last executing test programs: 35.390452567s ago: executing program 1 (id=184): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d40)=[{0x0}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0xc, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}]}]}}}], 0x40}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 34.675849738s ago: executing program 1 (id=190): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x20005, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x5, 0x1, 0x3, 0x44, 0x8, 0x9, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x28, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xf6, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x5}) syz_open_dev$vcsa(0x0, 0x1, 0x101) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3bc, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x5, 0x0, [{0x18a, 0x0, 0x3}, {0xbe6, 0x0, 0x5199}, {0x812, 0x0, 0x8}, {0x4000031a, 0x0, 0x6}, {0xada, 0x0, 0x8}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 33.520215353s ago: executing program 1 (id=195): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000680001000000000000b788800a000000000000000600070003000000080008800400010208000500", @ANYRES64=r1], 0x30}}, 0x20041044) 33.181156642s ago: executing program 1 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f00000000c0)='./file1/file0\x00', 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) 32.168413446s ago: executing program 1 (id=200): r0 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) ppoll(&(0x7f0000000240)=[{r0, 0x40}], 0x1, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 31.487838997s ago: executing program 1 (id=204): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x16}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 29.625290024s ago: executing program 32 (id=204): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x16}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.883273397s ago: executing program 0 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 5.742387506s ago: executing program 3 (id=288): open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x20) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0, 0x0) r1 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1003, &(0x7f00000002c0)=0x80, 0x4) bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) sendfile(r2, r1, 0xfffffffffffffffe, 0x80000010) truncate(&(0x7f0000000040)='./file0\x00', 0x10000) 5.355899068s ago: executing program 0 (id=289): r0 = socket(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0x1c, 0x1c, 0x1}, 0x1c) setreuid(0xffffffffffffffff, 0x0) r1 = socket$inet6(0x1c, 0x1, 0x0) setsockopt(r1, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 5.14030695s ago: executing program 4 (id=290): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffb9, &(0x7f0000000180)={&(0x7f0000000a00)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x3}]}, 0x20}}, 0x4000000) 4.526444962s ago: executing program 3 (id=291): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xf, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) 4.46002395s ago: executing program 4 (id=292): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="98b6b3e3", 0x4) 4.43691143s ago: executing program 2 (id=293): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0xc) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000, 0x106) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 4.208128017s ago: executing program 0 (id=294): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) 3.771481631s ago: executing program 4 (id=295): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = memfd_create(&(0x7f00000002c0)='z\xa4d\xa1\x90jP;\xdb~\xf0\x94X2\xca\x0e\x02\xa9 x@\x9f\xe7\xe9\xe1d\xdb \x92\xcb/\x1f5X&0\x1c\xd7\xd2\xef8\xe3%\xf7\xfe\xc9\x82\x062\b\xa0\xd6\x85\xe6\xa9rI\x80\xe3\xb5\xdf\xca\x81P\v\xb0jT2\xa0\xb9^\xf2\x18\xc0W\xb7\xd5\xe4\xce\x82\xcb\xfb\xa6M\xc9hj\xf0CP\x00\x00\xdb\xcaZY}\xc4\xd6\xf4\x02$\xeb\x8c\xf6\xee\x17\xc9\xe8\xdf=\xbbm\xc2\xc3\x02\xac\x7f\xaf\x00\x00\x00\x00|\xf8\xcaU\x1aI\xcc\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=bind=static:0']) lsetxattr$security_ima(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), &(0x7f00000003c0)=@md5={0x1, "3721e46540568e8114a063c06ac34c04"}, 0x11, 0x2) r2 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004800}, 0x400400c0) pwrite64(r1, 0x0, 0x0, 0x3fff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) ioctl$VHOST_VDPA_GET_VQS_COUNT(r2, 0x8004af80, &(0x7f0000000400)) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000640), 0x6, 0x0, 0x2, 0x0, r5}) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000020000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00 ']) 3.478170125s ago: executing program 2 (id=296): r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f00000000c0)={0x2, {{0x1c, 0x1c}}, {{0x1c, 0x1c, 0x3}}}, 0x108) 2.950115392s ago: executing program 3 (id=297): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, &(0x7f0000000080)={@multicast1, @empty, @local={0xac, 0x14, 0x0}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, &(0x7f0000000100)={@multicast2, @multicast2, @local={0xac, 0x14, 0x0}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x49, &(0x7f00000001c0)={@multicast2, @rand_addr=0x3, @loopback}, 0xc) 2.765021401s ago: executing program 4 (id=298): ioctl$EVIOCGSND(0xffffffffffffffff, 0x4000451a, &(0x7f0000000000)) 2.604097931s ago: executing program 2 (id=299): sendmsg(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000040)=@un=@abs={0x8, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000400)=[{0x808, 0x0, 0x8, "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"}], 0x808}, 0x100) 2.324632233s ago: executing program 3 (id=300): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x8, 0x4, 0x0, 0x1, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0x2, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000b, 0x12, r0, 0xbe9dd000) 2.001384171s ago: executing program 0 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffb9, &(0x7f0000000180)={&(0x7f0000000a00)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x3}]}, 0x20}}, 0x4000000) 1.93587382s ago: executing program 2 (id=302): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) select(0x40, &(0x7f0000000040)={0x9}, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0xffffffffffffffcb, 0x2, 0x0, 0x10}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 1.935787014s ago: executing program 4 (id=303): r0 = socket(0x1c, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000f00)={&(0x7f0000000100)=@file={0xa}, 0xa, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x90, 0x81}, 0x20001) 1.682599529s ago: executing program 3 (id=304): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x4, 0x0) 1.298061363s ago: executing program 2 (id=305): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1008, 0x0, 0x0) 1.256560342s ago: executing program 0 (id=306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) 971.706952ms ago: executing program 4 (id=307): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xf, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) 971.332297ms ago: executing program 3 (id=308): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = memfd_create(&(0x7f00000002c0)='z\xa4d\xa1\x90jP;\xdb~\xf0\x94X2\xca\x0e\x02\xa9 x@\x9f\xe7\xe9\xe1d\xdb \x92\xcb/\x1f5X&0\x1c\xd7\xd2\xef8\xe3%\xf7\xfe\xc9\x82\x062\b\xa0\xd6\x85\xe6\xa9rI\x80\xe3\xb5\xdf\xca\x81P\v\xb0jT2\xa0\xb9^\xf2\x18\xc0W\xb7\xd5\xe4\xce\x82\xcb\xfb\xa6M\xc9hj\xf0CP\x00\x00\xdb\xcaZY}\xc4\xd6\xf4\x02$\xeb\x8c\xf6\xee\x17\xc9\xe8\xdf=\xbbm\xc2\xc3\x02\xac\x7f\xaf\x00\x00\x00\x00|\xf8\xcaU\x1aI\xcc\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=bind=static:0']) lsetxattr$security_ima(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), &(0x7f00000003c0)=@md5={0x1, "3721e46540568e8114a063c06ac34c04"}, 0x11, 0x2) r2 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004800}, 0x400400c0) pwrite64(r1, 0x0, 0x0, 0x3fff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) ioctl$VHOST_VDPA_GET_VQS_COUNT(r2, 0x8004af80, &(0x7f0000000400)) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000640), 0x6, 0x0, 0x2, 0x0, r5}) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000020000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00 ']) 632.296649ms ago: executing program 5 (id=206): socket(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x41100, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 426.945572ms ago: executing program 0 (id=309): open$dir(0x0, 0x0, 0x0) execve(&(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280), 0x0) 0s ago: executing program 2 (id=310): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 165.985045][ T5774] cgroup: Unknown subsys name 'net' [ 166.126861][ T5774] cgroup: Unknown subsys name 'cpuset' [ 166.141931][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 171.781536][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 175.991464][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.001109][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.005205][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.017336][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.032087][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.040502][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.057823][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.066944][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.077107][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.086686][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.101253][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.110089][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.119967][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.145321][ T5090] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.156834][ T5090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.164169][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.171931][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.181575][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.181684][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.197102][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.199396][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.225592][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.234086][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.245494][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.257301][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.436367][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 178.014070][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 