last executing test programs: 12.680381097s ago: executing program 2 (id=99): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201000009240300030300", @ANYRES8=r1, @ANYRES16=r0], 0x0) 10.047694888s ago: executing program 2 (id=111): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 8.590518177s ago: executing program 2 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="080006"], 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) 8.14782832s ago: executing program 3 (id=116): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="f8293b488fb17b353455a479c8f83f", 0xf}, {0x0}, {&(0x7f00000001c0)="9ff8345f3dd8d5ca471fc7ccb84438506cf923ef54a80e9f51d4ae962ce3ff2181e428", 0x23}, {0x0}, {0x0}, {0x0}], 0x6, 0x3, 0x4, 0x10) 8.023099987s ago: executing program 2 (id=117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 7.563948761s ago: executing program 0 (id=118): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc00) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r3, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback={0x0, 0xffffac1414aa}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 6.595964523s ago: executing program 3 (id=119): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) 6.210202941s ago: executing program 0 (id=120): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x9, 0x404, 0x1, 0x8000013, 0xa7, 0xffffffa7, 0x8000b, 0x34d, 0x6e, 0x0, 0x4000009, 0x200, 0xe2df, 0x9, 0x20000001, 0x4, 0x505e, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) 6.011609275s ago: executing program 2 (id=121): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES8=r1, @ANYRES16=r0], 0x0) 5.933875185s ago: executing program 1 (id=122): io_uring_setup(0x456, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x10001) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) 5.750459467s ago: executing program 4 (id=123): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000240)="1408000000000000b89e08c486ddb88f00ad46dfb38e33355000d48fa44f109a56d24da94590c267729e46a7f2f11b45b9f0ee12b2f9", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.571566886s ago: executing program 0 (id=124): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r0, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 5.439742966s ago: executing program 3 (id=125): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}]}}) 5.323752864s ago: executing program 1 (id=126): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 5.051848945s ago: executing program 4 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="080006"], 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) 4.643292189s ago: executing program 1 (id=128): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x141c80) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0) 4.538105488s ago: executing program 4 (id=129): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="f8293b488fb17b353455a479c8f83f", 0xf}, {0x0}, {&(0x7f00000001c0)="9ff8345f3dd8d5ca471fc7ccb84438506cf923ef54a80e9f51d4ae962ce3ff2181e428", 0x23}, {0x0}, {0x0}, {0x0}], 0x6, 0x3, 0x4, 0x10) 4.407473207s ago: executing program 0 (id=130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044840}, 0x80) 4.255344519s ago: executing program 3 (id=131): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x4}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 3.688950859s ago: executing program 1 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, 0x3f, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfe}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x4e, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @fd=r0}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3.413683268s ago: executing program 2 (id=133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000840)='map_files\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x401, 0x5, 0x1000, 0x40, 0xb}, &(0x7f0000000540)=0x14) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0xa28}], 0x1, 0x1, 0x0) getrlimit(0xa, &(0x7f0000000380)) sendmmsg(r1, 0x0, 0x0, 0x0) 3.410621853s ago: executing program 0 (id=134): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 3.071543979s ago: executing program 4 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) setreuid(0x0, 0xee00) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0x2, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 3.071247234s ago: executing program 3 (id=136): io_uring_setup(0x456, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x10001) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) 2.791235274s ago: executing program 1 (id=137): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000240)="1408000000000000b89e08c486ddb88f00ad46dfb38e33355000d48fa44f109a56d24da94590c267729e46a7f2f11b45b9f0ee12b2f9", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.227033247s ago: executing program 4 (id=138): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x27}, 0x6) 2.071813212s ago: executing program 0 (id=139): syz_open_dev$media(&(0x7f0000000240), 0x9, 0xc8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="8091", 0x2) 1.959442976s ago: executing program 1 (id=140): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r0, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 1.875200619s ago: executing program 3 (id=141): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}]}}) 0s ago: executing program 4 (id=142): ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.201' (ED25519) to the list of known hosts. [ 173.736502][ T5759] cgroup: Unknown subsys name 'net' [ 173.870787][ T5759] cgroup: Unknown subsys name 'cpuset' [ 173.885680][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 179.757602][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 184.803760][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.812619][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.822282][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.835126][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.862084][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.871726][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.880564][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.892172][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.897862][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.902207][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.050006][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.111641][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.121097][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.134648][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.142575][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.154266][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.163777][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.171763][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.184716][ T5077] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.193362][ T5077] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.205430][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.224726][ T5077] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.233056][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.246403][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.257958][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.418847][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 