last executing test programs: 4.851063813s ago: executing program 0 (id=1302): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004880)={0x44, r1, 0x207, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7adf9655}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x390e5e91}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}}, 0x40800) 4.433944788s ago: executing program 0 (id=1305): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x70bd2c, 0x200000, {0x7a, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xefffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2000}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 4.039135316s ago: executing program 0 (id=1308): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000000)={0x11, {{0x29, 0x0, 0xb000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000000}}}, 0x88) syz_init_net_socket$netrom(0x6, 0x5, 0x0) write(r0, &(0x7f0000000340)="18000000010005", 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.808087697s ago: executing program 2 (id=1311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x14, 0x2, 0x3, 0x201}, 0x14}}, 0x0) 3.583529046s ago: executing program 0 (id=1312): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x0, 0x0, 0x0) 3.26674223s ago: executing program 2 (id=1316): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x10001) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) socket$kcm(0x10, 0x2, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) 3.065124418s ago: executing program 3 (id=1317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$tun(r0, &(0x7f00000006c0)={@val={0x0, 0x8808}, @val={0x1, 0x4, 0x9bf, 0xffff, 0x8, 0xec80}, @ipv4=@tipc={{0x22, 0x4, 0x0, 0xf, 0xbc, 0x65, 0x0, 0x4, 0x6, 0x0, @local, @empty, {[@timestamp={0x44, 0xc, 0xc5, 0x0, 0x8, [0x9, 0xb79]}, @noop, @end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0xd8, 0x1, 0x2, [{@remote, 0x3}, {@empty, 0x1}, {@empty, 0xffff}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x1}, {@multicast2, 0x9}, {@remote, 0x5}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0xe, "7d28459f429100eb55efeb8e"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}, @payload_mcast={{{{{{0x34, 0x0, 0x0, 0x0, 0x0, 0xb, 0x3, 0x2, 0x3ff, 0x0, 0x1, 0x8, 0x3, 0x1, 0x4, 0x2, 0x0, 0x4e20, 0x4e20}, 0x0, 0x2}, 0x2, 0x2}, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0xca) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x3, 0x4) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4], 0x4c}}, 0x0) 2.878132678s ago: executing program 1 (id=1318): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x70bd2c, 0x200000, {0x7a, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xefffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2000}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 2.86972703s ago: executing program 4 (id=1319): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000000050000000100010009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) 2.472098283s ago: executing program 1 (id=1320): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x115}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab4", 0x15}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048f", 0x4b}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="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", 0x146}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcb", 0x8c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f8178170", 0xdd}, {&(0x7f0000000040)="7542473782798be019c27e", 0xb}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0", 0x23}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.396422939s ago: executing program 4 (id=1321): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f294"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="1100"], 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xfde1, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRES64=r1], 0xc4}}, 0x20054890) 2.310622019s ago: executing program 3 (id=1322): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) poll(&(0x7f0000000000), 0x0, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x1800, 0x100}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0}, {0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0xdac4, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}]}, 0x24}}, 0x180) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x21, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.837603743s ago: executing program 1 (id=1323): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000000)={0x11, {{0x29, 0x0, 0xb000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000000}}}, 0x88) syz_init_net_socket$netrom(0x6, 0x5, 0x0) write(r0, &(0x7f0000000340)="18000000010005", 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.821644922s ago: executing program 4 (id=1324): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x44080) 1.698068652s ago: executing program 2 (id=1325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500120001000000050003000200000005000300050000000500030080ff000005000300050000008a55049d4983a6200800020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.560378542s ago: executing program 3 (id=1326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000080) 1.328674294s ago: executing program 1 (id=1327): setreuid(0x0, 0xee01) fanotify_init(0x2, 0x80000) 1.294392994s ago: executing program 4 (id=1328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004880)={0x44, r1, 0x207, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7adf9655}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x390e5e91}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}}, 0x40800) 1.291534321s ago: executing program 2 (id=1329): socket(0x1e, 0x805, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r0], 0x18}, 0x40c0) 1.200699686s ago: executing program 3 (id=1330): bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.155652475s ago: executing program 0 (id=1331): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000000050000000100010009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) 929.803596ms ago: executing program 1 (id=1332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$tun(r0, &(0x7f00000006c0)={@val={0x0, 0x8808}, @val={0x1, 0x4, 0x9bf, 0xffff, 0x8, 0xec80}, @ipv4=@tipc={{0x22, 0x4, 0x0, 0xf, 0xbc, 0x65, 0x0, 0x4, 0x6, 0x0, @local, @empty, {[@timestamp={0x44, 0xc, 0xc5, 0x0, 0x8, [0x9, 0xb79]}, @noop, @end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0xd8, 0x1, 0x2, [{@remote, 0x3}, {@empty, 0x1}, {@empty, 0xffff}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x1}, {@multicast2, 0x9}, {@remote, 0x5}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0xe, "7d28459f429100eb55efeb8e"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}, @payload_mcast={{{{{{0x34, 0x0, 0x0, 0x0, 0x0, 0xb, 0x3, 