178.111393][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 178.157960][ T5090] Bluetooth: hci1: command tx timeout [ 178.158333][ T5800] Bluetooth: hci0: command tx timeout [ 178.248264][ T5800] Bluetooth: hci4: command tx timeout [ 178.397782][ T5800] Bluetooth: hci2: command tx timeout [ 178.403377][ T5800] Bluetooth: hci3: command tx timeout [ 178.444174][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 178.478498][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 178.883000][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.890680][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.898612][ T5791] bridge_slave_0: entered allmulticast mode [ 178.908262][ T5791] bridge_slave_0: entered promiscuous mode [ 179.000154][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.012818][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.020590][ T5791] bridge_slave_1: entered allmulticast mode [ 179.030136][ T5791] bridge_slave_1: entered promiscuous mode [ 179.316002][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.430803][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.493225][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.501050][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.508976][ T5803] bridge_slave_0: entered allmulticast mode [ 179.518345][ T5803] bridge_slave_0: entered promiscuous mode [ 179.604918][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.612664][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.620368][ T5795] bridge_slave_0: entered allmulticast mode [ 179.629973][ T5795] bridge_slave_0: entered promiscuous mode [ 179.643029][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.650676][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.658308][ T5803] bridge_slave_1: entered allmulticast mode [ 179.667343][ T5803] bridge_slave_1: entered promiscuous mode [ 179.801003][ T5791] team0: Port device team_slave_0 added [ 179.845023][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.852687][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.861773][ T5795] bridge_slave_1: entered allmulticast mode [ 179.871884][ T5795] bridge_slave_1: entered promiscuous mode [ 179.958805][ T5791] team0: Port device team_slave_1 added [ 179.966062][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.973694][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.981175][ T5793] bridge_slave_0: entered allmulticast mode [ 179.989963][ T5793] bridge_slave_0: entered promiscuous mode [ 180.068787][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.076332][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.084150][ T5797] bridge_slave_0: entered allmulticast mode [ 180.092814][ T5797] bridge_slave_0: entered promiscuous mode [ 180.176551][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.185001][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.192748][ T5793] bridge_slave_1: entered allmulticast mode [ 180.202489][ T5793] bridge_slave_1: entered promiscuous mode [ 180.238056][ T5800] Bluetooth: hci0: command tx timeout [ 180.243731][ T5800] Bluetooth: hci1: command tx timeout [ 180.261711][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.271516][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.279168][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.286574][ T5797] bridge_slave_1: entered allmulticast mode [ 180.296412][ T5797] bridge_slave_1: entered promiscuous mode [ 180.307101][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.314633][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.340979][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.348979][ T5800] Bluetooth: hci4: command tx timeout [ 180.399770][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.456534][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.468210][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.469719][ T5800] Bluetooth: hci3: command tx timeout [ 180.475266][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.480902][ T5090] Bluetooth: hci2: command tx timeout [ 180.512813][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.570720][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.623834][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.721822][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.775688][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.792841][ T5795] team0: Port device team_slave_0 added [ 180.841468][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.858670][ T5795] team0: Port device team_slave_1 added [ 180.899896][ T5803] team0: Port device team_slave_0 added [ 180.917386][ T5803] team0: Port device team_slave_1 added [ 181.185305][ T5793] team0: Port device team_slave_0 added [ 181.225504][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.233278][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.259579][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.279128][ T5797] team0: Port device team_slave_0 added [ 181.288379][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.295465][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.322145][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.340659][ T5793] team0: Port device team_slave_1 added [ 181.361342][ T5791] hsr_slave_0: entered promiscuous mode [ 181.370640][ T5791] hsr_slave_1: entered promiscuous mode [ 181.381931][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.389115][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.415538][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.434797][ T5797] team0: Port device team_slave_1 added [ 181.465334][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.472522][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.498952][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.690943][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.698707][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.725236][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.744802][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.752064][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.778412][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.991777][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.999125][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.025464][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.051315][ T5795] hsr_slave_0: entered promiscuous mode [ 182.061432][ T5795] hsr_slave_1: entered promiscuous mode [ 182.072103][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 182.078217][ T5795] Cannot create hsr debugfs directory [ 182.189655][ T5803] hsr_slave_0: entered promiscuous mode [ 182.200109][ T5803] hsr_slave_1: entered promiscuous mode [ 182.208730][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 182.214593][ T5803] Cannot create hsr debugfs directory [ 182.226391][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.233595][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.261106][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.307997][ T5800] Bluetooth: hci0: command tx timeout [ 182.313622][ T5090] Bluetooth: hci1: command tx timeout [ 182.397357][ T5800] Bluetooth: hci4: command tx timeout [ 182.549981][ T5800] Bluetooth: hci3: command tx timeout [ 182.555610][ T5090] Bluetooth: hci2: command tx timeout [ 182.592880][ T5793] hsr_slave_0: entered promiscuous mode [ 182.602800][ T5793] hsr_slave_1: entered promiscuous mode [ 182.610948][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 182.616765][ T5793] Cannot create hsr debugfs directory [ 182.885297][ T5797] hsr_slave_0: entered promiscuous mode [ 182.893930][ T5797] hsr_slave_1: entered promiscuous mode [ 182.902118][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 182.908100][ T5797] Cannot create hsr debugfs directory [ 183.864296][ T5791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.886743][ T5791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.941314][ T5791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.960894][ T5791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.190154][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.217732][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.239630][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 184.261257][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.281729][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 184.394081][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 184.398488][ T5090] Bluetooth: hci0: command tx timeout [ 184.402680][ T5800] Bluetooth: hci1: command tx timeout [ 184.440437][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 184.468746][ T5800] Bluetooth: hci4: command tx timeout [ 184.479906][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.528131][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.546230][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.588815][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.641485][ T5800] Bluetooth: hci3: command tx timeout [ 184.641972][ T5090] Bluetooth: hci2: command tx timeout [ 184.679484][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.002912][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.040105][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.064910][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.120736][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.401326][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.474373][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.594061][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.682924][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.690528][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.739759][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.747239][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.770880][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.794047][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.849104][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.856579][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.927719][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.935200][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.042148][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.114471][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.270104][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.290647][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.298187][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.370411][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.378069][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.411800][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.419337][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.500023][ T3729] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.507690][ T3729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.811573][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.891447][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.921234][ T5795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.106933][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.234172][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.241897][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.340298][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.347865][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.543748][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.621162][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.828343][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.927305][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.212554][ T5803] veth0_vlan: entered promiscuous mode [ 189.330290][ T5793] veth0_vlan: entered promiscuous mode [ 189.377291][ T5803] veth1_vlan: entered promiscuous mode [ 189.510295][ T5793] veth1_vlan: entered promiscuous mode [ 189.578410][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.593396][ T5795] veth0_vlan: entered promiscuous mode [ 189.746684][ T5795] veth1_vlan: entered promiscuous mode [ 189.788527][ T5803] veth0_macvtap: entered promiscuous mode [ 189.877412][ T5803] veth1_macvtap: entered promiscuous mode [ 189.972362][ T5793] veth0_macvtap: entered promiscuous mode [ 190.091983][ T5793] veth1_macvtap: entered promiscuous mode [ 190.107622][ T5795] veth0_macvtap: entered promiscuous mode [ 190.173331][ T5795] veth1_macvtap: entered promiscuous mode [ 190.232413][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.316460][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.347321][ T5797] veth0_vlan: entered promiscuous mode [ 190.364849][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.394096][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.448167][ T5797] veth1_vlan: entered promiscuous mode [ 190.469316][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.499440][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.535693][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.586818][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.675418][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.727008][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.774236][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.808115][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.817162][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.870606][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.952613][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.985906][ T5797] veth0_macvtap: entered promiscuous mode [ 190.998152][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.007131][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.086941][ T5797] veth1_macvtap: entered promiscuous mode [ 191.103080][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.246461][ T5791] veth0_vlan: entered promiscuous mode [ 191.323554][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.343686][ T5791] veth1_vlan: entered promiscuous mode [ 191.414283][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.504086][ T3685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.562139][ T3685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.604618][ T3685] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.647996][ T3685] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.761758][ T5791] veth0_macvtap: entered promiscuous mode [ 191.839147][ T5791] veth1_macvtap: entered promiscuous mode [ 192.051711][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.205308][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.315378][ T4478] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.335387][ T4478] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.417774][ T4478] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.426809][ T4478] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.350031][ T3729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.361265][ T3729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.726922][ T3685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.735039][ T3685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.743390][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.752054][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.794103][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.802587][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.029891][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.038041][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.090782][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.099004][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.233195][ T5793] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 198.118941][ T5984] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 198.419249][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.427422][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.561200][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.569412][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.657897][ T42] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 198.794129][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.802339][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.831938][ T3729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.840192][ T3729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.909153][ T5989] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7'. [ 198.914396][ T42] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 198.928927][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.937109][ T42] usb 3-1: Product: syz [ 198.941626][ T42] usb 3-1: Manufacturer: syz [ 198.946405][ T42] usb 3-1: SerialNumber: syz [ 199.030998][ T42] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 199.231161][ T1872] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 199.257970][ T5990] loop1: detected capacity change from 0 to 512 [ 199.577423][ T5990] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 199.704432][ T5990] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.6: attempt to clear invalid blocks 2 len 1 [ 199.741234][ T5990] EXT4-fs (loop1): Remounting filesystem read-only [ 199.754855][ T5990] EXT4-fs (loop1): 1 truncate cleaned up [ 199.764711][ T5990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.985936][ T5428] usb 3-1: USB disconnect, device number 2 [ 200.166275][ T5985] loop2: detected capacity change from 0 to 512 [ 200.231944][ T5985] ======================================================= [ 200.231944][ T5985] WARNING: The mand mount option has been deprecated and [ 200.231944][ T5985] and is ignored by this kernel. Remove the mand [ 200.231944][ T5985] option from the mount to silence this warning. [ 200.231944][ T5985] ======================================================= [ 200.267854][ T5985] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.330679][ T1872] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 200.338574][ T1872] ath9k_htc: Failed to initialize the device [ 200.359952][ T5428] usb 3-1: ath9k_htc: USB layer deinitialized [ 200.369622][ T5985] EXT4-fs (loop2): Test dummy encryption mode enabled [ 200.423772][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.489825][ T5985] EXT4-fs error (device loop2): __ext4_iget:5443: inode #11: block 1: comm syz.2.3: invalid block [ 200.528105][ T11] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 200.528151][ T5985] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3: couldn't read orphan inode 11 (err -117) [ 200.576316][ T5985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.778385][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 200.808091][ T11] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 200.820802][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.832668][ T11] usb 4-1: config 0 has no interface number 0 [ 200.839143][ T11] usb 4-1: too many endpoints for config 0 interface 49 altsetting 50: 56, using maximum allowed: 30 [ 200.850378][ T11] usb 4-1: config 0 interface 49 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 200.863872][ T11] usb 4-1: config 0 interface 49 has no altsetting 0 [ 200.982223][ T11] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 200.992049][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.000412][ T11] usb 4-1: Product: syz [ 201.004739][ T11] usb 4-1: Manufacturer: syz [ 201.009633][ T11] usb 4-1: SerialNumber: syz [ 201.142165][ T11] usb 4-1: config 0 descriptor?? [ 201.192633][ T11] ati_remote 4-1:0.49: ati_remote_probe: Unexpected desc.bNumEndpoints [ 201.308745][ T6007] geneve2: entered promiscuous mode [ 201.314251][ T6007] geneve2: entered allmulticast mode [ 201.344717][ T6009] loop0: detected capacity change from 0 to 256 [ 201.565585][ T5997] loop3: detected capacity change from 0 to 1024 [ 201.574672][ T6007] netlink: 192 bytes leftover after parsing attributes in process `syz.1.9'. [ 201.602712][ T6009] FAT-fs (loop0): Directory bread(block 64) failed [ 201.609892][ T6009] FAT-fs (loop0): Directory bread(block 65) failed [ 201.615368][ T5997] EXT4-fs: Ignoring removed orlov option [ 201.616800][ T6009] FAT-fs (loop0): Directory bread(block 66) failed [ 201.622568][ T5997] ext4: Unknown parameter 'fsmagic' [ 201.629382][ T6009] FAT-fs (loop0): Directory bread(block 67) failed [ 201.642759][ T6009] FAT-fs (loop0): Directory bread(block 68) failed [ 201.649614][ T6009] FAT-fs (loop0): Directory bread(block 69) failed [ 201.656449][ T6009] FAT-fs (loop0): Directory bread(block 70) failed [ 201.663266][ T6009] FAT-fs (loop0): Directory bread(block 71) failed [ 201.670965][ T6009] FAT-fs (loop0): Directory bread(block 72) failed [ 201.677770][ T6009] FAT-fs (loop0): Directory bread(block 73) failed [ 201.755376][ T11] usb 4-1: USB disconnect, device number 2 [ 201.769682][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.188326][ T6016] batadv_slave_0: entered promiscuous mode [ 203.202816][ T6016] batman_adv: batadv0: Adding interface: macsec1 [ 203.209577][ T6016] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.235203][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.246061][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.256250][ T6016] batman_adv: batadv0: Interface activated: macsec1 [ 203.406867][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14'. [ 204.183478][ T6030] loop3: detected capacity change from 0 to 256 [ 204.265269][ T6034] loop0: detected capacity change from 0 to 256 [ 204.342814][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'. [ 