last executing test programs: 6.896502626s ago: executing program 4 (id=75): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x3, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="680000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000080000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c000800f1ff07"], 0x68}}, 0x4004040) 6.246234239s ago: executing program 2 (id=79): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x30, r1, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) 6.0118544s ago: executing program 4 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x180, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x1, 0x406, 0x0, 0xffffffff, 0x9}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x800, 0x8, 0x200, 0x7fffffff, 0x80}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.602269704s ago: executing program 2 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44020}, 0x20000000) 5.536397926s ago: executing program 0 (id=84): r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0) 4.936793557s ago: executing program 4 (id=87): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x88}, 0x48) 4.882775872s ago: executing program 0 (id=88): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xa0}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 4.775895701s ago: executing program 2 (id=89): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x128a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 4.4789577s ago: executing program 1 (id=90): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="ab", 0x1}], 0x1) 4.435976003s ago: executing program 3 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@debug={'debug', 0x3d, 0x1}}]}}) 4.165642301s ago: executing program 4 (id=92): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.034824969s ago: executing program 2 (id=93): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x40, 0xa, 0x7, {0x7, 0x21, "d666348f27"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.530680558s ago: executing program 3 (id=94): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 3.527081018s ago: executing program 1 (id=104): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 2.837396885s ago: executing program 1 (id=95): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 2.684173124s ago: executing program 3 (id=96): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) 2.121749589s ago: executing program 0 (id=97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000003c0)={0x2, 0x92c, 0x0, &(0x7f0000000340)}) 1.830793647s ago: executing program 1 (id=98): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) 1.787023749s ago: executing program 3 (id=99): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) 1.685212503s ago: executing program 4 (id=100): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) dup(r0) open(&(0x7f0000000180)='./bus\x00', 0x66a42, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.279173769s ago: executing program 0 (id=101): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.21493295s ago: executing program 2 (id=102): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xb4600000}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1\x00', {0x2, 0x4e20, @broadcast}}) 1.061283721s ago: executing program 3 (id=103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x123, 0x234}, 0x14}}, 0x0) 1.040977556s ago: executing program 4 (id=105): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x0, 0x0}, {0x1000, 0x1800, 0x0, 0x0}], 0x2}) 739.742444ms ago: executing program 1 (id=106): r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e120800090000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) 645.023598ms ago: executing program 0 (id=107): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 534.171017ms ago: executing program 3 (id=108): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCGETS(r0, 0x8926, 0x0) 491.276466ms ago: executing program 2 (id=109): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 170.165951ms ago: executing program 0 (id=110): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x3}}) 0s ago: executing program 1 (id=111): close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. [ 173.349536][ T5783] cgroup: Unknown subsys name 'net' [ 173.496966][ T5783] cgroup: Unknown subsys name 'cpuset' [ 173.511408][ T5783] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 179.398390][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 185.203482][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.212760][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.222105][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.236339][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.247051][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.257363][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.271290][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.284473][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.305632][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.318410][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.364039][ T5097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.372689][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.384597][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.396138][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.404239][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.412658][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.413840][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.427933][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.441689][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.456811][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.523955][ T5097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.535776][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.546928][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.617949][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.628711][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.692728][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 