last executing test programs: 11.402261456s ago: executing program 2 (id=106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@x86={0x3, 0xf, 0x1, 0x0, 0x5, 0x4d, 0xfe, 0x6, 0x1, 0x4, 0x8, 0x0, 0x0, 0x5, 0x80000, 0x9, 0xff, 0x9, 0x5, '\x00', 0x5, 0xe732}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.340230292s ago: executing program 2 (id=112): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000404355810700000000000109022c00010000000009041000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@local=@item_012={0x0, 0x2, 0xa}, @main=@item_4={0x3, 0x0, 0xb, "d2044733"}]}}, 0x0}, 0x0) 7.888777644s ago: executing program 2 (id=124): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={r0, 0x1, 0x6, @local}, 0x10) 7.36586207s ago: executing program 2 (id=125): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f00000008c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x10, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) 7.361400607s ago: executing program 3 (id=126): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 7.100264916s ago: executing program 1 (id=129): bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.847963568s ago: executing program 2 (id=130): r0 = syz_io_uring_setup(0x1f68, &(0x7f0000000740)={0x0, 0x0, 0x10100, 0xbff7fffd, 0x182}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.642710675s ago: executing program 1 (id=132): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x18, 0x0) 6.642619642s ago: executing program 3 (id=133): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.238191859s ago: executing program 2 (id=134): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='3', 0x1}], 0x1) 6.070967812s ago: executing program 1 (id=136): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x1, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 4.626484834s ago: executing program 1 (id=139): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x68, r3, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x95ce, 0xe9}}, @val={0x72, 0x6}}}]}, 0x68}}, 0x14) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x1}, 0x8) syz_usb_control_io$uac1(r0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)}, 0x0) 4.407086606s ago: executing program 4 (id=141): r0 = syz_io_uring_setup(0x845, &(0x7f0000000140)={0x0, 0x40fad6, 0x1000, 0x2, 0x15e}, &(0x7f0000002480)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) 3.964934183s ago: executing program 0 (id=142): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000200)={0x2, 0x0, 0x39}) 3.83092802s ago: executing program 3 (id=143): openat$kvm(0x0, 0x0, 0x2382, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x2000, 0x103) 3.430386197s ago: executing program 4 (id=144): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"d5514f85973b798328607634cbc9395a28ed4656d96f46e7018ff274d5ec56ba", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {}]}) 3.169318122s ago: executing program 3 (id=145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "5819ee08b3d41e55", "53dc74f9141d6ceb6531a57b436f4e72d51076027702de71e686cf875b950bd4", "6ab6cd6f", "68b1a942a5a43805"}, 0x38) sendto$inet6(r0, &(0x7f0000000080)="454f284bee", 0x5, 0x40, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x2, 0x4) 2.991047958s ago: executing program 0 (id=146): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x18, 0x0) 2.647200962s ago: executing program 4 (id=147): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x6, 0x0, &(0x7f0000001100)=0xffffffffffffff2e) 2.386025125s ago: executing program 0 (id=148): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000040)) 2.332958585s ago: executing program 3 (id=149): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x1, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 2.019090406s ago: executing program 4 (id=150): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1.704659983s ago: executing program 0 (id=151): unshare(0x20000400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) fcntl$setstatus(r1, 0x4, 0x2000) 1.593123529s ago: executing program 1 (id=152): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 1.571166378s ago: executing program 3 (id=153): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 890.936699ms ago: executing program 4 (id=154): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 890.728909ms ago: executing program 0 (id=155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 752.770044ms ago: executing program 1 (id=156): r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socket$rds(0x15, 0x5, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x8, 0x7, 0x0, 0x4, 0x4000, 0x7, 0x4}, &(0x7f0000000000)={0x101, 0xfffffffffffff000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400000800000000}, 0x0, 0x0, 0x0) 299.409885ms ago: executing program 0 (id=157): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) close(r0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x4c, r4, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x3, 0x7, 0xddd3, 0x40, 0x40, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x4c}}, 0x40840) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) 0s ago: executing program 4 (id=158): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="52010000571c0220da040d39a8930102030109021b0001000000000904000001f6c77c0009050301"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. [ 173.247820][ T5767] cgroup: Unknown subsys name 'net' [ 173.372492][ T5767] cgroup: Unknown subsys name 'cpuset' [ 173.385980][ T5767] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 217.751756][ T5767] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 