204.738263][ T1872] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 204.849008][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 204.941064][ T6042] loop4: detected capacity change from 0 to 256 [ 204.958011][ T1872] usb 4-1: Using ep0 maxpacket: 8 [ 205.058164][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 205.185363][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 205.204886][ T1872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 205.267481][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 205.306311][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.314847][ T42] usb 1-1: Product: syz [ 205.323170][ T42] usb 1-1: Manufacturer: syz [ 205.329311][ T42] usb 1-1: SerialNumber: syz [ 205.373988][ T1872] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 205.384255][ T1872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.392607][ T1872] usb 4-1: Product: syz [ 205.396941][ T1872] usb 4-1: Manufacturer: syz [ 205.401881][ T1872] usb 4-1: SerialNumber: syz [ 205.440936][ T42] usb 1-1: config 0 descriptor?? [ 205.487158][ T42] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 205.564000][ T1872] usb 4-1: config 0 descriptor?? [ 205.701187][ T1872] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 205.999586][ T42] gspca_zc3xx: reg_w_i err -110 [ 206.043453][ T5846] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 206.148789][ T6047] loop1: detected capacity change from 0 to 512 [ 206.219076][ T1872] gspca_zc3xx: reg_w_i err -110 [ 206.229844][ T5846] usb 5-1: Using ep0 maxpacket: 8 [ 206.331723][ T5846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 206.441373][ T11] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 206.452723][ T5846] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 206.452875][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.452998][ T5846] usb 5-1: Product: syz [ 206.453096][ T5846] usb 5-1: Manufacturer: syz [ 206.453196][ T5846] usb 5-1: SerialNumber: syz [ 206.459024][ T5846] usb 5-1: config 0 descriptor?? [ 206.517010][ T6047] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 206.548825][ T6047] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.23: attempt to clear invalid blocks 2 len 1 [ 206.598589][ T6047] EXT4-fs (loop1): Remounting filesystem read-only [ 206.612638][ T6047] EXT4-fs (loop1): 1 truncate cleaned up [ 206.615383][ T42] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 206.624512][ T6047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.625069][ T42] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 206.666367][ T5846] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 206.798030][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 206.894207][ T1872] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 206.901305][ T1872] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 207.247973][ T5846] gspca_zc3xx: reg_w_i err -110 [ 207.301554][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 207.418357][ T11] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 207.428071][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.436259][ T11] usb 3-1: Product: syz [ 207.440947][ T11] usb 3-1: Manufacturer: syz [ 207.445715][ T11] usb 3-1: SerialNumber: syz [ 207.539022][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.582311][ T11] usb 3-1: config 0 descriptor?? [ 207.619483][ T11] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 207.857753][ T5846] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 207.864443][ T5846] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 208.128985][ T11] gspca_zc3xx: reg_w_i err -110 [ 208.244317][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 208.290905][ T5846] usb 5-1: USB disconnect, device number 2 [ 208.454466][ T5428] usb 4-1: USB disconnect, device number 3 [ 208.727954][ T11] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 208.734801][ T11] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 209.023593][ T6059] block device autoloading is deprecated and will be removed. [ 209.690599][ T5846] usb 1-1: USB disconnect, device number 2 [ 209.795843][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27'. [ 210.542432][ T6072] loop4: detected capacity change from 0 to 512 [ 210.618323][ T6072] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 210.689482][ T6072] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.31: attempt to clear invalid blocks 2 len 1 [ 210.762788][ T6072] EXT4-fs (loop4): Remounting filesystem read-only [ 210.775952][ T5428] usb 3-1: USB disconnect, device number 3 [ 210.806571][ T6072] EXT4-fs (loop4): 1 truncate cleaned up [ 210.854782][ T6072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.009031][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 211.150958][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.249315][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 211.346082][ T11] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 211.397274][ T11] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 211.406894][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.415423][ T11] usb 2-1: Product: syz [ 211.419889][ T11] usb 2-1: Manufacturer: syz [ 211.424655][ T11] usb 2-1: SerialNumber: syz [ 211.446769][ T11] usb 2-1: config 0 descriptor?? [ 211.502861][ T11] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 211.846739][ T6083] fuse: Bad value for 'fd' [ 211.982847][ T6084] loop3: detected capacity change from 0 to 256 [ 212.024042][ T6084] vfat: Deprecated parameter 'posix' [ 212.030146][ T6084] FAT-fs: "posix" option is obsolete, not supported now [ 212.047332][ T11] gspca_zc3xx: reg_w_i err -110 [ 212.658002][ T11] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 212.664683][ T11] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 213.624155][ T6103] loop2: detected capacity change from 0 to 256 [ 213.651329][ T6103] exfat: Unknown parameter 'iochartet' [ 213.888441][ T11] usb 2-1: USB disconnect, device number 2 [ 214.051511][ T6091] netlink: 'syz.2.37': attribute type 10 has an invalid length. [ 214.059451][ T6091] netlink: 88 bytes leftover after parsing attributes in process `syz.2.37'. [ 214.547223][ T6109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.42'. [ 214.580851][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.42'. [ 214.822580][ T6113] loop0: detected capacity change from 0 to 512 [ 214.917761][ T6113] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 214.952900][ T6113] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.43: attempt to clear invalid blocks 2 len 1 [ 214.967263][ T6113] EXT4-fs (loop0): Remounting filesystem read-only [ 214.984591][ T6113] EXT4-fs (loop0): 1 truncate cleaned up [ 214.992634][ T6113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.340513][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.884991][ T6122] "syz.1.46" (6122) uses obsolete ecb(arc4) skcipher [ 216.285966][ T6136] loop0: detected capacity change from 0 to 256 [ 216.330636][ T6138] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 216.370406][ T6136] vfat: Deprecated parameter 'posix' [ 216.380808][ T6136] FAT-fs: "posix" option is obsolete, not supported now [ 216.673033][ T6145] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 216.754883][ T30] audit: type=1326 audit(1763070695.989:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz.1.53" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x0 [ 217.622364][ T6158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.57'. [ 217.636595][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.57'. [ 217.976668][ T6161] loop4: detected capacity change from 0 to 512 [ 218.108310][ T6161] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 218.181875][ T6161] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.59: attempt to clear invalid blocks 2 len 1 [ 218.257158][ T6161] EXT4-fs (loop4): Remounting filesystem read-only [ 218.309260][ T6161] EXT4-fs (loop4): 1 truncate cleaned up [ 218.317053][ T6161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.317089][ T6170] loop0: detected capacity change from 0 to 512 [ 218.412366][ T6170] EXT4-fs: Ignoring removed orlov option [ 218.492928][ T6170] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 218.584226][ T6170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 218.681860][ T6170] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.62: corrupted in-inode xattr: e_value size too large [ 218.745862][ T6170] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.62: couldn't read orphan inode 15 (err -117) [ 218.772689][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.790029][ T6170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.290487][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.484296][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.490853][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.461767][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 239.603994][ T6196] netlink: 224 bytes leftover after parsing attributes in process `syz.1.67'. [ 240.368795][ T6204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.73'. [ 240.395544][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.73'. [ 240.829898][ T6208] loop2: detected capacity change from 0 to 256 [ 241.426636][ T6212] loop3: detected capacity change from 0 to 512 [ 241.498105][ T11] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 241.530687][ T6212] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 241.612165][ T6212] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.77: attempt to clear invalid blocks 2 len 1 [ 241.675544][ T6212] EXT4-fs (loop3): Remounting filesystem read-only [ 241.684130][ T6212] EXT4-fs (loop3): 1 truncate cleaned up [ 241.687768][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 241.692600][ T6212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.761964][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 241.853422][ T11] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 241.863125][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.871516][ T11] usb 3-1: Product: syz [ 241.880064][ T11] usb 3-1: Manufacturer: syz [ 241.881327][ T6222] loop1: detected capacity change from 0 to 128 [ 241.884807][ T11] usb 3-1: SerialNumber: syz [ 241.961691][ T11] usb 3-1: config 0 descriptor?? [ 242.000130][ T11] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 242.129939][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.598487][ T11] gspca_zc3xx: reg_w_i err -110 [ 242.652274][ T5879] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 242.875227][ T5879] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 