0x2, 0x3ff, 0x0, 0x1, 0x8, 0x3, 0x1, 0x4, 0x2, 0x0, 0x4e20, 0x4e20}, 0x0, 0x2}, 0x2, 0x2}, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0xca) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x3, 0x4) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4], 0x4c}}, 0x0) 894.20133ms ago: executing program 2 (id=1333): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x115}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab4", 0x15}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048f", 0x4b}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="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", 0x146}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcb", 0x8c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f8178170", 0xdd}, {&(0x7f0000000040)="7542473782798be019c27e", 0xb}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0", 0x23}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 745.422353ms ago: executing program 4 (id=1334): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fb"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="1100"], 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xfde1, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRES64=r1], 0xc4}}, 0x20054890) 690.094161ms ago: executing program 0 (id=1335): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x3c0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10, 0x81, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x1}) 682.954554ms ago: executing program 3 (id=1336): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) poll(&(0x7f0000000000), 0x0, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x1800, 0x100}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0}, {0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0xdac4, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}]}, 0x24}}, 0x180) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x21, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 278.580103ms ago: executing program 4 (id=1337): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000000)={0x11, {{0x29, 0x0, 0xb000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000000}}}, 0x88) syz_init_net_socket$netrom(0x6, 0x5, 0x0) write(r0, &(0x7f0000000340)="18000000010005", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) 148.488749ms ago: executing program 1 (id=1338): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x40) 112.800357ms ago: executing program 2 (id=1339): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf251b00000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x8000) 0s ago: executing program 3 (id=1340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. [ 153.397380][ T5758] cgroup: Unknown subsys name 'net' [ 153.529503][ T5758] cgroup: Unknown subsys name 'cpuset' [ 153.544035][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 158.748923][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 162.822566][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.852049][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.862007][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.881881][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.903516][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.947131][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.972012][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.980768][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.993007][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.003290][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.047598][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.062642][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.072105][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.089067][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.099890][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.130794][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.145120][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.155094][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.217743][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.228614][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.243138][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.252540][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.265631][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.307583][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.325689][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.321602][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 164.653975][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 165.013149][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 165.013640][ T5786] Bluetooth: hci0: command tx timeout [ 165.094361][ T5786] Bluetooth: hci1: command tx timeout [ 165.149246][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 165.171215][ T5786] Bluetooth: hci2: command tx timeout [ 165.189560][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.197445][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.206187][ T5776] bridge_slave_0: entered allmulticast mode [ 165.215075][ T5776] bridge_slave_0: entered promiscuous mode [ 165.268854][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 165.312167][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.319637][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.329423][ T5776] bridge_slave_1: entered allmulticast mode [ 165.335763][ T5786] Bluetooth: hci3: command tx timeout [ 165.340055][ T5776] bridge_slave_1: entered promiscuous mode [ 165.411483][ T5786] Bluetooth: hci4: command tx timeout [ 165.694163][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.713911][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.722564][ T5782] bridge_slave_0: entered allmulticast mode [ 165.738719][ T5782] bridge_slave_0: entered promiscuous mode [ 165.776190][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.799638][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.813212][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.820720][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.829736][ T5782] bridge_slave_1: entered allmulticast mode [ 165.839155][ T5782] bridge_slave_1: entered promiscuous mode [ 166.014904][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.022705][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.030252][ T5789] bridge_slave_0: entered allmulticast mode [ 166.042117][ T5789] bridge_slave_0: entered promiscuous mode [ 166.089403][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.108530][ T5776] team0: Port device team_slave_0 added [ 166.137773][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.145980][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.153816][ T5789] bridge_slave_1: entered allmulticast mode [ 166.162312][ T5789] bridge_slave_1: entered promiscuous