221.591216][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.608928][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.620401][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.620460][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.622454][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.629568][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.642126][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.648321][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.656287][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.658226][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.667332][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.687041][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.746272][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.755246][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.774838][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.776289][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.784129][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.791261][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.803856][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.810060][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.815914][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.821668][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.826807][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.834885][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.030135][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.052829][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.171399][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.264855][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.286697][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 222.296190][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.030530][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 223.094372][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 223.329743][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 223.714414][ T5786] Bluetooth: hci1: command tx timeout [ 223.794898][ T5786] Bluetooth: hci0: command tx timeout [ 223.876037][ T5786] Bluetooth: hci3: command tx timeout [ 223.882246][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 223.925125][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 223.973932][ T5786] Bluetooth: hci2: command tx timeout [ 224.081805][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.089669][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.099740][ T5792] bridge_slave_0: entered allmulticast mode [ 224.108904][ T5792] bridge_slave_0: entered promiscuous mode [ 224.262002][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.273091][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.281033][ T5792] bridge_slave_1: entered allmulticast mode [ 224.289943][ T5792] bridge_slave_1: entered promiscuous mode [ 224.334152][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.341828][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.349685][ T5784] bridge_slave_0: entered allmulticast mode [ 224.356034][ T5786] Bluetooth: hci4: command tx timeout [ 224.364478][ T5784] bridge_slave_0: entered promiscuous mode [ 224.397789][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.405190][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.494397][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.502054][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.512627][ T5784] bridge_slave_1: entered allmulticast mode [ 224.525259][ T5784] bridge_slave_1: entered promiscuous mode [ 224.549484][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.577251][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.813013][ T5792] team0: Port device team_slave_0 added [ 224.832290][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.848298][ T5792] team0: Port device team_slave_1 added [ 224.915948][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.008780][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.016583][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.026446][ T5783] bridge_slave_0: entered allmulticast mode [ 225.035201][ T5783] bridge_slave_0: entered promiscuous mode [ 225.134088][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.141714][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.149522][ T5783] bridge_slave_1: entered allmulticast mode [ 225.159453][ T5783] bridge_slave_1: entered promiscuous mode [ 225.171692][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.179015][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.205339][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.256062][ T5784] team0: Port device team_slave_0 added [ 225.354779][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.361958][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.388385][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.447573][ T5784] team0: Port device team_slave_1 added [ 225.456001][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.463599][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.471379][ T5796] bridge_slave_0: entered allmulticast mode [ 225.481662][ T5796] bridge_slave_0: entered promiscuous mode [ 225.500578][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.526011][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.533820][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.541457][ T5796] bridge_slave_1: entered allmulticast mode [ 225.550732][ T5796] bridge_slave_1: entered promiscuous mode [ 225.596069][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.647902][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.655587][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.663008][ T5791] bridge_slave_0: entered allmulticast mode [ 225.673976][ T5791] bridge_slave_0: entered promiscuous mode [ 225.801496][ T5786] Bluetooth: hci1: command tx timeout [ 225.842559][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.850400][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.859966][ T5791] bridge_slave_1: entered allmulticast mode [ 225.868668][ T5791] bridge_slave_1: entered promiscuous mode [ 225.878863][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.886207][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.900134][ T5786] Bluetooth: hci0: command tx timeout [ 225.912412][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.920530][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.937542][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.963942][ T5786] Bluetooth: hci3: command tx timeout [ 225.969501][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.045203][ T5792] hsr_slave_0: entered promiscuous mode [ 226.054042][ T5786] Bluetooth: hci2: command tx timeout [ 226.054860][ T5792] hsr_slave_1: entered promiscuous mode [ 226.102081][ T5783] team0: Port device team_slave_0 added [ 226.118519][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.136067][ T5783] team0: Port device team_slave_1 added [ 226.222433][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.243398][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.289777][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.433852][ T5786] Bluetooth: hci4: command tx timeout [ 226.479665][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.487029][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.513332][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.531925][ T5791] team0: Port device team_slave_0 added [ 226.615675][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.622814][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.649264][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.685779][ T5791] team0: Port device team_slave_1 added [ 226.697961][ T5796] team0: Port device team_slave_0 added [ 226.717315][ T5784] hsr_slave_0: entered promiscuous mode [ 226.726455][ T5784] hsr_slave_1: entered promiscuous mode [ 226.734097][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.741806][ T5784] Cannot create hsr debugfs directory [ 226.830301][ T5796] team0: Port device team_slave_1 added [ 226.972038][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.980475][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.007330][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.110360][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.117589][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.145334][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.198210][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.205542][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.233032][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.313014][ T5783] hsr_slave_0: entered promiscuous mode [ 227.323138][ T5783] hsr_slave_1: entered promiscuous mode [ 227.331569][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.339367][ T5783] Cannot create hsr debugfs directory [ 227.361304][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.369072][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.395502][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.788857][ T5791] hsr_slave_0: entered promiscuous mode [ 227.798433][ T5791] hsr_slave_1: entered promiscuous mode [ 227.807056][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.814898][ T5791] Cannot create hsr debugfs directory [ 227.875584][ T5786] Bluetooth: hci1: command tx timeout [ 227.896942][ T5796] hsr_slave_0: entered promiscuous mode [ 227.906210][ T5796] hsr_slave_1: entered promiscuous mode [ 227.913977][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.921702][ T5796] Cannot create hsr debugfs directory [ 227.958778][ T5786] Bluetooth: hci0: command tx timeout [ 228.044366][ T5786] Bluetooth: hci3: command tx timeout [ 228.114252][ T5786] Bluetooth: hci2: command tx timeout [ 228.337391][ T5792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.359529][ T5792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.450300][ T5792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.520251][ T5786] Bluetooth: hci4: command tx timeout [ 228.540126][ T5792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.868796][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.890029][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.911680][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.962199][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.335661][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.372962][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.397212][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.427593][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 229.445360][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.466317][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.491064][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.520391][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 229.574661][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.616900][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.641973][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 229.726374][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 229.964059][ T5786] Bluetooth: hci1: command tx timeout [ 230.036271][ T5786] Bluetooth: hci0: command tx timeout [ 230.118421][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.126619][ T5786] Bluetooth: hci3: command tx timeout [ 230.194500][ T5786] Bluetooth: hci2: command tx timeout [ 230.382330][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.501268][ T1866] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.509021][ T1866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.597161][ T5786] Bluetooth: hci4: command tx timeout [ 230.627303][ T1866] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.635030][ T1866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.708085][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.732659][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.772338][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.944309][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.988982][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.046968][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.122903][ T4070] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.130742][ T4070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.146617][ T4070] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.154318][ T4070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.324303][ T4070] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.331916][ T4070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.347078][ T4070] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.354786][ T4070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.369645][ T4070] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.377335][ T4070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.392337][ T4070] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.400014][ T4070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.765077][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.860227][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.898764][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.988169][ T4070] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.995880][ T4070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.235742][ T4070] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.243403][ T4070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.488340][ T5791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.499254][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.826082][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.794258][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.895851][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.927280][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.247277][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.358855][ T5784] veth0_vlan: entered promiscuous mode [ 234.469217][ T5783] veth0_vlan: entered promiscuous mode [ 234.501452][ T5784] veth1_vlan: entered promiscuous mode [ 234.518976][ T5796] veth0_vlan: entered promiscuous mode [ 234.612093][ T5783] veth1_vlan: entered promiscuous mode [ 234.659213][ T5796] veth1_vlan: entered promiscuous mode [ 234.902579][ T5784] veth0_macvtap: entered promiscuous mode [ 234.946379][ T5791] veth0_vlan: entered promiscuous mode [ 234.995565][ T5784] veth1_macvtap: entered promiscuous mode [ 235.044844][ T5796] veth0_macvtap: entered promiscuous mode [ 235.109945][ T5796] veth1_macvtap: entered promiscuous mode [ 235.169626][ T5791] veth1_vlan: entered promiscuous mode [ 235.221578][ T5783] veth0_macvtap: entered promiscuous mode [ 235.279166][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.331880][ T5783] veth1_macvtap: entered promiscuous mode [ 235.387894][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.399783][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.416651][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.431460][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.520525][ T5791] veth0_macvtap: entered promiscuous mode [ 235.550270][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.560893][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.570016][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.579054][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.610718][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.621689][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.636394][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.664602][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.675425][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.685649][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.696545][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.711277][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.746824][ T5791] veth1_macvtap: entered promiscuous mode [ 235.792872][ T5792] veth0_vlan: entered promiscuous mode [ 235.808120][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.818061][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.827212][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.836269][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.871943][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.882905][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.893043][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.903993][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.918612][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.952858][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.963937][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.974823][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.985568][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.995760][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.006500][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.020871][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.055536][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.066354][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.076530][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.087277][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.097483][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.108256][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.122673][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.152057][ T5792] veth1_vlan: entered promiscuous mode [ 236.170952][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.180178][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.189354][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.199491][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.229926][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.240528][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.249750][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.258861][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.722806][ T5792] veth0_macvtap: entered promiscuous mode [ 236.830639][ T5792] veth1_macvtap: entered promiscuous mode [ 237.017408][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.028307][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.038486][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.049330][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.059534][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.070313][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.085200][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.102007][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.117880][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.273465][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.288328][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.298680][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.309439][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.321661][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.333320][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.343473][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.354361][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.368728][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.580353][ T5792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.591215][ T5792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.602738][ T5792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.611899][ T5792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.782529][ T1840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.790840][ T1840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.849579][ T3728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.858023][ T3728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.538429][ T5784] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 242.661760][ T3728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.669924][ T3728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.853963][ T1866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.862004][ T1866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.013824][ T4070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.021892][ T4070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.085565][ T1840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.093982][ T1840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.198658][ T1840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.206869][ T1840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.255542][ T3688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.263590][ T3688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.194444][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.202511][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.504410][ T1866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.512467][ T1866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.935490][ T5986] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 246.411389][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16'. [ 247.307089][ T6024] syzkaller0: entered promiscuous mode [ 247.312778][ T6024] syzkaller0: entered allmulticast mode [ 247.437850][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 247.475433][ T6020] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 247.661036][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.671743][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.702063][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.711915][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.720384][ T10] usb 5-1: Product: syz [ 247.724929][ T10] usb 5-1: Manufacturer: syz [ 247.729787][ T10] usb 5-1: SerialNumber: syz [ 248.070300][ T10] usb 5-1: 0:2 : does not exist [ 248.075771][ T10] usb 5-1: unit 3 not found! [ 248.199775][ T10] usb 5-1: USB disconnect, device number 2 [ 248.244230][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 248.484709][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 248.564163][ T25] usb 4-1: config 2 has an invalid interface number: 138 but max is 0 [ 248.572699][ T25] usb 4-1: config 2 has no interface number 0 [ 248.579303][ T25] usb 4-1: config 2 interface 138 has no altsetting 0 [ 248.675837][ T25] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010e, bcdDevice=e8.14 [ 248.685403][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.694342][ T25] usb 4-1: Product: syz [ 248.698723][ T25] usb 4-1: Manufacturer: syz [ 248.703526][ T25] usb 4-1: SerialNumber: syz [ 248.926870][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.065848][ T25] kvaser_usb 4-1:2.138: error -ENODEV: Cannot get usb endpoint(s) [ 249.160641][ T25] usb 4-1: USB disconnect, device number 2 [ 250.319998][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 250.343569][ T6056] vlan2: entered promiscuous mode [ 250.349056][ T6056] ip6gretap0: entered promiscuous mode [ 250.414533][ T6056] ip6gretap0: left promiscuous mode [ 250.804025][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 251.105041][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.119420][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 251.131897][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 251.143287][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.204946][ T6060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.301277][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 251.567971][ T25] usb 2-1: USB disconnect, device number 2 [ 251.697836][ T6069] netlink: 36 bytes leftover after parsing attributes in process `syz.2.42'. [ 251.707726][ T6069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.42'. [ 251.716883][ T6069] netlink: 36 bytes leftover after parsing attributes in process `syz.2.42'. [ 251.725991][ T6069] netlink: 36 bytes leftover after parsing attributes in process `syz.2.42'. [ 251.894017][ T5834] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 252.093119][ T5834] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.103880][ T5834] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.126642][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.139377][ T5834] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.155946][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.164254][ T5834] usb 1-1: Product: syz [ 252.168618][ T5834] usb 1-1: Manufacturer: syz [ 252.173411][ T5834] usb 1-1: SerialNumber: syz [ 252.548776][ T5834] usb 1-1: 0:2 : does not exist [ 252.558750][ T5834] usb 1-1: unit 3 not found! [ 252.644834][ T5834] usb 1-1: USB disconnect, device number 2 [ 253.081542][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.622019][ T6089] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.696624][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.404275][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 255.629061][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.639548][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.748096][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.760588][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.769085][ T10] usb 