187.197553][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 187.363794][ T5805] Bluetooth: hci0: command tx timeout [ 187.453881][ T5805] Bluetooth: hci1: command tx timeout [ 187.489017][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 187.673890][ T5805] Bluetooth: hci3: command tx timeout [ 187.679637][ T5811] Bluetooth: hci4: command tx timeout [ 187.687934][ T5805] Bluetooth: hci2: command tx timeout [ 187.792361][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 187.902801][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.912535][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.920531][ T5800] bridge_slave_0: entered allmulticast mode [ 187.930443][ T5800] bridge_slave_0: entered promiscuous mode [ 187.975961][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 188.051609][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.059442][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.067400][ T5800] bridge_slave_1: entered allmulticast mode [ 188.077583][ T5800] bridge_slave_1: entered promiscuous mode [ 188.359315][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.467683][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.587854][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.599402][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.607194][ T5809] bridge_slave_0: entered allmulticast mode [ 188.616887][ T5809] bridge_slave_0: entered promiscuous mode [ 188.749315][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.756957][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.766887][ T5809] bridge_slave_1: entered allmulticast mode [ 188.775895][ T5809] bridge_slave_1: entered promiscuous mode [ 188.826594][ T5800] team0: Port device team_slave_0 added [ 188.832755][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.840512][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.849079][ T5801] bridge_slave_0: entered allmulticast mode [ 188.858962][ T5801] bridge_slave_0: entered promiscuous mode [ 188.962819][ T5800] team0: Port device team_slave_1 added [ 188.969449][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.984792][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.992417][ T5801] bridge_slave_1: entered allmulticast mode [ 189.001286][ T5801] bridge_slave_1: entered promiscuous mode [ 189.197403][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.280600][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.288240][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.297483][ T5806] bridge_slave_0: entered allmulticast mode [ 189.306213][ T5806] bridge_slave_0: entered promiscuous mode [ 189.355007][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.419280][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.426575][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.453297][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.455314][ T5805] Bluetooth: hci0: command tx timeout [ 189.470947][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.478271][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.504662][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.517394][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.527600][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.535556][ T5806] bridge_slave_1: entered allmulticast mode [ 189.546174][ T5806] bridge_slave_1: entered promiscuous mode [ 189.559973][ T5805] Bluetooth: hci1: command tx timeout [ 189.575052][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.670932][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.678857][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.687245][ T5812] bridge_slave_0: entered allmulticast mode [ 189.697101][ T5812] bridge_slave_0: entered promiscuous mode [ 189.753916][ T5805] Bluetooth: hci2: command tx timeout [ 189.759631][ T5811] Bluetooth: hci4: command tx timeout [ 189.765753][ T5097] Bluetooth: hci3: command tx timeout [ 189.822875][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.903249][ T5809] team0: Port device team_slave_0 added [ 189.917501][ T5809] team0: Port device team_slave_1 added [ 189.924637][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.932168][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.941634][ T5812] bridge_slave_1: entered allmulticast mode [ 189.950878][ T5812] bridge_slave_1: entered promiscuous mode [ 190.028578][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.152868][ T5800] hsr_slave_0: entered promiscuous mode [ 190.161623][ T5800] hsr_slave_1: entered promiscuous mode [ 190.179722][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.203013][ T5801] team0: Port device team_slave_0 added [ 190.327308][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.345842][ T5801] team0: Port device team_slave_1 added [ 190.382036][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.389282][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.416422][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.466238][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.510056][ T5806] team0: Port device team_slave_0 added [ 190.518425][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.525772][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.553094][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.663346][ T5806] team0: Port device team_slave_1 added [ 190.780645][ T5812] team0: Port device team_slave_0 added [ 190.788719][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.795970][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.822297][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.871039][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.878606][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.904957][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.939158][ T5812] team0: Port device team_slave_1 added [ 