last executing test programs: 17.534298101s ago: executing program 3 (id=91): open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 16.408626226s ago: executing program 3 (id=94): socket$kcm(0xa, 0x2, 0x73) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7bedcb5d07081196f3754fe486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b6861586400000000000000010000000029"], 0x66) 16.125621734s ago: executing program 2 (id=95): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000063"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005"], 0xfe33) 15.306236826s ago: executing program 1 (id=96): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/48], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x61}, {0x20, 0x0, 0xff}, {0x87}]}) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80108907, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 15.087415702s ago: executing program 2 (id=98): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 14.356291895s ago: executing program 2 (id=100): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r4, &(0x7f0000000680)=""/4096, 0x1000) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffed5) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x20}}], 0x1, 0x0) socket$inet(0x2, 0x800, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 14.013526523s ago: executing program 0 (id=101): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 13.492155235s ago: executing program 1 (id=102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x5}, [@TCA_NETEM_RATE={0x14, 0x6, {0xd0, 0x18000, 0x80000001, 0x4}}]}}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff1, 0xb}, {0x5, 0x7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x10) 12.669045047s ago: executing program 3 (id=103): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000000)={0x7b, 0xbd5, 0x1, {0x2, @pix_mp={0xe5, 0xd7a0, 0x32314247, 0x8, 0xa, [{0x2, 0x2}, {0x3, 0x6}, {0x1, 0x2}, {0x3, 0xa88}, {0xae, 0x1}, {0xe, 0x200}, {0x3ff, 0x5ecd}, {0x7fffffff, 0x6}], 0x4, 0x2a, 0x8}}, 0x400}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 12.464889247s ago: executing program 0 (id=105): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000006c0)=[{&(0x7f00000000c0)="f3", 0x1}], 0x1, 0x13, 0x0) 11.167038198s ago: executing program 0 (id=106): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x1, 0x0, &(0x7f0000048000), 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x6, 0x180, 0x400000004, 0xffffffffffffffff, 0xf5, 0x2, 0xfffffffffffffd7e, 0x45, 0x0, 0x728, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f18", 0x85}) ptrace$setregset(0x4205, r5, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @empty}}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0xe) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x11) 11.12039693s ago: executing program 1 (id=107): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000b00)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 8.911985926s ago: executing program 4 (id=110): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 8.572632968s ago: executing program 3 (id=111): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r0, 0x0, 0x0, 0x48850) 7.949309939s ago: executing program 4 (id=112): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/48], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x61}, {0x20, 0x0, 0xff}, {0x87}]}) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80108907, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 7.524635528s ago: executing program 3 (id=113): socket$kcm(0xa, 0x2, 0x73) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7bedcb5d07081196f3754fe486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b6861586400000000000000010000000029"], 0x66) 7.160021479s ago: executing program 1 (id=114): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.205174111s ago: executing program 4 (id=115): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e7832f00", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.680067758s ago: executing program 0 (id=116): syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 5.451448983s ago: executing program 4 (id=117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x5}, [@TCA_NETEM_RATE={0x14, 0x6, {0xd0, 0x18000, 0x80000001, 0x4}}]}}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff1, 0xb}, {0x5, 0x7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x10) 5.196843524s ago: executing program 3 (id=118): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002100010000000000000000000a0000010000080110000000140003006d616376746170300000000000"], 0x30}}, 0x40) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3401000010000100000000000000000000000000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00020000000000480003006465666c6174650000000000000000000000000000000000120000000000000000000000000a00"/236], 0x134}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8040) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1a, 0x2020}, 0x20) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket(0x10, 0x803, 0x0) write(r4, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000fdffffffffffffff00000000000000000000000000000000000000000000000200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000008700", @ANYRES32=0x0, @ANYRESDEC=r5, @ANYBLOB="0000000000000000000000000000000000000000000000130000e300000000000000000000000000ffff087f000000000000000000000000fbffffffffffffff0000000000000000"], 0xb8}}, 0x2c000010) unshare(0x6a040000) 4.431814349s ago: executing program 4 (id=119): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="04000d"], 0x24}, 0x1, 0x5502000000000000}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x12}) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4000800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d00"], 0x38}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000140)={0x4, 0x8, 0x5, 0x2}, 0x8) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080)=0x2, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.374936262s ago: executing program 2 (id=120): ftruncate(0xffffffffffffffff, 0x1) fchdir(0xffffffffffffffff) creat(&(0x7f00000020c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x11) 3.237331297s ago: executing program 2 (id=121): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.995168935s ago: executing program 1 (id=122): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) 2.277309213s ago: executing program 0 (id=123): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r0, 0x0, 0x0, 0x48850) 2.18324847s ago: executing program 1 (id=124): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000b00)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.417568558s ago: executing program 0 (id=125): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002100010000000000000000000a0000010000080110000000140003006d616376746170300000000000000000"], 0x30}}, 0x40) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3401000010000100000000000000000000000000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00020000000000480003006465666c6174650000000000000000000000000000000000120000000000000000000000000a00"/236], 0x134}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8040) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1a, 0x2020}, 0x20) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket(0x10, 0x803, 0x0) write(r4, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000fdffffffffffffff0000000000000000000000000000000000000000000000020000000000000000fcffffff0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRESDEC=r5, @ANYBLOB="0000000000000000000000000000000000000000000000130000e300000000000000000000000000ffff087f000000000000000000000000fbffffffffffffff000000000000000000000000000000676129a54ff8fd9300"/105], 0xb8}}, 0x2c000010) 517.600334ms ago: executing program 2 (id=126): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) 0s ago: executing program 4 (id=127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e7832f00", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 191.519317][ T5753] cgroup: Unknown subsys name 'net' [ 191.663833][ T5753] cgroup: Unknown subsys name 'cpuset' [ 191.679748][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 198.755112][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 203.739177][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.749133][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.759482][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.774171][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.797640][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.817364][ T5072] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.826621][ T5072] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.836727][ T5072] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.848521][ T5072] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.864150][ T5072] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.877207][ T5072] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.906056][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.914336][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.917533][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.924044][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.938875][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.938927][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.955635][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.979434][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.003471][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.009958][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.023725][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.035820][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.045541][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.057285][ T5072] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.184529][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.191292][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.912168][ T5775] Bluetooth: hci0: command tx timeout [ 205.969299][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 206.072092][ T5790] Bluetooth: hci3: command tx timeout [ 206.077995][ T5790] Bluetooth: hci4: command tx timeout [ 206.087262][ T5775] Bluetooth: hci1: command tx timeout [ 206.154567][ T5775] Bluetooth: hci2: command tx timeout [ 206.201282][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 206.391283][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 206.414033][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 206.433990][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 207.090665][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.122704][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.150186][ T5777] bridge_slave_0: entered allmulticast mode [ 207.179818][ T5777] bridge_slave_0: entered promiscuous mode [ 207.214846][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.226084][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.235534][ T5777] bridge_slave_1: entered allmulticast mode [ 207.247960][ T5777] bridge_slave_1: entered promiscuous mode [ 207.578135][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.777891][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.816401][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.824548][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.832788][ T5771] bridge_slave_0: entered allmulticast mode [ 207.841299][ T5771] bridge_slave_0: entered promiscuous mode [ 207.853433][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.860992][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.871443][ T5776] bridge_slave_0: entered allmulticast mode [ 207.880294][ T5776] bridge_slave_0: entered promiscuous mode [ 208.001922][ T5775] Bluetooth: hci0: command tx timeout [ 208.002965][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.015456][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.023228][ T5771] bridge_slave_1: entered allmulticast mode [ 208.032112][ T5771] bridge_slave_1: entered promiscuous mode [ 208.042015][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.049973][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.057746][ T5776] bridge_slave_1: entered allmulticast mode [ 208.066821][ T5776] bridge_slave_1: entered promiscuous mode [ 208.110716][ T5777] team0: Port device team_slave_0 added [ 208.117114][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.125220][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.133102][ T5774] bridge_slave_0: entered allmulticast mode [ 208.142384][ T5774] bridge_slave_0: entered promiscuous mode [ 208.152199][ T5790] Bluetooth: hci4: command tx timeout [ 208.157870][ T49] Bluetooth: hci3: command tx timeout [ 208.164576][ T5775] Bluetooth: hci1: command tx timeout [ 208.232477][ T5775] Bluetooth: hci2: command tx timeout [ 208.258498][ T5777] team0: Port device team_slave_1 added [ 208.264882][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.273146][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.280666][ T5774] bridge_slave_1: entered allmulticast mode [ 208.289835][ T5774] bridge_slave_1: entered promiscuous mode [ 208.299973][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.307550][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.315401][ T5772] bridge_slave_0: entered allmulticast mode [ 208.324298][ T5772] bridge_slave_0: entered promiscuous mode [ 208.374548][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.442306][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.450136][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.458167][ T5772] bridge_slave_1: entered allmulticast mode [ 208.467141][ T5772] bridge_slave_1: entered promiscuous mode [ 208.487031][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.505839][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.640292][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.682490][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.689726][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.717307][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.746240][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.835347][ T5776] team0: Port device team_slave_0 added [ 208.844440][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.851949][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.878279][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.898554][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.917972][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.963280][ T5776] team0: Port device team_slave_1 added [ 209.022756][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.040930][ T5771] team0: Port device team_slave_0 added [ 209.055888][ T5771] team0: Port device team_slave_1 added [ 209.214240][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.221375][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.248264][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.270947][ T5774] team0: Port device team_slave_0 added [ 209.369411][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.376806][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.403559][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.423228][ T5774] team0: Port device team_slave_1 added [ 209.437230][ T5772] team0: Port device team_slave_0 added [ 209.446023][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.453480][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.480179][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.577496][ T5772] team0: Port device team_slave_1 added [ 209.586157][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.594086][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.620541][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.648488][ T5777] hsr_slave_0: entered promiscuous mode [ 209.657448][ T5777] hsr_slave_1: entered promiscuous mode [ 209.834542][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.843386][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.870064][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.982130][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.989284][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.016323][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.030916][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.038462][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.065430][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.081867][ T5775] Bluetooth: hci0: command tx timeout [ 210.084114][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.094825][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.121486][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.178744][ T5776] hsr_slave_0: entered promiscuous mode [ 210.188170][ T5776] hsr_slave_1: entered promiscuous mode [ 210.196904][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 210.203148][ T5776] Cannot create hsr debugfs directory [ 210.232174][ T49] Bluetooth: hci3: command tx timeout [ 210.238396][ T5790] Bluetooth: hci4: command tx timeout [ 210.244381][ T5775] Bluetooth: hci1: command tx timeout [ 210.313575][ T5790] Bluetooth: hci2: command tx timeout [ 210.448557][ T5771] hsr_slave_0: entered promiscuous mode [ 210.457799][ T5771] hsr_slave_1: entered promiscuous mode [ 210.466360][ T5771] debugfs: 'hsr0' already exists in 'hsr' [ 210.472855][ T5771] Cannot create hsr debugfs directory [ 210.654382][ T5772] hsr_slave_0: entered promiscuous mode [ 210.665305][ T5772] hsr_slave_1: entered promiscuous mode [ 210.674818][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 210.680733][ T5772] Cannot create hsr debugfs directory [ 210.752519][ T5774] hsr_slave_0: entered promiscuous mode [ 210.763243][ T5774] hsr_slave_1: entered promiscuous mode [ 210.772261][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 210.778248][ T5774] Cannot create hsr debugfs directory [ 212.050714][ T5777] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.074755][ T5777] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.124529][ T5777] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.152770][ T5790] Bluetooth: hci0: command tx timeout [ 212.182264][ T5777] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.312445][ T5790] Bluetooth: hci4: command tx timeout [ 212.317066][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.318256][ T5790] Bluetooth: hci1: command tx timeout [ 212.331097][ T5775] Bluetooth: hci3: command tx timeout [ 212.401926][ T5775] Bluetooth: hci2: command tx timeout [ 