2-1: Product: syz [ 255.773455][ T10] usb 2-1: Manufacturer: syz [ 255.778506][ T10] usb 2-1: SerialNumber: syz [ 256.130365][ T10] usb 2-1: 0:2 : does not exist [ 256.142928][ T10] usb 2-1: unit 3 not found! [ 256.279194][ T10] usb 2-1: USB disconnect, device number 3 [ 256.671628][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.994673][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 258.112559][ T6153] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 258.135035][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 258.196764][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 258.231062][ T25] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 258.240078][ T25] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 258.248667][ T25] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 258.257199][ T25] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 258.265818][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 258.277949][ T25] usb 2-1: config 0 has no interface number 0 [ 258.288089][ T25] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 258.300617][ T25] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 258.310858][ T25] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 258.321038][ T25] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.334504][ T25] usb 2-1: config 0 interface 125 has no altsetting 0 [ 258.341505][ T25] usb 2-1: config 0 interface 125 has no altsetting 2 [ 258.374066][ T10] usb 3-1: config 1 interface 0 altsetting 73 bulk endpoint 0x1 has invalid maxpacket 1023 [ 258.385941][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 258.417226][ T25] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 258.426742][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.435139][ T25] usb 2-1: Product: syz [ 258.439507][ T25] usb 2-1: Manufacturer: syz [ 258.444407][ T25] usb 2-1: SerialNumber: syz [ 258.452400][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 258.462288][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.470667][ T10] usb 3-1: Product: syz [ 258.475152][ T10] usb 3-1: Manufacturer: syz [ 258.479940][ T10] usb 3-1: SerialNumber: syz [ 258.483066][ T25] usb 2-1: config 0 descriptor?? [ 258.514023][ T6151] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 258.558022][ T5834] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 258.601486][ T25] usb 2-1: selecting invalid altsetting 2 [ 258.726925][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 258.754400][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.765177][ T5834] usb 5-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 258.774789][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.860079][ T5834] usb 5-1: config 0 descriptor?? [ 258.917013][ T5834] usb 5-1: Found UVC 0.00 device (05a9:2630) [ 258.924454][ T5834] usb 5-1: No valid video chain found. [ 259.150451][ T5834] usb 5-1: USB disconnect, device number 3 [ 259.221047][ T6149] Zero length message leads to an empty skb [ 259.292384][ C1] usb 2-1: async_complete: urb error -71 [ 259.298696][ C1] usb 2-1: async_complete: urb error -71 [ 259.358442][ T25] get_1284_register: usb error -71 [ 259.364221][ T25] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 259.445513][ T25] usb 2-1: USB disconnect, device number 4 [ 259.547802][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 73 proto 1 vid 0x0525 pid 0xA4A8 [ 259.613349][ T10] usb 3-1: USB disconnect, device number 2 [ 259.671855][ T10] usblp0: removed [ 260.848127][ T25] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 261.032003][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.042568][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.158178][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.167699][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.176198][ T25] usb 3-1: Product: syz [ 261.180570][ T25] usb 3-1: Manufacturer: syz [ 261.186694][ T25] usb 3-1: SerialNumber: syz [ 261.524984][ T25] usb 3-1: 0:2 : does not exist [ 261.530320][ T25] usb 3-1: unit 6 not found! [ 261.704934][ T25] usb 3-1: USB disconnect, device number 3 [ 262.257864][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.374005][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 262.453923][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 262.629902][ T10] usb 4-1: config 1 interface 0 altsetting 73 bulk endpoint 0x1 has invalid maxpacket 1023 [ 262.640411][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 262.654795][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 262.717894][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.729386][ T25] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.739698][ T25] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 262.749892][ T25] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 262.770046][ T25] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 262.796635][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.806362][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.814672][ T25] usb 1-1: Product: syz [ 262.819034][ T25] usb 1-1: Manufacturer: syz [ 262.824233][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 262.824368][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.824477][ T10] usb 4-1: Product: syz [ 262.824570][ T10] usb 4-1: Manufacturer: syz [ 262.833565][ T25] usb 1-1: SerialNumber: syz [ 262.856191][ T10] usb 4-1: SerialNumber: syz [ 262.981415][ T6192] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 263.572324][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 73 proto 1 vid 0x0525 pid 0xA4A8 [ 263.664326][ T10] usb 4-1: USB disconnect, device number 3 [ 263.745359][ T10] usblp0: removed [ 263.942474][ T25] cdc_ncm 1-1:1.0: bind() failure [ 263.996750][ T25] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 264.004683][ T25] cdc_ncm 1-1:1.1: bind() failure [ 264.164234][ T25] usb 1-1: USB disconnect, device number 3 [ 264.935188][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 265.034570][ T6221] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.180173][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.190964][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.334942][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.344467][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.357273][ T10] usb 2-1: Product: syz [ 265.361648][ T10] usb 2-1: Manufacturer: syz [ 265.368128][ T10] usb 2-1: SerialNumber: syz [ 265.785395][ T10] usb 2-1: 0:2 : does not exist [ 265.790613][ T10] usb 2-1: unit 6 not found! [ 265.905540][ T10] usb 2-1: USB disconnect, device number 5 [ 266.184411][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 266.388534][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.420010][ T25] usb 3-1: config index 0 descriptor too short (expected 44, got 36) [ 266.429331][ T25] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 266.441692][ T25] usb 3-1: config 0 has no interface number 0 [ 266.451001][ T25] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.462433][ T25] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.472638][ T25] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 266.485012][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.586395][ T25] usb 3-1: config 0 descriptor?? [ 266.685103][ T5834] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 266.903475][ T5834] usb 5-1: config 1 interface 0 altsetting 73 bulk endpoint 0x1 has invalid maxpacket 1023 [ 266.914313][ T5834] usb 5-1: config 1 interface 0 has no altsetting 0 [ 267.066973][ T5834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 267.076419][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.084808][ T5834] usb 5-1: Product: syz [ 267.089178][ T5834] usb 5-1: Manufacturer: syz [ 267.097251][ T5834] usb 5-1: SerialNumber: syz [ 267.107146][ T25] usbhid 3-1:0.16: can't add hid device: -71 [ 267.113925][ T25] usbhid 3-1:0.16: probe with driver usbhid failed with error -71 [ 267.163253][ T25] usb 3-1: USB disconnect, device number 4 [ 267.277314][ T6237] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 267.835034][ T5834] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 73 proto 1 vid 0x0525 pid 0xA4A8 [ 267.882577][ T5834] usb 5-1: USB disconnect, device number 4 [ 267.928791][ T5834] usblp0: removed [ 268.340794][ T6255] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 269.225340][ T5834] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 269.436122][ T5834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.449799][ T5834] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.515810][ T5834] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.525649][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.534393][ T5834] usb 5-1: Product: syz [ 269.538774][ T5834] usb 5-1: Manufacturer: syz [ 269.543570][ T5834] usb 5-1: SerialNumber: syz [ 269.806624][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 269.899033][ T5834] usb 5-1: 0:2 : does not exist [ 269.904396][ T5834] usb 5-1: unit 6 not found! [ 269.979580][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 270.009974][ T5834] usb 5-1: USB disconnect, device number 5 [ 270.011740][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 270.028177][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 270.122089][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.131780][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.140212][ T10] usb 4-1: Product: syz [ 270.144863][ T10] usb 4-1: Manufacturer: syz [ 270.149653][ T10] usb 4-1: SerialNumber: syz [ 270.284024][ T10] usb 4-1: config 0 descriptor?? [ 270.331890][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 270.342171][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 270.922733][ T10] em28xx 4-1:0.0: chip ID is em2874 [ 271.024024][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.161823][ T10] usb 4-1: USB disconnect, device number 4 [ 271.169553][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 271.191058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 271.253540][ T10] em28xx 4-1:0.0: Freeing device [ 271.888760][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 272.146902][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 272.171688][ T10] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 272.180615][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 272.189611][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 272.198168][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 272.208049][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 272.222013][ T10] usb 2-1: config 0 has no interface number 0 [ 272.229970][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 272.241531][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 272.251804][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 272.262088][ T10] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.275567][ T10] usb 2-1: config 0 interface 125 has no altsetting 0 [ 272.282504][ T10] usb 2-1: config 0 interface 125 has no altsetting 2 [ 272.396253][ T6302] process 'syz.3.143' launched './file2' with NULL argv: empty string added [ 272.546244][ T10] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 272.555751][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.564253][ T10] usb 2-1: Product: syz [ 272.568620][ T10] usb 2-1: Manufacturer: syz [ 272.573483][ T10] usb 2-1: SerialNumber: syz [ 272.666816][ T10] usb 2-1: config 0 descriptor?? [ 272.720669][ T10] usb 2-1: selecting invalid altsetting 2 [ 273.373610][ C0] usb 2-1: async_complete: urb error -71 [ 273.379916][ C0] usb 2-1: async_complete: urb error -71 [ 273.404153][ T10] get_1284_register: usb error -71 [ 273.409888][ T10] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 273.485376][ T10] usb 2-1: USB disconnect, device number 6 [ 275.018238][ T5834] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 275.249345][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 275.354507][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 275.366406][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 275.489290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 275.500658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 275.512659][ T5834] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 