mode [ 166.202561][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.242608][ T5776] team0: Port device team_slave_1 added [ 166.357791][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.365464][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.373668][ T5781] bridge_slave_0: entered allmulticast mode [ 166.382292][ T5781] bridge_slave_0: entered promiscuous mode [ 166.423886][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.431367][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.438694][ T5780] bridge_slave_0: entered allmulticast mode [ 166.447421][ T5780] bridge_slave_0: entered promiscuous mode [ 166.463890][ T5782] team0: Port device team_slave_0 added [ 166.493386][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.500834][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.508661][ T5781] bridge_slave_1: entered allmulticast mode [ 166.517226][ T5781] bridge_slave_1: entered promiscuous mode [ 166.535351][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.545105][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.552617][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.560003][ T5780] bridge_slave_1: entered allmulticast mode [ 166.568488][ T5780] bridge_slave_1: entered promiscuous mode [ 166.584455][ T5782] team0: Port device team_slave_1 added [ 166.592337][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.599355][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.625955][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.747668][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.822050][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.829160][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.856870][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.876460][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.971871][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.014666][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.026405][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.033630][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.060127][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.077106][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.084483][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.111229][ T5786] Bluetooth: hci0: command tx timeout [ 167.111743][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.158099][ T5789] team0: Port device team_slave_0 added [ 167.171877][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.172331][ T5786] Bluetooth: hci1: command tx timeout [ 167.251199][ T5786] Bluetooth: hci2: command tx timeout [ 167.255186][ T5789] team0: Port device team_slave_1 added [ 167.317841][ T5781] team0: Port device team_slave_0 added [ 167.379949][ T5776] hsr_slave_0: entered promiscuous mode [ 167.388635][ T5776] hsr_slave_1: entered promiscuous mode [ 167.409521][ T5781] team0: Port device team_slave_1 added [ 167.415576][ T5786] Bluetooth: hci3: command tx timeout [ 167.472777][ T5780] team0: Port device team_slave_0 added [ 167.494749][ T5786] Bluetooth: hci4: command tx timeout [ 167.529669][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.537172][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.563648][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.582532][ T5780] team0: Port device team_slave_1 added [ 167.648672][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.656469][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.682963][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.696804][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.704296][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.730665][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.797774][ T5782] hsr_slave_0: entered promiscuous mode [ 167.807160][ T5782] hsr_slave_1: entered promiscuous mode [ 167.815155][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 167.821090][ T5782] Cannot create hsr debugfs directory [ 167.829128][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.836626][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.863298][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.980296][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.987564][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.013744][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.030282][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.037532][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.063744][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.219383][ T5789] hsr_slave_0: entered promiscuous mode [ 168.227855][ T5789] hsr_slave_1: entered promiscuous mode [ 168.235777][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 168.241839][ T5789] Cannot create hsr debugfs directory [ 168.459383][ T5781] hsr_slave_0: entered promiscuous mode [ 168.467565][ T5781] hsr_slave_1: entered promiscuous mode [ 168.475346][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 168.481314][ T5781] Cannot create hsr debugfs directory [ 168.524960][ T5780] hsr_slave_0: entered promiscuous mode [ 168.534520][ T5780] hsr_slave_1: entered promiscuous mode [ 168.542449][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 168.548251][ T5780] Cannot create hsr debugfs directory [ 169.173263][ T5786] Bluetooth: hci0: command tx timeout [ 169.251227][ T5786] Bluetooth: hci1: command tx timeout [ 169.331180][ T5786] Bluetooth: hci2: command tx timeout [ 169.366451][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.384781][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.457275][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.491731][ T5786] Bluetooth: hci3: command tx timeout [ 169.510587][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.572798][ T5786] Bluetooth: hci4: command tx timeout [ 169.627622][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.666938][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.688926][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.720770][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.883125][ T5789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.905084][ T5789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.943840][ T5789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.999050][ T5789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.173355][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.225210][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.244494][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.303780][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.577357][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.618938][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 170.639788][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 