242.884747][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.893245][ T5879] usb 1-1: Product: syz [ 242.902026][ T5879] usb 1-1: Manufacturer: syz [ 242.906812][ T5879] usb 1-1: SerialNumber: syz [ 242.941284][ T5879] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 243.038336][ T5428] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 243.190089][ T11] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 243.198397][ T11] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 243.640383][ T5846] usb 1-1: USB disconnect, device number 3 [ 243.778189][ T6224] loop0: detected capacity change from 0 to 512 [ 243.825439][ T6224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.848258][ T6233] loop1: detected capacity change from 0 to 256 [ 243.885834][ T6224] EXT4-fs (loop0): Test dummy encryption mode enabled [ 243.942927][ T6233] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 243.965411][ T6224] EXT4-fs error (device loop0): __ext4_iget:5443: inode #11: block 1: comm syz.0.80: invalid block [ 244.008236][ T6233] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 244.018984][ T6233] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 244.031638][ T6233] UDF-fs: Scanning with blocksize 512 failed [ 244.068108][ T6224] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.80: couldn't read orphan inode 11 (err -117) [ 244.118928][ T6233] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 244.123172][ T6238] netlink: 60 bytes leftover after parsing attributes in process `syz.3.86'. [ 244.148811][ T5428] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 244.156408][ T5428] ath9k_htc: Failed to initialize the device [ 244.190021][ T6224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.202824][ T5846] usb 1-1: ath9k_htc: USB layer deinitialized [ 244.244907][ T6233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.512806][ T5846] usb 3-1: USB disconnect, device number 4 [ 244.530994][ T6240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.87'. [ 244.579803][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.87'. [ 245.209592][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.367083][ T6249] loop3: detected capacity change from 0 to 512 [ 245.548931][ T6249] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 245.584330][ T6249] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.91: attempt to clear invalid blocks 2 len 1 [ 245.748259][ T6249] EXT4-fs (loop3): Remounting filesystem read-only [ 245.798315][ T6249] EXT4-fs (loop3): 1 truncate cleaned up [ 245.806128][ T6249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.047375][ T6260] loop0: detected capacity change from 0 to 128 [ 246.290274][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.592899][ T6264] FAULT_INJECTION: forcing a failure. [ 246.592899][ T6264] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 246.606439][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.4.96 Not tainted syzkaller #0 PREEMPT(none) [ 246.606575][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.606668][ T6264] Call Trace: [ 246.606723][ T6264] [ 246.606773][ T6264] __dump_stack+0x26/0x30 [ 246.606959][ T6264] dump_stack_lvl+0x1df/0x270 [ 246.607120][ T6264] dump_stack+0x1e/0x25 [ 246.607264][ T6264] should_fail_ex+0x7dc/0x8a0 [ 246.607437][ T6264] should_fail+0x2a/0x40 [ 246.607578][ T6264] should_fail_usercopy+0x2e/0x40 [ 246.607735][ T6264] _copy_from_user+0x33/0x100 [ 246.607897][ T6264] get_compat_msghdr+0x63/0x740 [ 246.608089][ T6264] ? kmsan_get_metadata+0xfb/0x160 [ 246.608256][ T6264] ___sys_sendmsg+0x198/0x3b0 [ 246.608447][ T6264] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 246.608611][ T6264] ? __rcu_read_unlock+0x6d/0xd0 [ 246.608745][ T6264] ? __fget_files+0x3b4/0x4a0 [ 246.608882][ T6264] ? __fget_files+0x3b9/0x4a0 [ 246.609030][ T6264] ? kmsan_get_metadata+0xfb/0x160 [ 246.609175][ T6264] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 246.609338][ T6264] __sys_sendmsg+0x1aa/0x300 [ 246.609522][ T6264] ? kmsan_get_metadata+0xfb/0x160 [ 246.609684][ T6264] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 246.609882][ T6264] ia32_sys_call+0x3f6c/0x4310 [ 246.610073][ T6264] __do_fast_syscall_32+0xb0/0x150 [ 246.610259][ T6264] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 246.610443][ T6264] do_fast_syscall_32+0x38/0x80 [ 246.610623][ T6264] do_SYSENTER_32+0x1f/0x30 [ 246.610799][ T6264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.610971][ T6264] RIP: 0023:0xf702d539 [ 246.611081][ T6264] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 246.611197][ T6264] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 246.611333][ T6264] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 246.611425][ T6264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.611506][ T6264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.611586][ T6264] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 246.611672][ T6264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.611788][ T6264] [ 247.035247][ T6269] loop2: detected capacity change from 0 to 256 [ 247.069005][ T6270] netlink: 60 bytes leftover after parsing attributes in process `syz.3.97'. [ 247.666954][ T6274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.101'. [ 247.743189][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz.3.101'. [ 247.797047][ T5428] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 248.068510][ T5428] usb 3-1: Using ep0 maxpacket: 8 [ 248.098392][ T5428] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 248.157220][ T5428] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 248.166737][ T5428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.175255][ T5428] usb 3-1: Product: syz [ 248.178070][ T6279] loop0: detected capacity change from 0 to 4096 [ 248.179695][ T5428] usb 3-1: Manufacturer: syz [ 248.187176][ T5846] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 248.191526][ T5428] usb 3-1: SerialNumber: syz [ 248.321028][ T6279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.401591][ T5428] usb 3-1: config 0 descriptor?? [ 248.419422][ T5846] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 248.433015][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.442611][ T5846] usb 5-1: Product: syz [ 248.446948][ T5846] usb 5-1: Manufacturer: syz [ 248.451828][ T5846] usb 5-1: SerialNumber: syz [ 248.482236][ T5428] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 248.681283][ T5846] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 248.864237][ T1872] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 249.028662][ T5428] gspca_zc3xx: reg_w_i err -110 [ 249.268581][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.619173][ T5846] usb 5-1: USB disconnect, device number 3 [ 249.678272][ T5428] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 249.684957][ T5428] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 249.779143][ T6291] loop4: detected capacity change from 0 to 512 [ 249.790969][ T6291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.871374][ T6291] EXT4-fs (loop4): Test dummy encryption mode enabled [ 249.922961][ T1872] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 249.930829][ T1872] ath9k_htc: Failed to initialize the device [ 249.990175][ T6291] EXT4-fs error (device loop4): __ext4_iget:5443: inode #11: block 1: comm syz.4.102: invalid block [ 250.009674][ T6291] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.102: couldn't read orphan inode 11 (err -117) [ 250.099724][ T6291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.126656][ T5846] usb 5-1: ath9k_htc: USB layer deinitialized [ 250.433566][ T6298] loop0: detected capacity change from 0 to 512 [ 250.642692][ T6298] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 250.726527][ T6298] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.107: attempt to clear invalid blocks 2 len 1 [ 250.754127][ T6302] loop1: detected capacity change from 0 to 256 [ 250.771724][ T6302] vfat: Deprecated parameter 'posix' [ 250.777192][ T6302] FAT-fs: "posix" option is obsolete, not supported now [ 250.832779][ T6298] EXT4-fs (loop0): Remounting filesystem read-only [ 250.939349][ T6298] EXT4-fs (loop0): 1 truncate cleaned up [ 250.971483][ T6298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.119582][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.274721][ T6305] loop3: detected capacity change from 0 to 128 [ 251.482718][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.686707][ T6307] netlink: 60 bytes leftover after parsing attributes in process `syz.4.111'. [ 252.279298][ T5428] usb 3-1: USB disconnect, device number 5 [ 252.554323][ T6315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.115'. [ 252.566823][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.115'. [ 253.713688][ T6330] netlink: 64 bytes leftover after parsing attributes in process `syz.0.120'. [ 253.848742][ T6332] loop1: detected capacity change from 0 to 512 [ 253.987848][ T5846] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 254.030904][ T6332] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 254.109979][ T6332] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.122: attempt to clear invalid blocks 2 len 1 [ 254.167992][ T6332] EXT4-fs (loop1): Remounting filesystem read-only [ 254.176108][ T6332] EXT4-fs (loop1): 1 truncate cleaned up [ 254.185819][ T6332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.223486][ T6339] loop3: detected capacity change from 0 to 128 [ 254.305220][ T5846] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 254.313137][ T6337] loop4: detected capacity change from 0 to 256 [ 254.314922][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.329269][ T5846] usb 3-1: Product: syz [ 254.333612][ T5846] usb 3-1: Manufacturer: syz [ 254.338827][ T5846] usb 3-1: SerialNumber: syz [ 254.365034][ T6337] vfat: Deprecated parameter 'posix' [ 254.375706][ T6337] FAT-fs: "posix" option is obsolete, not supported now [ 254.429021][ T6342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.125'. [ 254.477405][ T5846] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 254.624452][ T1872] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 254.639965][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.408524][ T42] usb 3-1: USB disconnect, device number 6 [ 255.756558][ T6345] loop1: detected capacity change from 0 to 256 [ 255.764455][ T1872] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 255.772307][ T1872] ath9k_htc: Failed to initialize the device [ 255.818224][ T42] usb 3-1: ath9k_htc: USB layer deinitialized [ 256.232374][ T6352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.129'. [ 256.248487][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.129'. [ 