275.522154][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.530609][ T5834] usb 4-1: Product: syz [ 275.535141][ T5834] usb 4-1: Manufacturer: syz [ 275.539936][ T5834] usb 4-1: SerialNumber: syz [ 275.769358][ T5834] usb 4-1: config 0 descriptor?? [ 275.851994][ T5834] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 275.861630][ T5834] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 276.234645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 276.280457][ T6337] ===================================================== [ 276.288054][ T6337] BUG: KMSAN: uninit-value in full_proxy_unlocked_ioctl+0xed/0x3a0 [ 276.296359][ T6337] full_proxy_unlocked_ioctl+0xed/0x3a0 [ 276.302014][ T6337] __se_sys_ioctl+0x246/0x440 [ 276.311038][ T6337] __x64_sys_ioctl+0x96/0xe0 [ 276.316781][ T6337] x64_sys_call+0x19f0/0x3c30 [ 276.321576][ T6337] do_syscall_64+0xcd/0x1e0 [ 276.326353][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.332488][ T6337] [ 276.335095][ T6337] Uninit was stored to memory at: [ 276.340314][ T6337] __debugfs_file_get+0xe59/0xef0 [ 276.346145][ T6337] full_proxy_open_regular+0x67/0xa00 [ 276.351705][ T6337] do_dentry_open+0x1bdd/0x26b0 [ 276.357077][ T6337] vfs_open+0x53/0x5b0 [ 276.361340][ T6337] path_openat+0x56a1/0x6250 [ 276.366241][ T6337] do_filp_open+0x268/0x600 [ 276.370909][ T6337] do_sys_openat2+0x1bf/0x2f0 [ 276.375948][ T6337] __x64_sys_openat+0x2a1/0x310 [ 276.381009][ T6337] x64_sys_call+0x36f5/0x3c30 [ 276.386612][ T6337] do_syscall_64+0xcd/0x1e0 [ 276.391378][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.397655][ T6337] [ 276.400064][ T6337] Uninit was stored to memory at: [ 276.405528][ T6337] __debugfs_file_get+0xdff/0xef0 [ 276.415394][ T6337] full_proxy_open_regular+0x67/0xa00 [ 276.420975][ T6337] do_dentry_open+0x1bdd/0x26b0 [ 276.427497][ T6337] vfs_open+0x53/0x5b0 [ 276.431718][ T6337] path_openat+0x56a1/0x6250 [ 276.436624][ T6337] do_filp_open+0x268/0x600 [ 276.441338][ T6337] do_sys_openat2+0x1bf/0x2f0 [ 276.446450][ T6337] __x64_sys_openat+0x2a1/0x310 [ 276.451484][ T6337] x64_sys_call+0x36f5/0x3c30 [ 276.456550][ T6337] do_syscall_64+0xcd/0x1e0 [ 276.461233][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.467509][ T6337] [ 276.469925][ T6337] Uninit was created at: [ 276.474562][ T6337] __kmalloc_cache_noprof+0x8e3/0xdf0 [ 276.480152][ T6337] __debugfs_file_get+0x31d/0xef0 [ 276.481666][ T5834] em28xx 4-1:0.0: chip ID is em2874 [ 276.485472][ T6337] full_proxy_open_regular+0x67/0xa00 [ 276.485585][ T6337] do_dentry_open+0x1bdd/0x26b0 [ 276.485702][ T6337] vfs_open+0x53/0x5b0 [ 276.485805][ T6337] path_openat+0x56a1/0x6250 [ 276.485889][ T6337] do_filp_open+0x268/0x600 [ 276.485970][ T6337] do_sys_openat2+0x1bf/0x2f0 [ 276.486090][ T6337] __x64_sys_openat+0x2a1/0x310 [ 276.486210][ T6337] x64_sys_call+0x36f5/0x3c30 [ 276.516537][ T25] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 276.546329][ T6337] do_syscall_64+0xcd/0x1e0 [ 276.551055][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.557367][ T6337] [ 276.559825][ T6337] CPU: 0 UID: 0 PID: 6337 Comm: syz.0.157 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 276.570501][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 276.580906][ T6337] ===================================================== [ 276.588156][ T6337] Disabling lock debugging due to kernel taint [ 276.595101][ T6337] Kernel panic - not syncing: kmsan.panic set ... [ 276.601672][ T6337] CPU: 0 UID: 0 PID: 6337 Comm: syz.0.157 Tainted: G B 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 276.613624][ T6337] Tainted: [B]=BAD_PAGE [ 276.617898][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 276.628115][ T6337] Call Trace: [ 276.631531][ T6337] [ 276.634587][ T6337] dump_stack_lvl+0x216/0x2d0 [ 276.639442][ T6337] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 276.645485][ T6337] dump_stack+0x1e/0x24 [ 276.649822][ T6337] panic+0x4e2/0xcf0 [ 276.653945][ T6337] ? kmsan_get_metadata+0xf1/0x1c0 [ 276.659273][ T6337] kmsan_report+0x2c7/0x2d0 [ 276.663984][ T6337] ? kmsan_get_metadata+0x13e/0x1c0 [ 276.669376][ T6337] ? __msan_warning+0x95/0x120 [ 276.674316][ T6337] ? full_proxy_unlocked_ioctl+0xed/0x3a0 [ 276.680228][ T6337] ? __se_sys_ioctl+0x246/0x440 [ 276.685271][ T6337] ? __x64_sys_ioctl+0x96/0xe0 [ 276.690196][ T6337] ? x64_sys_call+0x19f0/0x3c30 [ 276.695233][ T6337] ? do_syscall_64+0xcd/0x1e0 [ 276.700131][ T6337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.706519][ T6337] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 276.712557][ T6337] ? tomoyo_path_number_perm+0x82d/0x8f0 [ 276.718426][ T6337] ? kmsan_get_metadata+0x13e/0x1c0 [ 276.723839][ T6337] ? kmsan_get_metadata+0x13e/0x1c0 [ 276.729235][ T6337] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 276.735257][ T6337] ? do_vfs_ioctl+0x1cf5/0x3e60 [ 276.740304][ T6337] ? kmsan_get_metadata+0x13e/0x1c0 [ 276.745703][ T6337] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 276.751716][ T6337] __msan_warning+0x95/0x120 [ 276.756482][ T6337] full_proxy_unlocked_ioctl+0xed/0x3a0 [ 276.762236][ T6337] ? __pfx_full_proxy_unlocked_ioctl+0x10/0x10 [ 276.768606][ T6337] __se_sys_ioctl+0x246/0x440 [ 276.773461][ T6337] __x64_sys_ioctl+0x96/0xe0 [ 276.778235][ T6337] x64_sys_call+0x19f0/0x3c30 [ 276.783099][ T6337] do_syscall_64+0xcd/0x1e0 [ 276.787826][ T6337] ? clear_bhb_loop+0x25/0x80 [ 276.792711][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.798826][ T6337] RIP: 0033:0x7fcbfb98cda9 [ 276.803390][ T6337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.823207][ T6337] RSP: 002b:00007fcbfc88e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.831830][ T6337] RAX: ffffffffffffffda RBX: 00007fcbfbba5fa0 RCX: 00007fcbfb98cda9 [ 276.839969][ T6337] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000004 [ 276.848092][ T6337] RBP: 00007fcbfba0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 276.856216][ T6337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.864334][ T6337] R13: 0000000000000000 R14: 00007fcbfbba5fa0 R15: 00007ffd8b9f7c08 [ 276.872485][ T6337] [ 276.875927][ T6337] Kernel Offset: disabled [ 276.880333][ T6337] Rebooting in 86400 seconds..