last executing test programs: 3m7.533121251s ago: executing program 0 (id=2690): socket$kcm(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) 3m6.792033964s ago: executing program 0 (id=2695): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'lc\x00'}, 0x2c) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) 2m9.383800547s ago: executing program 0 (id=2707): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000670000000800010002"], 0x30}}, 0x0) 1m28.199819129s ago: executing program 0 (id=2707): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000670000000800010002"], 0x30}}, 0x0) 1m27.567677959s ago: executing program 0 (id=2719): r0 = syz_io_uring_setup(0xec8, &(0x7f0000000c00)={0x0, 0xfffffffb, 0x2, 0x0, 0x2f1}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x0, 0x10a5, 0x3, 0x0, 0x0) 1m26.067551078s ago: executing program 0 (id=2721): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socket$inet(0x2, 0x802, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x1000000, @mcast2, 0x5}, 0x1c) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x3}) 59.66754147s ago: executing program 3 (id=2755): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) openat(0xffffffffffffffff, 0x0, 0x40040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000053218647911f3f8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) semctl$GETVAL(r1, 0x0, 0xc, &(0x7f0000000480)=""/150) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x4004743a, &(0x7f0000000300)) 59.458570135s ago: executing program 2 (id=2756): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 55.571546931s ago: executing program 3 (id=2758): syz_emit_ethernet(0x83, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000180)=0xc) 55.035387607s ago: executing program 2 (id=2761): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) symlink(&(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000059c0)='./file1\x00') 54.359170761s ago: executing program 2 (id=2762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x22) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) dup2(r2, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x278, 0x20a, 0x278, 0x278, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000b640000000c0a03000000000000000000070000000900020073797a31000000000900010073797a300000000038000380340000800800034000000002280002802400028008000180fffffffb08000180fffffffb08"], 0xf8}}, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000100)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @opaque="a2696f86455958ee"}}}}}}, 0x0) 50.546293648s ago: executing program 3 (id=2766): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 48.423308975s ago: executing program 2 (id=2770): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 48.143688255s ago: executing program 3 (id=2773): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x10000000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc011}, 0x0) 47.755117532s ago: executing program 2 (id=2774): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, 0x0, 0x0) 47.74768531s ago: executing program 3 (id=2775): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 40.195231342s ago: executing program 3 (id=2777): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001440)={0x4, 0x4}, 0x4) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xa094}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}}, 0x0) 39.87697114s ago: executing program 2 (id=2780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r4, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) r7 = fanotify_init(0x0, 0x0) r8 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r9 = dup(r8) fanotify_mark(r7, 0x1, 0x1020, r9, 0x0) fallocate(r8, 0x0, 0x0, 0x8) sendfile(r8, r8, &(0x7f00000000c0)=0x2, 0x200) copy_file_range(r8, 0x0, r9, &(0x7f0000000000), 0x3ff, 0x0) 10.470336665s ago: executing program 4 (id=2810): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x0) 9.339420003s ago: executing program 4 (id=2811): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="d4fb42cec6b4", 0x6) syz_usb_disconnect(r0) 8.953450254s ago: executing program 1 (id=2812): r0 = syz_io_uring_setup(0x4069, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x2}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xe3d08660d3cd4684}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 8.165073896s ago: executing program 1 (id=2813): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) 6.254870809s ago: executing program 4 (id=2814): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xffb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) 5.640456874s ago: executing program 1 (id=2815): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000040)={'full', 0x20, 0xe5c4, 0x20, 0xc0fb}, 0x2f) 5.337158748s ago: executing program 1 (id=2816): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4}]}}}], 0x18}, 0x0) 4.955812952s ago: executing program 1 (id=2817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20000094}}, 0x0) sendmmsg$inet6(r5, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 4.837968107s ago: executing program 4 (id=2818): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x0) 3.582602942s ago: executing program 4 (id=2819): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x24000040) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r4, &(0x7f0000000300)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) 2.643205923s ago: executing program 1 (id=2820): brk(0x55555ede6000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x600ffccc7d0000) 0s ago: executing program 4 (id=2821): ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000600)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = dup(r2) ioctl$PPPIOCCONNECT(r3, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000009140), 0x4, 0x0) kernel console output (not intermixed with test programs): ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 2002.412260][T16790] ? __alloc_skb+0x1e9/0x7b0 [ 2002.417109][T16790] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2002.423203][T16790] __alloc_skb+0x1e9/0x7b0 [ 2002.427885][T16790] alloc_skb_with_frags+0xc8/0xd00 [ 2002.433604][T16790] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2002.439673][T16790] ? kmsan_get_metadata+0x13e/0x1c0 [ 2002.445140][T16790] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2002.451274][T16790] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2002.457370][T16790] sock_alloc_send_pskb+0xa81/0xbf0 [ 2002.462888][T16790] ? kmsan_get_metadata+0x13e/0x1c0 [ 2002.468414][T16790] pn_sendmsg+0x23e/0x640 [ 2002.473121][T16790] ? __pfx_pn_sendmsg+0x10/0x10 [ 2002.478253][T16790] pn_socket_sendmsg+0x24b/0x2b0 [ 2002.483470][T16790] ? __pfx_pn_socket_sendmsg+0x10/0x10 [ 2002.489200][T16790] ? __pfx_pn_socket_sendmsg+0x10/0x10 [ 2002.494948][T16790] __sock_sendmsg+0x30f/0x380 [ 2002.499972][T16790] ____sys_sendmsg+0x877/0xb60 [ 2002.505041][T16790] ___sys_sendmsg+0x28d/0x3c0 [ 2002.510033][T16790] ? kmsan_get_metadata+0x13e/0x1c0 [ 2002.515533][T16790] ? kmsan_get_metadata+0x13e/0x1c0 [ 2002.520991][T16790] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2002.527068][T16790] __x64_sys_sendmsg+0x300/0x4a0 [ 2002.532288][T16790] ? perf_mmap+0x1100/0x28d0 [ 2002.537212][T16790] x64_sys_call+0x2da0/0x3ba0 [ 2002.542366][T16790] do_syscall_64+0xcd/0x1e0 [ 2002.547156][T16790] ? clear_bhb_loop+0x25/0x80 [ 2002.552098][T16790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2002.558319][T16790] RIP: 0033:0x7f7768b7dff9 [ 2002.563050][T16790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2002.582933][T16790] RSP: 002b:00007f77699f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2002.591641][T16790] RAX: ffffffffffffffda RBX: 00007f7768d35f80 RCX: 00007f7768b7dff9 [ 2002.599850][T16790] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2002.608062][T16790] RBP: 00007f77699f3090 R08: 0000000000000000 R09: 0000000000000000 [ 2002.616284][T16790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2002.624500][T16790] R13: 0000000000000000 R14: 00007f7768d35f80 R15: 00007fff25ef5448 [ 2002.632738][T16790] [ 2002.685364][T14064] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2002.706042][T14064] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 2002.728327][T14064] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2002.749608][T14064] usb 1-1: USB disconnect, device number 107 [ 2002.766235][T14064] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2002.792551][T14064] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2002.807999][T12724] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2002.839937][T14064] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2002.874667][T14064] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2002.888076][T14064] keyspan 1-1:0.107: device disconnected [ 2002.984998][T12724] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.996726][T12724] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 2003.006486][T12724] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2003.015949][T12724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.093324][T12724] usb 4-1: string descriptor 0 read error: -71 [ 2004.114266][T12724] usb 4-1: USB disconnect, device number 110 [ 2004.637910][ T5276] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2004.744526][T16819] netlink: 'syz.4.2519': attribute type 4 has an invalid length. [ 2004.906207][ T5276] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2004.915992][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.925489][ T5276] usb 3-1: Product: syz [ 2004.930674][ T5276] usb 3-1: Manufacturer: syz [ 2004.935521][ T5276] usb 3-1: SerialNumber: syz [ 2005.103119][ T5276] usb 3-1: config 0 descriptor?? [ 2005.265031][T16826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2005.283135][T16826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2005.309824][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2521'. [ 2005.649432][T16833] FAULT_INJECTION: forcing a failure. [ 2005.649432][T16833] name failslab, interval 1, probability 0, space 0, times 0 [ 2005.663462][T16833] CPU: 1 UID: 0 PID: 16833 Comm: syz.0.2523 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 2005.674569][T16833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2005.684926][T16833] Call Trace: [ 2005.688577][T16833] [ 2005.691691][T16833] dump_stack_lvl+0x216/0x2d0 [ 2005.696674][T16833] dump_stack+0x1e/0x30 [ 2005.701106][T16833] should_fail_ex+0x748/0x7f0 [ 2005.706075][T16833] should_failslab+0x17f/0x210 [ 2005.711109][T16833] __kmalloc_noprof+0x175/0xf30 [ 2005.716251][T16833] ? ___neigh_create+0xcc6/0x3380 [ 2005.721692][T16833] ? kmsan_get_metadata+0x13e/0x1c0 [ 2005.727183][T16833] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2005.733442][T16833] ___neigh_create+0xcc6/0x3380 [ 2005.738599][T16833] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2005.745034][T16833] ? kmsan_get_metadata+0x13e/0x1c0 [ 2005.750882][T16833] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2005.757011][T16833] __neigh_create+0xa8/0xd0 [ 2005.761799][T16833] ip6_finish_output2+0x1379/0x2ba0 [ 2005.767390][T16833] ip6_finish_output+0xbb8/0x14b0 [ 2005.772800][T16833] ip6_output+0x356/0x620 [ 2005.777455][T16833] ? __pfx_ip6_finish_output+0x10/0x10 [ 2005.783254][T16833] ? __pfx_ip6_output+0x10/0x10 [ 2005.788415][T16833] ip6_local_out+0x117/0x210 [ 2005.793364][T16833] ip6_push_pending_frames+0x208/0x580 [ 2005.799134][T16833] rawv6_push_pending_frames+0xbea/0xe00 [ 2005.805145][T16833] ? __pfx_raw6_getfrag+0x10/0x10 [ 2005.810474][T16833] ? kmsan_get_metadata+0x13e/0x1c0 [ 2005.815949][T16833] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2005.822040][T16833] rawv6_sendmsg+0x2b41/0x2e50 [ 2005.827110][T16833] ? kmsan_get_metadata+0x13e/0x1c0 [ 2005.832606][T16833] ? __pfx_udp_sendmsg+0x10/0x10 [ 2005.837869][T16833] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 2005.843364][T16833] inet_sendmsg+0x25a/0x280 [ 2005.848275][T16833] ? __pfx_inet_sendmsg+0x10/0x10 [ 2005.853982][T16833] __sock_sendmsg+0x267/0x380 [ 2005.859004][T16833] ____sys_sendmsg+0x903/0xb60 [ 2005.864087][T16833] ___sys_sendmsg+0x28d/0x3c0 [ 2005.869059][T16833] ? kmsan_get_metadata+0x13e/0x1c0 [ 2005.874568][T16833] ? __rcu_read_unlock+0x7b/0xe0 [ 2005.879826][T16833] ? __fget_files+0x4f5/0x5c0 [ 2005.884802][T16833] ? kmsan_get_metadata+0x13e/0x1c0 [ 2005.890260][T16833] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2005.896348][T16833] __sys_sendmmsg+0x3c1/0x960 [ 2005.901306][T16833] ? vfs_write+0xf3e/0x1540 [ 2005.906079][T16833] ? kmsan_get_metadata+0x13e/0x1c0 [ 2005.911543][T16833] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 2005.918212][T16833] __x64_sys_sendmmsg+0xbc/0x120 [ 2005.923435][T16833] x64_sys_call+0xb6e/0x3ba0 [ 2005.928349][T16833] do_syscall_64+0xcd/0x1e0 [ 2005.933146][T16833] ? clear_bhb_loop+0x25/0x80 [ 2005.938095][T16833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2005.944336][T16833] RIP: 0033:0x7f70ae77dff9 [ 2005.948993][T16833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2005.968995][T16833] RSP: 002b:00007f70af626038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2005.977713][T16833] RAX: ffffffffffffffda RBX: 00007f70ae935f80 RCX: 00007f70ae77dff9 [ 2005.985934][T16833] RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000003 [ 2005.994149][T16833] RBP: 00007f70af626090 R08: 0000000000000000 R09: 0000000000000000 [ 2006.002451][T16833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2006.011345][T16833] R13: 0000000000000000 R14: 00007f70ae935f80 R15: 00007ffcdb00b938 [ 2006.019569][T16833] [ 2006.070245][T12724] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2006.238165][T16831] loop2: detected capacity change from 0 to 512 [ 2006.292835][T12724] usb 4-1: device descriptor read/64, error -71 [ 2006.307371][T16831] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2006.369022][ T25] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2006.541036][T16831] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2516: invalid indirect mapped block 83886080 (level 1) [ 2006.646169][T12724] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2006.666413][T16831] EXT4-fs (loop2): 1 orphan inode deleted [ 2006.672416][T16831] EXT4-fs (loop2): 1 truncate cleaned up [ 2006.680739][T16831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2006.697002][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 2006.716749][ T25] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 2006.725426][ T25] usb 2-1: config 0 has no interface number 0 [ 2006.732443][ T25] usb 2-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2006.785527][ T25] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 2006.795465][ T25] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 2006.804305][ T25] usb 2-1: Product: syz [ 2006.814439][ T25] usb 2-1: Manufacturer: syz [ 2006.821358][ T25] usb 2-1: SerialNumber: syz [ 2006.829206][T12724] usb 4-1: device descriptor read/64, error -71 [ 2006.863845][ T25] usb 2-1: config 0 descriptor?? [ 2006.945410][T16831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2006.957216][T12724] usb usb4-port1: attempt