={@local, @random="e8ee3620952e", @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@llc={0x4, {@snap={0xab, 0xab, 'g', "e5af8b", 0x6002}}}}}, 0x0) 1.388869284s ago: executing program 3 (id=219): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) 1.161694059s ago: executing program 1 (id=220): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) sendmmsg$unix(r1, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0xc}}], 0x2c, 0x8001}}], 0x1, 0xc0) 671.449599ms ago: executing program 4 (id=221): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 339.534767ms ago: executing program 3 (id=222): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) 0s ago: executing program 1 (id=223): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000) r1 = socket(0x2, 0x2, 0x1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. [ 180.197144][ T5781] cgroup: Unknown subsys name 'net' [ 180.347487][ T5781] cgroup: Unknown subsys name 'cpuset' [ 180.364928][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.409045][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.415784][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.481134][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 236.724355][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.732742][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.742410][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.759535][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.767546][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.777445][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.801296][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.810573][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.822548][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.831956][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.884231][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.895857][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.928986][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.938096][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.987065][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.021400][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.059345][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.116846][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.127382][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.144288][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.207187][ T5093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.277305][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.291858][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.318679][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.334983][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.036993][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 238.297855][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 238.866348][ T5093] Bluetooth: hci1: command tx timeout [ 238.965843][ T5093] Bluetooth: hci0: command tx timeout [ 239.186937][ T5093] Bluetooth: hci2: command tx timeout [ 239.208476][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.216477][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.224265][ T5797] bridge_slave_0: entered allmulticast mode [ 239.234541][ T5797] bridge_slave_0: entered promiscuous mode [ 239.357002][ T5093] Bluetooth: hci3: command tx timeout [ 239.369131][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.380772][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.390648][ T5797] bridge_slave_1: entered allmulticast mode [ 239.400563][ T5797] bridge_slave_1: entered promiscuous mode [ 239.429560][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.441358][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.449221][ T5798] bridge_slave_0: entered allmulticast mode [ 239.459049][ T5798] bridge_slave_0: entered promiscuous mode [ 239.510231][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 239.560002][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 239.582651][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.586397][ T5093] Bluetooth: hci4: command tx timeout [ 239.590409][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.603455][ T5798] bridge_slave_1: entered allmulticast mode [ 239.612397][ T5798] bridge_slave_1: entered promiscuous mode [ 239.654832][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 239.687357][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.727633][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.049950][ T5797] team0: Port device team_slave_0 added [ 240.156556][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.180746][ T5797] team0: Port device team_slave_1 added [ 240.222932][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.518739][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.526924][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.554648][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.588808][ T5798] team0: Port device team_slave_0 added [ 240.728548][ T5798] team0: Port device team_slave_1 added [ 240.737674][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.747477][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.755211][ T5807] bridge_slave_0: entered allmulticast mode [ 240.764876][ T5807] bridge_slave_0: entered promiscuous mode [ 240.784229][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.791787][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.820584][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.953340][ T5093] Bluetooth: hci1: command tx timeout [ 241.026386][ T5093] Bluetooth: hci0: command tx timeout [ 241.068134][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.075786][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.086178][ T5807] bridge_slave_1: entered allmulticast mode [ 241.096419][ T5807] bridge_slave_1: entered promiscuous mode [ 241.142843][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.150664][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.158710][ T5813] bridge_slave_0: entered allmulticast mode [ 241.168372][ T5813] bridge_slave_0: entered promiscuous mode [ 241.276347][ T5093] Bluetooth: hci2: command tx timeout [ 241.303126][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.310925][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.318857][ T5813] bridge_slave_1: entered allmulticast mode [ 241.328082][ T5813] bridge_slave_1: entered promiscuous mode [ 241.376373][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.383564][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.410117][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.428143][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.435435][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.461890][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.466528][ T5093] Bluetooth: hci3: command tx timeout [ 241.487129][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.509798][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.667539][ T5093] Bluetooth: hci4: command tx timeout [ 241.715351][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.723278][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.731233][ T5806] bridge_slave_0: entered allmulticast mode [ 241.741623][ T5806] bridge_slave_0: entered promiscuous mode [ 241.849792][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.867354][ T5807] team0: Port device team_slave_0 added [ 241.884586][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.904981][ T5807] team0: Port device team_slave_1 added [ 241.913398][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.921724][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.930153][ T5806] bridge_slave_1: entered allmulticast mode [ 241.940019][ T5806] bridge_slave_1: entered promiscuous mode [ 241.963781][ T5797] hsr_slave_0: entered promiscuous mode [ 241.973091][ T5797] hsr_slave_1: entered promiscuous mode [ 242.362797][ T5813] team0: Port device team_slave_0 added [ 242.412860][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.420508][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.447105][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.470572][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.497080][ T5798] hsr_slave_0: entered promiscuous mode [ 242.506709][ T5798] hsr_slave_1: entered promiscuous mode [ 242.514960][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.523106][ T5798] Cannot create hsr debugfs directory [ 242.536886][ T5813] team0: Port device team_slave_1 added [ 242.563009][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.570470][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.597474][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.636249][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.986561][ T5806] team0: Port device team_slave_0 added [ 243.026462][ T5093] Bluetooth: hci1: command tx timeout [ 243.038849][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.046175][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.073744][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.091019][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.098512][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.125873][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.139746][ T5093] Bluetooth: hci0: command tx timeout [ 243.190274][ T5807] hsr_slave_0: entered promiscuous mode [ 243.200670][ T5807] hsr_slave_1: entered promiscuous mode [ 243.209667][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.217693][ T5807] Cannot create hsr debugfs directory [ 243.270991][ T5806] team0: Port device team_slave_1 added [ 243.366425][ T5093] Bluetooth: hci2: command tx timeout [ 243.480301][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.490047][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.517182][ T5093] Bluetooth: hci3: command tx timeout [ 243.522779][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.557949][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.565180][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.592131][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.759829][ T5093] Bluetooth: hci4: command tx timeout [ 243.908311][ T5813] hsr_slave_0: entered promiscuous mode [ 243.918756][ T5813] hsr_slave_1: entered promiscuous mode [ 243.927976][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.935780][ T5813] Cannot create hsr debugfs directory [ 244.292328][ T5806] hsr_slave_0: entered promiscuous mode [ 244.303694][ T5806] hsr_slave_1: entered promiscuous mode [ 244.312976][ T5806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.320928][ T5806] Cannot create hsr debugfs directory [ 244.842035][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.946534][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.034869][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 245.074290][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.127992][ T5093] Bluetooth: hci1: command tx timeout [ 245.187228][ T5093] Bluetooth: hci0: command tx timeout [ 245.345398][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.445018][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 245.467718][ T5093] Bluetooth: hci2: command tx timeout [ 245.586324][ T5093] Bluetooth: hci3: command tx timeout [ 245.641502][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 245.664827][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.700776][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 245.745876][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 245.848739][ T5093] Bluetooth: hci4: command tx timeout [ 245.917748][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.946804][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.067771][ T5813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 246.174092][ T5813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 246.211182][ T5813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 246.239143][ T5813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 246.442022][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.553893][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.617559][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.715445][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.290640][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.353346][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.469484][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.524167][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.630488][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.638306][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.696847][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.758103][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.765693][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.859788][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.888388][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.896166][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.917873][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.925644][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.080523][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.174690][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.182469][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.290796][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.298580][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.480035][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.506947][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.651250][ T1880] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.658984][ T1880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.732617][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.810686][ T1880] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.818420][ T1880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.954546][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.027304][ T1880] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.034923][ T1880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.065526][ T1880] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.073294][ T1880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.288301][ T5813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.299554][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.501564][ T5806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.512584][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.555896][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.582432][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.075876][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.254008][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.328576][ T5797] veth0_vlan: entered promiscuous mode [ 251.400449][ T5798] veth0_vlan: entered promiscuous mode [ 251.420970][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.519757][ T5797] veth1_vlan: entered promiscuous mode [ 251.575479][ T5798] veth1_vlan: entered promiscuous mode [ 251.926648][ T5813] veth0_vlan: entered promiscuous mode [ 252.027223][ T5813] veth1_vlan: entered promiscuous mode [ 252.083536][ T5797] veth0_macvtap: entered promiscuous mode [ 252.117326][ T5806] veth0_vlan: entered promiscuous mode [ 252.126884][ T5798] veth0_macvtap: entered promiscuous mode [ 252.164461][ T5797] veth1_macvtap: entered promiscuous mode [ 252.248956][ T5806] veth1_vlan: entered promiscuous mode [ 252.305795][ T5798] veth1_macvtap: entered promiscuous mode [ 252.442940][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.535879][ T5813] veth0_macvtap: entered promiscuous mode [ 252.564691][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.644992][ T5813] veth1_macvtap: entered promiscuous mode [ 252.671061][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.682969][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.698637][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.710258][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.720154][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.730090][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.740315][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.873010][ T5806] veth0_macvtap: entered promiscuous mode [ 252.894792][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.906553][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.923117][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.976143][ T5806] veth1_macvtap: entered promiscuous mode [ 253.002920][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.014074][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.024971][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.036300][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.052115][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.087118][ T5798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.097382][ T5798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.107366][ T5798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.118335][ T5798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.228818][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.240910][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.251322][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.262331][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.279140][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.313431][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.324469][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.335054][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.346757][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.357368][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.368337][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.385206][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.435533][ T5813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.445156][ T5813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.454549][ T5813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.463744][ T5813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.538132][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.549619][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.560119][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.571005][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.581214][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.593026][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.608311][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.683170][ T5806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.692599][ T5806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.703126][ T5806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.713164][ T5806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.165596][ T5807] veth0_vlan: entered promiscuous mode [ 254.301570][ T5807] veth1_vlan: entered promiscuous mode [ 254.762749][ T5807] veth0_macvtap: entered promiscuous mode [ 254.818289][ T5807] veth1_macvtap: entered promiscuous mode [ 255.027346][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.038753][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.049148][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.061891][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.072625][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.084347][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.094778][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.105592][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.121551][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.168880][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.182520][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.195732][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.207893][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.218363][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.229472][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.239774][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.250791][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.267199][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.315476][ T5807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.326560][ T5807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.335755][ T5807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.349204][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.957176][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.965792][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.070866][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.080531][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.156691][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.164950][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.468876][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.482072][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.593998][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.603450][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.779058][ T3650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.789080][ T3650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.078204][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.087414][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.225923][ T5798] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 261.282414][ T4608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.292805][ T4608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.229351][ T5983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.237057][ T5983] IPv6: NLM_F_CREATE should be set when creating new route [ 262.257461][ T5983] Zero length message leads to an empty skb [ 262.421930][ T3650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.430902][ T3650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.659031][ T5987] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 262.857672][ T1880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.867624][ T1880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.189124][ T5996] loop3: detected capacity change from 0 to 1024 [ 264.274332][ T5993] loop2: detected capacity change from 0 to 32768 [ 264.366848][ T5993] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 264.561815][ T5857] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 264.736888][ T5993] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x1b9/0x300, xfs_agf block 0x1 [ 264.761191][ T5993] XFS (loop2): Unmount and run xfs_repair [ 264.770203][ T5993] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 264.778132][ T5993] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00 XAGF............ [ 264.787461][ T5993] 00000010: 00 00 00 01 00 00 00 02 00 00 00 04 00 00 00 01 ................ [ 264.796868][ T5993] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 264.806202][ T5993] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d ca 00 00 00 00 ................ [ 264.815373][ T5993] 00000040: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab ..*.w.B.....G.K. [ 264.824730][ T5993] 00000050: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 264.834504][ T5993] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 264.844030][ T5993] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 264.863476][ T5993] XFS (loop2): metadata I/O error in "xfs_read_agf+0x23d/0x550" at daddr 0x1 len 1 error 74 [ 264.877189][ T5993] XFS (loop2): Error -117 reserving per-AG metadata reserve pool. [ 264.885678][ T5993] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x4d7/0x590 (fs/xfs/xfs_fsops.c:566). Shutting down filesystem. [ 264.902622][ T5993] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 264.911557][ T5993] XFS (loop2): Ending clean mount [ 264.918104][ T5993] XFS (loop2): Failed to initialize disk quotas, err -5. [ 264.926241][ T5993] XFS (loop2): Error -5 reserving per-AG metadata reserve pool. [ 264.944442][ T5855] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 264.964617][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 264.983289][ T5857] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.00 [ 264.993236][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.070905][ T5857] usb 1-1: config 0 descriptor?? [ 265.163017][ T6013] loop4: detected capacity change from 0 to 1024 [ 265.252437][ T6013] EXT4-fs: Ignoring removed orlov option [ 265.316963][ T5855] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.329975][ T5855] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.405726][ T5857] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 265.470508][ T5855] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.481394][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.489964][ T5855] usb 2-1: Product: syz [ 265.494480][ T5855] usb 2-1: Manufacturer: syz [ 265.499965][ T5855] usb 2-1: SerialNumber: syz [ 265.501286][ T5857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.510980][ T6013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.559359][ T5857] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 265.568590][ T5857] usb 1-1: media controller created [ 265.748432][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.958806][ T5855] usb 2-1: 0:2 : does not exist [ 266.101255][ T5855] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 266.201649][ T6018] loop2: detected capacity change from 0 to 1024 [ 266.311892][ T6018] ======================================================= [ 266.311892][ T6018] WARNING: The mand mount option has been deprecated and [ 266.311892][ T6018] and is ignored by this kernel. Remove the mand [ 266.311892][ T6018] option from the mount to silence this warning. [ 266.311892][ T6018] ======================================================= [ 266.348485][ T6018] EXT4-fs: Ignoring removed oldalloc option [ 266.354974][ T6018] EXT4-fs: Ignoring removed orlov option [ 266.414422][ T6018] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 266.477759][ T5855] usb 2-1: USB disconnect, device number 2 [ 266.728841][ T6018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.966487][ T5857] stb0899_attach: Driver disabled by Kconfig [ 266.972779][ T5857] az6027: no front-end attached [ 266.972779][ T5857] [ 266.983345][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.027016][ T5857] az6027: usb out operation failed. (-71) [ 267.033048][ T5857] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 267.116644][ T5857] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 267.141696][ T30] audit: type=1800 audit(1747324762.314:2): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 267.148120][ T5857] dvb-usb: schedule remote query interval to 400 msecs. [ 267.169859][ T5857] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 267.301468][ T5857] usb 1-1: USB disconnect, device number 2 [ 267.408473][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.747331][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.980853][ T5857] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 268.058021][ T6032] netlink: 'syz.1.12': attribute type 10 has an invalid length. [ 268.088615][ T6032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.106375][ T6032] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 268.957415][ T6041] loop0: detected capacity change from 0 to 512 [ 269.032540][ T6041] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 269.046700][ T6041] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 269.320737][ T6041] EXT4-fs (loop0): 1 truncate cleaned up [ 269.330001][ T6041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.705359][ T6052] Bluetooth: MGMT ver 1.23 [ 269.710524][ T6052] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 270.373499][ T6057] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 270.754926][ T6060] syz.2.22 uses obsolete (PF_INET,SOCK_PACKET) [ 270.869710][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.870953][ T3564] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.260532][ T3564] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.449666][ T3564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.678414][ T6066] netlink: 72 bytes leftover after parsing attributes in process `syz.3.25'. [ 271.693230][ T3564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.767903][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 272.217258][ T6067] syz.3.25 (6067) used greatest stack depth: 5144 bytes left [ 272.265448][ T3564] bridge_slave_1: left allmulticast mode [ 272.274555][ T3564] bridge_slave_1: left promiscuous mode [ 272.281951][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.364172][ T3564] bridge_slave_0: left allmulticast mode [ 272.372117][ T3564] bridge_slave_0: left promiscuous mode [ 272.379220][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.055224][ T3564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.103172][ T3564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.128714][ T3564] bond0 (unregistering): Released all slaves [ 273.964497][ T3564] hsr_slave_0: left promiscuous mode [ 274.023219][ T3564] hsr_slave_1: left promiscuous mode [ 274.032086][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.040131][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.381787][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.390631][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.442604][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.500836][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.538383][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.616013][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.652360][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.693030][ T3564] veth1_macvtap: left promiscuous mode [ 274.699148][ T3564] veth0_macvtap: left promiscuous mode [ 274.705133][ T3564] veth1_vlan: left promiscuous mode [ 274.711634][ T3564] veth0_vlan: left promiscuous mode [ 276.603745][ T6105] netlink: 32 bytes leftover after parsing attributes in process `syz.3.38'. [ 276.648826][ T3564] team0 (unregistering): Port device team_slave_1 removed [ 276.787745][ T3564] team0 (unregistering): Port device team_slave_0 removed [ 276.818488][ T5809] Bluetooth: hci1: command tx timeout [ 277.435350][ T6101] syz.2.37 (6101): drop_caches: 2 [ 277.438799][ T6112] loop4: detected capacity change from 0 to 256 [ 277.628623][ T6112] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 278.081430][ T6112] process 'syz.4.39' launched './file0' with NULL argv: empty string added [ 278.866849][ T5809] Bluetooth: hci1: command tx timeout [ 279.628047][ T6081] chnl_net:caif_netlink_parms(): no params data found [ 279.872201][ T30] audit: type=1326 audit(1747324775.064:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7fc00000 [ 279.894149][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.300351][ T30] audit: type=1326 audit(1747324775.484:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f98539 code=0x7fc00000 [ 280.325361][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.961286][ T5809] Bluetooth: hci1: command tx timeout [ 281.380568][ T6152] loop3: detected capacity change from 0 to 512 [ 281.608787][ T6152] EXT4-fs (loop3): orphan cleanup on readonly fs [ 281.637525][ T6152] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 281.658118][ T6152] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 281.668469][ T6152] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.48: Failed to acquire dquot type 1 [ 281.814690][ T6152] EXT4-fs (loop3): 1 truncate cleaned up [ 281.865230][ T6152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 281.894057][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.904991][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.913946][ T6081] bridge_slave_0: entered allmulticast mode [ 281.942444][ T6081] bridge_slave_0: entered promiscuous mode [ 282.039045][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.048586][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.064964][ T6081] bridge_slave_1: entered allmulticast mode [ 282.075091][ T6081] bridge_slave_1: entered promiscuous mode [ 282.512653][ T6169] input: syz0 as /devices/virtual/input/input6 [ 282.717244][ T6081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.755774][ T5813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.894668][ T6081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.027444][ T5809] Bluetooth: hci1: command tx timeout [ 283.460552][ T6081] team0: Port device team_slave_0 added [ 283.559635][ T6081] team0: Port device team_slave_1 added [ 284.118937][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.126276][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.152383][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.159279][ T6081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.407994][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.418981][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.446339][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.455397][ T6081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.786985][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 284.793521][ T5855] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 284.800820][ T5855] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 285.363615][ T30] audit: type=1326 audit(1747324780.554:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 285.388010][ T30] audit: type=1326 audit(1747324780.554:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 285.411841][ T30] audit: type=1326 audit(1747324780.564:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 285.434667][ T30] audit: type=1326 audit(1747324780.564:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 285.458787][ T30] audit: type=1326 audit(1747324780.564:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 285.481341][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.488871][ T30] audit: type=1326 audit(1747324780.564:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 285.511178][ T30] audit: type=1326 audit(1747324780.594:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 285.533630][ T30] audit: type=1326 audit(1747324780.604:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 285.558290][ T30] audit: type=1326 audit(1747324780.604:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 285.580258][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.587972][ T30] audit: type=1326 audit(1747324780.604:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 285.637114][ T6081] hsr_slave_0: entered promiscuous mode [ 285.656549][ T6081] hsr_slave_1: entered promiscuous mode [ 285.665538][ T6081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.673535][ T6081] Cannot create hsr debugfs directory [ 285.940238][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.951206][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.318831][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 286.873620][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout [ 286.880974][ T5855] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 286.887749][ T5855] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 287.570327][ T6081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.616230][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 287.664441][ T6081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 287.778082][ T6081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.840660][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 287.888208][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.901475][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.912553][ T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 287.922134][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.937890][ T6081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.059372][ T9] usb 3-1: config 0 descriptor?? [ 288.390275][ T5857] kernel write not supported for file [eventfd] (pid: 5857 comm: kworker/1:4) [ 288.439247][ T6214] loop2: detected capacity change from 0 to 256 [ 288.477769][ T6214] vfat: Unknown parameter 'uni_' [ 288.851905][ T9] hid (null): invalid report_size 24934 [ 288.922775][ T9] hid (null): invalid report_size 892956265 [ 288.988680][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout [ 288.996645][ T5855] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 289.003206][ T5855] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 289.054472][ T9] usb 3-1: string descriptor 0 read error: -71 [ 289.106922][ T9] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 289.115424][ T9] letsketch 0003:6161:4D15.0001: probe with driver letsketch failed with error -32 [ 289.218574][ T9] usb 3-1: USB disconnect, device number 2 [ 289.774265][ T6081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.128071][ T6081] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.208204][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.215800][ T3650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.369356][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.377223][ T3650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.991262][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 290.991341][ T30] audit: type=1326 audit(1747324786.184:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 291.021438][ T30] audit: type=1326 audit(1747324786.184:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 291.134085][ T5809] Bluetooth: hci4: command 0x0c1a tx timeout [ 291.157251][ T5855] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 291.164587][ T5855] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 291.184683][ T30] audit: type=1326 audit(1747324786.334:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=246 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 291.207721][ T30] audit: type=1326 audit(1747324786.334:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 291.230118][ T30] audit: type=1326 audit(1747324786.334:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 291.252497][ T30] audit: type=1326 audit(1747324786.444:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 291.277749][ T30] audit: type=1326 audit(1747324786.444:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 291.301504][ T30] audit: type=1326 audit(1747324786.484:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 291.324749][ T30] audit: type=1326 audit(1747324786.484:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 291.347842][ T30] audit: type=1326 audit(1747324786.484:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 293.323398][ T6081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.485465][ T6275] loop1: detected capacity change from 0 to 256 [ 294.467176][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.496825][ T5855] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 294.503595][ T5855] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 295.527841][ T5857] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 295.758793][ T5857] usb 3-1: config 0 has no interfaces? [ 295.764948][ T5857] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 295.774579][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.856415][ T6081] veth0_vlan: entered promiscuous mode [ 295.912195][ T5857] usb 3-1: config 0 descriptor?? [ 296.020131][ T6081] veth1_vlan: entered promiscuous mode [ 296.479341][ T6308] loop3: detected capacity change from 0 to 1024 [ 296.526878][ T6081] veth0_macvtap: entered promiscuous mode [ 296.704474][ T6081] veth1_macvtap: entered promiscuous mode [ 296.877452][ T6308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.110493][ T6301] loop2: detected capacity change from 0 to 32768 [ 297.205325][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.220614][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.235436][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.248816][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.262402][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.275786][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.288724][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.303407][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.319399][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.390559][ T6301] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.406786][ T5855] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 297.769136][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.781134][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.794160][ T5855] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 297.804692][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.851347][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.864543][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.876630][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.888890][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.903656][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.914718][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.926327][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.937394][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.953183][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.069578][ T5855] usb 2-1: config 0 descriptor?? [ 298.182407][ T6081] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.193672][ T6081] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.204703][ T6081] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.214540][ T6081] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.251675][ T6308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.502729][ T6301] XFS (loop2): Ending clean mount [ 298.581973][ T5857] usb 3-1: USB disconnect, device number 3 [ 298.617079][ T5797] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 298.682083][ T5855] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 299.432828][ T5855] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 299.442844][ T5855] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 299.561485][ T5855] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -71 [ 299.691688][ T5855] usb 2-1: USB disconnect, device number 3 [ 300.536427][ T5857] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 300.774384][ T5857] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 300.786983][ T5857] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 300.799269][ T5857] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 300.810587][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.928087][ T6347] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 300.992332][ T5857] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.261979][ T1878] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 301.570916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 301.581618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 301.612370][ T1878] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.621789][ T1878] usb 2-1: config 0 has no interface number 0 [ 301.628978][ T1878] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.641045][ T1878] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.652047][ T1878] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 301.661712][ T1878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.088103][ T1878] usb 2-1: config 0 descriptor?? [ 302.789987][ T1878] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 302.804664][ T1878] hid_prodikeys: hid-prodikeys: failed to find output report [ 302.804664][ T1878] [ 302.876962][ T5857] usb 4-1: USB disconnect, device number 2 [ 303.073057][ T1878] usb 2-1: USB disconnect, device number 4 [ 303.478204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 303.490201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 303.501078][ T5858] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 303.775789][ T5858] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.787449][ T5858] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.799539][ T5858] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.873198][ T5858] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.882903][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.891963][ T5858] usb 3-1: Product: syz [ 303.898745][ T5858] usb 3-1: Manufacturer: syz [ 303.903618][ T5858] usb 3-1: SerialNumber: syz [ 305.168573][ T5858] cdc_ncm 3-1:1.0: bind() failure [ 305.270295][ T5858] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 305.296975][ T5858] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 305.374080][ T5858] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 305.439646][ T5858] usb 3-1: USB disconnect, device number 4 [ 306.156585][ T5855] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 306.346670][ T5855] usb 5-1: Using ep0 maxpacket: 8 [ 306.398207][ T5855] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 306.409119][ T5855] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 306.419117][ T5855] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.619017][ T5855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.629307][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.638047][ T5855] usb 5-1: Product: syz [ 306.642701][ T5855] usb 5-1: Manufacturer: syz [ 306.647793][ T5855] usb 5-1: SerialNumber: syz [ 306.795864][ T5855] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 306.803494][ T5855] cdc_ncm 5-1:1.0: bind() failure [ 307.730550][ T4113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.738832][ T4113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.907645][ T6399] loop4: detected capacity change from 0 to 32768 [ 308.034074][ T6399] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 308.127652][ T6399] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 308.154509][ T6399] (syz.4.105,6399,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, name_len=0 [ 308.185718][ T5858] usb 5-1: USB disconnect, device number 2 [ 308.215868][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.252614][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.508572][ T6420] loop2: detected capacity change from 0 to 2048 [ 308.762965][ T6420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.065289][ T5807] ocfs2: Unmounting device (7,4) on (node local) [ 309.683024][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 309.683114][ T30] audit: type=1326 audit(1747324804.864:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.1.113" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7fc00000 [ 310.836254][ T6444] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 310.859790][ T6445] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 311.209316][ T6451] loop9: detected capacity change from 0 to 7 [ 311.288291][ T6451] Dev loop9: unable to read RDB block 7 [ 311.294790][ T6451] loop9: unable to read partition table [ 311.348846][ T6451] loop9: partition table beyond EOD, truncated [ 311.355878][ T6451] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 312.127757][ T6460] loop2: detected capacity change from 0 to 512 [ 312.321044][ T6463] capability: warning: `syz.4.123' uses deprecated v2 capabilities in a way that may be insecure [ 312.402034][ T6460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.415666][ T6460] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.395180][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.957643][ T6488] loop2: detected capacity change from 0 to 128 [ 314.995475][ T6488] EXT4-fs: Ignoring removed nobh option [ 315.083081][ T6488] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 315.143149][ T6488] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 315.499973][ T6492] loop6: detected capacity change from 0 to 524287999 [ 315.999361][ T5797] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.597253][ T6495] loop5: detected capacity change from 0 to 32768 [ 316.659458][ T6495] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 317.041719][ T5858] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 317.052836][ T6495] XFS (loop5): Ending clean mount [ 317.078016][ T6495] XFS (loop5): Quotacheck needed: Please wait. [ 317.246764][ T6495] XFS (loop5): Quotacheck: Done. [ 317.262663][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 317.318477][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 317.330905][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 317.527520][ T5858] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 317.538905][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.552419][ T5858] usb 4-1: Product: syz [ 317.557461][ T5858] usb 4-1: Manufacturer: syz [ 317.562348][ T5858] usb 4-1: SerialNumber: syz [ 317.609640][ T6081] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 317.733655][ T5858] usb 4-1: config 0 descriptor?? [ 317.812078][ T5858] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 317.822569][ T5858] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 318.427221][ T6518] mmap: syz.4.138 (6518) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 318.463423][ T5858] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 318.520659][ T5858] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 318.745004][ T5858] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 318.753128][ T5858] em28xx 4-1:0.0: No AC97 audio processor [ 318.844967][ T5858] usb 4-1: USB disconnect, device number 3 [ 318.852953][ T5858] em28xx 4-1:0.0: Disconnecting em28xx [ 318.952508][ T5858] em28xx 4-1:0.0: Freeing device [ 320.908346][ T6547] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 323.137685][ T5858] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 323.356241][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 323.388284][ T5858] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 323.397326][ T5858] usb 4-1: config 0 has no interface number 0 [ 323.403818][ T5858] usb 4-1: config 0 interface 12 has no altsetting 0 [ 323.565516][ T5858] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 323.577481][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.585838][ T5858] usb 4-1: Product: syz [ 323.593357][ T5858] usb 4-1: Manufacturer: syz [ 323.598900][ T5858] usb 4-1: SerialNumber: syz [ 323.716701][ T5858] usb 4-1: config 0 descriptor?? [ 325.377116][ T5858] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 325.385030][ T5858] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 325.393702][ T5858] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 325.401898][ T5858] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 325.808321][ T5858] usb 4-1: USB disconnect, device number 4 [ 325.958364][ T6588] loop2: detected capacity change from 0 to 4096 [ 327.057761][ T30] audit: type=1800 audit(1747324822.234:33): pid=6607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.160" name="file1" dev="loop2" ino=34 res=0 errno=0 [ 327.525765][ T6609] loop3: detected capacity change from 0 to 16 [ 327.675755][ T6609] erofs (device loop3): mounted with root inode @ nid 36. [ 327.807321][ T30] audit: type=1800 audit(1747324822.994:34): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.166" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 328.445065][ T6622] loop2: detected capacity change from 0 to 256 [ 328.706775][ T6622] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 331.096218][ T5858] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 331.130532][ T6653] loop2: detected capacity change from 0 to 256 [ 331.172503][ T6656] hugetlbfs: syz.1.182 (6656): Using mlock ulimits for SHM_HUGETLB is obsolete [ 331.216568][ T6653] exfat: Deprecated parameter 'namecase' [ 331.222960][ T6653] exfat: Deprecated parameter 'utf8' [ 331.346589][ T5858] usb 4-1: config 0 has no interfaces? [ 331.352618][ T5858] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 331.363345][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.461235][ T5858] usb 4-1: config 0 descriptor?? [ 331.531802][ T6653] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 331.748736][ T6649] loop8: detected capacity change from 0 to 7 [ 331.808817][ T6649] Dev loop8: unable to read RDB block 7 [ 331.814961][ T6649] loop8: unable to read partition table [ 331.917532][ T6649] loop8: partition table beyond EOD, truncated [ 331.929299][ T6649] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 331.929299][ T6649] ) failed (rc=-5) [ 332.142788][ T5855] usb 4-1: USB disconnect, device number 5 [ 333.113065][ T6677] block nbd4: Device being setup by another task [ 333.175265][ T6679] loop5: detected capacity change from 0 to 47 [ 333.178775][ T6676] block nbd4: NBD_DISCONNECT [ 333.186877][ T6676] block nbd4: Send disconnect failed -107 [ 333.261112][ T6675] block nbd4: Disconnected due to user request. [ 333.270395][ T6675] block nbd4: shutting down sockets [ 333.427934][ T6679] loop5: detected capacity change from 47 to 0 [ 333.468865][ T6679] syz.5.188: attempt to access beyond end of device [ 333.468865][ T6679] loop5: rw=2049, sector=12, nr_sectors = 2 limit=0 [ 333.570297][ T6679] syz.5.188: attempt to access beyond end of device [ 333.570297][ T6679] loop5: rw=0, sector=8, nr_sectors = 2 limit=0 [ 333.584532][ T6679] Unable to read inode block [ 334.079918][ T6081] syz-executor: attempt to access beyond end of device [ 334.079918][ T6081] loop5: rw=0, sector=8, nr_sectors = 2 limit=0 [ 334.093605][ T6081] Unable to read inode block [ 334.143097][ T6081] syz-executor: attempt to access beyond end of device [ 334.143097][ T6081] loop5: rw=0, sector=8, nr_sectors = 2 limit=0 [ 334.157612][ T6081] Unable to read inode block [ 334.584701][ T6690] loop4: detected capacity change from 0 to 4096 [ 334.735061][ T3650] kworker/u8:19: attempt to access beyond end of device [ 334.735061][ T3650] loop5: rw=0, sector=8, nr_sectors = 2 limit=0 [ 334.750025][ T3650] Unable to read inode block [ 334.820892][ T6690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.845762][ T3650] kworker/u8:19: attempt to access beyond end of device [ 334.845762][ T3650] loop5: rw=0, sector=8, nr_sectors = 2 limit=0 [ 334.863669][ T3650] Unable to read inode block [ 335.091811][ T6690] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #15: comm syz.4.192: corrupted inode contents [ 335.128162][ T6690] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #15: comm syz.4.192: mark_inode_dirty error [ 335.161582][ T6690] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #15: comm syz.4.192: corrupted inode contents [ 335.254697][ T6690] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.192: mark_inode_dirty error [ 335.352225][ T4371] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.397220][ T6690] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #15: comm syz.4.192: corrupted inode contents [ 335.527678][ T6690] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.192: mark_inode_dirty error [ 335.589526][ T6690] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #15: comm syz.4.192: corrupted inode contents [ 335.701151][ T6690] EXT4-fs error (device loop4): ext4_truncate:4255: inode #15: comm syz.4.192: mark_inode_dirty error [ 335.701560][ T4371] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.779033][ T6690] EXT4-fs error (device loop4): ext4_evict_inode:270: comm syz.4.192: couldn't truncate inode 15 (err -117) [ 335.950444][ T4371] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.134304][ T4371] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.745702][ T4371] bridge_slave_1: left allmulticast mode [ 336.752041][ T4371] bridge_slave_1: left promiscuous mode [ 336.759068][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.878838][ T4371] bridge_slave_0: left allmulticast mode [ 336.884787][ T4371] bridge_slave_0: left promiscuous mode [ 336.891844][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.892965][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.628116][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.693090][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.733398][ T4371] bond0 (unregistering): Released all slaves [ 338.451258][ T4371] hsr_slave_0: left promiscuous mode [ 338.471233][ T4371] hsr_slave_1: left promiscuous mode [ 338.479904][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.488020][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.517847][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.525744][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.681030][ T4371] veth1_macvtap: left promiscuous mode [ 338.687022][ T4371] veth0_macvtap: left promiscuous mode [ 338.693092][ T4371] veth1_vlan: left promiscuous mode [ 338.699342][ T4371] veth0_vlan: left promiscuous mode [ 339.296302][ T5855] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 339.502353][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.514791][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.633232][ T5855] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 339.643387][ T5855] usb 5-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 339.652104][ T5855] usb 5-1: Manufacturer: syz [ 339.699159][ T6741] loop3: detected capacity change from 0 to 64 [ 339.728051][ T5093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.783175][ T5093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.810391][ T5855] usb 5-1: config 0 descriptor?? [ 339.821448][ T5093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.847372][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.869033][ T5093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.906476][ T5855] hub 5-1:0.0: USB hub found [ 339.959444][ T4371] team0 (unregistering): Port device team_slave_1 removed [ 340.046375][ T5855] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 340.062149][ T4371] team0 (unregistering): Port device team_slave_0 removed [ 340.325406][ T5855] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 340.400676][ T5855] hid-generic 0003:046D:C31C.0004: probe with driver hid-generic failed with error -22 [ 340.594105][ T5855] usb 5-1: USB disconnect, device number 3 [ 340.806424][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 341.030072][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 341.092911][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 341.101751][ T9] usb 3-1: config 0 has no interface number 0 [ 341.109107][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 341.119366][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 341.129725][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 341.403894][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 341.413685][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.422167][ T9] usb 3-1: Product: syz [ 341.426927][ T9] usb 3-1: Manufacturer: syz [ 341.431783][ T9] usb 3-1: SerialNumber: syz [ 341.523357][ T9] usb 3-1: config 0 descriptor?? [ 341.534438][ T6744] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 341.549696][ T6744] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 341.789999][ T6744] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 341.858389][ T6744] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 342.058145][ T5809] Bluetooth: hci1: command tx timeout [ 342.324588][ T9] Error reading MAC address [ 342.356347][ T6744] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 342.387053][ T6744] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 342.646688][ T9] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 342.697677][ T6740] chnl_net:caif_netlink_parms(): no params data found [ 342.759221][ T9] usb 3-1: USB disconnect, device number 5 [ 343.253372][ T6770] loop3: detected capacity change from 0 to 512 [ 343.354715][ T6770] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 343.518047][ T6770] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.214: bad orphan inode 131083 [ 343.612023][ T6770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.859309][ T6770] overlayfs: upper fs needs to support d_type. [ 343.985017][ T6781] loop2: detected capacity change from 0 to 1024 [ 344.008075][ T6770] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.214: path /: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 344.066538][ T5809] Bluetooth: hci1: command tx timeout [ 344.269525][ T5813] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /47/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 344.426921][ T6787] netlink: 'syz.4.218': attribute type 2 has an invalid length. [ 344.435053][ T6787] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.218'. [ 344.444972][ T6787] nbd: must specify a device to reconfigure [ 344.487515][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 344.716345][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 344.730064][ T6740] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.737887][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.745673][ T6740] bridge_slave_0: entered allmulticast mode [ 344.757043][ T6740] bridge_slave_0: entered promiscuous mode [ 344.777866][ T9] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 344.786525][ T9] usb 3-1: config 1 has no interface number 0 [ 344.792997][ T9] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 344.803534][ T9] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 344.814405][ T9] usb 3-1: config 1 interface 105 has no altsetting 0 [ 344.899025][ T6740] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.906813][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.914720][ T6740] bridge_slave_1: entered allmulticast mode [ 344.927183][ T6740] bridge_slave_1: entered promiscuous mode [ 344.958532][ T9] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 344.968205][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.976712][ T9] usb 3-1: Product: syz [ 344.981140][ T9] usb 3-1: Manufacturer: syz [ 344.986103][ T9] usb 3-1: SerialNumber: syz [ 345.072523][ T6781] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 345.137466][ T6781] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 345.162662][ T5813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.482130][ T4371] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.601432][ T6740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.692173][ T6781] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 345.754202][ T4371] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.758056][ T6781] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 345.883836][ T6740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.971888][ T4371] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.146647][ T5809] Bluetooth: hci1: command tx timeout [ 346.292879][ T6799] block nbd1: NBD_DISCONNECT [ 346.298920][ T6799] block nbd1: Send disconnect failed -22 [ 346.322545][ T6798] block nbd1: Disconnected due to user request. [ 346.330497][ T6798] block nbd1: shutting down sockets [ 346.341813][ T4371] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.440084][ T6740] team0: Port device team_slave_0 added [ 346.492771][ T6740] team0: Port device team_slave_1 added [ 346.515376][ T9] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 346.559263][ T9] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 346.570677][ T9] ===================================================== [ 346.578313][ T9] BUG: KMSAN: uninit-value in usbnet_probe+0x2e57/0x4390 [ 346.585609][ T9] usbnet_probe+0x2e57/0x4390 [ 346.590794][ T9] usb_probe_interface+0xd01/0x1310 [ 346.596502][ T9] really_probe+0x4d1/0xd90 [ 346.601210][ T9] __driver_probe_device+0x268/0x380 [ 346.606821][ T9] driver_probe_device+0x70/0x8b0 [ 346.612064][ T9] __device_attach_driver+0x4ee/0x950 [ 346.618102][ T9] bus_for_each_drv+0x3e0/0x680 [ 346.623192][ T9] __device_attach+0x3c8/0x5c0 [ 346.628381][ T9] device_initial_probe+0x33/0x40 [ 346.633831][ T9] bus_probe_device+0x3ba/0x5e0 [ 346.639115][ T9] device_add+0x12a9/0x1c10 [ 346.643878][ T9] usb_set_configuration+0x3493/0x3b70 [ 346.649796][ T9] usb_generic_driver_probe+0xfc/0x290 [ 346.655625][ T9] usb_probe_device+0x38a/0x690 [ 346.660903][ T9] really_probe+0x4d1/0xd90 [ 346.665623][ T9] __driver_probe_device+0x268/0x380 [ 346.671389][ T9] driver_probe_device+0x70/0x8b0 [ 346.676711][ T9] __device_attach_driver+0x4ee/0x950 [ 346.682310][ T9] bus_for_each_drv+0x3e0/0x680 [ 346.687734][ T9] __device_attach+0x3c8/0x5c0 [ 346.692731][ T9] device_initial_probe+0x33/0x40 [ 346.698061][ T9] bus_probe_device+0x3ba/0x5e0 [ 346.703167][ T9] device_add+0x12a9/0x1c10 [ 346.709108][ T9] usb_new_device+0x104b/0x20c0 [ 346.714254][ T9] hub_event+0x5588/0x7580 [ 346.719044][ T9] process_scheduled_works+0xb97/0x1d90 [ 346.724818][ T9] worker_thread+0xedf/0x1590 [ 346.729894][ T9] kthread+0xd59/0xf00 [ 346.734188][ T9] ret_from_fork+0x6e/0x90 [ 346.739046][ T9] ret_from_fork_asm+0x1a/0x30 [ 346.744065][ T9] [ 346.746723][ T9] Uninit was stored to memory at: [ 346.752064][ T9] dev_addr_mod+0xb0/0x550 [ 346.756843][ T9] aqc111_bind+0x35f/0x1150 [ 346.761553][ T9] usbnet_probe+0xbe6/0x4390 [ 346.766955][ T9] usb_probe_interface+0xd01/0x1310 [ 346.772364][ T9] really_probe+0x4d1/0xd90 [ 346.777176][ T9] __driver_probe_device+0x268/0x380 [ 346.782678][ T9] driver_probe_device+0x70/0x8b0 [ 346.787994][ T9] __device_attach_driver+0x4ee/0x950 [ 346.793584][ T9] bus_for_each_drv+0x3e0/0x680 [ 346.798969][ T9] __device_attach+0x3c8/0x5c0 [ 346.803946][ T9] device_initial_probe+0x33/0x40 [ 346.809341][ T9] bus_probe_device+0x3ba/0x5e0 [ 346.814422][ T9] device_add+0x12a9/0x1c10 [ 346.819336][ T9] usb_set_configuration+0x3493/0x3b70 [ 346.825070][ T9] usb_generic_driver_probe+0xfc/0x290 [ 346.831154][ T9] usb_probe_device+0x38a/0x690 [ 346.836408][ T9] really_probe+0x4d1/0xd90 [ 346.841226][ T9] __driver_probe_device+0x268/0x380 [ 346.846933][ T9] driver_probe_device+0x70/0x8b0 [ 346.852183][ T9] __device_attach_driver+0x4ee/0x950 [ 346.857938][ T9] bus_for_each_drv+0x3e0/0x680 [ 346.863036][ T9] __device_attach+0x3c8/0x5c0 [ 346.868165][ T9] device_initial_probe+0x33/0x40 [ 346.873402][ T9] bus_probe_device+0x3ba/0x5e0 [ 346.878667][ T9] device_add+0x12a9/0x1c10 [ 346.883439][ T9] usb_new_device+0x104b/0x20c0 [ 346.888750][ T9] hub_event+0x5588/0x7580 [ 346.893539][ T9] process_scheduled_works+0xb97/0x1d90 [ 346.899555][ T9] worker_thread+0xedf/0x1590 [ 346.904466][ T9] kthread+0xd59/0xf00 [ 346.908859][ T9] ret_from_fork+0x6e/0x90 [ 346.913535][ T9] ret_from_fork_asm+0x1a/0x30 [ 346.918706][ T9] [ 346.921150][ T9] Uninit was stored to memory at: [ 346.926522][ T9] aqc111_bind+0x794/0x1150 [ 346.931234][ T9] usbnet_probe+0xbe6/0x4390 [ 346.936260][ T9] usb_probe_interface+0xd01/0x1310 [ 346.941672][ T9] really_probe+0x4d1/0xd90 [ 346.946766][ T9] __driver_probe_device+0x268/0x380 [ 346.952286][ T9] driver_probe_device+0x70/0x8b0 [ 346.957695][ T9] __device_attach_driver+0x4ee/0x950 [ 346.963474][ T9] bus_for_each_drv+0x3e0/0x680 [ 346.968667][ T9] __device_attach+0x3c8/0x5c0 [ 346.973648][ T9] device_initial_probe+0x33/0x40 [ 346.979046][ T9] bus_probe_device+0x3ba/0x5e0 [ 346.984140][ T9] device_add+0x12a9/0x1c10 [ 346.989002][ T9] usb_set_configuration+0x3493/0x3b70 [ 346.995128][ T9] usb_generic_driver_probe+0xfc/0x290 [ 347.001102][ T9] usb_probe_device+0x38a/0x690 [ 347.006430][ T9] really_probe+0x4d1/0xd90 [ 347.011159][ T9] __driver_probe_device+0x268/0x380 [ 347.016843][ T9] driver_probe_device+0x70/0x8b0 [ 347.022103][ T9] __device_attach_driver+0x4ee/0x950 [ 347.027819][ T9] bus_for_each_drv+0x3e0/0x680 [ 347.032935][ T9] __device_attach+0x3c8/0x5c0 [ 347.038115][ T9] device_initial_probe+0x33/0x40 [ 347.043363][ T9] bus_probe_device+0x3ba/0x5e0 [ 347.048634][ T9] device_add+0x12a9/0x1c10 [ 347.053402][ T9] usb_new_device+0x104b/0x20c0 [ 347.058711][ T9] hub_event+0x5588/0x7580 [ 347.063370][ T9] process_scheduled_works+0xb97/0x1d90 [ 347.069342][ T9] worker_thread+0xedf/0x1590 [ 347.074250][ T9] kthread+0xd59/0xf00 [ 347.078721][ T9] ret_from_fork+0x6e/0x90 [ 347.083405][ T9] ret_from_fork_asm+0x1a/0x30 [ 347.088557][ T9] [ 347.091019][ T9] Local variable buf.i created at: [ 347.096434][ T9] aqc111_bind+0x221/0x1150 [ 347.101146][ T9] usbnet_probe+0xbe6/0x4390 [ 347.106170][ T9] [ 347.108702][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 347.120962][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.131434][ T9] Workqueue: usb_hub_wq hub_event [ 347.136826][ T9] ===================================================== [ 347.143998][ T9] Disabling lock debugging due to kernel taint [ 347.150422][ T9] Kernel panic - not syncing: kmsan.panic set ... [ 347.157009][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 347.170696][ T9] Tainted: [B]=BAD_PAGE [ 347.174968][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.185187][ T9] Workqueue: usb_hub_wq hub_event [ 347.190512][ T9] Call Trace: [ 347.193931][ T9] [ 347.196999][ T9] __dump_stack+0x26/0x30 [ 347.201558][ T9] dump_stack_lvl+0x53/0x270 [ 347.206348][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 347.212403][ T9] dump_stack+0x1e/0x25 [ 347.216763][ T9] panic+0x4bd/0xd50 [ 347.220929][ T9] kmsan_report+0x29d/0x2a0 [ 347.225659][ T9] ? __netdev_printk+0x677/0xa00 [ 347.230777][ T9] ? __msan_warning+0x96/0x120 [ 347.235736][ T9] ? usbnet_probe+0x2e57/0x4390 [ 347.240829][ T9] ? usb_probe_interface+0xd01/0x1310 [ 347.246390][ T9] ? really_probe+0x4d1/0xd90 [ 347.251262][ T9] ? __driver_probe_device+0x268/0x380 [ 347.256907][ T9] ? driver_probe_device+0x70/0x8b0 [ 347.262289][ T9] ? __device_attach_driver+0x4ee/0x950 [ 347.268030][ T9] ? bus_for_each_drv+0x3e0/0x680 [ 347.273294][ T9] ? __device_attach+0x3c8/0x5c0 [ 347.278436][ T9] ? device_initial_probe+0x33/0x40 [ 347.283864][ T9] ? bus_probe_device+0x3ba/0x5e0 [ 347.289166][ T9] ? device_add+0x12a9/0x1c10 [ 347.294137][ T9] ? usb_set_configuration+0x3493/0x3b70 [ 347.300153][ T9] ? usb_generic_driver_probe+0xfc/0x290 [ 347.306043][ T9] ? usb_probe_device+0x38a/0x690 [ 347.311338][ T9] ? really_probe+0x4d1/0xd90 [ 347.316214][ T9] ? __driver_probe_device+0x268/0x380 [ 347.321864][ T9] ? driver_probe_device+0x70/0x8b0 [ 347.327244][ T9] ? __device_attach_driver+0x4ee/0x950 [ 347.333070][ T9] ? bus_for_each_drv+0x3e0/0x680 [ 347.338326][ T9] ? __device_attach+0x3c8/0x5c0 [ 347.343434][ T9] ? device_initial_probe+0x33/0x40 [ 347.348814][ T9] ? bus_probe_device+0x3ba/0x5e0 [ 347.354050][ T9] ? device_add+0x12a9/0x1c10 [ 347.358950][ T9] ? usb_new_device+0x104b/0x20c0 [ 347.364178][ T9] ? hub_event+0x5588/0x7580 [ 347.368983][ T9] ? process_scheduled_works+0xb97/0x1d90 [ 347.374891][ T9] ? worker_thread+0xedf/0x1590 [ 347.379926][ T9] ? kthread+0xd59/0xf00 [ 347.384368][ T9] ? ret_from_fork+0x6e/0x90 [ 347.389185][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 347.394402][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 347.399830][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 347.405266][ T9] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 347.411725][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 347.417148][ T9] __msan_warning+0x96/0x120 [ 347.421932][ T9] usbnet_probe+0x2e57/0x4390 [ 347.426941][ T9] ? pm_runtime_enable+0x3b2/0x4d0 [ 347.432331][ T9] ? __pfx_usbnet_probe+0x10/0x10 [ 347.437587][ T9] usb_probe_interface+0xd01/0x1310 [ 347.442999][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 347.448818][ T9] really_probe+0x4d1/0xd90 [ 347.453534][ T9] __driver_probe_device+0x268/0x380 [ 347.459020][ T9] driver_probe_device+0x70/0x8b0 [ 347.464249][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 347.469670][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 347.475702][ T9] __device_attach_driver+0x4ee/0x950 [ 347.481292][ T9] bus_for_each_drv+0x3e0/0x680 [ 347.486351][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 347.492469][ T9] __device_attach+0x3c8/0x5c0 [ 347.497431][ T9] device_initial_probe+0x33/0x40 [ 347.502729][ T9] bus_probe_device+0x3ba/0x5e0 [ 347.507804][ T9] device_add+0x12a9/0x1c10 [ 347.512560][ T9] usb_set_configuration+0x3493/0x3b70 [ 347.518351][ T9] usb_generic_driver_probe+0xfc/0x290 [ 347.524050][ T9] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 347.530351][ T9] usb_probe_device+0x38a/0x690 [ 347.535460][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 347.541071][ T9] really_probe+0x4d1/0xd90 [ 347.545766][ T9] __driver_probe_device+0x268/0x380 [ 347.551318][ T9] driver_probe_device+0x70/0x8b0 [ 347.556534][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 347.562045][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 347.568086][ T9] __device_attach_driver+0x4ee/0x950 [ 347.573669][ T9] bus_for_each_drv+0x3e0/0x680 [ 347.578736][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 347.584843][ T9] __device_attach+0x3c8/0x5c0 [ 347.589805][ T9] device_initial_probe+0x33/0x40 [ 347.595014][ T9] bus_probe_device+0x3ba/0x5e0 [ 347.600094][ T9] device_add+0x12a9/0x1c10 [ 347.604847][ T9] usb_new_device+0x104b/0x20c0 [ 347.609940][ T9] hub_event+0x5588/0x7580 [ 347.614615][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 347.620655][ T9] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 347.626389][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 347.631841][ T9] ? __pfx_hub_event+0x10/0x10 [ 347.636821][ T9] process_scheduled_works+0xb97/0x1d90 [ 347.642738][ T9] worker_thread+0xedf/0x1590 [ 347.647640][ T9] kthread+0xd59/0xf00 [ 347.651998][ T9] ? __pfx_worker_thread+0x10/0x10 [ 347.657408][ T9] ? __pfx_kthread+0x10/0x10 [ 347.662211][ T9] ret_from_fork+0x6e/0x90 [ 347.666849][ T9] ? __pfx_kthread+0x10/0x10 [ 347.671639][ T9] ret_from_fork_asm+0x1a/0x30 [ 347.676654][ T9] [ 347.680229][ T9] Kernel Offset: disabled [ 347.684648][ T9] Rebooting in 86400 seconds..