256.279092][ T5846] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 256.451730][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 256.547105][ T5846] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 256.634292][ T5846] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 256.644555][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.652919][ T5846] usb 2-1: Product: syz [ 256.657252][ T5846] usb 2-1: Manufacturer: syz [ 256.662140][ T5846] usb 2-1: SerialNumber: syz [ 256.700831][ T6357] FAULT_INJECTION: forcing a failure. [ 256.700831][ T6357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.714401][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.3.132 Not tainted syzkaller #0 PREEMPT(none) [ 256.714536][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.714614][ T6357] Call Trace: [ 256.714661][ T6357] [ 256.714710][ T6357] __dump_stack+0x26/0x30 [ 256.714873][ T6357] dump_stack_lvl+0x1df/0x270 [ 256.715041][ T6357] dump_stack+0x1e/0x25 [ 256.715195][ T6357] should_fail_ex+0x7dc/0x8a0 [ 256.715369][ T6357] should_fail+0x2a/0x40 [ 256.715507][ T6357] should_fail_usercopy+0x2e/0x40 [ 256.715667][ T6357] _copy_to_user+0x35/0x120 [ 256.715827][ T6357] simple_read_from_buffer+0x1b2/0x340 [ 256.716032][ T6357] proc_fail_nth_read+0x1e0/0x2d0 [ 256.716225][ T6357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.716401][ T6357] vfs_read+0x27c/0xf90 [ 256.716576][ T6357] ? stack_depot_save_flags+0x35/0x7b0 [ 256.716723][ T6357] ? kmsan_get_metadata+0xfb/0x160 [ 256.716873][ T6357] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 256.717085][ T6357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 256.717254][ T6357] __ia32_sys_read+0x1f9/0x4d0 [ 256.717406][ T6357] ia32_sys_call+0x18b8/0x4310 [ 256.717591][ T6357] __do_fast_syscall_32+0xb0/0x150 [ 256.717780][ T6357] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 256.717977][ T6357] do_fast_syscall_32+0x38/0x80 [ 256.718159][ T6357] do_SYSENTER_32+0x1f/0x30 [ 256.718340][ T6357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.718508][ T6357] RIP: 0023:0xf708d539 [ 256.718605][ T6357] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 256.718719][ T6357] RSP: 002b:00000000f547d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 256.718846][ T6357] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d620 [ 256.718935][ T6357] RDX: 000000000000000f RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 256.719017][ T6357] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 256.719093][ T6357] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 256.719170][ T6357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.719288][ T6357] [ 256.739140][ T5846] usb 2-1: config 0 descriptor?? [ 257.226834][ T5846] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 257.300933][ T5846] gspca_zc3xx: reg_w_i err -71 [ 257.795545][ T6369] loop4: detected capacity change from 0 to 512 [ 257.940393][ T5846] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 257.947169][ T5846] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 257.970159][ T5846] usb 2-1: USB disconnect, device number 3 [ 258.000426][ T6369] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 258.078363][ T6369] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.136: attempt to clear invalid blocks 2 len 1 [ 258.111536][ T6373] loop0: detected capacity change from 0 to 128 [ 258.133173][ T6369] EXT4-fs (loop4): Remounting filesystem read-only [ 258.178835][ T6369] EXT4-fs (loop4): 1 truncate cleaned up [ 258.209646][ T6369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.351030][ T6375] netlink: 60 bytes leftover after parsing attributes in process `syz.2.138'. [ 258.410950][ T6378] loop1: detected capacity change from 0 to 512 [ 258.593827][ T6378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.607006][ T6378] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.736597][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.814168][ T30] audit: type=1800 audit(1763070738.059:3): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.139" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 259.138224][ T5846] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 259.228768][ T1872] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 259.338091][ T5846] usb 2-1: Invalid ep0 maxpacket: 64 [ 259.360454][ T6391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.143'. [ 259.434662][ T6394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.143'. [ 259.529940][ T5846] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 259.619077][ T1872] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 259.628508][ T1872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.636725][ T1872] usb 3-1: Product: syz [ 259.641771][ T1872] usb 3-1: Manufacturer: syz [ 259.646578][ T1872] usb 3-1: SerialNumber: syz [ 259.771645][ T1872] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 259.807846][ T5846] usb 2-1: Invalid ep0 maxpacket: 64 [ 259.816598][ T5846] usb usb2-port1: attempt power cycle [ 259.946495][ T42] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 260.201985][ T5846] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 260.271419][ T5846] usb 2-1: Invalid ep0 maxpacket: 64 [ 260.363485][ T6397] Zero length message leads to an empty skb [ 260.419591][ T5846] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 260.475949][ T5846] usb 2-1: Invalid ep0 maxpacket: 64 [ 260.484165][ T5846] usb usb2-port1: unable to enumerate USB device [ 260.519642][ T5428] usb 3-1: USB disconnect, device number 7 [ 261.038760][ T42] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 261.046422][ T42] ath9k_htc: Failed to initialize the device [ 261.088165][ T5428] usb 3-1: ath9k_htc: USB layer deinitialized [ 261.361501][ T6412] loop3: detected capacity change from 0 to 256 [ 261.747922][ T42] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 261.784292][ T6417] netlink: 60 bytes leftover after parsing attributes in process `syz.2.151'. [ 261.872232][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.980419][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 262.004274][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 262.052354][ T42] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 262.061861][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.070312][ T42] usb 4-1: Product: syz [ 262.074650][ T42] usb 4-1: Manufacturer: syz [ 262.079870][ T42] usb 4-1: SerialNumber: syz [ 262.181304][ T42] usb 4-1: config 0 descriptor?? [ 262.221931][ T42] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 262.397999][ T42] gspca_zc3xx: reg_w_i err -71 [ 262.564933][ T6419] loop2: detected capacity change from 0 to 512 [ 262.619513][ T6422] loop1: detected capacity change from 0 to 128 [ 262.666515][ T6419] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 262.759879][ T6419] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.154: attempt to clear invalid blocks 2 len 1 [ 262.760481][ T6423] loop4: detected capacity change from 0 to 4096 [ 262.796663][ T6419] EXT4-fs (loop2): Remounting filesystem read-only [ 262.823136][ T6423] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 262.838930][ T6419] EXT4-fs (loop2): 1 truncate cleaned up [ 262.847195][ T6419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.863423][ T6423] ntfs3(loop4): ino=3, mi_enum_attr [ 262.879055][ T6426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.156'. [ 262.895343][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.156'. [ 262.997927][ T42] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 263.004725][ T42] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 263.096569][ T42] usb 4-1: USB disconnect, device number 4 [ 263.222494][ T30] audit: type=1800 audit(1763070742.459:4): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.155" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 263.335695][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.378303][ T5428] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 264.587965][ T5428] usb 3-1: Using ep0 maxpacket: 16 [ 264.633800][ T5428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.645791][ T5428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.656102][ T5428] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.669419][ T5428] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 264.678835][ T5428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.756977][ T42] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 264.889483][ T5428] usb 3-1: config 0 descriptor?? [ 264.980475][ T42] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 264.990199][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.999609][ T42] usb 4-1: Product: syz [ 265.003950][ T42] usb 4-1: Manufacturer: syz [ 265.008833][ T42] usb 4-1: SerialNumber: syz [ 265.032563][ T6447] loop1: detected capacity change from 0 to 512 [ 265.199281][ T6447] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 265.232469][ T42] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 265.277210][ T6447] System zones: 0-2, 18-18, 34-35 [ 265.294915][ T6447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.308639][ T6447] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.421287][ T1872] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 265.454905][ T5428] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 265.471928][ T5428] microsoft 0003:045E:07DA.0001: usage index exceeded [ 265.479411][ T5428] microsoft 0003:045E:07DA.0001: item 0 4 2 0 parsing failed [ 265.683196][ T5428] microsoft 0003:045E:07DA.0001: parse failed [ 265.690120][ T5428] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 265.870645][ T6454] loop0: detected capacity change from 0 to 256 [ 265.966446][ T5428] usb 3-1: USB disconnect, device number 8 [ 266.005239][ T5879] usb 4-1: USB disconnect, device number 5 [ 266.028230][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 266.196669][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.329187][ T6457] loop4: detected capacity change from 0 to 256 [ 266.548049][ T1872] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 266.559831][ T1872] ath9k_htc: Failed to initialize the device [ 266.563570][ T6460] loop1: detected capacity change from 0 to 128 [ 266.649422][ T5879] usb 4-1: ath9k_htc: USB layer deinitialized [ 266.661892][ T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 266.800833][ T6461] loop0: detected capacity change from 0 to 512 [ 266.890588][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 266.904790][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 267.018161][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 