power cycle [ 2006.982038][T16831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.067066][T16813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.080037][T16813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.130518][ T25] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 2007.139013][ T25] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 2007.147823][ T25] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 88 [ 2007.160466][ T25] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 2007.278438][ T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2007.293754][ T25] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 2007.316898][ T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2007.343125][ T25] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 2007.379140][T12724] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2007.400151][ T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2007.415562][ T25] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 2007.447223][T12724] usb 4-1: device descriptor read/8, error -71 [ 2007.461074][ T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2007.539331][ T25] usb 2-1: USB disconnect, device number 114 [ 2007.576506][ T25] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2007.608681][ T25] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2007.650823][ T25] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2007.686918][ T25] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2007.701672][ T25] keyspan 2-1:0.107: device disconnected [ 2007.739029][T12724] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2007.789008][T12724] usb 4-1: device descriptor read/8, error -71 [ 2007.909373][T12724] usb usb4-port1: unable to enumerate USB device [ 2008.363808][T16846] loop0: detected capacity change from 0 to 256 [ 2008.719608][T16203] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2008.770295][T16846] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 2009.047877][ T5276] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2009.348903][ T5276] usb 3-1: USB disconnect, device number 102 [ 2009.905680][T16864] fuse: Bad value for 'user_id' [ 2009.910866][T16864] fuse: Bad value for 'user_id' [ 2009.942232][T16376] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2010.118915][T16376] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.131760][T16376] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 2010.141373][T16376] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2010.150777][T16376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.659115][T16872] 9pnet_fd: Insufficient options for proto=fd [ 2010.843570][T16376] usb 4-1: string descriptor 0 read error: -71 [ 2010.853405][ T4456] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.901468][T16376] usb 4-1: USB disconnect, device number 115 [ 2011.299134][ T4456] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.444992][ T4456] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.671551][ T4456] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.112406][ T4456] bridge_slave_1: left allmulticast mode [ 2012.118649][ T4456] bridge_slave_1: left promiscuous mode [ 2012.125393][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 2012.180229][ T4456] bridge_slave_0: left allmulticast mode [ 2012.186284][ T4456] bridge_slave_0: left promiscuous mode [ 2012.192943][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 2013.096780][ T4456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2013.217943][ T4456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2013.274146][ T5199] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2013.278979][ T4456] bond0 (unregistering): Released all slaves [ 2013.302591][ T5199] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2013.313578][ T5199] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2013.335750][ T5199] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2013.364345][ T5199] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2013.383181][ T5199] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2013.485217][T16904] fuse: Bad value for 'user_id' [ 2013.490357][T16904] fuse: Bad value for 'user_id' [ 2013.640617][T16898] lo speed is unknown, defaulting to 1000 [ 2014.334377][T16912] loop4: detected capacity change from 0 to 512 [ 2014.517205][T16912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2014.574953][T16912] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2014.612103][T16912] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2547: bg 0: block 248: padding at end of block bitmap is not set [ 2014.737358][T16912] Quota error (device loop4): write_blk: dquota write failed [ 2014.745754][T16912] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2014.758003][T16912] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.2547: Failed to acquire dquot type 1 [ 2014.780883][T16920] loop1: detected capacity change from 0 to 2048 [ 2014.856529][T16920] nilfs2: Unknown parameter 'dä¢3Jscard’–?Å' [ 2014.861345][T16912] EXT4-fs (loop4): 1 truncate cleaned up [ 2014.885351][T16912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2014.929915][ T4456] hsr_slave_0: left promiscuous mode [ 2014.971329][ T4456] hsr_slave_1: left promiscuous mode [ 2014.992710][T16911] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.2547: deleted inode referenced: 12 [ 2015.038121][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2015.046441][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2015.055145][T16911] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.2547: deleted inode referenced: 12 [ 2015.074504][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2015.082526][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2015.123256][ T4456] veth1_macvtap: left promiscuous mode [ 2015.129044][ T4456] veth0_macvtap: left promiscuous mode [ 2015.135227][ T4456] veth1_vlan: left promiscuous mode [ 2015.140920][ T4456] veth0_vlan: left promiscuous mode [ 2015.296453][T16930] loop1: detected capacity change from 0 to 64 [ 2015.527244][ T5204] Bluetooth: hci2: command tx timeout [ 2015.567512][T14800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2015.668054][T16930] hfs: unable to load iocharset "ap874" [ 2015.674734][T16930] hfs: unable to parse mount options [ 2016.138871][T16935] xt_hashlimit: size too large, truncated to 1048576 [ 2016.593861][ T4456] team0 (unregistering): Port device team_slave_1 removed [ 2016.736948][ T4456] team0 (unregistering): Port device team_slave_0 removed [ 2017.417819][T16944] loop1: detected capacity change from 0 to 256 [ 2017.533060][T16944] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2017.605227][ T5204] Bluetooth: hci2: command tx timeout [ 2017.631261][ T7080] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2017.852976][ T7080] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 2017.864499][ T7080] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 2017.874254][ T7080] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2017.883686][ T7080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.421009][T16898] chnl_net:caif_netlink_parms(): no params data found [ 2018.732403][T16960] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2555'. [ 2018.802099][ T7080] usb 4-1: string descriptor 0 read error: -71 [ 2018.855572][T16956] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2555'. [ 2018.960010][ T7080] usb 4-1: USB disconnect, device number 116 [ 2019.588191][T16967] fuse: Bad value for 'user_id' [ 2019.593950][T16967] fuse: Bad value for 'user_id' [ 2019.670126][ T5204] Bluetooth: hci2: command tx timeout [ 2019.792518][T16898] bridge0: port 1(bridge_slave_0) entered blocking state [ 2019.800505][T16898] bridge0: port 1(bridge_slave_0) entered disabled state [ 2019.818019][T16898] bridge_slave_0: entered allmulticast mode [ 2019.827988][T16898] bridge_slave_0: entered promiscuous mode [ 2019.971998][T16898] bridge0: port 2(bridge_slave_1) entered blocking state [ 2019.981591][T16898] bridge0: port 2(bridge_slave_1) entered disabled state [ 2019.989563][T16898] bridge_slave_1: entered allmulticast mode [ 2019.998530][T16898] bridge_slave_1: entered promiscuous mode [ 2020.352183][T16898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2020.434478][T16898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2020.875391][T16898] team0: Port device team_slave_0 added [ 2020.953800][T16898] team0: Port device team_slave_1 added [ 2021.065487][ T25] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x4 [ 2021.074026][ T25] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x2 [ 2021.082706][ T25] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x3 [ 2021.300430][ T25] hid-generic 0000:3000000:0000.0059: hidraw0: HID v0.00 Device [sy] on syz0 [ 2021.324765][T16991] netlink: 'syz.3.2563': attribute type 4 has an invalid length. [ 2021.366889][T16993] loop2: detected capacity change from 0 to 128 [ 2021.372950][T16898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2021.380909][T16898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2021.407941][T16898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2021.540841][T16898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2021.549251][T16898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2021.576346][T16898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2021.730098][ T5204] Bluetooth: hci2: command tx timeout [ 2022.115050][T16898] hsr_slave_0: entered promiscuous mode [ 2022.145369][ T5251] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2022.318999][T16898] hsr_slave_1: entered promiscuous mode [ 2022.375547][ T5251] usb 5-1: Using ep0 maxpacket: 8 [ 2022.393745][T16898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2022.402071][T16898] Cannot create hsr debugfs directory [ 2022.417817][ T5251] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2022.476764][T17011] fuse: Bad value for 'fd' [ 2022.507008][ T5251] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2022.516735][ T5251] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2022.525413][ T5251] usb 5-1: Product: syz [ 2022.530137][ T5251] usb 5-1: Manufacturer: syz [ 2022.535005][ T5251] usb 5-1: SerialNumber: syz [ 2022.961974][ T5251] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 2022.970858][ T5251] visor 5-1:1.0: probe with driver visor failed with error -110 [ 2023.097871][ T25] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2023.107449][ T5276] usb 5-1: USB disconnect, device number 120 [ 2023.384113][ T25] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 2023.400228][ T25] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 2023.411614][ T25] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2023.421061][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.060424][ T25] usb 3-1: string descriptor 0 read error: -71 [ 2024.095151][ T25] usb 3-1: USB disconnect, device number 103 [ 2024.498478][T16898] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2024.548403][T16898] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2024.600526][T16898] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2024.643133][T17031] xt_hashlimit: size too large, truncated to 1048576 [ 2024.745429][T16898] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2024.899521][ T7080] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x4 [ 2024.907931][ T7080] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x2 [ 2024.916082][ T7080] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x3 [ 2024.992036][ T7080] hid-generic 0000:3000000:0000.005A: hidraw0: HID v0.00 Device [sy] on syz0 [ 2025.779547][T17040] netlink: 'syz.2.2576': attribute type 4 has an invalid length. [ 2026.165762][T16898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2026.214429][T16898] 8021q: adding VLAN 0 to HW filter on device team0 [ 2026.253554][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 2026.261360][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2026.289018][T17044] loop3: detected capacity change from 0 to 2048 [ 2026.334425][T12914] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.342239][T12914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2026.410034][T17044] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2026.448642][ T5204] Bluetooth: hci2: command 0x0405 tx timeout [ 2026.449946][T16898] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2026.472991][T16898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2026.594684][T17044] syz.3.2577: attempt to access beyond end of device [ 2026.594684][T17044] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 2026.645565][T17050] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2026.721263][T17044] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 2026.848899][T17044] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 2027.104443][T17057] loop4: detected capacity change from 0 to 128 [ 2027.234861][T17057] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2027.353541][T17057] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2027.561082][ T29] audit: type=1800 audit(1729012787.042:34): pid=17057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2580" name="file0" dev="loop4" ino=12 res=0 errno=0 [ 2027.582307][ T29] audit: type=1804 audit(1729012787.042:35): pid=17063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2580" name="/newroot/133/file1/file0" dev="loop4" ino=12 res=1 errno=0 [ 2027.709682][T17067] fuse: Bad value for 'fd' [ 2028.167630][ T5251] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2028.301566][T16898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2028.348849][T14800] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2028.370035][ T5251] usb 4-1: Using ep0 maxpacket: 8 [ 2028.456481][ T5251] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2028.490271][ T5251] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2028.499870][ T5251] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2028.513907][ T5251] usb 4-1: Product: syz [ 2028.520556][ T5251] usb 4-1: Manufacturer: syz [ 2028.525563][ T5251] usb 4-1: SerialNumber: syz [ 2028.785793][ T5251] usb 4-1: palm_os_3_probe - error -32 getting connection information [ 2028.794486][ T5251] visor 4-1:1.0: probe with driver visor failed with error -32 [ 2028.895920][ T5251] usb 4-1: USB disconnect, device number 117 [ 2029.030592][T16898] veth0_vlan: entered promiscuous mode [ 2029.202349][T16898] veth1_vlan: entered promiscuous mode [ 2029.539235][T16898] veth0_macvtap: entered promiscuous mode [ 2029.665615][T16898] veth1_macvtap: entered promiscuous mode [ 2029.836213][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2029.848212][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.858807][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2029.870620][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.880875][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2029.891819][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.901987][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2029.912857][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.928200][T16898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2030.063506][ T5276] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x4 [ 2030.073216][ T5276] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x2 [ 2030.081601][ T5276] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x3 [ 2030.175232][ T5276] hid-generic 0000:3000000:0000.005B: hidraw0: HID v0.00 Device [sy] on syz0 [ 2030.244970][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2030.257043][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2030.267605][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2030.278469][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2030.288685][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2030.299534][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2030.309839][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2030.320666][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2030.335806][T16898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2030.496671][T17091] FAULT_INJECTION: forcing a failure. [ 2030.496671][T17091] name failslab, interval 1, probability 0, space 0, times 0 [ 2030.509857][T17091] CPU: 0 UID: 0 PID: 17091 Comm: syz.1.2587 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 2030.521462][T17091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2030.531775][T17091] Call Trace: [ 2030.535251][T17091] [ 2030.538387][T17091] dump_stack_lvl+0x216/0x2d0 [ 2030.543395][T17091] dump_stack+0x1e/0x30 [ 2030.547876][T17091] should_fail_ex+0x748/0x7f0 [ 2030.552856][T17091] should_failslab+0x17f/0x210 [ 2030.557888][T17091] kmem_cache_alloc_noprof+0xe2/0xb20 [ 2030.563574][T17091] ? skb_clone+0x303/0x550 [ 2030.568297][T17091] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2030.574427][T17091] skb_clone+0x303/0x550 [ 2030.578986][T17091] nfnetlink_rcv+0x7a1/0x5100 [ 2030.584093][T17091] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2030.590489][T17091] ? ref_tracker_free+0x630/0xec0 [ 2030.595858][T17091] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2030.601936][T17091] ? __dev_queue_xmit+0x355/0x56d0 [ 2030.607378][T17091] ? kmsan_get_metadata+0x13e/0x1c0 [ 2030.612844][T17091] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 2030.619478][T17091] ? kmsan_get_metadata+0x13e/0x1c0 [ 2030.624938][T17091] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2030.631015][T17091] ? __netlink_deliver_tap+0xc61/0xc90 [ 2030.636817][T17091] ? kmsan_get_metadata+0x13e/0x1c0 [ 2030.642271][T17091] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2030.648340][T17091] ? kmsan_get_metadata+0x13e/0x1c0 [ 2030.653820][T17091] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2030.659923][T17091] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2030.665347][T17091] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2030.671112][T17091] netlink_unicast+0xf52/0x1260 [ 2030.676260][T17091] netlink_sendmsg+0x10da/0x11e0 [ 2030.681509][T17091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2030.687088][T17091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2030.692700][T17091] __sock_sendmsg+0x30f/0x380 [ 2030.697706][T17091] ____sys_sendmsg+0x877/0xb60 [ 2030.702800][T17091] ___sys_sendmsg+0x28d/0x3c0 [ 2030.707761][T17091] ? kmsan_get_metadata+0x13e/0x1c0 [ 2030.713235][T17091] ? __rcu_read_unlock+0x7b/0xe0 [ 2030.718494][T17091] ? __fget_files+0x4f5/0x5c0 [ 2030.723494][T17091] ? kmsan_get_metadata+0x13e/0x1c0 [ 2030.728985][T17091] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2030.735101][T17091] __x64_sys_sendmsg+0x300/0x4a0 [ 2030.740351][T17091] ? perf_mmap+0x1100/0x28d0 [ 2030.745254][T17091] x64_sys_call+0x2da0/0x3ba0 [ 2030.750246][T17091] do_syscall_64+0xcd/0x1e0 [ 2030.755069][T17091] ? clear_bhb_loop+0x25/0x80 [ 2030.760040][T17091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.766278][T17091] RIP: 0033:0x7f7768b7dff9 [ 2030.770938][T17091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2030.790855][T17091] RSP: 002b:00007f77699f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2030.799575][T17091] RAX: ffffffffffffffda RBX: 00007f7768d35f80 RCX: 00007f7768b7dff9 [ 2030.807926][T17091] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2030.816160][T17091] RBP: 00007f77699f3090 R08: 0000000000000000 R09: 0000000000000000 [ 2030.824372][T17091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2030.832590][T17091] R13: 0000000000000000 R14: 00007f7768d35f80 R15: 00007fff25ef5448 [ 2030.840826][T17091] [ 2030.941864][T16898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.951058][T16898] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.960224][T16898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.976712][T16898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.389360][T17103] loop3: detected capacity change from 0 to 2048 [ 2032.446925][T17103] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 2032.495216][T17103] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 2032.509734][T17103] UDF-fs: Scanning with blocksize 512 failed [ 2032.640993][T17125] xt_hashlimit: size too large, truncated to 1048576 [ 2032.675048][ T5276] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2032.693291][T17103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2032.726564][T17127] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 2032.972959][ T5276] usb 5-1: Using ep0 maxpacket: 16 [ 2033.031453][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2033.043392][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2033.053785][ T5276] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2033.067085][ T5276] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2033.076553][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.273441][ T5276] usb 5-1: config 0 descriptor?? [ 2033.914996][ T5276] usbhid 5-1:0.0: can't add hid device: -71 [ 2033.922043][ T5276] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2033.999882][ T5276] usb 5-1: USB disconnect, device number 121 [ 2034.479213][T16177] UDF-fs: warning (device loop3): udf_evict_inode: Inode 851 (mode 100100) has inode size 549789401084 different from extent length 549789401088. Filesystem need not be standards compliant. [ 2034.912740][T14064] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x4 [ 2034.921024][T14064] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x2 [ 2034.930192][T14064] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x3 [ 2035.267416][T14064] hid-generic 0000:3000000:0000.005C: hidraw0: HID v0.00 Device [sy] on syz0 [ 2036.224081][T14064] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2036.461385][T14064] usb 3-1: Using ep0 maxpacket: 16 [ 2037.060016][ T5276] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2037.151230][T14064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2037.163019][T14064] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2037.172670][T14064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.311108][T14064] usb 3-1: config 0 descriptor?? [ 2037.409420][ T5276] usb 4-1: Using ep0 maxpacket: 16 [ 2037.439431][ T5276] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 2037.448151][ T5276] usb 4-1: config 0 has no interface number 0 [ 2037.455032][ T5276] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2037.625463][ T5276] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 2037.635161][ T5276] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 2037.643842][ T5276] usb 4-1: Product: syz [ 2037.648257][ T5276] usb 4-1: Manufacturer: syz [ 2037.653211][ T5276] usb 4-1: SerialNumber: syz [ 2037.747641][T17159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.787729][T12912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2037.795983][T12912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2037.844070][T17159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.928854][T14064] hid (null): unknown global tag 0xd [ 2037.937141][T14064] hid (null): unknown global tag 0xc [ 2037.942603][ T5276] usb 4-1: config 0 descriptor?? [ 2038.003627][T12598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2038.011999][T12598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2038.136049][T14064] hid-generic 0003:0158:0100.005D: unknown main item tag 0x1 [ 2038.144138][T14064] hid-generic 0003:0158:0100.005D: unexpected long global item [ 2038.236892][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2602'. [ 2038.246440][T17159] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2602'. [ 2038.256150][T17159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2602'. [ 2038.293085][T14064] hid-generic 0003:0158:0100.005D: probe with driver hid-generic failed with error -22 [ 2038.491260][ T5276] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 2038.499448][ T5276] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 2038.509262][ T5276] keyspan 4-1:0.107: unsupported endpoint type 0 [ 2038.522148][ T5276] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 2038.605252][ T5276] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2038.650634][ T7080] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2038.721045][T14064] usb 3-1: USB disconnect, device number 104 [ 2038.856697][ T5276] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 2038.872727][ T7080] usb 5-1: Using ep0 maxpacket: 16 [ 2038.906879][ T5276] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2038.920860][ T5276] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 2038.935881][ T7080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2038.949566][ T7080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2038.960498][ T7080] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2038.973773][ T7080] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2038.983380][ T7080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.019487][ T5276] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2039.034005][ T5276] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 2039.053140][ T7080] usb 5-1: config 0 descriptor?? [ 2039.212640][T17177] loop1: detected capacity change from 0 to 4096 [ 2039.221887][ T5276] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2039.754932][ T5276] usb 4-1: USB disconnect, device number 118 [ 2039.917979][ T7080] usbhid 5-1:0.0: can't add hid device: -71 [ 2039.924892][ T7080] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2040.068112][T17206] xt_hashlimit: size too large, truncated to 1048576 [ 2040.263155][ T5276] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2040.305498][ T5276] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2040.332236][T17177] NILFS (loop1): error -4 creating segctord thread [ 2040.868445][ T7080] usb 5-1: USB disconnect, device number 122 [ 2041.261426][ T5276] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2041.281217][ T5276] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2041.294233][ T5276] keyspan 4-1:0.107: device disconnected [ 2041.974968][T17221] netlink: 'syz.3.2620': attribute type 4 has an invalid length. [ 2042.387717][T17217] loop1: detected capacity change from 0 to 2048 [ 2042.498634][T17217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2042.673163][T17226] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 2042.726571][ T7080] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x4 [ 2042.736853][ T7080] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x2 [ 2042.745724][ T7080] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x3 [ 2042.775470][T17217] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 2042.826962][T17217] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 2042.861248][ T7080] hid-generic 0000:3000000:0000.005E: hidraw0: HID v0.00 Device [sy] on syz0 [ 2042.900346][T17217] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 2042.968814][T17217] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 2043.033448][T17226] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 2043.075067][T17230] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 2043.307900][ T7080] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2043.319375][ T5276] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2043.592511][ T5276] usb 3-1: Using ep0 maxpacket: 16 [ 2043.608127][ T7080] usb 5-1: Using ep0 maxpacket: 16 [ 2043.627855][ T7080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2043.639799][ T7080] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2043.649512][ T7080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.669531][ T5276] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 2043.678432][ T5276] usb 3-1: config 0 has no interface number 0 [ 2043.684803][ T5276] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2043.708786][ T7080] usb 5-1: config 0 descriptor?? [ 2043.806990][T14064] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2043.948333][ T5276] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 2043.958211][ T5276] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 2043.972916][ T5276] usb 3-1: Product: syz [ 2043.979355][ T5276] usb 3-1: Manufacturer: syz [ 2043.979783][T14064] usb 4-1: device descriptor read/64, error -71 [ 2043.984111][ T5276] usb 3-1: SerialNumber: syz [ 2044.008477][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2627'. [ 2044.017863][T17238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2627'. [ 2044.054366][ T5276] usb 3-1: config 0 descriptor?? [ 2044.165718][T17229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.214742][T17229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.247532][ T7080] hid (null): unknown global tag 0xd [ 2044.253902][ T7080] hid (null): unknown global tag 0xc [ 2044.272078][ T7080] hid-generic 0003:0158:0100.005F: unknown main item tag 0x1 [ 2044.281667][ T7080] hid-generic 0003:0158:0100.005F: unexpected long global item [ 2044.294484][ T7080] hid-generic 0003:0158:0100.005F: probe with driver hid-generic failed with error -22 [ 2044.344405][T14064] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2044.351892][ T5276] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 2044.360885][ T5276] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 2044.369294][ T5276] keyspan 3-1:0.107: unsupported endpoint type 0 [ 2044.390991][ T5276] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 2044.501444][ T5276] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2044.514613][ T5276] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 2044.538405][ T5276] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2044.552046][ T5276] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 2044.584040][T16376] usb 5-1: USB disconnect, device number 123 [ 2044.597534][ T5276] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2044.615340][T14064] usb 4-1: device descriptor read/64, error -71 [ 2044.616027][ T5276] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 2044.639041][ T5276] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2044.663760][ T5276] usb 3-1: USB disconnect, device number 105 [ 2044.705249][ T5276] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2044.730196][ T5276] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2044.732906][T14064] usb usb4-port1: attempt power cycle [ 2044.795013][ T5276] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2044.821824][ T5276] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2044.836018][ T5276] keyspan 3-1:0.107: device disconnected [ 2044.927095][ T7080] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2045.142311][ T7080] usb 2-1: Using ep0 maxpacket: 8 [ 2045.148457][T14064] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2045.192352][ T7080] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2045.211675][T14064] usb 4-1: device descriptor read/8, error -71 [ 2045.236820][ T7080] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2045.245832][ T7080] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2045.256630][ T7080] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2045.265876][ T7080] usb 2-1: config 1 has no interface number 1 [ 2045.272456][ T7080] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2045.285719][ T7080] usb 2-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2045.417729][ T7080] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2045.428449][ T7080] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.437421][ T7080] usb 2-1: Product: syz [ 2045.441825][ T7080] usb 2-1: Manufacturer: syz [ 2045.446894][ T7080] usb 2-1: SerialNumber: syz [ 2045.475278][T14064] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2045.508921][T17243] loop0: detected capacity change from 0 to 512 [ 2045.528965][T14064] usb 4-1: device descriptor read/8, error -71 [ 2045.638201][T14064] usb usb4-port1: unable to enumerate USB device [ 2045.716551][T17243] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2629: bg 0: block 393: padding at end of block bitmap is not set [ 2045.757798][T17243] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 2045.802212][T17243] EXT4-fs (loop0): 2 truncates cleaned up [ 2045.812481][T17243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2045.851076][T17253] fuse: Bad value for 'fd' [ 2045.928115][T17243] EXT4-fs error (device loop0): ext4_check_dx_root:2220: inode #2: comm syz.0.2629: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 2045.962092][ T7080] usb 2-1: USB disconnect, device number 115 [ 2046.101917][T15663] udevd[15663]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2046.466957][T17257] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2634'. [ 2046.649397][T16898] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2046.907654][T17262] xt_hashlimit: size too large, truncated to 1048576 [ 2048.255221][T17277] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2048.262048][T17277] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2048.275975][T17277] vhci_hcd vhci_hcd.0: Device attached [ 2048.519593][ T25] vhci_hcd: vhci_device speed not set [ 2048.605146][ T25] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 2048.746643][T17285] fuse: Bad value for 'fd' [ 2048.825341][ T5276] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2049.050531][ T5276] usb 1-1: Using ep0 maxpacket: 8 [ 2049.115452][ T5276] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2049.126494][ T5276] usb 1-1: config 0 has no interfaces? [ 2050.984346][ T7080] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2051.193743][ T7080] usb 4-1: Using ep0 maxpacket: 8 [ 2051.521332][ T7080] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2051.605611][ T7080] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2051.614834][ T7080] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2051.625509][ T7080] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2051.636959][ T7080] usb 4-1: config 1 has no interface number 1 [ 2051.645251][ T7080] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2051.659056][ T7080] usb 4-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2051.973990][ T5276] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2051.975665][T17278] vhci_hcd: connection reset by peer [ 2051.984205][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.004179][ T1093] vhci_hcd: stop threads [ 2052.006845][ T5276] usb 1-1: config 0 descriptor?? [ 2052.008741][ T1093] vhci_hcd: release socket [ 2052.008837][ T1093] vhci_hcd: disconnect device [ 2052.043433][ T5276] usb 1-1: can't set config #0, error -71 [ 2052.081969][T17292] loop2: detected capacity change from 0 to 64 [ 2052.108954][T17292] hfs: file_umask requires a value [ 2052.115407][T17292] hfs: unable to parse mount options [ 2052.121520][ T5276] usb 1-1: USB disconnect, device number 108 [ 2052.515389][T17297] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2649'. [ 2052.733679][ T5276] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2052.791661][ T7080] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2052.801937][ T7080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.834399][ T5199] Bluetooth: hci4: command 0x0406 tx timeout [ 2052.952916][ T5276] usb 1-1: device descriptor read/64, error -71 [ 2052.988972][ T7080] usb 4-1: can't set config #1, error -71 [ 2053.049691][ T7080] usb 4-1: USB disconnect, device number 123 [ 2053.195975][ T5276] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2053.387875][ T5276] usb 1-1: device descriptor read/64, error -71 [ 2053.511906][ T5276] usb usb1-port1: attempt power cycle [ 2053.691666][T17316] fuse: Bad value for 'fd' [ 2053.715787][ T25] vhci_hcd: vhci_device speed not set [ 2053.828306][T16376] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2053.905183][T17318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2658'. [ 2053.937570][ T5276] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2053.984863][ T5276] usb 1-1: device descriptor read/8, error -71 [ 2054.019747][T16376] usb 5-1: config 0 has an invalid interface number: 224 but max is 0 [ 2054.028886][T16376] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2054.039689][T16376] usb 5-1: config 0 has no interface number 0 [ 2054.046282][T16376] usb 5-1: config 0 interface 224 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 2054.058611][T16376] usb 5-1: config 0 interface 224 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 2054.070905][T16376] usb 5-1: config 0 interface 224 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2054.082256][T16376] usb 5-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2054.183083][T16376] usb 5-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=69.e2 [ 2054.192848][T16376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.203321][T16376] usb 5-1: Product: syz [ 2054.207760][T16376] usb 5-1: Manufacturer: syz [ 2054.213973][T16376] usb 5-1: SerialNumber: syz [ 2054.234741][T16376] usb 5-1: config 0 descriptor?? [ 2054.242793][ T5276] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2054.278128][T16376] keyspan 5-1:0.224: Keyspan 4 port adapter converter detected [ 2054.282766][ T5276] usb 1-1: device descriptor read/8, error -71 [ 2054.286358][T16376] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 87 [ 2054.303264][T16376] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 7 [ 2054.315295][T16376] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 81 [ 2054.323809][T16376] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 1 [ 2054.354824][T16376] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2054.368448][T16376] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 82 [ 2054.377634][T16376] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 2 [ 2054.398141][T16376] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2054.414819][ T5276] usb usb1-port1: unable to enumerate USB device [ 2054.414936][T16376] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 83 [ 2054.429757][T16376] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 3 [ 2054.460887][T16376] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2054.473980][T16376] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 84 [ 2054.482584][T16376] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 4 [ 2054.516438][T16376] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2055.012025][ T7080] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2055.328306][ T7080] usb 4-1: Using ep0 maxpacket: 8 [ 2055.344580][ T7080] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2055.360921][ T7080] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2055.370538][ T7080] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2055.381133][ T7080] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2055.390541][ T7080] usb 4-1: config 1 has no interface number 1 [ 2055.397113][ T7080] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2055.410449][ T7080] usb 4-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2055.495751][ T7080] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2055.505451][ T7080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.513957][ T7080] usb 4-1: Product: syz [ 2055.518382][ T7080] usb 4-1: Manufacturer: syz [ 2055.523344][ T7080] usb 4-1: SerialNumber: syz [ 2055.922740][ T7080] usb 4-1: USB disconnect, device number 124 [ 2056.051994][T15663] udevd[15663]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2056.196042][T17334] binder: 17333:17334 ioctl c0306201 20000580 returned -14 [ 2056.554818][ T7080] usb 5-1: USB disconnect, device number 124 [ 2056.589829][ T7080] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2056.605425][T16376] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2056.660068][ T7080] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2056.728024][ T7080] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2056.791217][T16376] usb 2-1: Using ep0 maxpacket: 16 [ 2056.812442][ T7080] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2056.825691][ T7080] keyspan 5-1:0.224: device disconnected [ 2056.836400][T16376] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 2056.845318][T16376] usb 2-1: can't read configurations, error -22 [ 2057.051347][T16376] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2057.503688][T17353] fuse: Invalid rootmode [ 2057.528115][T16376] usb 2-1: Using ep0 maxpacket: 16 [ 2057.630213][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2671'. [ 2057.733996][T16376] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 2057.743192][T16376] usb 2-1: can't read configurations, error -22 [ 2057.753552][T16376] usb usb2-port1: attempt power cycle [ 2058.120702][T16376] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2058.155845][T16376] usb 2-1: Using ep0 maxpacket: 16 [ 2058.182347][T16376] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 2058.195745][T16376] usb 2-1: can't read configurations, error -22 [ 2058.270975][ T5251] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2058.403352][T16376] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2058.453549][T16376] usb 2-1: Using ep0 maxpacket: 16 [ 2058.459509][ T5251] usb 4-1: device descriptor read/64, error -71 [ 2058.465765][T16376] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 2058.475269][T16376] usb 2-1: can't read configurations, error -22 [ 2058.490411][T16376] usb usb2-port1: unable to enumerate USB device [ 2058.781231][ T5251] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2058.880670][T16376] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2058.903663][ T25] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2058.930841][ T5251] usb 4-1: device descriptor read/64, error -71 [ 2059.058313][ T5251] usb usb4-port1: attempt power cycle [ 2059.099919][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 2059.120006][T16376] usb 1-1: device descriptor read/64, error -71 [ 2059.138844][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2059.162564][ T25] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2059.171979][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2059.182602][ T25] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2059.192071][ T25] usb 3-1: config 1 has no interface number 1 [ 2059.198441][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2059.218427][ T25] usb 3-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2059.367620][T17377] loop4: detected capacity change from 0 to 2048 [ 2059.376782][T17377] EXT4-fs: Ignoring removed nobh option [ 2059.387127][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2059.397591][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.407040][ T25] usb 3-1: Product: syz [ 2059.412321][ T25] usb 3-1: Manufacturer: syz [ 2059.423199][ T25] usb 3-1: SerialNumber: syz [ 2059.470227][T16376] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2059.498328][T17377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2059.511936][T17377] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2059.582550][ T5251] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2059.609619][T16376] usb 1-1: device descriptor read/64, error -71 [ 2059.631320][ T5251] usb 4-1: device descriptor read/8, error -71 [ 2059.640740][T17383] fs-verity: sha256 using implementation "sha256-generic" [ 2059.727243][T16376] usb usb1-port1: attempt power cycle [ 2059.843149][ T25] usb 3-1: USB disconnect, device number 106 [ 2059.879703][ T5251] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2059.910239][T15663] udevd[15663]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2059.921866][ T5251] usb 4-1: device descriptor read/8, error -71 [ 2060.055879][ T5251] usb usb4-port1: unable to enumerate USB device [ 2060.099412][T16376] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2060.122456][T16376] usb 1-1: device descriptor read/8, error -71 [ 2060.244226][T14800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2060.369334][T16376] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2060.409324][T16376] usb 1-1: device descriptor read/8, error -71 [ 2060.528512][T16376] usb usb1-port1: unable to enumerate USB device [ 2060.767134][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 2063.006841][ T5199] Bluetooth: hci5: command 0x0406 tx timeout [ 2065.436047][ T5251] IPVS: starting estimator thread 0... [ 2065.740330][T17424] IPVS: using max 240 ests per chain, 12000 per kthread [ 2066.325243][T17432] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 2067.188382][ T3325] Bluetooth: hci3: Frame reassembly failed (-84) [ 2067.287567][T17441] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2070.247205][ T5199] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2072.418202][T17459] dccp_v4_rcv: dropped packet with invalid checksum [ 2073.641045][T17464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2708'. [ 2074.337018][ T5199] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2078.070337][ T5199] Bluetooth: hci3: command 0x1003 tx timeout [ 2078.929852][ T5204] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2079.909944][ T5204] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2084.677282][T17462] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2103.469986][T12912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.554045][T12912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.940001][T12912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.720845][T12912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.614514][T12912] bridge_slave_1: left allmulticast mode [ 2110.620626][T12912] bridge_slave_1: left promiscuous mode [ 2110.627586][T12912] bridge0: port 2(bridge_slave_1) entered disabled state [ 2119.420058][T12912] bridge_slave_0: left allmulticast mode [ 2119.425979][T12912] bridge_slave_0: left promiscuous mode [ 2119.432731][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 2121.230754][T16174] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2121.240559][T16174] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2121.251541][T11801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2121.260928][T11801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2121.274160][T11801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2121.286705][T11801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2121.296164][T11801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2121.416639][T16174] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2121.647365][ T5204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2121.761229][ T5204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2121.794024][T11801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2122.476004][ T5204] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2122.485352][ T5204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2122.498753][ T5199] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2122.598873][ T5199] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2122.615461][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 2122.733359][ T5199] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2122.893184][T12912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2123.152463][ T5199] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2123.165454][ T5199] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2123.177066][ T5199] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2123.191923][ T5199] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2123.201407][ T5199] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2123.286378][T17489] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2123.305817][T17489] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2123.326182][ T8772] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2123.339493][ T8772] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2123.358005][ T8772] Bluetooth: hci3: command tx timeout [ 2123.375797][ T8772] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2123.438494][ T8772] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2123.448004][ T8772] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2123.482471][T12912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2123.505227][T17489] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2123.532420][T17489] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2123.555573][T12912] bond0 (unregistering): Released all slaves [ 2124.081127][T17487] lo speed is unknown, defaulting to 1000 [ 2124.143288][T17478] lo speed is unknown, defaulting to 1000 [ 2124.170679][T17477] lo speed is unknown, defaulting to 1000 [ 2124.230863][T17482] lo speed is unknown, defaulting to 1000 [ 2124.672443][T17485] lo speed is unknown, defaulting to 1000 [ 2124.978813][T12912] hsr_slave_0: left promiscuous mode [ 2124.989144][T12912] hsr_slave_1: left promiscuous mode [ 2124.999013][T12912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2125.006902][T12912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2125.018382][T12912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2125.027342][T12912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2125.066309][T12912] veth1_macvtap: left promiscuous mode [ 2125.072293][T12912] veth0_macvtap: left promiscuous mode [ 2125.078583][T12912] veth1_vlan: left promiscuous mode [ 2125.084171][T12912] veth0_vlan: left promiscuous mode [ 2125.259601][ T5204] Bluetooth: hci2: command tx timeout [ 2125.447467][ T5204] Bluetooth: hci6: command tx timeout [ 2125.453247][T11801] Bluetooth: hci3: command tx timeout [ 2125.602540][T11801] Bluetooth: hci8: command tx timeout [ 2125.677328][T11801] Bluetooth: hci7: command tx timeout [ 2125.838342][T12912] team0 (unregistering): Port device team_slave_1 removed [ 2125.905686][T12912] team0 (unregistering): Port device team_slave_0 removed [ 2126.639006][T12912] IPVS: stop unused estimator thread 0... [ 2127.103630][ T9330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.207886][T17477] chnl_net:caif_netlink_parms(): no params data found [ 2127.280354][ T9330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.296861][T11801] Bluetooth: hci2: command tx timeout [ 2127.454901][ T9330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.524471][T11801] Bluetooth: hci3: command tx timeout [ 2127.535652][T11801] Bluetooth: hci6: command tx timeout [ 2127.621212][ T9330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.666174][T17487] chnl_net:caif_netlink_parms(): no params data found [ 2127.694295][T11801] Bluetooth: hci8: command tx timeout [ 2127.759809][T11801] Bluetooth: hci7: command tx timeout [ 2128.068061][T17485] chnl_net:caif_netlink_parms(): no params data found [ 2128.087755][T17478] chnl_net:caif_netlink_parms(): no params data found [ 2128.313383][ T9330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2128.350917][T17482] chnl_net:caif_netlink_parms(): no params data found [ 2128.471448][ T9330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2128.680333][ T9330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2128.899993][ T9330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2129.354788][T11801] Bluetooth: hci2: command tx timeout [ 2129.562743][ T9330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2129.604577][T11801] Bluetooth: hci3: command tx timeout [ 2129.610245][T11801] Bluetooth: hci6: command tx timeout [ 2129.728004][T17477] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.737142][T17477] bridge0: port 1(bridge_slave_0) entered disabled state [ 2129.745229][T17477] bridge_slave_0: entered allmulticast mode [ 2129.754387][T17477] bridge_slave_0: entered promiscuous mode [ 2129.776614][ T5204] Bluetooth: hci8: command tx timeout [ 2129.838861][ T5204] Bluetooth: hci7: command tx timeout [ 2129.862225][ T9330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2129.891892][T17477] bridge0: port 2(bridge_slave_1) entered blocking state [ 2129.903237][T17477] bridge0: port 2(bridge_slave_1) entered disabled state [ 2129.913257][T17477] bridge_slave_1: entered allmulticast mode [ 2129.925368][T17477] bridge_slave_1: entered promiscuous mode [ 2129.949317][T17487] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.957186][T17487] bridge0: port 1(bridge_slave_0) entered disabled state [ 2129.965206][T17487] bridge_slave_0: entered allmulticast mode [ 2129.974272][T17487] bridge_slave_0: entered promiscuous mode [ 2130.061313][ T9330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2130.228722][T17487] bridge0: port 2(bridge_slave_1) entered blocking state [ 2130.239577][T17487] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.255602][T17487] bridge_slave_1: entered allmulticast mode [ 2130.264934][T17487] bridge_slave_1: entered promiscuous mode [ 2130.314886][ T9330] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2130.585124][T17478] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.592972][T17478] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.603035][T17478] bridge_slave_0: entered allmulticast mode [ 2130.612401][T17478] bridge_slave_0: entered promiscuous mode [ 2130.636674][T17477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2130.647089][T17478] bridge0: port 2(bridge_slave_1) entered blocking state [ 2130.656182][T17478] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.664473][T17478] bridge_slave_1: entered allmulticast mode [ 2130.673655][T17478] bridge_slave_1: entered promiscuous mode [ 2130.684511][T17482] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.692217][T17482] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.700427][T17482] bridge_slave_0: entered allmulticast mode [ 2130.709511][T17482] bridge_slave_0: entered promiscuous mode [ 2130.800771][T17487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2130.820133][T17477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2130.864457][T17482] bridge0: port 2(bridge_slave_1) entered blocking state [ 2130.872162][T17482] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.880141][T17482] bridge_slave_1: entered allmulticast mode [ 2130.889620][T17482] bridge_slave_1: entered promiscuous mode [ 2130.975352][T17487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2130.985414][T17485] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.993084][T17485] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.001237][T17485] bridge_slave_0: entered allmulticast mode [ 2131.010339][T17485] bridge_slave_0: entered promiscuous mode [ 2131.219948][T17478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2131.240247][T17482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2131.326080][T17485] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.334022][T17485] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.341903][T17485] bridge_slave_1: entered allmulticast mode [ 2131.352232][T17485] bridge_slave_1: entered promiscuous mode [ 2131.369067][T17477] team0: Port device team_slave_0 added [ 2131.431757][T17482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2131.441300][ T5204] Bluetooth: hci2: command tx timeout [ 2131.485880][ T9330] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2131.521033][T17478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2131.538350][T17487] team0: Port device team_slave_0 added [ 2131.595902][T17477] team0: Port device team_slave_1 added [ 2131.698354][ T5204] Bluetooth: hci6: command tx timeout [ 2131.717723][T17487] team0: Port device team_slave_1 added [ 2131.770063][ T9330] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2131.827399][T17485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2131.833818][ T5204] Bluetooth: hci8: command tx timeout [ 2131.866397][T17482] team0: Port device team_slave_0 added [ 2131.915294][ T5204] Bluetooth: hci7: command tx timeout [ 2132.013556][T17485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2132.063481][T17477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2132.070764][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2132.103690][T17477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2132.125747][T17477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2132.134355][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2132.161797][T17477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2132.198092][ T9330] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2132.247123][T17482] team0: Port device team_slave_1 added [ 2132.335937][ T9330] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2132.371845][T17478] team0: Port device team_slave_0 added [ 2132.758011][T17487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2132.765910][T17487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2132.792387][T17487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2132.813458][T17478] team0: Port device team_slave_1 added [ 2132.836483][T17482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2132.844620][T17482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2132.871258][T17482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2132.956063][T17485] team0: Port device team_slave_0 added [ 2132.980030][T17482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2132.987400][T17482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2133.014764][T17482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2133.071489][T17487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2133.080301][T17487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2133.108395][T17487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2133.302963][T17485] team0: Port device team_slave_1 added [ 2133.378983][T17478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2133.386464][T17478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2133.413109][T17478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2133.544419][ T9330] bridge_slave_1: left allmulticast mode [ 2133.550349][ T9330] bridge_slave_1: left promiscuous mode [ 2133.558361][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 2133.579142][ T9330] bridge_slave_0: left allmulticast mode [ 2133.585699][ T9330] bridge_slave_0: left promiscuous mode [ 2133.592437][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 2133.609564][ T9330] bridge_slave_1: left allmulticast mode [ 2133.615626][ T9330] bridge_slave_1: left promiscuous mode [ 2133.623814][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 2133.639387][ T9330] bridge_slave_0: left allmulticast mode [ 2133.645786][ T9330] bridge_slave_0: left promiscuous mode [ 2133.652532][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 2133.670591][ T9330] bridge_slave_1: left allmulticast mode [ 2133.680935][ T9330] bridge_slave_1: left promiscuous mode [ 2133.687688][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 2133.703558][ T9330] bridge_slave_0: left allmulticast mode [ 2133.709480][ T9330] bridge_slave_0: left promiscuous mode [ 2133.716231][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 2133.753270][ T9330] bridge_slave_1: left allmulticast mode [ 2133.759206][ T9330] bridge_slave_1: left promiscuous mode [ 2133.768705][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 2133.811866][ T9330] bridge_slave_0: left allmulticast mode [ 2133.818007][ T9330] bridge_slave_0: left promiscuous mode [ 2133.832227][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 2135.498293][ T9330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2135.517439][ T9330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2135.533513][ T9330] bond0 (unregistering): Released all slaves [ 2135.555556][ T9330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2135.601139][ T9330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2135.618616][ T9330] bond0 (unregistering): Released all slaves [ 2135.642494][ T9330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2135.660332][ T9330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2135.682815][ T9330] bond0 (unregistering): Released all slaves [ 2135.709968][ T9330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2135.726528][ T9330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2135.753844][ T9330] bond0 (unregistering): Released all slaves [ 2135.780999][T17478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2135.788345][T17478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2135.814960][T17478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2135.839840][T17477] hsr_slave_0: entered promiscuous mode [ 2135.923423][T17477] hsr_slave_1: entered promiscuous mode [ 2135.937599][T17477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2135.945669][T17477] Cannot create hsr debugfs directory [ 2136.214026][T17485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2136.222945][T17485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2136.251577][T17485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2136.337095][ T9330] tipc: Left network mode [ 2136.431075][T17485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2136.438299][T17485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2136.464836][T17485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2136.495867][T17482] hsr_slave_0: entered promiscuous mode [ 2136.510256][T17482] hsr_slave_1: entered promiscuous mode [ 2136.528685][T17482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2136.537100][T17482] Cannot create hsr debugfs directory [ 2136.559280][T17487] hsr_slave_0: entered promiscuous mode [ 2136.569540][T17487] hsr_slave_1: entered promiscuous mode [ 2136.578365][T17487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2136.586728][T17487] Cannot create hsr debugfs directory [ 2136.750581][T17478] hsr_slave_0: entered promiscuous mode [ 2136.763645][T17478] hsr_slave_1: entered promiscuous mode [ 2136.773150][T17478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2136.781041][T17478] Cannot create hsr debugfs directory [ 2137.396705][T17485] hsr_slave_0: entered promiscuous mode [ 2137.410919][T17485] hsr_slave_1: entered promiscuous mode [ 2137.421115][T17485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2137.428989][T17485] Cannot create hsr debugfs directory [ 2138.992912][ T9330] hsr_slave_0: left promiscuous mode [ 2139.008457][ T9330] hsr_slave_1: left promiscuous mode [ 2139.032389][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2139.040623][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2139.061661][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2139.069462][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2139.097307][ T9330] hsr_slave_0: left promiscuous mode [ 2139.105694][ T9330] hsr_slave_1: left promiscuous mode [ 2139.117410][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2139.125441][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2139.150397][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2139.158229][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2139.216363][ T9330] hsr_slave_0: left promiscuous mode [ 2139.238763][ T9330] hsr_slave_1: left promiscuous mode [ 2139.250194][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2139.258004][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2139.280891][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2139.289143][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2139.328016][ T9330] hsr_slave_0: left promiscuous mode [ 2139.337253][ T9330] hsr_slave_1: left promiscuous mode [ 2139.349079][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2139.359550][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2139.371721][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2139.379723][ T9330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2139.413265][ T9330] veth1_macvtap: left promiscuous mode [ 2139.419066][ T9330] veth0_macvtap: left promiscuous mode [ 2139.425317][ T9330] veth1_vlan: left promiscuous mode [ 2139.431812][ T9330] veth0_vlan: left promiscuous mode [ 2139.439472][ T9330] veth1_macvtap: left promiscuous mode [ 2139.445236][ T9330] veth0_macvtap: left promiscuous mode [ 2139.451408][ T9330] veth1_vlan: left promiscuous mode [ 2139.456982][ T9330] veth0_vlan: left promiscuous mode [ 2139.467164][ T9330] veth1_macvtap: left promiscuous mode [ 2139.473095][ T9330] veth0_macvtap: left promiscuous mode [ 2139.479009][ T9330] veth1_vlan: left promiscuous mode [ 2139.484969][ T9330] veth0_vlan: left promiscuous mode [ 2139.499118][ T9330] veth1_macvtap: left promiscuous mode [ 2139.505098][ T9330] veth0_macvtap: left promiscuous mode [ 2139.511842][ T9330] veth1_vlan: left promiscuous mode [ 2139.517408][ T9330] veth0_vlan: left promiscuous mode [ 2140.779547][ T9330] team0 (unregistering): Port device team_slave_1 removed [ 2140.817038][ T9330] team0 (unregistering): Port device team_slave_0 removed [ 2141.242229][ T9330] team0 (unregistering): Port device team_slave_1 removed [ 2141.293728][ T9330] team0 (unregistering): Port device team_slave_0 removed [ 2141.732469][ T9330] team0 (unregistering): Port device team_slave_1 removed [ 2141.767366][ T9330] team0 (unregistering): Port device team_slave_0 removed [ 2142.429117][ T9330] team0 (unregistering): Port device team_slave_1 removed [ 2142.454910][ T9330] team0 (unregistering): Port device team_slave_0 removed [ 2143.224464][T17477] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2143.254087][T17477] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2143.279495][T17477] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2143.304022][T17477] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2144.013807][T17482] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2144.074028][T17477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2144.179399][T17482] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2144.347898][T17482] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2144.520877][T17477] 8021q: adding VLAN 0 to HW filter on device team0 [ 2144.531517][T17482] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2144.658888][ T4456] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.666622][ T4456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2144.795695][ T4456] bridge0: port 2(bridge_slave_1) entered blocking state [ 2144.803560][ T4456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2144.981449][T17487] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2145.081260][T17487] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2145.207608][T17487] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2145.279012][T17487] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2146.048834][T17478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2146.181652][T17478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2146.203363][T17485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2146.260840][T17478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2146.319146][T17485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2146.355233][T17478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2146.432781][T17485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2146.528124][T17485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2146.713425][T17482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2147.006959][T17487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2147.050649][T17482] 8021q: adding VLAN 0 to HW filter on device team0 [ 2147.190012][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 2147.197822][ T9330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2147.249339][T17487] 8021q: adding VLAN 0 to HW filter on device team0 [ 2147.317239][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 2147.324907][ T9330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2147.353130][T17477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2147.494808][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 2147.503112][ T9330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2147.631144][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 2147.639295][ T9330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2148.174725][T17478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2148.430916][T17478] 8021q: adding VLAN 0 to HW filter on device team0 [ 2148.469522][T17477] veth0_vlan: entered promiscuous mode [ 2148.515750][T12912] bridge0: port 1(bridge_slave_0) entered blocking state [ 2148.523445][T12912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2148.632793][T12912] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.640568][T12912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2148.709971][T17485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2148.791888][T17477] veth1_vlan: entered promiscuous mode [ 2149.040379][T17485] 8021q: adding VLAN 0 to HW filter on device team0 [ 2149.124150][T12912] bridge0: port 1(bridge_slave_0) entered blocking state [ 2149.131946][T12912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2149.271348][T17477] veth0_macvtap: entered promiscuous mode [ 2149.344588][T12912] bridge0: port 2(bridge_slave_1) entered blocking state [ 2149.352275][T12912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2149.405868][T17477] veth1_macvtap: entered promiscuous mode [ 2149.691885][T17477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2149.886265][T17477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2149.995067][T17477] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.005069][T17477] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.014310][T17477] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.023361][T17477] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.364182][T17482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2150.519060][T17487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2151.080319][T17482] veth0_vlan: entered promiscuous mode [ 2151.136768][T17487] veth0_vlan: entered promiscuous mode [ 2151.248786][T17482] veth1_vlan: entered promiscuous mode [ 2151.291094][T17487] veth1_vlan: entered promiscuous mode [ 2151.531308][T17478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2151.772930][T17482] veth0_macvtap: entered promiscuous mode [ 2151.791419][T17487] veth0_macvtap: entered promiscuous mode [ 2151.874891][T17487] veth1_macvtap: entered promiscuous mode [ 2151.958148][T17482] veth1_macvtap: entered promiscuous mode [ 2152.081446][T17485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2152.212146][T17478] veth0_vlan: entered promiscuous mode [ 2152.239703][T17487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2152.250543][T17487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.265729][T17487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2152.307440][T17482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2152.318224][T17482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.328440][T17482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2152.339227][T17482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.355440][T17482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2152.456164][T17487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.467151][T17487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.481909][T17487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2152.540229][T17478] veth1_vlan: entered promiscuous mode [ 2152.585507][T17482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.596373][T17482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.606649][T17482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.618286][T17482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.633400][T17482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2152.714271][T17487] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.723524][T17487] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.732592][T17487] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.741920][T17487] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.886206][T17482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.895461][T17482] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.905080][T17482] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.914337][T17482] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.186992][T17478] veth0_macvtap: entered promiscuous mode [ 2153.278758][T17478] veth1_macvtap: entered promiscuous mode [ 2153.528587][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2153.539432][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.549680][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2153.560565][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.570803][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2153.581594][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.597483][T17478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2153.849604][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.860542][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.871238][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.882200][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.892433][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2153.906306][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2153.922981][T17478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2154.020131][T17478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2154.029467][T17478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2154.038677][T17478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2154.047876][T17478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2155.492787][T17485] veth0_vlan: entered promiscuous mode [ 2155.614280][T17485] veth1_vlan: entered promiscuous mode [ 2155.970378][T17485] veth0_macvtap: entered promiscuous mode [ 2156.117801][T17485] veth1_macvtap: entered promiscuous mode [ 2156.300761][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2156.314075][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.324330][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2156.335124][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.345368][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2156.356281][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.366471][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2156.377262][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.392177][T17485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2156.620508][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2156.631747][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.642041][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2156.652870][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.663051][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2156.673842][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.684031][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2156.694916][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.712278][T17485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2156.977310][T17485] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2156.986690][T17485] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2156.997420][T17485] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2157.006558][T17485] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.273328][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2158.281564][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2158.480188][T15529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2158.488271][T15529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2160.139821][T17734] netlink: 'syz.1.2718': attribute type 4 has an invalid length. [ 2160.147848][T17734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2718'. [ 2160.469801][T15529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2160.477994][T15529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2160.668125][T15529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2160.678124][T15529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2160.696370][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2160.706281][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2160.921044][T12598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2160.930433][T12598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2161.250047][T17748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2707'. [ 