170.672102][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.712932][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.865163][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.884562][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.945712][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.953051][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.044326][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.051828][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.109599][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.159625][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.208427][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.215865][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.264084][ T5786] Bluetooth: hci0: command tx timeout [ 171.307701][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.315131][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.331687][ T5786] Bluetooth: hci1: command tx timeout [ 171.406290][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.413261][ T5786] Bluetooth: hci2: command tx timeout [ 171.479084][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.486435][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.548915][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.556262][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.571397][ T5786] Bluetooth: hci3: command tx timeout [ 171.596175][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.652026][ T5786] Bluetooth: hci4: command tx timeout [ 171.806047][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.952847][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.960291][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.066521][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.074067][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.164067][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.368926][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.516043][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.523786][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.594717][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.602221][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.629967][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.767794][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.935640][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.285464][ T5776] veth0_vlan: entered promiscuous mode [ 173.326358][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.498875][ T5776] veth1_vlan: entered promiscuous mode [ 173.719513][ T5782] veth0_vlan: entered promiscuous mode [ 173.760328][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.880916][ T5782] veth1_vlan: entered promiscuous mode [ 174.111709][ T5776] veth0_macvtap: entered promiscuous mode [ 174.181921][ T5776] veth1_macvtap: entered promiscuous mode [ 174.395087][ T5782] veth0_macvtap: entered promiscuous mode [ 174.440927][ T5780] veth0_vlan: entered promiscuous mode [ 174.467254][ T5782] veth1_macvtap: entered promiscuous mode [ 174.496436][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.536733][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.577485][ T5780] veth1_vlan: entered promiscuous mode [ 174.592238][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.689368][ T1083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.707065][ T1083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.744351][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.755277][ T1083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.765403][ T1083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.829940][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.014140][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.042419][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.106311][ T5780] veth0_macvtap: entered promiscuous mode [ 175.142810][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.186007][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.289049][ T5789] veth0_vlan: entered promiscuous mode [ 175.325071][ T5780] veth1_macvtap: entered promiscuous mode [ 175.540224][ T5789] veth1_vlan: entered promiscuous mode [ 175.556481][ T5781] veth0_vlan: entered promiscuous mode [ 175.610221][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.676913][ T5781] veth1_vlan: entered promiscuous mode [ 175.718826][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.838581][ T53] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.881896][ T53] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.931212][ T53] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.980757][ T53] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.026520][ T5789] veth0_macvtap: entered promiscuous mode [ 176.095871][ T5789] veth1_macvtap: entered promiscuous mode [ 176.167203][ T5781] veth0_macvtap: entered promiscuous mode [ 176.228963][ T5781] veth1_macvtap: entered promiscuous mode [ 176.340462][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.477577][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.527546][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.626841][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.670794][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.726082][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.741816][ T34] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.750778][ T34] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.812816][ T1078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.842477][ T1078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.953584][ T1078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.994485][ T1078] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.486687][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.529120][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.836139][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.883705][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.406212][ T5776] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 180.667113][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.685305][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.987534][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.023039][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.366601][ T5952] 9p: Could not find request transport: fd0x0000000000000004 [ 181.915472][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.941702][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.297158][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.328635][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.736187][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.763894][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.897904][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.934082][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.266137][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.301222][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.446033][ T36] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 183.548461][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.591337][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.688416][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.710103][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.742009][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.799015][ T36] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.826561][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.894914][ T5985] Zero length message leads to an empty skb [ 183.906515][ T36] usb 4-1: config 0 descriptor?? [ 184.258355][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 184.301512][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 184.455651][ T36] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 184.642916][ T5978] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 184.744505][ T5911] usb 4-1: USB disconnect, device number 2 [ 185.132669][ T6000] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 185.362990][ T5997] fido_id[5997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 186.181266][ T36] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 186.189122][ T5911] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 186.416829][ T36] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 186.426909][ T5911] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.461492][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.469704][ T36] usb 3-1: Product: syz [ 186.474700][ T5911] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.506358][ T5911] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.515908][ T36] usb 3-1: Manufacturer: syz [ 186.531684][ T36] usb 3-1: SerialNumber: syz [ 186.551187][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.592481][ T6010] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 186.669677][ T5911] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.681394][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 186.709186][ T36] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 186.841859][ T5829] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 186.903469][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.926208][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 187.019261][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 187.073700][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 187.107465][ T5834] usb 3-1: USB disconnect, device number 2 [ 187.176485][ T9] usb 1-1: Product: syz [ 187.199382][ T9] usb 1-1: Manufacturer: syz [ 187.220446][ T9] usb 1-1: SerialNumber: syz [ 187.339545][ T9] usb 1-1: config 0 descriptor?? [ 187.378364][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 187.400120][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 187.400120][ T9] [ 187.514518][ T5911] usb 4-1: USB disconnect, device number 3 [ 187.590614][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 187.590614][ T9] [ 187.611356][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 187.713169][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 187.849641][ T9] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 187.909176][ T9] usb 1-1: USB disconnect, device number 2 [ 188.021620][ T5831] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 188.140124][ T5829] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 188.158040][ T5829] ath9k_htc: Failed to initialize the device [ 188.196525][ T5834] usb 3-1: ath9k_htc: USB layer deinitialized [ 188.214864][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 188.252702][ T5831] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 188.300836][ T5831] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 188.327736][ T5831] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.402632][ T5831] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 188.452700][ T5831] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 188.515358][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.541246][ T5831] usb 5-1: Product: syz [ 188.545746][ T5831] usb 5-1: Manufacturer: syz [ 188.571130][ T5831] usb 5-1: SerialNumber: syz [ 188.681251][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 188.725747][ T5831] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input5 [ 188.972456][ T5831] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 188.979031][ T6035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.29'. [ 189.013986][ T5831] (id 0x00) [ 189.038154][ T6035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.29'. [ 189.081389][ T6035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.29'. [ 189.291327][ T5831] rc_core: IR keymap rc-imon-pad not found [ 189.310857][ T5831] Registered IR keymap rc-empty [ 189.336844][ T5831] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 189.365446][ T5831] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 189.419747][ T5831] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 189.442686][ T5831] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input6 [ 189.503873][ T5831] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:2> initialized [ 189.674471][ T5831] usb 5-1: USB disconnect, device number 2 [ 189.719927][ T6040] loop8: detected capacity change from 0 to 8 [ 189.792164][ T6040] Dev loop8: unable to read RDB block 8 [ 189.793971][ T6020] tipc: Started in network mode [ 189.821542][ T6040] loop8: unable to read partition table [ 189.845658][ T6020] tipc: Node identity ac14140f, cluster identity 4711 [ 189.864674][ T6040] loop8: partition table beyond EOD, truncated [ 189.902397][ T6040] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 189.916113][ T6020] tipc: New replicast peer: 255.255.255.255 [ 189.989892][ T6020] tipc: Enabled bearer , priority 10 [ 190.019946][ T6042] netlink: 60 bytes leftover after parsing attributes in process `syz.0.31'. [ 190.050604][ T6043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.31'. [ 190.111793][ T6044] netlink: 60 bytes leftover after parsing attributes in process `syz.0.31'. [ 190.524027][ T6048] netlink: 'syz.2.33': attribute type 29 has an invalid length. [ 190.601831][ T6048] netlink: 'syz.2.33': attribute type 29 has an invalid length. [ 190.675350][ T6049] netlink: 'syz.2.33': attribute type 29 has an invalid length. [ 190.961376][ T6053] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 191.112199][ T5831] tipc: Node number set to 2886997007 [ 191.523780][ T5831] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 191.729266][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 191.775548][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 191.830609][ T5831] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 191.857621][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 