212.410333][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.459161][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.532761][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.643313][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.699493][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.732745][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.788158][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.092588][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.119639][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.163977][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.229932][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.515282][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.584623][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.609981][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.668916][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.982777][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.171175][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.278754][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.286533][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.341357][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.382436][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.404946][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.412534][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.621139][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.653320][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.750845][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.758520][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.816998][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.824932][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.891484][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.899121][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.927296][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.981336][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.010997][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.018448][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.378190][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.449969][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.617687][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.625367][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.718388][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.841624][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.849086][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.885121][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.892849][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.045046][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.052795][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.400050][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.531232][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.634706][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.296928][ T5771] veth0_vlan: entered promiscuous mode [ 218.445665][ T5771] veth1_vlan: entered promiscuous mode [ 218.518163][ T5776] veth0_vlan: entered promiscuous mode [ 218.621367][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.697209][ T5776] veth1_vlan: entered promiscuous mode [ 218.790240][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.970140][ T5777] veth0_vlan: entered promiscuous mode [ 218.999309][ T5771] veth0_macvtap: entered promiscuous mode [ 219.044901][ T5771] veth1_macvtap: entered promiscuous mode [ 219.107288][ T5777] veth1_vlan: entered promiscuous mode [ 219.269811][ T5776] veth0_macvtap: entered promiscuous mode [ 219.309647][ T5776] veth1_macvtap: entered promiscuous mode [ 219.340852][ T5772] veth0_vlan: entered promiscuous mode [ 219.438351][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.494720][ T5774] veth0_vlan: entered promiscuous mode [ 219.528581][ T5772] veth1_vlan: entered promiscuous mode [ 219.554323][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.683652][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.691268][ T1083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.702364][ T1083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.711360][ T1083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.749433][ T5774] veth1_vlan: entered promiscuous mode [ 219.763639][ T1083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.809391][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.853771][ T5777] veth0_macvtap: entered promiscuous mode [ 219.949086][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.989269][ T5777] veth1_macvtap: entered promiscuous mode [ 220.017099][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.029806][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.061731][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.177347][ T5772] veth0_macvtap: entered promiscuous mode [ 220.307434][ T5772] veth1_macvtap: entered promiscuous mode [ 220.359050][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.447097][ T5774] veth0_macvtap: entered promiscuous mode [ 220.509292][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.578768][ T5774] veth1_macvtap: entered promiscuous mode [ 220.631150][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.787398][ T170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.816857][ T170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.864634][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.892859][ T170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.918335][ T170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.028497][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.102678][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.130213][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.188769][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.200021][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.272372][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.402424][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.445781][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.475875][ T376] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.539697][ T376] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.655757][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.691754][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.099297][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.138068][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.347100][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.391803][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.715519][ T5771] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 227.821973][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.830259][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.770852][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.821960][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.852631][ T5961] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 229.083085][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.091141][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.340145][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.355580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 229.458155][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.924614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 229.994625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 230.559351][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.600682][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.623719][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.670106][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.260493][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.282831][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 231.324183][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.515304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 232.453464][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 232.505737][ T5985] fuse: Bad value for 'fd' [ 233.094429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 233.378526][ T5987] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 234.033785][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 234.629550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 234.650079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 235.958765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 236.218289][ T6009] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.233528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 236.243304][ T5991] bridge_slave_1: left allmulticast mode [ 236.347576][ T5991] bridge_slave_1: left promiscuous mode [ 236.435146][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.540157][ T5991] bridge_slave_0: left allmulticast mode [ 236.575350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 236.646050][ T5991] bridge_slave_0: left promiscuous mode [ 236.703174][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.880766][ T6014] Zero length message leads to an empty skb [ 239.095647][ T6023] input: syz0 as /devices/virtual/input/input5 [ 245.742903][ T6040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'. [ 251.062753][ T6063] syzkaller0: entered promiscuous mode [ 251.092291][ T6063] syzkaller0: entered allmulticast mode [ 252.757337][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 252.971874][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 253.026939][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.043233][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.077258][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.112099][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 253.136333][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.179527][ T9] usb 1-1: config 0 descriptor?? [ 253.869864][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 254.161731][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input6 [ 254.275258][ T9] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 254.398801][ T9] usb 1-1: USB disconnect, device number 2 [ 254.906352][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 255.653714][ T6091] fido_id[6091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 259.023213][ T6107] process 'syz.0.37' launched './file0' with NULL argv: empty string added [ 259.322063][ T29] audit: type=1326 audit(1772993762.867:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 259.437518][ T29] audit: type=1326 audit(1772993762.877:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 259.562177][ T29] audit: type=1326 audit(1772993762.877:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 259.717137][ T29] audit: type=1326 audit(1772993762.887:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 259.872097][ T5830] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 259.892580][ T29] audit: type=1326 audit(1772993762.897:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 260.097947][ T29] audit: type=1326 audit(1772993762.907:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 260.252404][ T29] audit: type=1326 audit(1772993762.967:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 260.441919][ T29] audit: type=1326 audit(1772993762.967:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 260.565521][ T29] audit: type=1326 audit(1772993763.167:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 260.588994][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 260.603520][ T29] audit: type=1326 audit(1772993763.167:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 260.717207][ T5830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.746170][ T5830] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 260.782687][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.857063][ T5830] usb 5-1: config 0 descriptor?? [ 261.066936][ T5830] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 263.971928][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 264.102991][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'. [ 264.162387][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 264.212129][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.282374][ T9] usb 3-1: config 0 has no interface number 0 [ 264.288738][ T9] usb 3-1: too many endpoints for config 0 interface 1 altsetting 9: 49, using maximum allowed: 30 [ 264.377799][ T9] usb 3-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 264.444414][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 264.507516][ T9] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 264.522509][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.585237][ T9] usb 3-1: Product: syz [ 264.604318][ T9] usb 3-1: Manufacturer: syz [ 264.623826][ T9] usb 3-1: SerialNumber: syz [ 264.720235][ T9] usb 3-1: config 0 descriptor?? [ 265.074652][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 265.621999][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.629176][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.008285][ T9] gspca_spca1528: reg_w err -71 [ 266.022102][ T9] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 266.094723][ T9] usb 3-1: USB disconnect, device