190.965341][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.972432][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.998674][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.047184][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.054489][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.080907][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.223032][ T5809] hsr_slave_0: entered promiscuous mode [ 191.232037][ T5809] hsr_slave_1: entered promiscuous mode [ 191.240342][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 191.246270][ T5809] Cannot create hsr debugfs directory [ 191.431103][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.439880][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.466147][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.513893][ T5811] Bluetooth: hci0: command tx timeout [ 191.585243][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.592419][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.619764][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.623834][ T5811] Bluetooth: hci1: command tx timeout [ 191.694432][ T5801] hsr_slave_0: entered promiscuous mode [ 191.704638][ T5801] hsr_slave_1: entered promiscuous mode [ 191.712568][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 191.718656][ T5801] Cannot create hsr debugfs directory [ 191.800384][ T5806] hsr_slave_0: entered promiscuous mode [ 191.810538][ T5806] hsr_slave_1: entered promiscuous mode [ 191.819497][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 191.825797][ T5806] Cannot create hsr debugfs directory [ 191.836049][ T5811] Bluetooth: hci4: command tx timeout [ 191.841775][ T5097] Bluetooth: hci3: command tx timeout [ 191.847678][ T5811] Bluetooth: hci2: command tx timeout [ 192.130095][ T5812] hsr_slave_0: entered promiscuous mode [ 192.138796][ T5812] hsr_slave_1: entered promiscuous mode [ 192.147076][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 192.152926][ T5812] Cannot create hsr debugfs directory [ 193.012167][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.122154][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.161019][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.206588][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.235970][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.292896][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.369972][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.424824][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.492932][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.528968][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.553303][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.603946][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.614207][ T5097] Bluetooth: hci0: command tx timeout [ 193.676438][ T5097] Bluetooth: hci1: command tx timeout [ 193.852018][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.918193][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.918687][ T5097] Bluetooth: hci3: command tx timeout [ 193.932602][ T5811] Bluetooth: hci2: command tx timeout [ 193.938353][ T5805] Bluetooth: hci4: command tx timeout [ 193.981840][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.043239][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.072071][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.099422][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.167943][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 194.279278][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 194.700831][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.914983][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.947510][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.986401][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.094329][ T4156] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.101849][ T4156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.168885][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.233007][ T3818] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.240605][ T3818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.287641][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.306074][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.367904][ T3818] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.375483][ T3818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.391852][ T3818] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.399445][ T3818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.543541][ T3818] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.551120][ T3818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.579993][ T3818] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.587581][ T3818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.666120][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.848060][ T3778] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.855691][ T3778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.877816][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.960683][ T3772] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.968300][ T3772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.277684][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.360993][ T3778] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.368630][ T3778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.469561][ T3778] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.477179][ T3778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.598592][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.023112][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.326362][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.382209][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.660759][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.875595][ T5809] veth0_vlan: entered promiscuous mode [ 198.976327][ T5801] veth0_vlan: entered promiscuous mode [ 199.005712][ T5800] veth0_vlan: entered promiscuous mode [ 199.055943][ T5809] veth1_vlan: entered promiscuous mode [ 199.139305][ T5801] veth1_vlan: entered promiscuous mode [ 199.181007][ T5800] veth1_vlan: entered promiscuous mode [ 199.341400][ T5812] veth0_vlan: entered promiscuous mode [ 199.501678][ T5812] veth1_vlan: entered promiscuous mode [ 199.626848][ T5809] veth0_macvtap: entered promiscuous mode [ 199.660280][ T5809] veth1_macvtap: entered promiscuous mode [ 199.683531][ T5800] veth0_macvtap: entered promiscuous mode [ 199.749094][ T5800] veth1_macvtap: entered promiscuous mode [ 199.807338][ T5801] veth0_macvtap: entered promiscuous mode [ 199.919553][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.951908][ T5801] veth1_macvtap: entered promiscuous mode [ 199.988830][ T5812] veth0_macvtap: entered promiscuous mode [ 200.036808][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.069774][ T5812] veth1_macvtap: entered promiscuous mode [ 200.110680][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.167342][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.191757][ T197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.233858][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.245865][ T197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.276868][ T197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.338441][ T197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.361867][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.394804][ T197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.432268][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.441256][ T197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.469531][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.489579][ T197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.552250][ T197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.619178][ T197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.701522][ T197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.732265][ T3772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.765746][ T5806] veth0_vlan: entered promiscuous mode [ 200.803786][ T3772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.812816][ T3772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.882379][ T3772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.937873][ T3772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.948714][ T5806] veth1_vlan: entered promiscuous mode [ 200.979996][ T3772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.337475][ T5806] veth0_macvtap: entered promiscuous mode [ 201.428043][ T5806] veth1_macvtap: entered promiscuous mode [ 201.576626][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.705757][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.829595][ T3818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.933262][ T3818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.972223][ T3818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.023161][ T3818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.192609][ T4156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.200913][ T4156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.279204][ T3772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.287396][ T3772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.570542][ T4156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.578734][ T4156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.615927][ T3809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.624971][ T3809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.775136][ T3849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.784132][ T3849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.949621][ T3933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.960753][ T3933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.042060][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 207.097049][ T3772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.110355][ T3772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.149705][ T3778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.158150][ T3778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.391447][ T5097] Bluetooth: hci1: unexpected cc 0x203c length: 9 > 1 [ 208.558508][ T11] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 208.601213][ T1301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.609378][ T1301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.743946][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 208.759748][ T3849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.768119][ T3849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.799537][ T11] usb 4-1: config 8 has an invalid interface number: 236 but max is 0 [ 208.810769][ T11] usb 4-1: config 8 has no interface number 0 [ 208.817332][ T11] usb 4-1: config 8 interface 236 has no altsetting 0 [ 208.915931][ T11] usb 4-1: New USB device found, idVendor=0499, idProduct=102e, bcdDevice=97.b1 [ 208.926413][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.934822][ T11] usb 4-1: Product: syz [ 208.939172][ T11] usb 4-1: Manufacturer: syz [ 208.948070][ T11] usb 4-1: SerialNumber: syz [ 209.046892][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 209.308795][ T24] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 209.317429][ T24] usb 2-1: config 0 has no interface number 0 [ 209.405692][ T24] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=31.99 [ 209.415501][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.423878][ T24] usb 2-1: Product: syz [ 209.428236][ T24] usb 2-1: Manufacturer: syz [ 209.433026][ T24] usb 2-1: SerialNumber: syz [ 209.470936][ T6001] Zero length message leads to an empty skb [ 209.516089][ T11] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.570312][ T24] usb 2-1: config 0 descriptor?? [ 209.691206][ T11] snd-usb-audio 4-1:8.236: probe with driver snd-usb-audio failed with error -2 [ 209.918384][ T11] usb 4-1: USB disconnect, device number 2 [ 209.933090][ T5852] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 209.985834][ T24] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 209.989539][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.236/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.994251][ T24] cxusb: set interface failed [ 209.994318][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 210.045604][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 210.115605][ T24] dvb-usb: AVerMedia AVerTVHD Volar (A868R) error while loading driver (-19) [ 210.124304][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 210.126104][ T24] dvb_usb_cxusb 2-1:0.205: probe with driver dvb_usb_cxusb failed with error -22 [ 210.180190][ T5852] usb 1-1: config 0 has no interfaces? [ 210.219041][ T5852] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 210.228853][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.238068][ T5852] usb 1-1: Product: syz [ 210.242870][ T5852] usb 1-1: Manufacturer: syz [ 210.248630][ T5852] usb 1-1: SerialNumber: syz [ 210.283598][ T24] usb 2-1: USB disconnect, device number 2 [ 210.404003][ T5852] usb 1-1: config 0 descriptor?? [ 210.697919][ T6003] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 211.297705][ T5097] Bluetooth: hci0: unexpected cc 0x203d length: 2 > 1 [ 211.406183][ T5097] Bluetooth: hci2: unexpected cc 0x203c length: 9 > 1 [ 212.223242][ T6001] orangefs_mount: mount request failed with -4 [ 212.499584][ T6037] Bluetooth: MGMT ver 1.23 [ 212.504512][ T6037] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 212.536329][ T5852] usb 1-1: USB disconnect, device number 2 [ 212.889663][ T6025] loop4: detected capacity change from 0 to 1024 [ 212.944300][ T6025] ======================================================= [ 212.944300][ T6025] WARNING: The mand mount option has been deprecated and [ 212.944300][ T6025] and is ignored by this kernel. Remove the mand [ 212.944300][ T6025] option from the mount to silence this warning. [ 212.944300][ T6025] ======================================================= [ 213.197957][ T6049] syz.0.20 uses obsolete (PF_INET,SOCK_PACKET) [ 214.165155][ T5852] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 214.366210][ T5852] usb 5-1: Using ep0 maxpacket: 8 [ 214.406016][ T5852] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 214.414696][ T5852] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.424859][ T5852] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.435187][ T5852] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.446079][ T5852] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.459655][ T5852] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 214.473166][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.634025][ T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 214.753195][ T5852] usb 5-1: GET_CAPABILITIES returned 2f [ 214.763924][ T5852] usbtmc 5-1:16.0: can't read capabilities [ 214.812698][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 214.848978][ T11] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 214.858738][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.867530][ T11] usb 1-1: Product: syz [ 214.871895][ T11] usb 1-1: Manufacturer: syz [ 214.881510][ T11] usb 1-1: SerialNumber: syz [ 214.998785][ T6070] loop2: detected capacity change from 0 to 1024 [ 215.038866][ T11] usb 1-1: config 0 descriptor?? [ 215.083110][ T11] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 215.270858][ T11] gspca_topro: reg_w err -71 [ 215.291963][ T6070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.332983][ T11] gspca_topro: Sensor soi763a [ 215.430499][ T11] usb 1-1: USB disconnect, device number 3 syzkaller syzkaller login: [ 215.505824][ T6070] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 215.667525][ T6083] warning: `syz.2.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 216.053133][ T42] usb 5-1: USB disconnect, device number 2 [ 216.124083][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 216.348768][ T24] usb 4-1: config 1 has an invalid descriptor of length 42, skipping remainder of the config [ 216.359953][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 62292, setting to 1024 [ 216.360687][ T6090] netlink: 'syz.1.30': attribute type 16 has an invalid length. [ 216.371566][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 216.379483][ T6090] netlink: 'syz.1.30': attribute type 17 has an invalid length. [ 216.389617][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 216.415803][ T6090] netlink: 'syz.1.30': attribute type 27 has an invalid length. [ 216.503027][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.517000][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 216.526795][ T24] usb 4-1: SerialNumber: syz [ 216.581369][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.605602][ T6081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 216.641595][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 217.373876][ T11] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 217.947997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 218.029823][ T11] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.038468][ T11] usb 3-1: config 0 has no interface number 0 [ 218.045420][ T11] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 218.061162][ T11] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 218.073622][ T11] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.083100][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.354635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 218.454744][ T11] usb 3-1: config 0 descriptor?? [ 218.491745][ T6097] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 218.578644][ T11] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 218.697024][ T6111] process 'syz.1.36' launched '/dev/fd/6' with NULL argv: empty string added [ 218.908634][ T11] usb 3-1: USB disconnect, device number 2 [ 218.981232][ T5852] usb 4-1: USB disconnect, device number 3 [ 219.640323][ T6115] loop0: detected capacity change from 0 to 64 [ 220.081285][ T6120] netlink: 64 bytes leftover after parsing attributes in process `syz.0.38'. [ 220.904812][ T6132] capability: warning: `syz.2.46' uses deprecated v2 capabilities in a way that may be insecure [ 221.251455][ T11] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 221.306586][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 221.575945][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 221.578647][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 221.654862][ T11] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 221.706172][ T11] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 221.717432][ T11] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 221.726044][ T11] usb 4-1: Product: syz [ 221.730392][ T11] usb 4-1: Manufacturer: syz [ 221.739249][ T11] usb 4-1: SerialNumber: syz [ 221.770942][ T24] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 221.781075][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.789496][ T24] usb 5-1: Product: syz [ 221.794013][ T24] usb 5-1: Manufacturer: syz [ 221.798819][ T24] usb 5-1: SerialNumber: syz [ 221.839253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 221.864841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 221.874566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.259573][ T24] usb 5-1: config 0 descriptor?? [ 222.293164][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 222.295912][ T11] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 222.308039][ T11] usb 4-1: Handspring Visor / Palm OS: port 208, is for unknown use [ 222.316781][ T11] usb 4-1: Handspring Visor / Palm OS: port 187, is for Console use [ 222.325170][ T11] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 222.885488][ T11] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 222.894288][ T11] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 223.005738][ T11] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 223.055166][ T11] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 223.148648][ T11] usb 4-1: USB disconnect, device number 4 [ 223.200459][ T11] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 223.254284][ T24] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 223.257602][ T11] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 223.288079][ T11] visor 4-1:1.0: device disconnected [ 223.515712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 223.765891][ T24] gspca_se401: read req failed req 0x06 error -71 [ 223.772797][ T24] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 223.890326][ T24] usb 5-1: USB disconnect, device number 3 [ 224.596864][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.607758][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.726204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 225.347403][ T6165] loop3: detected capacity change from 0 to 64 [ 225.769455][ T6170] netlink: 64 bytes leftover after parsing attributes in process `syz.3.57'. [ 226.324728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 227.193852][ T11] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 227.382455][ T11] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 227.391952][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.430777][ T6186] tipc: Started in network mode [ 227.432241][ T11] usb 4-1: config 0 descriptor?? [ 227.436357][ T6186] tipc: Node identity ba796ffa4d17, cluster identity 4711 [ 227.449446][ T6186] tipc: Enabled bearer , priority 0 [ 227.475651][ T11] cp210x 4-1:0.0: cp210x converter detected [ 227.493701][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 227.548159][ T6191] syzkaller0: entered promiscuous mode [ 227.554576][ T6191] syzkaller0: entered allmulticast mode [ 227.679662][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 227.706624][ T6185] tipc: Resetting bearer [ 227.709760][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 227.724093][ T24] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 227.737453][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.744442][ T24] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 227.760303][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.885429][ T6185] tipc: Disabling bearer [ 227.956507][ T24] usb 5-1: config 0 descriptor?? [ 228.195505][ T11] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 228.203328][ T11] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 228.324942][ T11] usb 4-1: cp210x converter now attached to ttyUSB0 [ 228.375152][ T11] usb 4-1: USB disconnect, device number 5 [ 228.404904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 228.413652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 228.505990][ T11] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 228.517156][ T11] cp210x 4-1:0.0: device disconnected [ 228.544454][ T24] hid-u2fzero 0003:20A0:4287.0001: unknown main item tag 0x2 [ 228.552282][ T24] hid-u2fzero 0003:20A0:4287.0001: item fetching failed at offset 4/5 [ 228.648040][ T24] hid-u2fzero 0003:20A0:4287.0001: probe with driver hid-u2fzero failed with error -22 [ 228.731491][ T5885] usb 5-1: USB disconnect, device number 4 [ 230.011958][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 230.021253][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 230.940298][ T6216] tipc: Started in network mode [ 230.949676][ T6216] tipc: Node identity 6e4c5ca5c959, cluster identity 4711 [ 230.975149][ T6216] tipc: Enabled bearer , priority 0 [ 231.081291][ T6216] tipc: Resetting bearer [ 231.149266][ T6215] tipc: Disabling bearer [ 231.699462][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.85'. [ 232.266480][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 232.522846][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.534036][ T24] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 232.543310][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.609801][ T24] usb 1-1: config 0 descriptor?? [ 232.830854][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 