267.028318][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.036526][ T42] usb 5-1: Product: syz [ 267.040983][ T42] usb 5-1: Manufacturer: syz [ 267.045755][ T42] usb 5-1: SerialNumber: syz [ 267.076900][ T6461] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 267.128168][ T6461] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.169: attempt to clear invalid blocks 2 len 1 [ 267.162689][ T42] usb 5-1: config 0 descriptor?? [ 267.189128][ T6461] EXT4-fs (loop0): Remounting filesystem read-only [ 267.237154][ T42] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 267.249521][ T6461] EXT4-fs (loop0): 1 truncate cleaned up [ 267.257306][ T6461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.398206][ T42] gspca_zc3xx: reg_w_i err -71 [ 267.562298][ T6464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.170'. [ 267.621271][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.170'. [ 267.819761][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.027139][ T42] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 268.034182][ T42] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 268.103870][ T42] usb 5-1: USB disconnect, device number 4 [ 269.062393][ T6470] loop1: detected capacity change from 0 to 256 [ 269.126020][ T6470] vfat: Deprecated parameter 'posix' [ 269.131968][ T6470] FAT-fs: "posix" option is obsolete, not supported now [ 270.717023][ T6501] gretap1: entered promiscuous mode [ 270.720022][ T6501] batman_adv: batadv0: Adding interface: gretap1 [ 270.720099][ T6501] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 270.720228][ T6501] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 271.702185][ T6519] netlink: 232 bytes leftover after parsing attributes in process `syz.3.189'. [ 272.522103][ T6529] syzkaller0: entered promiscuous mode [ 272.527913][ T6529] syzkaller0: entered allmulticast mode [ 272.960537][ T6534] 9pnet_virtio: no channels available for device syz [ 274.705845][ T3617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.900514][ T3617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.953343][ T6559] warning: `syz.0.203' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 275.081325][ T3617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.270025][ T3617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.705675][ T3617] bridge_slave_1: left allmulticast mode [ 275.711670][ T3617] bridge_slave_1: left promiscuous mode [ 275.718532][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.738485][ T3617] bridge_slave_0: left allmulticast mode [ 275.744440][ T3617] bridge_slave_0: left promiscuous mode [ 275.751172][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.302271][ T3617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.320749][ T3617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.335519][ T3617] bond0 (unregistering): Released all slaves [ 276.990710][ T3617] hsr_slave_0: left promiscuous mode [ 277.011458][ T3617] hsr_slave_1: left promiscuous mode [ 277.019727][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.027279][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.105201][ T5428] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 277.115041][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.125506][ T3617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.278479][ T3617] veth1_macvtap: left promiscuous mode [ 277.284310][ T3617] veth0_macvtap: left promiscuous mode [ 277.291032][ T3617] veth1_vlan: left promiscuous mode [ 277.296548][ T3617] veth0_vlan: left promiscuous mode [ 277.317960][ T5428] usb 3-1: Using ep0 maxpacket: 8 [ 277.377830][ T5428] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 277.386419][ T5428] usb 3-1: config 179 has no interface number 0 [ 277.393133][ T5428] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 277.404665][ T5428] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 277.419500][ T5428] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 277.432052][ T5428] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 277.443790][ T5428] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 277.457389][ T5428] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 277.467035][ T5428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.589613][ T6576] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 277.990402][ T6572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.309218][ T5428] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 278.461162][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.520640][ T42] usb 3-1: USB disconnect, device number 9 [ 278.520737][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 278.536308][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 278.570027][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.614976][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.645354][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.677011][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.205676][ T3617] team0 (unregistering): Port device team_slave_1 removed [ 279.305269][ T3617] team0 (unregistering): Port device team_slave_0 removed [ 280.874158][ T5800] Bluetooth: hci1: command tx timeout [ 281.663115][ T6584] chnl_net:caif_netlink_parms(): no params data found [ 282.951948][ T5800] Bluetooth: hci1: command tx timeout [ 283.575016][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.582660][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.590625][ T6584] bridge_slave_0: entered allmulticast mode [ 283.600091][ T6584] bridge_slave_0: entered promiscuous mode [ 283.741782][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.749664][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.763110][ T6584] bridge_slave_1: entered allmulticast mode [ 283.772520][ T6584] bridge_slave_1: entered promiscuous mode [ 284.198763][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.313720][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.667873][ T42] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 284.776092][ T6584] team0: Port device team_slave_0 added [ 284.830711][ T6584] team0: Port device team_slave_1 added [ 284.866352][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.879051][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.892302][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 284.906586][ T42] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.916103][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.039204][ T5800] Bluetooth: hci1: command tx timeout [ 285.105961][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.114640][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.141013][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.223363][ T42] usb 5-1: config 0 descriptor?? [ 285.282753][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.292344][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.322765][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.691038][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.705001][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.874596][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 285.882304][ T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 285.913821][ T42] usb 5-1: USB disconnect, device number 5 [ 285.940761][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.948260][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.091523][ T6584] hsr_slave_0: entered promiscuous mode [ 286.101969][ T6584] hsr_slave_1: entered promiscuous mode [ 286.116449][ T6584] debugfs: 'hsr0' already exists in 'hsr' [ 286.122486][ T6584] Cannot create hsr debugfs directory [ 286.249940][ T6683] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 287.110309][ T5800] Bluetooth: hci1: command tx timeout [ 287.922955][ T6584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 288.033601][ T6584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 288.100926][ T6584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 288.194194][ T6584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.398352][ T6706] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 288.424939][ T6706] CIFS: Unable to determine destination address [ 289.384525][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.660819][ T6584] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.729709][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.737254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.885376][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.893008][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.276302][ T6584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.879653][ T6756] netlink: 'syz.0.256': attribute type 5 has an invalid length. [ 291.943984][ T6758] vlan2: entered promiscuous mode [ 291.953407][ T6758] bridge0: entered promiscuous mode [ 292.438078][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.749679][ T6768] netlink: 108 bytes leftover after parsing attributes in process `syz.0.260'. [ 292.893707][ T6771] netlink: 'syz.4.261': attribute type 5 has an invalid length. [ 293.283919][ T6774] 9pnet_virtio: no channels available for device syz [ 293.502347][ T6778] netlink: 48 bytes leftover after parsing attributes in process `syz.2.263'. [ 296.106574][ T6584] veth0_vlan: entered promiscuous mode [ 296.323001][ T6584] veth1_vlan: entered promiscuous mode [ 296.577919][ T42] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 296.692894][ T6584] veth0_macvtap: entered promiscuous mode [ 296.806456][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.814052][ T6584] veth1_macvtap: entered promiscuous mode [ 296.817002][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 296.832316][ T42] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 296.841661][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.039506][ T42] usb 1-1: config 0 descriptor?? [ 297.075984][ T42] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 297.084447][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 297.113439][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.137029][ T42] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 297.223415][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.266255][ T42] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 297.279623][ T42] usb 1-1: media controller created [ 297.316978][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.380026][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.427113][ T150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.458244][ T6824] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 297.465022][ T6824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.467214][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 