number 2 [ 267.492189][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 267.607061][ T6150] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.54'. [ 267.741957][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 267.776589][ T9] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 267.820944][ T9] usb 4-1: config 0 has no interface number 0 [ 267.891954][ T9] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 267.979944][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 268.031996][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.063169][ T9] usb 4-1: Product: syz [ 268.067655][ T9] usb 4-1: Manufacturer: syz [ 268.116849][ T9] usb 4-1: SerialNumber: syz [ 268.142732][ T9] usb 4-1: config 0 descriptor?? [ 268.155121][ T6148] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 268.574370][ T6148] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 270.436606][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 270.506630][ T9] asix 4-1:0.188: probe with driver asix failed with error -71 [ 270.561931][ T9] usb 4-1: USB disconnect, device number 2 [ 271.853346][ T9] usb 5-1: USB disconnect, device number 2 [ 273.031981][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 273.242005][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 273.297333][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.330495][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.892789][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.924506][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.992129][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.012805][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.314620][ T9] usb 5-1: GET_CAPABILITIES returned 2f [ 274.335153][ T9] usbtmc 5-1:16.0: can't read capabilities [ 275.153633][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.426492][ T6211] lo: entered allmulticast mode [ 275.988201][ T5830] usb 5-1: USB disconnect, device number 3 [ 276.362090][ T40] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 276.505487][ T40] usb 4-1: device descriptor read/64, error -71 [ 276.836195][ T40] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 277.005583][ T40] usb 4-1: device descriptor read/64, error -71 [ 277.162738][ T40] usb usb4-port1: attempt power cycle [ 277.579826][ T40] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 277.606996][ T40] usb 4-1: device descriptor read/8, error -71 [ 277.882873][ T40] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 277.953182][ T40] usb 4-1: device descriptor read/8, error -71 [ 278.096732][ T40] usb usb4-port1: unable to enumerate USB device [ 279.389629][ T6238] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.82'. [ 281.761910][ T5830] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 281.838659][ T6248] syzkaller0: entered promiscuous mode [ 281.844637][ T6248] syzkaller0: entered allmulticast mode [ 281.972908][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 282.052815][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 282.082171][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 282.150083][ T5830] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 282.182043][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.190344][ T5830] usb 1-1: Product: syz [ 282.236616][ T5830] usb 1-1: Manufacturer: syz [ 282.262082][ T5830] usb 1-1: SerialNumber: syz [ 282.290168][ T5830] usb 1-1: config 0 descriptor?? [ 282.393771][ T5830] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 282.434738][ T5830] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 283.054119][ T5830] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 283.088496][ T5830] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 283.135235][ T5830] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 283.145637][ T5830] em28xx 1-1:0.0: No AC97 audio processor [ 284.300243][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 284.462615][ T9] usb 5-1: device descriptor read/64, error -71 [ 284.535474][ T6283] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.95'. [ 284.748053][ T5830] usb 1-1: USB disconnect, device number 3 [ 284.761800][ T5830] em28xx 1-1:0.0: Disconnecting em28xx [ 284.775713][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 284.854234][ T5830] em28xx 1-1:0.0: Freeing device [ 285.013273][ T9] usb 5-1: device descriptor read/64, error -71 [ 285.126681][ T9] usb usb5-port1: attempt power cycle [ 285.543283][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 285.598551][ T9] usb 5-1: device descriptor read/8, error -71 [ 285.858943][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 285.909316][ T9] usb 5-1: device descriptor read/8, error -71 [ 286.047862][ T9] usb usb5-port1: unable to enumerate USB device [ 286.435936][ T6296] block device autoloading is deprecated and will be removed. [ 286.890743][ T6296] netlink: 'syz.2.100': attribute type 4 has an invalid length. [ 286.994375][ T6303] netlink: 'syz.2.100': attribute type 4 has an invalid length. [ 287.960667][ T6305] syzkaller0: entered promiscuous mode [ 288.025561][ T6305] syzkaller0: entered allmulticast mode [ 289.872201][ T5830] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 289.936195][ T6325] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.108'. [ 290.060800][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 290.089376][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 290.152699][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 290.207251][ T5830] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 290.266319][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.299479][ T5830] usb 2-1: Product: syz [ 290.342046][ T5830] usb 2-1: Manufacturer: syz [ 290.358557][ T5830] usb 2-1: SerialNumber: syz [ 290.405471][ T5830] usb 2-1: config 0 descriptor?? [ 290.499482][ T5830] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 290.568316][ T5830] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 291.084255][ T5830] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 291.127753][ T5830] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 291.382121][ T5830] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 291.389766][ T5830] em28xx 2-1:0.0: No AC97 audio processor [ 292.876999][ T40] usb 2-1: USB disconnect, device number 2 [ 292.903238][ T40] em28xx 2-1:0.0: Disconnecting em28xx [ 292.970148][ T40] em28xx 2-1:0.0: Freeing device [ 293.617274][ T40] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 293.801284][ T40] usb 2-1: device descriptor read/64, error -71 [ 294.067399][ T40] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 294.249481][ T40] usb 2-1: device descriptor read/64, error -71 [ 294.423300][ T40] usb usb2-port1: attempt power cycle [ 294.824387][ T40] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 294.922283][ T40] usb 2-1: device descriptor read/8, error -71 [ 295.194992][ T40] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 295.239947][ T40] usb 2-1: device descriptor read/8, error -71 [ 295.281259][ T6348] syzkaller0: entered promiscuous mode [ 295.297509][ T6348] syzkaller0: entered allmulticast mode [ 295.312220][ T5830] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 295.377315][ T40] usb usb2-port1: unable to enumerate USB device [ 295.501876][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 295.550684][ T5830] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.603928][ T5830] usb 1-1: config 0 has no interface number 0 [ 295.610388][ T5830] usb 1-1: too many endpoints for config 0 interface 1 altsetting 9: 49, using maximum allowed: 30 [ 295.674305][ T5830] usb 1-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 295.727512][ T5830] usb 1-1: config 0 interface 1 has no altsetting 0 [ 295.795773][ T5830] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 295.844194][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.881890][ T5830] usb 1-1: Product: syz [ 295.903480][ T5830] usb 1-1: Manufacturer: syz [ 295.922511][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 295.932297][ T5830] usb 1-1: SerialNumber: syz [ 295.983715][ T5830] usb 1-1: config 0 descriptor?? [ 296.282362][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 296.348960][ T5830] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 296.384064][ T6358] netlink: 'syz.4.119': attribute type 13 has an invalid length. [ 296.706126][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 297.022825][ T5830] gspca_spca1528: reg_w err -71 [ 297.058960][ T5830] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 297.118670][ T5830] usb 1-1: USB disconnect, device number 4 [ 297.712744][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 297.925132][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 297.967889][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 297.998373][ T9] usb 3-1: config 0 has no interface number 0 [ 298.062566][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 298.139893][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 298.190830][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.261066][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.310429][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 298.366914][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.472850][ T9] usb 3-1: config 0 descriptor?? [ 298.574860][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 298.663084][ T40] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 298.744601][ T5830] usb 3-1: USB disconnect, device number 3 [ 298.827194][ T5830] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 298.854976][ T40] usb 2-1: Using ep0 maxpacket: 16 [ 298.912617][ T40] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 298.960021][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 299.104705][ T40] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 299.134543][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.184947][ T40] usb 2-1: Product: syz [ 299.201982][ T40] usb 2-1: Manufacturer: syz [ 299.218318][ T40] usb 2-1: SerialNumber: syz [ 299.267341][ T40] usb 2-1: config 0 descriptor?? [ 299.396588][ T40] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 299.449505][ T40] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 300.005963][ T40] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 300.034878][ T40] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 300.784798][ T40] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 300.828995][ T40] em28xx 2-1:0.0: No AC97 audio processor [ 301.605948][ T6382] ===================================================== [ 301.613479][ T6382] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 301.620782][ T6382] batadv_get_vid+0x2ce/0x3b0 [ 301.625990][ T6382] batadv_interface_tx+0x2e8/0x1dd0 [ 301.631446][ T6382] dev_hard_start_xmit+0x24e/0xad0 [ 301.637012][ T6382] __dev_queue_xmit+0x3412/0x5980 [ 301.642428][ T6382] __bpf_redirect+0x162e/0x1760 [ 301.647442][ T6382] bpf_clone_redirect+0x4a6/0x6c0 [ 301.652941][ T6382] ___bpf_prog_run+0x12af/0xeb60 [ 301.658177][ T6382] __bpf_prog_run512+0xc5/0x100 [ 301.663354][ T6382] bpf_test_run+0x493/0xdf0 [ 301.668034][ T6382] bpf_prog_test_run_skb+0x22a5/0x3050 [ 301.673908][ T6382] bpf_prog_test_run+0x5bb/0x9f0 [ 301.679043][ T6382] __sys_bpf+0x925/0xee0 [ 301.683735][ T6382] __ia32_sys_bpf+0xa4/0xf0 [ 301.688453][ T6382] ia32_sys_call+0x33e7/0x4360 [ 301.693543][ T6382] __do_fast_syscall_32+0x17f/0x3f0 [ 301.698900][ T6382] do_fast_syscall_32+0x37/0x80 [ 301.704039][ T6382] do_SYSENTER_32+0x1f/0x30 [ 301.708650][ T6382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.715231][ T6382] [ 301.717599][ T6382] Uninit was created at: [ 301.722094][ T6382] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 301.728205][ T6382] pskb_expand_head+0x2ef/0x1fb0 [ 301.733613][ T6382] skb_ensure_writable+0x44e/0x510 [ 301.738859][ T6382] bpf_clone_redirect+0x301/0x6c0 [ 301.744120][ T6382] ___bpf_prog_run+0x12af/0xeb60 [ 301.749249][ T6382] __bpf_prog_run512+0xc5/0x100 [ 301.754306][ T6382] bpf_test_run+0x493/0xdf0 [ 301.759004][ T6382] bpf_prog_test_run_skb+0x22a5/0x3050 [ 301.764939][ T6382] bpf_prog_test_run+0x5bb/0x9f0 [ 301.770098][ T6382] __sys_bpf+0x925/0xee0 [ 301.774993][ T6382] __ia32_sys_bpf+0xa4/0xf0 [ 301.779678][ T6382] ia32_sys_call+0x33e7/0x4360 [ 301.784845][ T6382] __do_fast_syscall_32+0x17f/0x3f0 [ 301.790162][ T6382] do_fast_syscall_32+0x37/0x80 [ 301.795227][ T6382] do_SYSENTER_32+0x1f/0x30 [ 301.799845][ T6382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.806531][ T6382] [ 301.809022][ T6382] CPU: 0 UID: 0 PID: 6382 Comm: syz.4.127 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.820022][ T6382] Tainted: [L]=SOFTLOCKUP [ 