2161.799139][T12914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2161.807416][T12914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2162.050538][T12598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2162.059555][T12598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2164.447994][ T5204] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2164.458161][ T5204] Bluetooth: hci2: Injecting HCI hardware error event [ 2164.465707][ T5204] Bluetooth: hci2: hardware error 0x00 [ 2164.810756][ T9330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2164.819181][ T9330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2164.891017][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2164.899320][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2165.296674][T17605] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2165.469848][T17605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2165.481588][T17605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2165.491900][T17605] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 2165.501612][T17605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2165.787902][T17605] usb 2-1: config 0 descriptor?? [ 2166.256816][ T29] audit: type=1326 audit(1729012925.791:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17796 comm="syz.4.2716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f574457dff9 code=0x0 [ 2166.618026][ T5204] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2166.796065][T17605] uclogic 0003:5543:0042.0060: No inputs registered, leaving [ 2166.811524][T17605] uclogic 0003:5543:0042.0060: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 2166.892972][T17605] usb 2-1: USB disconnect, device number 120 [ 2172.925183][ T5276] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2173.272657][ T5276] usb 2-1: device descriptor read/64, error -71 [ 2176.250511][ T5276] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2178.650056][ T7080] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2178.883286][ T7080] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 2178.892010][ T7080] usb 4-1: config 0 has no interface number 0 [ 2178.898475][ T7080] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 2178.908976][ T7080] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2179.915197][T11801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2179.924677][T11801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2179.954304][T11801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2179.957788][ T7080] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2179.968898][T11801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2179.971002][ T7080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.990927][ T7080] usb 4-1: Product: syz [ 2179.993755][T11801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2179.995265][ T7080] usb 4-1: Manufacturer: syz [ 2180.010463][ T7080] usb 4-1: SerialNumber: syz [ 2180.012289][T11801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2181.001264][ T7080] usb 4-1: config 0 descriptor?? [ 2181.388840][ T7080] usb 4-1: can't set config #0, error -71 [ 2181.398686][ T7080] usb 4-1: USB disconnect, device number 3 [ 2182.180188][ T5204] Bluetooth: hci0: command tx timeout [ 2184.049979][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 2184.541788][ T5204] Bluetooth: hci0: command tx timeout [ 2186.643648][T11801] Bluetooth: hci0: command tx timeout [ 2186.685989][ T5276] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2188.985217][T11801] Bluetooth: hci0: command tx timeout [ 2189.439187][T17866] chnl_net:caif_netlink_parms(): no params data found [ 2190.499537][T17918] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 2198.674484][T17956] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 2198.691913][T17956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'. [ 2198.788906][T17866] bridge0: port 1(bridge_slave_0) entered blocking state [ 2198.796754][T17866] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.804845][T17866] bridge_slave_0: entered allmulticast mode [ 2198.814844][T17866] bridge_slave_0: entered promiscuous mode [ 2199.251218][T17866] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.259076][T17866] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.267235][T17866] bridge_slave_1: entered allmulticast mode [ 2199.276574][T17866] bridge_slave_1: entered promiscuous mode [ 2200.000792][T17964] netlink: 'syz.3.2766': attribute type 10 has an invalid length. [ 2200.348642][T17964] team0: Port device netdevsim3 added [ 2200.427521][ T4456] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2200.710123][T17969] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 2200.871020][ T4456] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.002775][T17866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2201.119864][ T4456] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.181994][T17866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2201.335863][ T4456] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2204.212145][T17866] team0: Port device team_slave_0 added [ 2207.206471][ T4456] bridge_slave_1: left allmulticast mode [ 2207.217394][ T4456] bridge_slave_1: left promiscuous mode [ 2207.224013][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.510806][ T4456] bridge_slave_0: left allmulticast mode [ 2207.523296][ T4456] bridge_slave_0: left promiscuous mode [ 2207.530055][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 2210.491539][T18005] ptrace attach of "./syz-executor exec"[18006] was attempted by "./syz-executor exec"[18005] [ 2212.453046][ T4456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2212.644517][ T4456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2213.106326][ T4456] bond0 (unregistering): Released all slaves [ 2216.967411][T17866] team0: Port device team_slave_1 added [ 2220.806362][T17866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2220.814489][T17866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2220.841152][T17866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2220.944117][T17866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2220.951518][T17866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2220.977999][T17866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2221.614253][ T5204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2221.653130][ T5204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2221.674258][ T5204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2221.745869][ T5204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2221.762624][ T5204] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2221.774826][ T5204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2221.823975][ T5204] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2221.839670][ T5204] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2221.852110][ T5204] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2222.072830][ T8772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2222.084474][ T8772] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2222.094591][ T8772] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2222.800080][T18029] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2222.890996][ T4456] hsr_slave_0: left promiscuous mode [ 2222.961962][ T4456] hsr_slave_1: left promiscuous mode [ 2223.020950][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2223.028854][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2223.060998][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2223.069039][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2223.185066][ T4456] veth1_macvtap: left promiscuous mode [ 2223.191068][ T4456] veth0_macvtap: left promiscuous mode [ 2223.197063][ T4456] veth1_vlan: left promiscuous mode [ 2223.203230][ T4456] veth0_vlan: left promiscuous mode [ 2223.947513][T11801] Bluetooth: hci1: command tx timeout [ 2224.155271][ T4456] team0 (unregistering): Port device team_slave_1 removed [ 2224.196657][ T4456] team0 (unregistering): Port device team_slave_0 removed [ 2224.428436][T11801] Bluetooth: hci4: command tx timeout [ 2224.601740][T17866] hsr_slave_0: entered promiscuous mode [ 2224.650017][T17866] hsr_slave_1: entered promiscuous mode [ 2226.038846][T11801] Bluetooth: hci1: command tx timeout [ 2226.359793][ T4456] team0: Port device netdevsim3 removed [ 2226.372481][ T4456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.506224][T11801] Bluetooth: hci4: command tx timeout [ 2226.559375][ T4456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.771537][ T4456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.957868][ T4456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.106495][T18030] chnl_net:caif_netlink_parms(): no params data found [ 2227.290749][ T7080] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2227.503269][ T7080] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2227.514016][ T7080] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2227.523575][ T7080] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.602462][ T7080] usb 2-1: config 0 descriptor?? [ 2227.671073][ T7080] pwc: Askey VC010 type 2 USB webcam detected. [ 2227.823314][T18025] chnl_net:caif_netlink_parms(): no params data found [ 2227.887781][ T4456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.077928][ T7080] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2228.117440][T11801] Bluetooth: hci1: command tx timeout [ 2228.122077][ T4456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.123558][ T7080] pwc: recv_control_msg error -32 req 02 val 2700 [ 2228.148458][ T7080] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2228.184794][ T7080] pwc: recv_control_msg error -32 req 04 val 1000 [ 2228.220785][ T7080] pwc: recv_control_msg error -32 req 04 val 1300 [ 2228.256099][ T7080] pwc: recv_control_msg error -32 req 04 val 1400 [ 2228.275602][ T4456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.313458][ T7080] pwc: recv_control_msg error -32 req 02 val 2000 [ 2228.529865][ T4456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.585944][T11801] Bluetooth: hci4: command tx timeout [ 2228.606088][T17866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2228.636678][T17866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2228.715204][T17866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2228.904413][T17866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2229.189713][ T4456] bridge_slave_1: left allmulticast mode [ 2229.196100][ T4456] bridge_slave_1: left promiscuous mode [ 2229.203146][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 2229.345157][ T4456] bridge_slave_0: left allmulticast mode [ 2229.351198][ T4456] bridge_slave_0: left promiscuous mode [ 2229.358382][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 2229.507115][ T4456] bridge_slave_1: left allmulticast mode [ 2229.513225][ T4456] bridge_slave_1: left promiscuous mode [ 2229.525980][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 2229.604413][ T4456] bridge_slave_0: left allmulticast mode [ 2229.611727][ T4456] bridge_slave_0: left promiscuous mode [ 2229.620771][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 2229.739907][ T7080] pwc: recv_control_msg error -71 req 02 val 2100 [ 2229.749518][ T7080] pwc: recv_control_msg error -71 req 04 val 1500 [ 2229.764521][ T7080] pwc: recv_control_msg error -71 req 02 val 2500 [ 2229.775437][ T7080] pwc: recv_control_msg error -71 req 02 val 2400 [ 2230.112042][ T7080] pwc: recv_control_msg error -71 req 02 val 2600 [ 2230.151443][ T7080] pwc: recv_control_msg error -71 req 02 val 2900 [ 2230.160596][ T7080] pwc: recv_control_msg error -71 req 02 val 2800 [ 2230.168746][ T7080] pwc: recv_control_msg error -71 req 04 val 1100 [ 2230.178163][ T7080] pwc: recv_control_msg error -71 req 04 val 1200 [ 2230.186893][T11801] Bluetooth: hci1: command tx timeout [ 2230.195145][ T7080] pwc: Registered as video71. [ 2230.203357][ T7080] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input108 [ 2230.276327][ T7080] usb 2-1: USB disconnect, device number 124 [ 2230.765004][T11801] Bluetooth: hci4: command tx timeout [ 2231.145651][ T4456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2231.205163][ T4456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2231.250214][ T4456] bond0 (unregistering): Released all slaves [ 2231.348002][ T4456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2231.386940][ T4456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2231.425058][ T4456] bond0 (unregistering): Released all slaves [ 2232.373041][T18030] bridge0: port 1(bridge_slave_0) entered blocking state [ 2232.380735][T18030] bridge0: port 1(bridge_slave_0) entered disabled state [ 2232.391845][T18030] bridge_slave_0: entered allmulticast mode [ 2232.403980][T18030] bridge_slave_0: entered promiscuous mode [ 2232.907639][T18025] bridge0: port 1(bridge_slave_0) entered blocking state [ 2232.916194][T18025] bridge0: port 1(bridge_slave_0) entered disabled state [ 2232.924196][T18025] bridge_slave_0: entered allmulticast mode [ 2232.933363][T18025] bridge_slave_0: entered promiscuous mode [ 2232.990853][T18030] bridge0: port 2(bridge_slave_1) entered blocking state [ 2232.998911][T18030] bridge0: port 2(bridge_slave_1) entered disabled state [ 2233.012887][T18030] bridge_slave_1: entered allmulticast mode [ 2233.022284][T18030] bridge_slave_1: entered promiscuous mode [ 2233.422096][T18025] bridge0: port 2(bridge_slave_1) entered blocking state [ 2233.439957][T18025] bridge0: port 2(bridge_slave_1) entered disabled state [ 2233.447942][T18025] bridge_slave_1: entered allmulticast mode [ 2233.457165][T18025] bridge_slave_1: entered promiscuous mode [ 2234.260155][T18030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2234.467439][T18025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2234.514193][T18124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2803'. [ 2234.678506][ T4456] hsr_slave_0: left promiscuous mode [ 2234.738185][ T4456] hsr_slave_1: left promiscuous mode [ 2234.748038][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2234.756025][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2234.767352][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2234.775897][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2234.817272][ T4456] hsr_slave_0: left promiscuous mode [ 2234.877503][ T4456] hsr_slave_1: left promiscuous mode [ 2234.898550][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2234.906485][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2234.942063][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2234.949951][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2235.113500][ T4456] veth1_macvtap: left promiscuous mode [ 2235.119500][ T4456] veth0_macvtap: left promiscuous mode [ 2235.126016][ T4456] veth1_vlan: left promiscuous mode [ 2235.132142][ T4456] veth0_vlan: left promiscuous mode [ 2235.142820][ T4456] veth1_macvtap: left promiscuous mode [ 