186.660788][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 186.950824][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 186.961553][ T5779] Bluetooth: hci0: command tx timeout [ 186.967246][ T5779] Bluetooth: hci1: command tx timeout [ 187.383095][ T5779] Bluetooth: hci2: command tx timeout [ 187.383325][ T5791] Bluetooth: hci3: command tx timeout [ 187.388834][ T5779] Bluetooth: hci4: command tx timeout [ 187.464542][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 187.575953][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.586432][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.594347][ T5778] bridge_slave_0: entered allmulticast mode [ 187.604344][ T5778] bridge_slave_0: entered promiscuous mode [ 187.631473][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.639120][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.648300][ T5778] bridge_slave_1: entered allmulticast mode [ 187.657753][ T5778] bridge_slave_1: entered promiscuous mode [ 187.725040][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 187.949918][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.961978][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.969479][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.977337][ T5787] bridge_slave_0: entered allmulticast mode [ 187.987027][ T5787] bridge_slave_0: entered promiscuous mode [ 188.041904][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.090551][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.098177][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.106074][ T5787] bridge_slave_1: entered allmulticast mode [ 188.115952][ T5787] bridge_slave_1: entered promiscuous mode [ 188.328861][ T5778] team0: Port device team_slave_0 added [ 188.429267][ T5778] team0: Port device team_slave_1 added [ 188.440792][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.448305][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.457938][ T5775] bridge_slave_0: entered allmulticast mode [ 188.467341][ T5775] bridge_slave_0: entered promiscuous mode [ 188.493771][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.562719][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.572846][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.580646][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.588211][ T5775] bridge_slave_1: entered allmulticast mode [ 188.597616][ T5775] bridge_slave_1: entered promiscuous mode [ 188.928275][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.935484][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.961832][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.018193][ T5787] team0: Port device team_slave_0 added [ 189.036364][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.046512][ T5791] Bluetooth: hci1: command tx timeout [ 189.052334][ T5780] Bluetooth: hci0: command tx timeout [ 189.085478][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.093655][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.101464][ T5786] bridge_slave_0: entered allmulticast mode [ 189.109708][ T5786] bridge_slave_0: entered promiscuous mode [ 189.123748][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.130997][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.157293][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.185338][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.201529][ T5787] team0: Port device team_slave_1 added [ 189.209063][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.216698][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.224520][ T5784] bridge_slave_0: entered allmulticast mode [ 189.233897][ T5784] bridge_slave_0: entered promiscuous mode [ 189.282842][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.290644][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.298234][ T5786] bridge_slave_1: entered allmulticast mode [ 189.307246][ T5786] bridge_slave_1: entered promiscuous mode [ 189.435293][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.443152][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.443260][ T5791] Bluetooth: hci3: command tx timeout [ 189.451947][ T5784] bridge_slave_1: entered allmulticast mode [ 189.455924][ T5791] Bluetooth: hci4: command tx timeout [ 189.465242][ T5784] bridge_slave_1: entered promiscuous mode [ 189.467646][ T5791] Bluetooth: hci2: command tx timeout [ 189.593010][ T5775] team0: Port device team_slave_0 added [ 189.634893][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.642226][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.668630][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.744103][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.805105][ T5775] team0: Port device team_slave_1 added [ 189.866070][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.880026][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.888178][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.915881][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.977029][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.021528][ T5778] hsr_slave_0: entered promiscuous mode [ 190.031859][ T5778] hsr_slave_1: entered promiscuous mode [ 190.090774][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.157029][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.164427][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.190847][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.206964][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.214460][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.240878][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.289736][ T5786] team0: Port device team_slave_0 added [ 190.450612][ T5786] team0: Port device team_slave_1 added [ 190.519560][ T5784] team0: Port device team_slave_0 added [ 190.652418][ T5784] team0: Port device team_slave_1 added [ 190.722875][ T5787] hsr_slave_0: entered promiscuous mode [ 190.732210][ T5787] hsr_slave_1: entered promiscuous mode [ 190.739862][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 190.747321][ T5787] Cannot create hsr debugfs directory [ 190.783920][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.791364][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.817808][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.886780][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.894061][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.920624][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.972179][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.979386][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.005938][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.053967][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.061224][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.087495][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.113488][ T5775] hsr_slave_0: entered promiscuous mode [ 191.122275][ T5780] Bluetooth: hci1: command tx timeout [ 191.124078][ T5775] hsr_slave_1: entered promiscuous mode [ 191.128042][ T5791] Bluetooth: hci0: command tx timeout [ 191.136538][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 191.145020][ T5775] Cannot create hsr debugfs directory [ 191.520756][ T5791] Bluetooth: hci2: command tx timeout [ 191.526354][ T5791] Bluetooth: hci4: command tx timeout [ 191.532930][ T5791] Bluetooth: hci3: command tx timeout [ 