301.824546][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.834880][ T6382] ===================================================== [ 301.842087][ T6382] Disabling lock debugging due to kernel taint [ 301.848332][ T6382] Kernel panic - not syncing: kmsan.panic set ... [ 301.854854][ T6382] CPU: 0 UID: 0 PID: 6382 Comm: syz.4.127 Tainted: G B L syzkaller #0 PREEMPT(full) [ 301.865843][ T6382] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 301.871459][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.881746][ T6382] Call Trace: [ 301.885083][ T6382] [ 301.888247][ T6382] __dump_stack+0x26/0x30 [ 301.892703][ T6382] dump_stack_lvl+0x50/0x1c0 [ 301.897418][ T6382] ? dump_stack+0x12/0x25 [ 301.902069][ T6382] dump_stack+0x1e/0x25 [ 301.906415][ T6382] vpanic+0x7b4/0x1430 [ 301.910669][ T6382] panic+0x15d/0x160 [ 301.914729][ T6382] kmsan_report+0x31a/0x320 [ 301.919374][ T6382] ? __msan_warning+0x1b/0x30 [ 301.924188][ T6382] ? batadv_get_vid+0x2ce/0x3b0 [ 301.929258][ T6382] ? batadv_interface_tx+0x2e8/0x1dd0 [ 301.934784][ T6382] ? dev_hard_start_xmit+0x24e/0xad0 [ 301.940212][ T6382] ? __dev_queue_xmit+0x3412/0x5980 [ 301.945566][ T6382] ? __bpf_redirect+0x162e/0x1760 [ 301.950715][ T6382] ? bpf_clone_redirect+0x4a6/0x6c0 [ 301.956069][ T6382] ? ___bpf_prog_run+0x12af/0xeb60 [ 301.961417][ T6382] ? __bpf_prog_run512+0xc5/0x100 [ 301.966697][ T6382] ? bpf_test_run+0x493/0xdf0 [ 301.971518][ T6382] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 301.977334][ T6382] ? bpf_prog_test_run+0x5bb/0x9f0 [ 301.982653][ T6382] ? __sys_bpf+0x925/0xee0 [ 301.987266][ T6382] ? __ia32_sys_bpf+0xa4/0xf0 [ 301.992038][ T6382] ? ia32_sys_call+0x33e7/0x4360 [ 301.997097][ T6382] ? __do_fast_syscall_32+0x17f/0x3f0 [ 302.002861][ T6382] ? do_fast_syscall_32+0x37/0x80 [ 302.008002][ T6382] ? do_SYSENTER_32+0x1f/0x30 [ 302.012891][ T6382] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.019540][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 302.024909][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 302.030892][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 302.036154][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 302.042130][ T6382] ? batadv_interface_tx+0x11/0x1dd0 [ 302.047585][ T6382] ? filter_irq_stacks+0x49/0x190 [ 302.052776][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 302.058131][ T6382] __msan_warning+0x1b/0x30 [ 302.062818][ T6382] batadv_get_vid+0x2ce/0x3b0 [ 302.067672][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 302.073678][ T6382] batadv_interface_tx+0x2e8/0x1dd0 [ 302.079294][ T6382] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 302.085959][ T6382] ? __pfx_batadv_interface_tx+0x10/0x10 [ 302.091757][ T6382] dev_hard_start_xmit+0x24e/0xad0 [ 302.097059][ T6382] __dev_queue_xmit+0x3412/0x5980 [ 302.102263][ T6382] ? skb_release_data+0x107c/0x11b0 [ 302.107696][ T6382] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 302.114283][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 302.119644][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 302.125975][ T6382] ? __dev_queue_xmit+0x27a/0x5980 [ 302.131271][ T6382] ? pskb_expand_head+0x1c0e/0x1fb0 [ 302.136617][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 302.141918][ T6382] __bpf_redirect+0x162e/0x1760 [ 302.146886][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 302.152180][ T6382] bpf_clone_redirect+0x4a6/0x6c0 [ 302.157535][ T6382] ___bpf_prog_run+0x12af/0xeb60 [ 302.162635][ T6382] __bpf_prog_run512+0xc5/0x100 [ 302.167650][ T6382] ? kmsan_internal_poison_memory+0x78/0x90 [ 302.173700][ T6382] ? kmsan_internal_poison_memory+0x4a/0x90 [ 302.179727][ T6382] ? kmsan_slab_alloc+0xdc/0x160 [ 302.184809][ T6382] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 302.190660][ T6382] ? slab_build_skb+0x5c/0x5b0 [ 302.195665][ T6382] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 302.201459][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 302.206807][ T6382] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 302.213294][ T6382] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 302.219729][ T6382] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 302.225818][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 302.231116][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 302.236524][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 302.241810][ T6382] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 302.248283][ T6382] ? kmsan_get_metadata+0x146/0x160 [ 302.253726][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 302.259686][ T6382] ? __pfx___bpf_prog_run512+0x10/0x10 [ 302.265265][ T6382] ? __pfx___bpf_prog_run512+0x10/0x10 [ 302.270876][ T6382] bpf_test_run+0x493/0xdf0 [ 302.275484][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 302.281633][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 302.286968][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 302.293065][ T6382] ? bpf_test_run+0x2f4/0xdf0 [ 302.297962][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 302.303230][ T6382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 302.309291][ T6382] bpf_prog_test_run_skb+0x22a5/0x3050 [ 302.315032][ T6382] ? kmsan_get_metadata+0xf1/0x160 [ 302.320354][ T6382] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 302.326318][ T6382] bpf_prog_test_run+0x5bb/0x9f0 [ 302.331583][ T6382] __sys_bpf+0x925/0xee0 [ 302.335985][ T6382] __ia32_sys_bpf+0xa4/0xf0 [ 302.340598][ T6382] ia32_sys_call+0x33e7/0x4360 [ 302.345513][ T6382] __do_fast_syscall_32+0x17f/0x3f0 [ 302.350876][ T6382] do_fast_syscall_32+0x37/0x80 [ 302.355874][ T6382] do_SYSENTER_32+0x1f/0x30 [ 302.360518][ T6382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.367169][ T6382] RIP: 0023:0xf706ef6c [ 302.371317][ T6382] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 302.391220][ T6382] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 302.399755][ T6382] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 302.407915][ T6382] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 302.416075][ T6382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.424208][ T6382] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 302.432267][ T6382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.440353][ T6382] [ 302.443890][ T6382] Kernel Offset: disabled [ 302.448278][ T6382] Rebooting in 86400 seconds..