2235.148610][ T4456] veth0_macvtap: left promiscuous mode [ 2235.154901][ T4456] veth1_vlan: left promiscuous mode [ 2235.160485][ T4456] veth0_vlan: left promiscuous mode [ 2235.166399][ T8] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 2235.339943][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 2235.362938][ T8] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 2235.372475][ T8] usb 2-1: config 95 has no interface number 0 [ 2235.378906][ T8] usb 2-1: config 95 interface 1 has no altsetting 0 [ 2235.435811][ T8] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2235.445528][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.454147][ T8] usb 2-1: Product: syz [ 2235.461625][ T8] usb 2-1: Manufacturer: syz [ 2235.466487][ T8] usb 2-1: SerialNumber: syz [ 2236.476576][ T8] usb 2-1: USB disconnect, device number 125 [ 2236.532246][ T4456] team0 (unregistering): Port device team_slave_1 removed [ 2236.569456][ T4456] team0 (unregistering): Port device team_slave_0 removed [ 2237.130044][T17904] udevd[17904]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2237.454442][ T4456] team0 (unregistering): Port device team_slave_1 removed [ 2237.619506][ T4456] team0 (unregistering): Port device team_slave_0 removed [ 2237.806706][T18030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2238.026115][T18025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2238.378295][T17866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2239.237921][T18025] team0: Port device team_slave_0 added [ 2239.362912][T18030] team0: Port device team_slave_0 added [ 2239.477497][T18025] team0: Port device team_slave_1 added [ 2239.500809][T18030] team0: Port device team_slave_1 added [ 2240.329478][T18030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2240.336691][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2240.364328][T18030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2240.443402][T18030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2240.444724][ T8772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2240.450618][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2240.450778][T18030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2240.567289][T18025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2240.575178][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2240.601917][T18025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2240.654310][ T8772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2240.702138][ T8772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2240.719439][ T8772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2240.823264][ T8772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2240.833285][ T8772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2241.044744][T18025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2241.052212][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2241.079419][T18025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2241.106186][ T5248] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2241.125982][T18030] hsr_slave_0: entered promiscuous mode [ 2241.158859][T18030] hsr_slave_1: entered promiscuous mode [ 2241.176256][T18030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2241.184494][T18030] Cannot create hsr debugfs directory [ 2241.318739][ T5248] usb 5-1: Using ep0 maxpacket: 32 [ 2241.332547][ T5248] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 2241.341308][ T5248] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2241.352893][ T5248] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2241.364452][ T5248] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2241.378079][ T5248] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2241.493082][ T5248] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2241.505823][ T5248] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2241.515710][ T5248] usb 5-1: Product: syz [ 2241.520310][ T5248] usb 5-1: Manufacturer: syz [ 2241.525196][ T5248] usb 5-1: SerialNumber: syz [ 2241.590164][ T5248] usb 5-1: config 0 descriptor?? [ 2241.678705][ T5248] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2241.691058][T14064] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2241.715969][ T5248] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2241.891573][T14064] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 2241.900493][T14064] usb 2-1: config 0 has no interface number 0 [ 2241.910250][T14064] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 2241.922792][T14064] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2241.946344][T18158] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2241.947150][ T5251] usb 5-1: USB disconnect, device number 125 [ 2241.954947][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 2242.017418][ T5251] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 2242.019466][T14064] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2242.033613][T14064] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.042091][T14064] usb 2-1: Product: syz [ 2242.046500][T14064] usb 2-1: Manufacturer: syz [ 2242.051523][T14064] usb 2-1: SerialNumber: syz [ 2242.070189][T14064] usb 2-1: config 0 descriptor?? [ 2242.079490][T18165] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2242.098695][T14064] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2242.208824][T14064] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2242.259503][T18025] hsr_slave_0: entered promiscuous mode [ 2242.299584][T18025] hsr_slave_1: entered promiscuous mode [ 2242.339506][T18025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2242.347710][T18025] Cannot create hsr debugfs directory [ 2242.357461][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 2242.625567][T14064] usb 2-1: USB disconnect, device number 126 [ 2242.653738][T14064] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2242.668355][T14064] cyberjack 2-1:0.69: device disconnected [ 2242.978084][T11801] Bluetooth: hci3: command tx timeout [ 2243.447695][T18157] chnl_net:caif_netlink_parms(): no params data found [ 2243.844933][ T4456] bridge_slave_1: left allmulticast mode [ 2243.851960][ T4456] bridge_slave_1: left promiscuous mode [ 2243.860723][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 2243.898160][ T4456] bridge_slave_0: left allmulticast mode [ 2243.904251][ T4456] bridge_slave_0: left promiscuous mode [ 2243.911121][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 2244.383275][ T4456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2244.423026][ T4456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2244.454041][ T4456] bond0 (unregistering): Released all slaves [ 2245.003657][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 2245.089678][ T8772] Bluetooth: hci3: command tx timeout [ 2245.279414][ T4456] hsr_slave_0: left promiscuous mode [ 2245.315889][ T4456] hsr_slave_1: left promiscuous mode [ 2245.380604][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2245.425332][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2246.021742][ T4456] team0 (unregistering): Port device team_slave_1 removed [ 2246.170839][ T4456] team0 (unregistering): Port device team_slave_0 removed [ 2247.145989][T11801] Bluetooth: hci3: command tx timeout [ 2247.146088][ T5204] Bluetooth: hci7: command 0x0406 tx timeout [ 2248.531876][T18030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2248.949889][T18030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2249.242346][T18030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2249.270576][ T5204] Bluetooth: hci3: command tx timeout [ 2249.310927][T18157] bridge0: port 1(bridge_slave_0) entered blocking state [ 2249.318884][T18157] bridge0: port 1(bridge_slave_0) entered disabled state [ 2249.327113][T18157] bridge_slave_0: entered allmulticast mode [ 2249.336161][T18157] bridge_slave_0: entered promiscuous mode [ 2249.349422][T18025] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2249.404868][T18030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2249.431464][T18206] ===================================================== [ 2249.438998][T18206] BUG: KMSAN: uninit-value in ppp_sync_send+0x21c/0xb00 [ 2249.446359][T18206] ppp_sync_send+0x21c/0xb00 [ 2249.451148][T18206] ppp_input+0x1f1/0xe60 [ 2249.455754][T18206] pppoe_rcv_core+0x1d3/0x720 [ 2249.460635][T18206] sk_backlog_rcv+0x13b/0x420 [ 2249.465611][T18206] __release_sock+0x1da/0x330 [ 2249.470491][T18206] release_sock+0x6b/0x250 [ 2249.475198][T18206] pppoe_sendmsg+0x2b8/0xb90 [ 2249.480020][T18206] __sock_sendmsg+0x30f/0x380 [ 2249.485118][T18206] ____sys_sendmsg+0x903/0xb60 [ 2249.490096][T18206] ___sys_sendmsg+0x28d/0x3c0 [ 2249.495145][T18206] __sys_sendmmsg+0x3c1/0x960 [ 2249.500033][T18206] __x64_sys_sendmmsg+0xbc/0x120 [ 2249.505310][T18206] x64_sys_call+0xb6e/0x3ba0 [ 2249.508301][T18157] bridge0: port 2(bridge_slave_1) entered blocking state [ 2249.510062][T18206] do_syscall_64+0xcd/0x1e0 [ 2249.519427][T18157] bridge0: port 2(bridge_slave_1) entered disabled state [ 2249.521789][T18206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2249.529623][T18157] bridge_slave_1: entered allmulticast mode [ 2249.535016][T18206] [ 2249.535044][T18206] Uninit was created at: [ 2249.535244][T18206] kmem_cache_alloc_node_noprof+0x6bf/0xb80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2249.543783][T18157] bridge_slave_1: entered promiscuous mode [ 2249.547749][T18206] kmalloc_reserve+0x13d/0x4a0 [ 2249.565036][T18206] __alloc_skb+0x363/0x7b0 [ 2249.569629][T18206] sock_wmalloc+0xfe/0x1a0 [ 2249.574435][T18206] pppoe_sendmsg+0x3a7/0xb90 [ 2249.579230][T18206] __sock_sendmsg+0x30f/0x380 [ 2249.584354][T18206] ____sys_sendmsg+0x903/0xb60 [ 2249.589328][T18206] ___sys_sendmsg+0x28d/0x3c0 [ 2249.594318][T18206] __sys_sendmmsg+0x3c1/0x960 [ 2249.599182][T18206] __x64_sys_sendmmsg+0xbc/0x120 [ 2249.604482][T18206] x64_sys_call+0xb6e/0x3ba0 [ 2249.609306][T18206] do_syscall_64+0xcd/0x1e0 [ 2249.614031][T18206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2249.620307][T18206] [ 2249.622746][T18206] CPU: 0 UID: 0 PID: 18206 Comm: syz.4.2821 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 2249.633855][T18206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2249.644304][T18206] ===================================================== [ 2249.651356][T18206] Disabling lock debugging due to kernel taint [ 2249.657797][T18206] Kernel panic - not syncing: kmsan.panic set ... [ 2249.664373][T18206] CPU: 0 UID: 0 PID: 18206 Comm: syz.4.2821 Tainted: G B 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 2249.676941][T18206] Tainted: [B]=BAD_PAGE [ 2249.681220][T18206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2249.691466][T18206] Call Trace: [ 2249.694866][T18206] [ 2249.697914][T18206] dump_stack_lvl+0x216/0x2d0 [ 2249.702818][T18206] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2249.708814][T18206] dump_stack+0x1e/0x30 [ 2249.713173][T18206] panic+0x4e2/0xcf0 [ 2249.717335][T18206] ? kmsan_get_metadata+0xe1/0x1c0 [ 2249.722649][T18206] kmsan_report+0x2c7/0x2d0 [ 2249.727446][T18206] ? __raise_softirq_irqoff+0x37/0x130 [ 2249.733294][T18206] ? __napi_schedule_irqoff+0x2ec/0x3d0 [ 2249.739101][T18206] ? __msan_warning+0x95/0x120 [ 2249.744106][T18206] ? ppp_sync_send+0x21c/0xb00 [ 2249.749085][T18206] ? ppp_input+0x1f1/0xe60 [ 2249.753716][T18206] ? pppoe_rcv_core+0x1d3/0x720 [ 2249.758776][T18206] ? sk_backlog_rcv+0x13b/0x420 [ 2249.763814][T18206] ? __release_sock+0x1da/0x330 [ 2249.768966][T18206] ? release_sock+0x6b/0x250 [ 2249.773728][T18206] ? pppoe_sendmsg+0x2b8/0xb90 [ 2249.778801][T18206] ? __sock_sendmsg+0x30f/0x380 [ 2249.783892][T18206] ? ____sys_sendmsg+0x903/0xb60 [ 2249.789133][T18206] ? ___sys_sendmsg+0x28d/0x3c0 [ 2249.794189][T18206] ? __sys_sendmmsg+0x3c1/0x960 [ 2249.799236][T18206] ? __x64_sys_sendmmsg+0xbc/0x120 [ 2249.804643][T18206] ? x64_sys_call+0xb6e/0x3ba0 [ 2249.809636][T18206] ? do_syscall_64+0xcd/0x1e0 [ 2249.814525][T18206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2249.820932][T18206] ? enqueue_to_backlog+0xaf9/0xd80 [ 2249.826344][T18206] ? kmsan_get_metadata+0x13e/0x1c0 [ 2249.831733][T18206] ? kmsan_get_metadata+0x13e/0x1c0 [ 2249.837116][T18206] ? kmsan_get_metadata+0x13e/0x1c0 [ 2249.842591][T18206] ? kmsan_get_metadata+0x13e/0x1c0 [ 2249.847988][T18206] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2249.854003][T18206] ? kmsan_get_metadata+0x13e/0x1c0 [ 2249.859382][T18206] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 2249.866049][T18206] ? kmsan_get_metadata+0x13e/0x1c0 [ 2249.871539][T18206] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2249.877562][T18206] __msan_warning+0x95/0x120 [ 2249.882385][T18206] ppp_sync_send+0x21c/0xb00 [ 2249.887191][T18206] ? kmsan_get_metadata+0x13e/0x1c0 [ 2249.892678][T18206] ? __pfx_ppp_sync_send+0x10/0x10 [ 2249.897995][T18206] ppp_input+0x1f1/0xe60 [ 2249.902453][T18206] pppoe_rcv_core+0x1d3/0x720 [ 2249.907412][T18206] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2249.913460][T18206] ? __pfx_pppoe_rcv_core+0x10/0x10 [ 2249.918872][T18206] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 2249.924264][T18206] sk_backlog_rcv+0x13b/0x420 [ 2249.929132][T18206] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2249.935148][T18206] __release_sock+0x1da/0x330 [ 2249.940061][T18206] release_sock+0x6b/0x250 [ 2249.944676][T18206] pppoe_sendmsg+0x2b8/0xb90 [ 2249.949492][T18206] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 2249.954811][T18206] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 2249.960141][T18206] __sock_sendmsg+0x30f/0x380 [ 2249.965048][T18206] ____sys_sendmsg+0x903/0xb60 [ 2249.970051][T18206] ___sys_sendmsg+0x28d/0x3c0 [ 2249.974967][T18206] ? kmsan_get_metadata+0x13e/0x1c0 [ 2249.980365][T18206] ? __rcu_read_unlock+0x7b/0xe0 [ 2249.985536][T18206] ? __fget_files+0x4f5/0x5c0 [ 2249.990441][T18206] ? kmsan_get_metadata+0x13e/0x1c0 [ 2249.995823][T18206] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2250.001843][T18206] __sys_sendmmsg+0x3c1/0x960 [ 2250.006743][T18206] ? do_futex+0x380/0x4a0 [ 2250.011347][T18206] ? kmsan_get_metadata+0x13e/0x1c0 [ 2250.016774][T18206] __x64_sys_sendmmsg+0xbc/0x120 [ 2250.022039][T18206] x64_sys_call+0xb6e/0x3ba0 [ 2250.026858][T18206] do_syscall_64+0xcd/0x1e0 [ 2250.031584][T18206] ? clear_bhb_loop+0x25/0x80 [ 2250.036457][T18206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2250.042610][T18206] RIP: 0033:0x7f574457dff9 [ 2250.047175][T18206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2250.067100][T18206] RSP: 002b:00007f57452a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2250.075812][T18206] RAX: ffffffffffffffda RBX: 00007f5744735f80 RCX: 00007f574457dff9 [ 2250.083966][T18206] RDX: 0000000000000004 RSI: 0000000020009140 RDI: 0000000000000003 [ 2250.092102][T18206] RBP: 00007f57445f0296 R08: 0000000000000000 R09: 0000000000000000 [ 2250.100267][T18206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2250.108415][T18206] R13: 0000000000000000 R14: 00007f5744735f80 R15: 00007ffe88fd0ed8 [ 2250.116587][T18206] [ 2250.120033][T18206] Kernel Offset: disabled [ 2250.124466][T18206] Rebooting in 86400 seconds..