297.473346][ T6824] vhci_hcd vhci_hcd.0: Device attached [ 297.484491][ T42] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 297.595999][ T3729] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.629376][ T3729] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.645743][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 297.699762][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 297.706993][ T42] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 297.773914][ T42] usb 1-1: USB disconnect, device number 4 [ 297.792971][ T5428] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 297.869892][ T5846] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 298.036874][ T42] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 298.088506][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 298.170170][ T5846] usb 4-1: config 0 has no interfaces? [ 298.175903][ T5846] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 298.185642][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.234467][ T5090] Bluetooth: hci0: command 0x0406 tx timeout [ 298.408177][ T5846] usb 4-1: config 0 descriptor?? [ 298.700904][ T5846] usb 4-1: USB disconnect, device number 6 [ 298.779173][ T6825] vhci_hcd: connection closed [ 298.780762][ T1003] vhci_hcd: stop threads [ 298.791787][ T1003] vhci_hcd: release socket [ 298.796432][ T1003] vhci_hcd: disconnect device [ 298.801951][ T5428] vhci_hcd: vhci_device speed not set [ 301.348852][ T5802] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 301.357402][ T5802] Bluetooth: hci2: Injecting HCI hardware error event [ 302.284051][ T6892] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 302.290808][ T6892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 302.304754][ T6892] vhci_hcd vhci_hcd.0: Device attached [ 302.602948][ T5846] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 302.747763][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 302.847213][ T6902] tmpfs: Bad value for 'mpol' [ 302.920804][ T5802] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 302.928258][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 302.946922][ T5879] usb 1-1: config 0 has no interfaces? [ 302.952926][ T5879] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 302.962642][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.981639][ T5879] usb 1-1: config 0 descriptor?? [ 303.275311][ T6895] vhci_hcd: connection closed [ 303.276833][ T59] vhci_hcd: stop threads [ 303.278635][ T5879] usb 1-1: USB disconnect, device number 5 [ 303.281902][ T59] vhci_hcd: release socket [ 303.298224][ T59] vhci_hcd: disconnect device [ 303.325876][ T5846] vhci_hcd: vhci_device speed not set [ 303.356681][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 303.367198][ T5090] Bluetooth: hci2: command 0x0406 tx timeout [ 303.374610][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 303.386255][ T5090] Bluetooth: hci2: hardware error 0x00 [ 304.592194][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.600503][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.974502][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.982794][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.450935][ T5090] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 305.493526][ T6938] tmpfs: Bad value for 'mpol' [ 305.625558][ T5090] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 306.107086][ T5444] ===================================================== [ 306.114771][ T5444] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 306.122381][ T5444] _copy_to_iter+0xef3/0x33f0 [ 306.127142][ T5444] __skb_datagram_iter+0x196/0x12c0 [ 306.132526][ T5444] skb_copy_datagram_iter+0x5b/0x1e0 [ 306.137977][ T5444] netlink_recvmsg+0x4bb/0xfe0 [ 306.142838][ T5444] sock_recvmsg+0x2df/0x390 [ 306.147427][ T5444] ____sys_recvmsg+0x193/0x610 [ 306.152414][ T5444] ___sys_recvmsg+0x20b/0x850 [ 306.159270][ T5444] __x64_sys_recvmsg+0x20e/0x3d0 [ 306.166651][ T5444] x64_sys_call+0x35f0/0x3e30 [ 306.171537][ T5444] do_syscall_64+0xd9/0xfa0 [ 306.176128][ T5444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.186288][ T5444] [ 306.189744][ T5444] Uninit was stored to memory at: [ 306.194933][ T5444] pskb_expand_head+0x310/0x1610 [ 306.200013][ T5444] netlink_trim+0x496/0x500 [ 306.204609][ T5444] netlink_broadcast_filtered+0x80/0x28f0 [ 306.211373][ T5444] nlmsg_notify+0x15b/0x2f0 [ 306.215968][ T5444] rtnl_notify+0xba/0x100 [ 306.220529][ T5444] wireless_nlevent_process+0xfe/0x290 [ 306.226063][ T5444] process_scheduled_works+0xb91/0x1d80 [ 306.231823][ T5444] worker_thread+0xedf/0x1590 [ 306.236589][ T5444] kthread+0xd5c/0xf00 [ 306.240836][ T5444] ret_from_fork+0x1f5/0x4c0 [ 306.245513][ T5444] ret_from_fork_asm+0x1a/0x30 [ 306.250429][ T5444] [ 306.252771][ T5444] Uninit was stored to memory at: [ 306.258273][ T5444] wireless_send_event+0x67f/0x1530 [ 306.263608][ T5444] ioctl_standard_iw_point+0x12b0/0x13f0 [ 306.269524][ T5444] compat_standard_call+0x188/0x4c0 [ 306.274854][ T5444] wext_ioctl_dispatch+0x192/0x7a0 [ 306.280165][ T5444] compat_wext_handle_ioctl+0x1a1/0x300 [ 306.289670][ T5444] compat_sock_ioctl+0x20c/0xff0 [ 306.294685][ T5444] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 306.302102][ T5444] ia32_sys_call+0x2d5f/0x4310 [ 306.306991][ T5444] __do_fast_syscall_32+0xb0/0x150 [ 306.312425][ T5444] do_fast_syscall_32+0x38/0x80 [ 306.317376][ T5444] do_SYSENTER_32+0x1f/0x30 [ 306.322128][ T5444] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.328686][ T5444] [ 306.331033][ T5444] Local variable iwp created at: [ 306.335988][ T5444] compat_standard_call+0x4a/0x4c0 [ 306.341232][ T5444] wext_ioctl_dispatch+0x192/0x7a0 [ 306.346407][ T5444] [ 306.348810][ T5444] Bytes 60-63 of 64 are uninitialized [ 306.354213][ T5444] Memory access of size 64 starts at ffff8881031d8840 [ 306.361086][ T5444] Data copied to user address 00007ffe0d0f2080 [ 306.367264][ T5444] [ 306.369681][ T5444] CPU: 1 UID: 101 PID: 5444 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(none) [ 306.378983][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.406444][ T5444] ===================================================== [ 306.421053][ T5444] Disabling lock debugging due to kernel taint [ 306.427258][ T5444] Kernel panic - not syncing: kmsan.panic set ... [ 306.433727][ T5444] CPU: 1 UID: 101 PID: 5444 Comm: dhcpcd Tainted: G B syzkaller #0 PREEMPT(none) [ 306.444491][ T5444] Tainted: [B]=BAD_PAGE [ 306.448672][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.458783][ T5444] Call Trace: [ 306.462100][ T5444] [ 306.465060][ T5444] __dump_stack+0x26/0x30 [ 306.469477][ T5444] dump_stack_lvl+0x53/0x270 [ 306.474154][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.480058][ T5444] dump_stack+0x1e/0x25 [ 306.484305][ T5444] vpanic+0x435/0xd30 [ 306.488417][ T5444] panic+0x15d/0x160 [ 306.492507][ T5444] kmsan_report+0x31c/0x320 [ 306.497091][ T5444] ? kmsan_internal_check_memory+0x1e1/0x230 [ 306.503187][ T5444] ? kmsan_copy_to_user+0xf1/0x190 [ 306.508383][ T5444] ? _copy_to_iter+0xef3/0x33f0 [ 306.513311][ T5444] ? __skb_datagram_iter+0x196/0x12c0 [ 306.518809][ T5444] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 306.524370][ T5444] ? netlink_recvmsg+0x4bb/0xfe0 [ 306.529405][ T5444] ? sock_recvmsg+0x2df/0x390 [ 306.534157][ T5444] ? ____sys_recvmsg+0x193/0x610 [ 306.539195][ T5444] ? ___sys_recvmsg+0x20b/0x850 [ 306.544149][ T5444] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 306.549370][ T5444] ? x64_sys_call+0x35f0/0x3e30 [ 306.554313][ T5444] ? do_syscall_64+0xd9/0xfa0 [ 306.559085][ T5444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.565237][ T5444] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 306.571432][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 306.576621][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 306.581818][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.587730][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 306.592998][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.598975][ T5444] ? __pfx__raw_spin_lock+0x1/0x10 [ 306.604175][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 306.609373][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.615268][ T5444] kmsan_internal_check_memory+0x1e1/0x230 [ 306.621203][ T5444] kmsan_copy_to_user+0xf1/0x190 [ 306.626221][ T5444] _copy_to_iter+0xef3/0x33f0 [ 306.630980][ T5444] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 306.637422][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 306.642665][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.648557][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 306.653743][ T5444] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 306.660198][ T5444] __skb_datagram_iter+0x196/0x12c0 [ 306.665504][ T5444] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 306.671257][ T5444] skb_copy_datagram_iter+0x5b/0x1e0 [ 306.676639][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.682533][ T5444] netlink_recvmsg+0x4bb/0xfe0 [ 306.687399][ T5444] ? aa_sock_msg_perm+0x29c/0x2f0 [ 306.692582][ T5444] ? __pfx_netlink_recvmsg+0x10/0x10 [ 306.698050][ T5444] sock_recvmsg+0x2df/0x390 [ 306.702646][ T5444] ____sys_recvmsg+0x193/0x610 [ 306.707520][ T5444] ? setup_fault_attr+0x2e0/0x300 [ 306.712683][ T5444] ? stack_depot_save_flags+0x35/0x7b0 [ 306.718253][ T5444] ___sys_recvmsg+0x20b/0x850 [ 306.723059][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.728948][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 306.734137][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.740035][ T5444] __x64_sys_recvmsg+0x20e/0x3d0 [ 306.745088][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 306.750289][ T5444] x64_sys_call+0x35f0/0x3e30 [ 306.755067][ T5444] do_syscall_64+0xd9/0xfa0 [ 306.759664][ T5444] ? irqentry_exit+0x16/0x60 [ 306.764340][ T5444] ? clear_bhb_loop+0x40/0x90 [ 306.769094][ T5444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.775062][ T5444] RIP: 0033:0x7fa1544f9407 [ 306.779530][ T5444] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 306.799215][ T5444] RSP: 002b:00007ffe0d0f1f70 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 306.807714][ T5444] RAX: ffffffffffffffda RBX: 00007fa15446f740 RCX: 00007fa1544f9407 [ 306.815793][ T5444] RDX: 0000000000000040 RSI: 00007ffe0d0f1ff0 RDI: 0000000000000009 [ 306.823815][ T5444] RBP: 000055e9d978caa0 R08: 0000000000000000 R09: 0000000000000000 [ 306.831836][ T5444] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 306.839850][ T5444] R13: 00007ffe0d0f6150 R14: 0000000000000000 R15: 00007ffe0d0f6140 [ 306.847927][ T5444] [ 306.851335][ T5444] Kernel Offset: disabled [ 306.855699][ T5444] Rebooting in 86400 seconds..