233.017320][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 233.039783][ T5885] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 233.049443][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.091539][ T5885] usb 5-1: config 0 descriptor?? [ 233.097490][ T24] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 233.111573][ T24] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 233.115318][ T11] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 233.121044][ T24] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 233.133931][ T24] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 233.141225][ T24] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 233.148751][ T24] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 233.148772][ T5885] gspca_main: sq930x-2.14.0 probing 041e:403c [ 233.156115][ T24] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 233.358235][ T24] hid-led 0003:1294:1320.0002: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.0-1/input0 [ 233.373952][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 233.382223][ T24] hid-led 0003:1294:1320.0002: Riso Kagaku Webmail Notifier initialized [ 233.394537][ T11] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.402941][ T11] usb 3-1: config 0 has no interface number 0 [ 233.414582][ T11] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.427218][ T11] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.437790][ T11] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 233.447437][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.522693][ T24] usb 1-1: USB disconnect, device number 4 [ 233.603141][ T3809] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 233.641106][ T3933] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 233.661299][ T3772] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 233.725914][ T11] usb 3-1: config 0 descriptor?? [ 233.874696][ T5885] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 233.881359][ T5885] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 233.993325][ T5885] usb 5-1: USB disconnect, device number 5 [ 234.132006][ T6250] fido_id[6250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 234.441929][ T11] uclogic 0003:28BD:0094.0003: failed retrieving string descriptor #100: -71 [ 234.452685][ T11] uclogic 0003:28BD:0094.0003: failed retrieving pen parameters: -71 [ 234.461399][ T11] uclogic 0003:28BD:0094.0003: pen probing failed: -71 [ 234.468761][ T11] uclogic 0003:28BD:0094.0003: failed probing parameters: -71 [ 234.477075][ T11] uclogic 0003:28BD:0094.0003: probe with driver uclogic failed with error -71 [ 234.617673][ T11] usb 3-1: USB disconnect, device number 3 [ 236.063953][ T11] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 236.126803][ T6278] netlink: 'syz.1.106': attribute type 21 has an invalid length. [ 236.279146][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 236.310907][ T11] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.319439][ T11] usb 5-1: config 0 has no interface number 0 [ 236.374165][ T11] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 236.387916][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.397877][ T11] usb 5-1: Product: syz [ 236.402256][ T11] usb 5-1: Manufacturer: syz [ 236.407199][ T11] usb 5-1: SerialNumber: syz [ 236.468312][ T6283] sp0: Synchronizing with TNC [ 236.496284][ T11] usb 5-1: config 0 descriptor?? [ 236.566549][ T11] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 236.575907][ T11] usb 5-1: selecting invalid altsetting 1 [ 236.588001][ T11] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 236.640546][ T11] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 236.652364][ T11] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 236.661105][ T11] usb 5-1: media controller created [ 236.663786][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 236.748825][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.882411][ T6287] ===================================================== [ 236.890023][ T6287] BUG: KMSAN: uninit-value in eth_type_trans+0x6a2/0x9b0 [ 236.897457][ T6287] eth_type_trans+0x6a2/0x9b0 [ 236.902308][ T6287] __dev_forward_skb2+0x4b1/0x950 [ 236.907737][ T6287] dev_forward_skb_nomtu+0x3b/0xe0 [ 236.913048][ T6287] __bpf_redirect+0x14d6/0x1760 [ 236.913719][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 236.918271][ T6287] bpf_clone_redirect+0x4b5/0x6d0 [ 236.928361][ T6287] ___bpf_prog_run+0x1297/0xeba0 [ 236.933643][ T6287] __bpf_prog_run512+0xc5/0x100 [ 236.938652][ T6287] bpf_test_run+0x496/0xe00 [ 236.943534][ T6287] bpf_prog_test_run_skb+0x2377/0x3200 [ 236.949252][ T6287] bpf_prog_test_run+0x5c2/0xa40 [ 236.954566][ T6287] __sys_bpf+0x873/0xeb0 [ 236.958949][ T6287] __ia32_sys_bpf+0xa4/0xf0 [ 236.963806][ T6287] ia32_sys_call+0xa53/0x4340 [ 236.968623][ T6287] __do_fast_syscall_32+0x155/0x310 [ 236.974133][ T6287] do_fast_syscall_32+0x38/0x80 [ 236.979155][ T6287] do_SYSENTER_32+0x1f/0x30 [ 236.984047][ T6287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.990576][ T6287] [ 236.992966][ T6287] Uninit was created at: [ 236.997688][ T6287] kmem_cache_alloc_node_noprof+0x9e7/0x17a0 [ 237.003983][ T6287] kmalloc_reserve+0x13c/0x4b0 [ 237.008943][ T6287] pskb_expand_head+0x1fc/0x15d0 [ 237.014264][ T6287] skb_ensure_writable+0x44e/0x510 [ 237.019577][ T6287] bpf_clone_redirect+0x310/0x6d0 [ 237.024934][ T6287] ___bpf_prog_run+0x1297/0xeba0 [ 237.030031][ T6287] __bpf_prog_run512+0xc5/0x100 [ 237.035260][ T6287] bpf_test_run+0x496/0xe00 [ 237.039917][ T6287] bpf_prog_test_run_skb+0x2377/0x3200 [ 237.045690][ T6287] bpf_prog_test_run+0x5c2/0xa40 [ 237.050800][ T6287] __sys_bpf+0x873/0xeb0 [ 237.055430][ T6287] __ia32_sys_bpf+0xa4/0xf0 [ 237.060137][ T6287] ia32_sys_call+0xa53/0x4340 [ 237.065120][ T6287] __do_fast_syscall_32+0x155/0x310 [ 237.070510][ T6287] do_fast_syscall_32+0x38/0x80 [ 237.075778][ T6287] do_SYSENTER_32+0x1f/0x30 [ 237.080452][ T6287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.087200][ T6287] [ 237.089654][ T6287] CPU: 0 UID: 0 PID: 6287 Comm: syz.1.111 Not tainted syzkaller #0 PREEMPT(none) [ 237.099160][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.109528][ T6287] ===================================================== [ 237.116679][ T6287] Disabling lock debugging due to kernel taint [ 237.122937][ T6287] Kernel panic - not syncing: kmsan.panic set ... [ 237.129484][ T6287] CPU: 0 UID: 0 PID: 6287 Comm: syz.1.111 Tainted: G B syzkaller #0 PREEMPT(none) [ 237.140477][ T6287] Tainted: [B]=BAD_PAGE [ 237.144720][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.154908][ T6287] Call Trace: [ 237.158317][ T6287] [ 237.161340][ T6287] __dump_stack+0x26/0x30 [ 237.165861][ T6287] dump_stack_lvl+0x53/0x270 [ 237.170647][ T6287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.176681][ T6287] dump_stack+0x1e/0x25 [ 237.181101][ T6287] vpanic+0x435/0xd30 [ 237.185363][ T6287] panic+0x15d/0x160 [ 237.189477][ T6287] kmsan_report+0x31c/0x320 [ 237.194173][ T6287] ? do_SYSENTER_32+0x1f/0x30 [ 237.199020][ T6287] ? __msan_warning+0x1b/0x30 [ 237.203884][ T6287] ? eth_type_trans+0x6a2/0x9b0 [ 237.209160][ T6287] ? __dev_forward_skb2+0x4b1/0x950 [ 237.214548][ T6287] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 237.220003][ T6287] ? __bpf_redirect+0x14d6/0x1760 [ 237.225169][ T6287] ? bpf_clone_redirect+0x4b5/0x6d0 [ 237.230535][ T6287] ? ___bpf_prog_run+0x1297/0xeba0 [ 237.235800][ T6287] ? __bpf_prog_run512+0xc5/0x100 [ 237.240969][ T6287] ? bpf_test_run+0x496/0xe00 [ 237.245793][ T6287] ? bpf_prog_test_run_skb+0x2377/0x3200 [ 237.251659][ T6287] ? bpf_prog_test_run+0x5c2/0xa40 [ 237.257013][ T6287] ? __sys_bpf+0x873/0xeb0 [ 237.261574][ T6287] ? __ia32_sys_bpf+0xa4/0xf0 [ 237.266436][ T6287] ? ia32_sys_call+0xa53/0x4340 [ 237.271423][ T6287] ? __do_fast_syscall_32+0x155/0x310 [ 237.276961][ T6287] ? do_fast_syscall_32+0x38/0x80 [ 237.282136][ T6287] ? do_SYSENTER_32+0x1f/0x30 [ 237.286984][ T6287] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.293685][ T6287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.299712][ T6287] ? should_fail_ex+0x45/0x8a0 [ 237.304671][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.309993][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.315302][ T6287] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 237.321822][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.327132][ T6287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.333153][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.338477][ T6287] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 237.345083][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.350417][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.355736][ T6287] __msan_warning+0x1b/0x30 [ 237.360414][ T6287] eth_type_trans+0x6a2/0x9b0 [ 237.365284][ T6287] __dev_forward_skb2+0x4b1/0x950 [ 237.370491][ T6287] ? pskb_expand_head+0x1254/0x15d0 [ 237.375865][ T6287] dev_forward_skb_nomtu+0x3b/0xe0 [ 237.381181][ T6287] __bpf_redirect+0x14d6/0x1760 [ 237.386204][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.391534][ T6287] bpf_clone_redirect+0x4b5/0x6d0 [ 237.396747][ T6287] ___bpf_prog_run+0x1297/0xeba0 [ 237.401878][ T6287] __bpf_prog_run512+0xc5/0x100 [ 237.406903][ T6287] ? kmsan_internal_poison_memory+0x78/0x90 [ 237.412992][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.418317][ T6287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.424328][ T6287] ? __local_bh_enable_ip+0x11/0xb0 [ 237.429692][ T6287] ? filter_irq_stacks+0x49/0x190 [ 237.434910][ T6287] ? stack_depot_save_flags+0x35/0x790 [ 237.440563][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.445903][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.451298][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.456606][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.461914][ T6287] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 237.468435][ T6287] ? kmsan_get_metadata+0x150/0x160 [ 237.473833][ T6287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.479842][ T6287] ? __pfx___bpf_prog_run512+0x10/0x10 [ 237.485463][ T6287] ? __pfx___bpf_prog_run512+0x10/0x10 [ 237.491081][ T6287] bpf_test_run+0x496/0xe00 [ 237.495734][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.501040][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.506391][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.511703][ T6287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.517728][ T6287] ? bpf_test_run+0x2f7/0xe00 [ 237.522577][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.527893][ T6287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.533938][ T6287] bpf_prog_test_run_skb+0x2377/0x3200 [ 237.539560][ T6287] ? kmsan_get_metadata+0xfb/0x160 [ 237.544899][ T6287] ? __rcu_read_unlock+0x6d/0xd0 [ 237.550056][ T6287] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 237.556031][ T6287] bpf_prog_test_run+0x5c2/0xa40 [ 237.561260][ T6287] __sys_bpf+0x873/0xeb0 [ 237.565691][ T6287] __ia32_sys_bpf+0xa4/0xf0 [ 237.570430][ T6287] ia32_sys_call+0xa53/0x4340 [ 237.575254][ T6287] __do_fast_syscall_32+0x155/0x310 [ 237.580636][ T6287] do_fast_syscall_32+0x38/0x80 [ 237.585648][ T6287] do_SYSENTER_32+0x1f/0x30 [ 237.590305][ T6287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.596825][ T6287] RIP: 0023:0xf7f45539 [ 237.601010][ T6287] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 237.620787][ T6287] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 237.629466][ T6287] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 237.637574][ T6287] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.645657][ T6287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.653738][ T6287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 237.661831][ T6287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.669950][ T6287] [ 237.673492][ T6287] Kernel Offset: disabled [ 237.678029][ T6287] Rebooting in 86400 seconds..