191.608305][ T5784] hsr_slave_0: entered promiscuous mode [ 191.617011][ T5784] hsr_slave_1: entered promiscuous mode [ 191.625302][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 191.631356][ T5784] Cannot create hsr debugfs directory [ 191.799911][ T5786] hsr_slave_0: entered promiscuous mode [ 191.810027][ T5786] hsr_slave_1: entered promiscuous mode [ 191.818016][ T5786] debugfs: 'hsr0' already exists in 'hsr' [ 191.824049][ T5786] Cannot create hsr debugfs directory [ 192.458857][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.535650][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.607329][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.668373][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.909951][ T5775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.954242][ T5775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.991412][ T5775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.030662][ T5775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.205172][ T5780] Bluetooth: hci0: command tx timeout [ 193.211840][ T5780] Bluetooth: hci1: command tx timeout [ 193.229684][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.254066][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.274787][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.366594][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.497195][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.575324][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.600951][ T5791] Bluetooth: hci3: command tx timeout [ 193.606674][ T5791] Bluetooth: hci4: command tx timeout [ 193.614548][ T5791] Bluetooth: hci2: command tx timeout [ 193.642400][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.667013][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.887589][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.927789][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.982196][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.028516][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.087969][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.204942][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.268485][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.395130][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.402731][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.479943][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.531737][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.539228][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.596863][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.665693][ T4160] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.673372][ T4160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.856726][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.864179][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.974442][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.015206][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.043972][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.051613][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.210409][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.218000][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.296863][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.460992][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.468481][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.576538][ T5787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.587386][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.622991][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.630772][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.964045][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.177332][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.267611][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.275226][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.363336][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.370935][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.988721][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.623099][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.646515][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.685067][ T5778] veth0_vlan: entered promiscuous mode [ 197.761853][ T5778] veth1_vlan: entered promiscuous mode [ 198.178813][ T5778] veth0_macvtap: entered promiscuous mode [ 198.207667][ T5787] veth0_vlan: entered promiscuous mode [ 198.226650][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.285667][ T5778] veth1_macvtap: entered promiscuous mode [ 198.333904][ T5787] veth1_vlan: entered promiscuous mode [ 198.494320][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.562147][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.676074][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.766911][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.775979][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.788152][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.824425][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.843224][ T5787] veth0_macvtap: entered promiscuous mode [ 198.895220][ T5784] veth0_vlan: entered promiscuous mode [ 198.918255][ T5787] veth1_macvtap: entered promiscuous mode [ 199.048561][ T5784] veth1_vlan: entered promiscuous mode [ 199.113666][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.210676][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.269193][ T4136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.325541][ T3572] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.361755][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.418759][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.485029][ T5786] veth0_vlan: entered promiscuous mode [ 199.528418][ T5784] veth0_macvtap: entered promiscuous mode [ 199.564543][ T5786] veth1_vlan: entered promiscuous mode [ 199.598590][ T5784] veth1_macvtap: entered promiscuous mode [ 199.835032][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.915223][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.017929][ T5786] veth0_macvtap: entered promiscuous mode [ 200.055193][ T4160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.089518][ T5786] veth1_macvtap: entered promiscuous mode [ 200.102934][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.150814][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.182336][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.456877][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.577832][ T5775] veth0_vlan: entered promiscuous mode [ 200.591948][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.703833][ T5775] veth1_vlan: entered promiscuous mode [ 200.736285][ T4250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.805086][ T1325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.835673][ T1325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.856660][ T1325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.118529][ T5775] veth0_macvtap: entered promiscuous mode [ 201.215998][ T5775] veth1_macvtap: entered promiscuous mode [ 201.398675][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.529925][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.644654][ T1140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.695468][ T1325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.734508][ T1325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.756131][ T1325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.165692][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.174428][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.193248][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.202649][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.392427][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.403572][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.457665][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.466290][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.696438][ T5787] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 206.384912][ T4136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.395027][ T4136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.557779][ T4136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.588967][ T4136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.659170][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.667558][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.925784][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.937805][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.107530][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.115897][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.204099][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.213191][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.537582][ T30] audit: type=1326 audit(1759548854.205:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 208.565703][ T30] audit: type=1326 audit(1759548854.255:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 208.590768][ T30] audit: type=1326 audit(1759548854.255:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 208.613965][ T30] audit: type=1326 audit(1759548854.255:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 208.636456][ T30] audit: type=1326 audit(1759548854.255:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 209.307694][ T5983] tipc: Can't bind to reserved service type 0 [ 209.573024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 209.766192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 209.880526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 209.891413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 209.981843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 210.136972][ T5982] binder: 5978:5982 unknown command 0 [ 210.142816][ T5982] binder: 5978:5982 ioctl c0306201 80000080 returned -22 [ 210.592369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 211.323547][ T30] audit: type=1326 audit(1759548857.015:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 211.345645][ T30] audit: type=1326 audit(1759548857.015:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 211.530032][ T30] audit: type=1326 audit(1759548857.145:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 211.552219][ T30] audit: type=1326 audit(1759548857.145:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 213.786583][ T2227] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 213.990373][ T2227] usb 4-1: Using ep0 maxpacket: 32 [ 214.047771][ T2227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.058591][ T2227] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 214.068270][ T2227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.199417][ T2227] usb 4-1: config 0 descriptor?? [ 214.840820][ T2227] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 214.990799][ T2227] usb 3-1: Using ep0 maxpacket: 16 [ 215.001523][ T2227] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 215.001682][ T2227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 215.030947][ T2227] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 215.031102][ T2227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.031234][ T2227] usb 3-1: Product: syz [ 215.031335][ T2227] usb 3-1: Manufacturer: syz [ 215.031437][ T2227] usb 3-1: SerialNumber: syz [ 215.049247][ T2227] usb 3-1: config 0 descriptor?? [ 215.073709][ T2227] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 215.073890][ T2227] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 215.681695][ T5843] usb 4-1: USB disconnect, device number 2 [ 215.714829][ T2227] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 215.741395][ T2227] em28xx 3-1:0.0: Config register raw data: 0x56 [ 215.926473][ T2227] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 215.934008][ T2227] em28xx 3-1:0.0: No AC97 audio processor [ 216.930639][ T5843] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 217.131342][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 217.166967][ T5843] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.177657][ T5843] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.238232][ T5843] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.254777][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.265705][ T5843] usb 4-1: Product: syz [ 217.270097][ T5843] usb 4-1: Manufacturer: syz [ 217.275178][ T5843] usb 4-1: SerialNumber: syz [ 217.568072][ T5843] usb 4-1: 0:2 : does not exist [ 217.695550][ T5843] usb 4-1: USB disconnect, device number 3 [ 217.855900][ T5831] usb 3-1: USB disconnect, device number 2 [ 217.872855][ T5831] em28xx 3-1:0.0: Disconnecting em28xx [ 217.961655][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.994979][ T5831] em28xx 3-1:0.0: Freeing device [ 219.091203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 219.345801][ T5831] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 219.660581][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 219.677381][ T5831] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 219.686491][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.697176][ T5831] usb 3-1: config 0 has no interface number 0 [ 219.703623][ T5831] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.900367][ T5831] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 219.915035][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.925095][ T5831] usb 3-1: Product: syz [ 219.929472][ T5831] usb 3-1: Manufacturer: syz [ 219.934644][ T5831] usb 3-1: SerialNumber: syz [ 219.973923][ T5831] usb 3-1: config 0 descriptor?? [ 220.229463][ T5831] smsc95xx v2.0.0 [ 220.235290][ T5831] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 220.246079][ T5831] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 221.924733][ T2227] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 222.290231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 222.320232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 222.340212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 222.671992][ T5831] usb 3-1: USB disconnect, device number 3 [ 223.040730][ T2227] usb 5-1: Using ep0 maxpacket: 32 [ 223.082296][ T2227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.094474][ T2227] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 223.104482][ T2227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.233329][ T2227] usb 5-1: config 0 descriptor?? [ 223.604331][ T5831] usb 5-1: USB disconnect, device number 2 [ 223.622451][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.31'. [ 223.950511][ T2227] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 224.180704][ T2227] usb 3-1: Using ep0 maxpacket: 16 [ 224.245943][ T2227] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 224.257936][ T2227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 224.336174][ T2227] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 224.345904][ T2227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.354581][ T2227] usb 3-1: Product: syz [ 224.358936][ T2227] usb 3-1: Manufacturer: syz [ 224.364052][ T2227] usb 3-1: SerialNumber: syz [ 224.443412][ T2227] usb 3-1: config 0 descriptor?? [ 224.507302][ T2227] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 224.521016][ T2227] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 224.553581][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.560919][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.960828][ T5836] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 225.110786][ T2227] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 225.159472][ T2227] em28xx 3-1:0.0: Config register raw data: 0x56 [ 225.166961][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 225.214480][ T5836] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.225026][ T5836] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.361771][ T2227] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 225.369386][ T2227] em28xx 3-1:0.0: No AC97 audio processor [ 225.389653][ T5836] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.399192][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.407618][ T5836] usb 5-1: Product: syz [ 225.412163][ T5836] usb 5-1: Manufacturer: syz [ 225.417045][ T5836] usb 5-1: SerialNumber: syz [ 225.831357][ T5836] usb 5-1: 0:2 : does not exist [ 225.925812][ T5836] usb 5-1: USB disconnect, device number 3 [ 226.224043][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.152040][ T6083] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 227.207263][ T5831] usb 3-1: USB disconnect, device number 4 [ 227.216538][ T5831] em28xx 3-1:0.0: Disconnecting em28xx [ 227.291312][ T5831] em28xx 3-1:0.0: Freeing device [ 227.918580][ T5831] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 228.147764][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 228.433010][ T5831] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 228.441604][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.452235][ T5831] usb 3-1: config 0 has no interface number 0 [ 228.458533][ T5831] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.521984][ T5831] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 228.531492][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.539693][ T5831] usb 3-1: Product: syz [ 228.544298][ T5831] usb 3-1: Manufacturer: syz [ 228.549067][ T5831] usb 3-1: SerialNumber: syz [ 228.559925][ T5831] usb 3-1: config 0 descriptor?? [ 228.579378][ T5831] smsc95xx v2.0.0 [ 228.583485][ T5831] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 228.594737][ T5831] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 230.289737][ T5831] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 230.462827][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 230.513203][ T5831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.523865][ T5831] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 230.533612][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.574425][ T5831] usb 2-1: config 0 descriptor?? [ 230.843899][ T5836] usb 2-1: USB disconnect, device number 2 [ 230.911986][ T5831] usb 3-1: USB disconnect, device number 5 [ 233.018186][ T5836] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 233.270637][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 233.296741][ T5836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.307382][ T5836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.444448][ T5836] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.454012][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.462275][ T5836] usb 3-1: Product: syz [ 233.466531][ T5836] usb 3-1: Manufacturer: syz [ 233.471289][ T5836] usb 3-1: SerialNumber: syz [ 233.654602][ T5831] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 233.860482][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 233.871909][ T5836] usb 3-1: 0:2 : does not exist [ 233.919305][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 233.931962][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 234.009278][ T5836] usb 3-1: USB disconnect, device number 6 [ 234.097479][ T5831] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 234.106901][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.115222][ T5831] usb 4-1: Product: syz [ 234.119477][ T5831] usb 4-1: Manufacturer: syz [ 234.125048][ T5831] usb 4-1: SerialNumber: syz [ 234.239673][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.302921][ T5831] usb 4-1: config 0 descriptor?? [ 234.364465][ T5831] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 234.374062][ T5831] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 235.002171][ T5831] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 235.044829][ T5831] em28xx 4-1:0.0: Config register raw data: 0x56 [ 235.240579][ T5831] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 235.247987][ T5831] em28xx 4-1:0.0: No AC97 audio processor [ 235.292250][ T5836] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 235.527190][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.538834][ T5836] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 235.548344][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.703458][ T5836] usb 3-1: config 0 descriptor?? [ 236.215967][ T5836] macally 0003:060B:0001.0001: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.2-1/input0 [ 236.357353][ T5836] usb 3-1: USB disconnect, device number 7 [ 236.569409][ T2227] usb 4-1: USB disconnect, device number 4 [ 236.576926][ T2227] em28xx 4-1:0.0: Disconnecting em28xx [ 236.652378][ T2227] em28xx 4-1:0.0: Freeing device [ 237.384837][ T6127] fido_id[6127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 237.840812][ T2227] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 238.144138][ T2227] usb 1-1: Using ep0 maxpacket: 32 [ 238.209562][ T2227] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 238.218120][ T2227] usb 1-1: config 0 has no interface number 0 [ 238.224556][ T2227] usb 1-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 238.236732][ T5836] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 238.356539][ T2227] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 238.366036][ T2227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.374442][ T2227] usb 1-1: Product: syz [ 238.378803][ T2227] usb 1-1: Manufacturer: syz [ 238.383823][ T2227] usb 1-1: SerialNumber: syz [ 238.464407][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 238.514641][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.525627][ T5836] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 238.535260][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.595592][ T2227] usb 1-1: config 0 descriptor?? [ 238.635276][ T5836] usb 3-1: config 0 descriptor?? [ 238.651202][ T2227] smsc95xx v2.0.0 [ 238.656324][ T2227] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 238.667488][ T2227] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 238.918669][ T5836] usb 3-1: USB disconnect, device number 8 [ 239.982707][ T5836] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 240.080592][ T5831] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 240.156177][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 240.181372][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.193561][ T5836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.244463][ T5836] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.253996][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.263063][ T5836] usb 4-1: Product: syz [ 240.267415][ T5836] usb 4-1: Manufacturer: syz [ 240.270834][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 240.272372][ T5836] usb 4-1: SerialNumber: syz [ 240.369236][ T5831] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 240.378849][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.387339][ T5831] usb 3-1: Product: syz [ 240.398060][ T5831] usb 3-1: Manufacturer: syz [ 240.405213][ T5831] usb 3-1: SerialNumber: syz [ 240.475205][ T5831] usb 3-1: config 0 descriptor?? [ 240.535434][ T5836] usb 4-1: 0:2 : does not exist [ 240.538127][ T5831] gspca_main: sq930x-2.14.0 probing 2770:930c [ 240.541136][ T5836] usb 4-1: unit 13 not found! [ 240.714128][ T6173] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 240.761694][ T5836] usb 4-1: USB disconnect, device number 5 [ 240.972379][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.129646][ T5843] usb 1-1: USB disconnect, device number 2 [ 241.333855][ T5831] gspca_sq930x: ucbus_write failed -71 [ 241.339615][ T5831] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 241.382931][ T5831] usb 3-1: USB disconnect, device number 9 [ 241.731866][ T6180] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 242.800873][ T5836] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 243.011248][ T5836] usb 2-1: device descriptor read/64, error -71 [ 243.294949][ T5836] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 243.650960][ T5836] usb 2-1: device descriptor read/64, error -71 [ 243.797035][ T5836] usb usb2-port1: attempt power cycle [ 243.898038][ T2227] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 244.120516][ T2227] usb 4-1: Using ep0 maxpacket: 32 [ 244.162137][ T2227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.172657][ T2227] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 244.183807][ T2227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.260609][ T5836] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 244.287545][ T2227] usb 4-1: config 0 descriptor?? [ 244.294315][ T5836] usb 2-1: device descriptor read/8, error -71 [ 244.592631][ T5836] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 244.655717][ T5836] usb 2-1: device descriptor read/8, error -71 [ 244.775166][ T5836] usb usb2-port1: unable to enumerate USB device [ 245.345417][ T6210] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 246.444399][ T2227] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 246.521346][ T5831] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 246.670630][ T2227] usb 1-1: Using ep0 maxpacket: 32 [ 246.708265][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 246.719683][ T2227] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 246.728242][ T2227] usb 1-1: config 0 has no interface number 0 [ 246.734878][ T2227] usb 1-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 246.775179][ T5831] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.785768][ T5831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.829222][ T5831] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.838703][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.853969][ T5831] usb 3-1: Product: syz [ 246.858404][ T5831] usb 3-1: Manufacturer: syz [ 246.865559][ T5831] usb 3-1: SerialNumber: syz [ 246.869169][ T5836] usb 4-1: USB disconnect, device number 6 [ 246.892984][ T2227] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 246.902948][ T2227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.911693][ T2227] usb 1-1: Product: syz [ 246.916101][ T2227] usb 1-1: Manufacturer: syz [ 246.921171][ T2227] usb 1-1: SerialNumber: syz [ 247.083595][ T2227] usb 1-1: config 0 descriptor?? [ 247.154266][ T2227] smsc95xx v2.0.0 [ 247.158102][ T2227] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 247.169443][ T2227] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 247.375616][ T5831] usb 3-1: 0:2 : does not exist [ 247.381204][ T5831] usb 3-1: unit 13 not found! [ 247.469047][ T5831] usb 3-1: USB disconnect, device number 10 [ 247.841594][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.338995][ T2227] usb 1-1: USB disconnect, device number 3 [ 250.388926][ T5831] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 250.465397][ T30] audit: type=1326 audit(1759548896.185:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 250.488320][ T30] audit: type=1326 audit(1759548896.185:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 250.511087][ T30] audit: type=1326 audit(1759548896.215:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 250.539442][ T30] audit: type=1326 audit(1759548896.215:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 250.563632][ T30] audit: type=1326 audit(1759548896.215:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 250.586561][ T30] audit: type=1326 audit(1759548896.255:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 250.696913][ T5831] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 250.706476][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.763608][ T5831] usb 2-1: config 0 descriptor?? [ 251.028028][ T5831] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 251.238011][ T5831] [drm:udl_init] *ERROR* Selecting channel failed [ 251.296792][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'. [ 251.357457][ T5831] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 251.367211][ T5831] [drm] Initialized udl on minor 2 [ 251.444392][ T5831] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 251.465864][ T5831] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 251.481833][ T5843] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 251.511317][ T5843] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 251.519841][ T5843] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 251.565068][ T5831] usb 2-1: USB disconnect, device number 7 [ 251.670413][ T2227] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 251.940692][ T2227] usb 3-1: Using ep0 maxpacket: 16 [ 252.084470][ T2227] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.095060][ T2227] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.196123][ T2227] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.205557][ T2227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.213922][ T2227] usb 3-1: Product: syz [ 252.218256][ T2227] usb 3-1: Manufacturer: syz [ 252.223139][ T2227] usb 3-1: SerialNumber: syz [ 252.748910][ T2227] usb 3-1: 0:2 : does not exist [ 252.754107][ T2227] usb 3-1: unit 13 not found! [ 252.923927][ T2227] usb 3-1: USB disconnect, device number 11 [ 253.689404][ T6036] udevd[6036]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.122871][ T5831] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 258.321082][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 258.346519][ T5831] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.357305][ T5831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.466387][ T5831] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.476363][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.484927][ T5831] usb 3-1: Product: syz [ 258.489184][ T5831] usb 3-1: Manufacturer: syz [ 258.493935][ T5831] usb 3-1: SerialNumber: syz [ 258.815441][ T5831] usb 3-1: 0:2 : does not exist [ 258.821984][ T5831] usb 3-1: unit 6 not found! [ 258.977098][ T5831] usb 3-1: USB disconnect, device number 12 [ 259.477323][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.362265][ T5791] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 261.372985][ T5791] Bluetooth: hci4: Injecting HCI hardware error event [ 261.387331][ T5779] Bluetooth: hci4: hardware error 0x00 [ 263.566661][ T5779] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 263.793190][ T6365] ===================================================== [ 263.800382][ T6365] BUG: KMSAN: uninit-value in aes_encrypt+0x125d/0x1960 [ 263.807477][ T6365] aes_encrypt+0x125d/0x1960 [ 263.812234][ T6365] aesti_encrypt+0x7d/0xf0 [ 263.816819][ T6365] cipher_crypt_one+0x120/0x2e0 [ 263.821887][ T6365] crypto_cipher_encrypt_one+0x33/0x40 [ 263.827595][ T6365] drbg_ctr_update+0x19a9/0x3700 [ 263.832745][ T6365] drbg_seed+0xb1e/0xe20 [ 263.837230][ T6365] drbg_kcapi_seed+0xe0c/0x1e40 [ 263.842268][ T6365] crypto_rng_reset+0x190/0x250 [ 263.847288][ T6365] rng_setkey+0x52/0x70 [ 263.851602][ T6365] alg_setkey+0x262/0x3b0 [ 263.856078][ T6365] alg_setsockopt+0x503/0x760 [ 263.860908][ T6365] __sys_setsockopt+0x43b/0x580 [ 263.865959][ T6365] __ia32_sys_setsockopt+0xf3/0x1a0 [ 263.871370][ T6365] ia32_sys_call+0x24c2/0x4310 [ 263.876333][ T6365] __do_fast_syscall_32+0xb0/0x150 [ 263.881580][ T6365] do_fast_syscall_32+0x38/0x80 [ 263.886559][ T6365] do_SYSENTER_32+0x1f/0x30 [ 263.891189][ T6365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.897685][ T6365] [ 263.900067][ T6365] [ 263.900067][ T6365] [ 263.908887][ T6365] Uninit was stored to memory at: [ 263.914140][ T6365] crypto_sha3_finup+0x136/0xe00 [ 263.919228][ T6365] crypto_shash_finup+0x327/0xe80 [ 263.924424][ T6365] jent_hash_time+0x247/0x590 [ 263.929291][ T6365] jent_condition_data+0x4f0/0x510 [ 263.934578][ T6365] jent_measure_jitter+0x547/0x770 [ 263.940161][ T6365] jent_gen_entropy+0x209/0x450 [ 263.945308][ T6365] jent_read_entropy+0x353/0xeb0 [ 263.950431][ T6365] jent_kcapi_random+0x6c/0x250 [ 263.955460][ T6365] drbg_seed+0x3f2/0xe20 [ 263.959849][ T6365] drbg_kcapi_seed+0xe0c/0x1e40 [ 263.964863][ T6365] crypto_rng_reset+0x190/0x250 [ 263.969861][ T6365] rng_setkey+0x52/0x70 [ 263.974163][ T6365] alg_setkey+0x262/0x3b0 [ 263.978612][ T6365] alg_setsockopt+0x503/0x760 [ 263.983435][ T6365] __sys_setsockopt+0x43b/0x580 [ 263.988482][ T6365] __ia32_sys_setsockopt+0xf3/0x1a0 [ 263.993857][ T6365] ia32_sys_call+0x24c2/0x4310 [ 263.998810][ T6365] __do_fast_syscall_32+0xb0/0x150 [ 264.004059][ T6365] do_fast_syscall_32+0x38/0x80 [ 264.009469][ T6365] do_SYSENTER_32+0x1f/0x30 [ 264.014095][ T6365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.020587][ T6365] [ 264.022965][ T6365] Uninit was stored to memory at: [ 264.028215][ T6365] crypto_shash_finup+0xc5a/0xe80 [ 264.033423][ T6365] jent_hash_time+0x1de/0x590 [ 264.038279][ T6365] jent_condition_data+0x4f0/0x510 [ 264.043769][ T6365] jent_measure_jitter+0x547/0x770 [ 264.049065][ T6365] jent_gen_entropy+0x209/0x450 [ 264.054086][ T6365] jent_read_entropy+0x353/0xeb0 [ 264.059308][ T6365] jent_kcapi_random+0x6c/0x250 [ 264.064327][ T6365] drbg_seed+0x3f2/0xe20 [ 264.068718][ T6365] drbg_kcapi_seed+0xe0c/0x1e40 [ 264.073720][ T6365] crypto_rng_reset+0x190/0x250 [ 264.078713][ T6365] rng_setkey+0x52/0x70 [ 264.083014][ T6365] alg_setkey+0x262/0x3b0 [ 264.087496][ T6365] alg_setsockopt+0x503/0x760 [ 264.092308][ T6365] __sys_setsockopt+0x43b/0x580 [ 264.097336][ T6365] __ia32_sys_setsockopt+0xf3/0x1a0 [ 264.102733][ T6365] ia32_sys_call+0x24c2/0x4310 [ 264.107738][ T6365] __do_fast_syscall_32+0xb0/0x150 [ 264.113006][ T6365] do_fast_syscall_32+0x38/0x80 [ 264.117994][ T6365] do_SYSENTER_32+0x1f/0x30 [ 264.122632][ T6365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.129130][ T6365] [ 264.131519][ T6365] Uninit was stored to memory at: [ 264.136816][ T6365] crypto_sha3_finup+0xc98/0xe00 [ 264.142349][ T6365] crypto_shash_finup+0x327/0xe80 [ 264.147545][ T6365] jent_hash_time+0x247/0x590 [ 264.152404][ T6365] jent_condition_data+0x4f0/0x510 [ 264.157690][ T6365] jent_measure_jitter+0x547/0x770 [ 264.163133][ T6365] jent_gen_entropy+0x209/0x450 [ 264.168167][ T6365] jent_read_entropy+0x353/0xeb0 [ 264.173301][ T6365] jent_kcapi_random+0x6c/0x250 [ 264.178333][ T6365] drbg_seed+0x3f2/0xe20 [ 264.182733][ T6365] drbg_kcapi_seed+0xe0c/0x1e40 [ 264.187750][ T6365] crypto_rng_reset+0x190/0x250 [ 264.192785][ T6365] rng_setkey+0x52/0x70 [ 264.197086][ T6365] alg_setkey+0x262/0x3b0 [ 264.201539][ T6365] alg_setsockopt+0x503/0x760 [ 264.206350][ T6365] __sys_setsockopt+0x43b/0x580 [ 264.211369][ T6365] __ia32_sys_setsockopt+0xf3/0x1a0 [ 264.216735][ T6365] ia32_sys_call+0x24c2/0x4310 [ 264.221683][ T6365] __do_fast_syscall_32+0xb0/0x150 [ 264.226935][ T6365] do_fast_syscall_32+0x38/0x80 [ 264.231910][ T6365] do_SYSENTER_32+0x1f/0x30 [ 264.236536][ T6365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.243022][ T6365] [ 264.245399][ T6365] Uninit was stored to memory at: [ 264.250594][ T6365] keccakf+0x1efb/0x2110 [ 264.255007][ T6365] crypto_sha3_finup+0x772/0xe00 [ 264.260101][ T6365] crypto_shash_finup+0x327/0xe80 [ 264.265300][ T6365] jent_hash_time+0x247/0x590 [ 264.270278][ T6365] jent_condition_data+0x4f0/0x510 [ 264.275561][ T6365] jent_measure_jitter+0x547/0x770 [ 264.280933][ T6365] jent_gen_entropy+0x209/0x450 [ 264.285940][ T6365] jent_read_entropy+0x353/0xeb0 [ 264.291045][ T6365] jent_kcapi_random+0x6c/0x250 [ 264.296089][ T6365] drbg_seed+0x3f2/0xe20 [ 264.300479][ T6365] drbg_kcapi_seed+0xe0c/0x1e40 [ 264.305488][ T6365] crypto_rng_reset+0x190/0x250 [ 264.310483][ T6365] rng_setkey+0x52/0x70 [ 264.314779][ T6365] alg_setkey+0x262/0x3b0 [ 264.319231][ T6365] alg_setsockopt+0x503/0x760 [ 264.324024][ T6365] __sys_setsockopt+0x43b/0x580 [ 264.329042][ T6365] __ia32_sys_setsockopt+0xf3/0x1a0 [ 264.334416][ T6365] ia32_sys_call+0x24c2/0x4310 [ 264.339356][ T6365] __do_fast_syscall_32+0xb0/0x150 [ 264.344696][ T6365] do_fast_syscall_32+0x38/0x80 [ 264.349678][ T6365] do_SYSENTER_32+0x1f/0x30 [ 264.354310][ T6365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.361250][ T6365] [ 264.363635][ T6365] Uninit was stored to memory at: [ 264.369018][ T6365] crypto_sha3_finup+0x5be/0xe00 [ 264.374110][ T6365] crypto_shash_finup+0x327/0xe80 [ 264.379308][ T6365] jent_hash_time+0x247/0x590 [ 264.384255][ T6365] jent_condition_data+0x4f0/0x510 [ 264.389547][ T6365] jent_measure_jitter+0x547/0x770 [ 264.394998][ T6365] jent_gen_entropy+0x209/0x450 [ 264.400015][ T6365] jent_read_entropy+0x353/0xeb0 [ 264.405114][ T6365] jent_kcapi_random+0x6c/0x250 [ 264.410143][ T6365] drbg_seed+0x3f2/0xe20 [ 264.414569][ T6365] drbg_kcapi_seed+0xe0c/0x1e40 [ 264.419580][ T6365] crypto_rng_reset+0x190/0x250 [ 264.424584][ T6365] rng_setkey+0x52/0x70 [ 264.428877][ T6365] alg_setkey+0x262/0x3b0 [ 264.433327][ T6365] alg_setsockopt+0x503/0x760 [ 264.438126][ T6365] __sys_setsockopt+0x43b/0x580 [ 264.443157][ T6365] __ia32_sys_setsockopt+0xf3/0x1a0 [ 264.448551][ T6365] ia32_sys_call+0x24c2/0x4310 [ 264.453496][ T6365] __do_fast_syscall_32+0xb0/0x150 [ 264.458760][ T6365] do_fast_syscall_32+0x38/0x80 [ 264.463750][ T6365] do_SYSENTER_32+0x1f/0x30 [ 264.468394][ T6365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.474911][ T6365] [ 264.477316][ T6365] Uninit was stored to memory at: [ 264.482584][ T6365] crypto_sha3_finup+0x136/0xe00 [ 264.487720][ T6365] crypto_shash_finup+0x327/0xe80 [ 264.492941][ T6365] jent_hash_time+0x247/0x590 [ 264.497815][ T6365] jent_condition_data+0x4f0/0x510 [ 264.503116][ T6365] jent_measure_jitter+0x547/0x770 [ 264.508398][ T6365] jent_gen_entropy+0x209/0x450 [ 264.513426][ T6365] jent_read_entropy+0x353/0xeb0 [ 264.518519][ T6365] jent_kcapi_random+0x6c/0x250 [ 264.523648][ T6365] drbg_seed+0x3f2/0xe20 [ 264.528125][ T6365] drbg_kcapi_seed+0xe0c/0x1e40 [ 264.533129][ T6365] crypto_rng_reset+0x190/0x250 [ 264.538117][ T6365] rng_setkey+0x52/0x70 [ 264.542502][ T6365] alg_setkey+0x262/0x3b0 [ 264.547826][ T6365] alg_setsockopt+0x503/0x760 [ 264.552674][ T6365] __sys_setsockopt+0x43b/0x580 [ 264.557730][ T6365] __ia32_sys_setsockopt+0xf3/0x1a0 [ 264.563174][ T6365] ia32_sys_call+0x24c2/0x4310 [ 264.568145][ T6365] __do_fast_syscall_32+0xb0/0x150 [ 264.573395][ T6365] do_fast_syscall_32+0x38/0x80 [ 264.579166][ T6365] do_SYSENTER_32+0x1f/0x30 [ 264.583893][ T6365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.590510][ T6365] [ 264.593069][ T6365] Uninit was stored to memory at: [ 264.598316][ T6365] crypto_shash_finup+0xc5a/0xe80 [ 264.603594][ T6365] jent_hash_time+0x1de/0x590 [ 264.608446][ T6365] jent_condition_data+0x4f0/0x510 [ 264.613723][ T6365] jent_measure_jitter+0x547/0x770 [ 264.619010][ T6365] jent_gen_entropy+0x209/0x450 [ 264.624027][ T6365] jent_read_entropy+0x353/0xeb0 [ 264.629236][ T6365] jent_kcapi_random+0x6c/0x250 [ 264.634449][ T6365] drbg_seed+0x3f2/0xe20 [ 264.638872][ T6365] drbg_kcapi_seed+0xe0c/0x1e40 [ 264.643885][ T6365] crypto_rng_reset+0x190/0x250 [ 264.648906][ T6365] rng_setkey+0x52/0x70 [ 264.653207][ T6365] alg_setkey+0x262/0x3b0 [ 264.657669][ T6365] alg_setsockopt+0x503/0x760 [ 264.662495][ T6365] __sys_setsockopt+0x43b/0x580 [ 264.667996][ T6365] __ia32_sys_setsockopt+0xf3/0x1a0 [ 264.673394][ T6365] ia32_sys_call+0x24c2/0x4310 [ 264.678366][ T6365] __do_fast_syscall_32+0xb0/0x150 [ 264.683615][ T6365] do_fast_syscall_32+0x38/0x80 [ 264.688595][ T6365] do_SYSENTER_32+0x1f/0x30 [ 264.693222][ T6365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.699716][ T6365] [ 264.702110][ T6365] Local variable intermediary created at: [ 264.707894][ T6365] jent_hash_time+0x9b/0x590 [ 264.712706][ T6365] jent_condition_data+0x4f0/0x510 [ 264.717994][ T6365] [ 264.720419][ T6365] CPU: 1 UID: 0 PID: 6365 Comm: syz.0.139 Not tainted syzkaller #0 PREEMPT(none) [ 264.729845][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.740004][ T6365] ===================================================== [ 264.747097][ T6365] Disabling lock debugging due to kernel taint [ 264.753353][ T6365] Kernel panic - not syncing: kmsan.panic set ... [ 264.759888][ T6365] CPU: 1 UID: 0 PID: 6365 Comm: syz.0.139 Tainted: G B syzkaller #0 PREEMPT(none) [ 264.770826][ T6365] Tainted: [B]=BAD_PAGE [ 264.775063][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.785286][ T6365] Call Trace: [ 264.788679][ T6365] [ 264.791685][ T6365] __dump_stack+0x26/0x30 [ 264.796173][ T6365] dump_stack_lvl+0x53/0x270 [ 264.800921][ T6365] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 264.806927][ T6365] dump_stack+0x1e/0x25 [ 264.811247][ T6365] vpanic+0x435/0xd30 [ 264.815506][ T6365] panic+0x15d/0x160 [ 264.819655][ T6365] kmsan_report+0x31c/0x320 [ 264.824319][ T6365] ? __msan_warning+0x1b/0x30 [ 264.829138][ T6365] ? aes_encrypt+0x125d/0x1960 [ 264.834038][ T6365] ? aesti_encrypt+0x7d/0xf0 [ 264.838893][ T6365] ? cipher_crypt_one+0x120/0x2e0 [ 264.844107][ T6365] ? crypto_cipher_encrypt_one+0x33/0x40 [ 264.849943][ T6365] ? drbg_ctr_update+0x19a9/0x3700 [ 264.855234][ T6365] ? drbg_seed+0xb1e/0xe20 [ 264.859821][ T6365] ? drbg_kcapi_seed+0xe0c/0x1e40 [ 264.865024][ T6365] ? crypto_rng_reset+0x190/0x250 [ 264.870317][ T6365] ? rng_setkey+0x52/0x70 [ 264.874827][ T6365] ? alg_setkey+0x262/0x3b0 [ 264.879483][ T6365] ? alg_setsockopt+0x503/0x760 [ 264.884592][ T6365] ? __sys_setsockopt+0x43b/0x580 [ 264.889803][ T6365] ? __ia32_sys_setsockopt+0xf3/0x1a0 [ 264.895371][ T6365] ? ia32_sys_call+0x24c2/0x4310 [ 264.900500][ T6365] ? __do_fast_syscall_32+0xb0/0x150 [ 264.905926][ T6365] ? do_fast_syscall_32+0x38/0x80 [ 264.911086][ T6365] ? do_SYSENTER_32+0x1f/0x30 [ 264.915890][ T6365] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.922575][ T6365] ? crypto_sha3_finup+0xd11/0xe00 [ 264.927879][ T6365] ? kmsan_get_metadata+0xfb/0x160 [ 264.933167][ T6365] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 264.939654][ T6365] ? kmsan_get_metadata+0xfb/0x160 [ 264.944925][ T6365] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 264.950918][ T6365] ? kmsan_get_metadata+0xfb/0x160 [ 264.956243][ T6365] __msan_warning+0x1b/0x30 [ 264.960894][ T6365] aes_encrypt+0x125d/0x1960 [ 264.965657][ T6365] ? kmsan_get_metadata+0xfb/0x160 [ 264.970987][ T6365] aesti_encrypt+0x7d/0xf0 [ 264.975585][ T6365] cipher_crypt_one+0x120/0x2e0 [ 264.980665][ T6365] ? __pfx_aesti_encrypt+0x10/0x10 [ 264.985974][ T6365] ? crypto_cipher_setkey+0x380/0x430 [ 264.991561][ T6365] ? kmsan_get_metadata+0xfb/0x160 [ 264.996847][ T6365] crypto_cipher_encrypt_one+0x33/0x40 [ 265.002528][ T6365] drbg_ctr_update+0x19a9/0x3700 [ 265.007732][ T6365] ? __pfx_drbg_ctr_update+0x10/0x10 [ 265.013281][ T6365] drbg_seed+0xb1e/0xe20 [ 265.017707][ T6365] ? __pfx_jent_kcapi_random+0x10/0x10 [ 265.023372][ T6365] ? kmsan_get_metadata+0xfb/0x160 [ 265.028821][ T6365] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 265.034810][ T6365] drbg_kcapi_seed+0xe0c/0x1e40 [ 265.039940][ T6365] ? kmsan_get_metadata+0xfb/0x160 [ 265.045315][ T6365] ? __pfx_drbg_kcapi_seed+0x10/0x10 [ 265.050785][ T6365] crypto_rng_reset+0x190/0x250 [ 265.055841][ T6365] rng_setkey+0x52/0x70 [ 265.060192][ T6365] ? __pfx_rng_setkey+0x10/0x10 [ 265.065201][ T6365] alg_setkey+0x262/0x3b0 [ 265.069690][ T6365] alg_setsockopt+0x503/0x760 [ 265.074623][ T6365] ? __pfx_alg_setsockopt+0x10/0x10 [ 265.079960][ T6365] __sys_setsockopt+0x43b/0x580 [ 265.085030][ T6365] __ia32_sys_setsockopt+0xf3/0x1a0 [ 265.090442][ T6365] ia32_sys_call+0x24c2/0x4310 [ 265.095399][ T6365] __do_fast_syscall_32+0xb0/0x150 [ 265.100686][ T6365] do_fast_syscall_32+0x38/0x80 [ 265.105684][ T6365] do_SYSENTER_32+0x1f/0x30 [ 265.110332][ T6365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.116841][ T6365] RIP: 0023:0xf7f68539 [ 265.121031][ T6365] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 265.140879][ T6365] RSP: 002b:00000000f543555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 265.149489][ T6365] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000117 [ 265.157669][ T6365] RDX: 0000000000000001 RSI: 0000000080000040 RDI: 0000000000000002 [ 265.166414][ T6365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.175383][ T6365] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 265.183616][ T6365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.191787][ T6365] [ 265.195184][ T6365] Kernel Offset: disabled [ 265.199914][ T6365] Rebooting in 86400 seconds..