191.888088][ T5831] usb 4-1: Product: syz [ 191.895265][ T5831] usb 4-1: Manufacturer: syz [ 191.900277][ T5831] usb 4-1: SerialNumber: syz [ 191.941432][ T5831] usb 4-1: config 0 descriptor?? [ 191.997680][ T5831] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 192.031845][ T6071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.41'. [ 192.065475][ T6071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.41'. [ 192.075602][ T5831] pctv452e: pctv452e_power_ctrl: 1 [ 192.075602][ T5831] [ 192.240678][ T5831] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 192.240678][ T5831] [ 192.262330][ T6073] netlink: 60 bytes leftover after parsing attributes in process `syz.1.41'. [ 192.299320][ T5831] dvb-usb: bulk message failed: -22 (5/0) [ 192.421629][ T5831] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 192.500776][ T5831] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 192.633424][ T5831] usb 4-1: USB disconnect, device number 4 [ 193.189789][ T6082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.46'. [ 193.207090][ T6082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.46'. [ 193.310622][ T6082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.46'. [ 193.541965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 193.893639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 193.897266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 193.972083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 196.842845][ T6094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.50'. [ 196.898723][ T6095] netlink: 60 bytes leftover after parsing attributes in process `syz.0.50'. [ 196.973663][ T6094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.50'. [ 198.213360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 199.241131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 200.693357][ T6118] netlink: 60 bytes leftover after parsing attributes in process `syz.2.59'. [ 200.783454][ T6119] netlink: 60 bytes leftover after parsing attributes in process `syz.2.59'. [ 200.835062][ T6118] netlink: 60 bytes leftover after parsing attributes in process `syz.2.59'. [ 200.914790][ T5831] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 200.964329][ T6121] netlink: 60 bytes leftover after parsing attributes in process `syz.0.60'. [ 201.008416][ T6121] netlink: 60 bytes leftover after parsing attributes in process `syz.0.60'. [ 201.075021][ T6125] netlink: 60 bytes leftover after parsing attributes in process `syz.0.60'. [ 201.139789][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.168608][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 201.223298][ T5831] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 201.241166][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 201.249423][ T5831] usb 4-1: Product: syz [ 201.268886][ T6127] syz.4.62 uses obsolete (PF_INET,SOCK_PACKET) [ 201.289068][ T5831] usb 4-1: Manufacturer: syz [ 201.295542][ T5831] usb 4-1: SerialNumber: syz [ 201.335272][ T5831] usb 4-1: config 0 descriptor?? [ 201.378105][ T5831] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 201.440039][ T5831] pctv452e: pctv452e_power_ctrl: 1 [ 201.440039][ T5831] [ 201.548993][ T6131] netlink: 180 bytes leftover after parsing attributes in process `syz.1.64'. [ 201.608247][ T5831] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 201.608247][ T5831] [ 201.635806][ T5831] dvb-usb: bulk message failed: -22 (5/0) [ 201.688186][ T5831] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 201.760571][ T5831] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 201.817090][ T5831] usb 4-1: USB disconnect, device number 5 [ 201.948295][ T6135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.66'. [ 202.043001][ T6138] netlink: 60 bytes leftover after parsing attributes in process `syz.2.66'. [ 202.071381][ T6135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.66'. [ 204.206906][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.214391][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.773806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 205.680798][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 206.175731][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 206.240337][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 206.777046][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 206.899568][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 206.945768][ T6091] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.057938][ T6091] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.171613][ T6171] syzkaller0: entered promiscuous mode [ 207.600628][ T6091] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.689116][ T6091] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.743100][ T6188] warning: `syz.4.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 209.720900][ T6198] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 210.688630][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 210.781430][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 211.236125][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 211.284012][ T34] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.325355][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 211.367413][ T34] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.415607][ T6206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.571925][ T34] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.679291][ T34] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.035196][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 212.422706][ T6215] netlink: 168 bytes leftover after parsing attributes in process `syz.2.92'. [ 214.362486][ T5831] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 214.421378][ T5834] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 214.566690][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 214.589083][ T5831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 214.603366][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 214.656539][ T5834] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 214.726155][ T5831] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 214.735574][ T5834] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 214.791187][ T5831] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 214.800315][ T5834] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 214.841545][ T5831] usb 3-1: Product: syz [ 214.845917][ T5831] usb 3-1: Manufacturer: syz [ 214.900221][ T5834] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.928270][ T5831] usb 3-1: SerialNumber: syz [ 215.086835][ T5834] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.230127][ T5834] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 215.279890][ T5834] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.309025][ T5831] usb 3-1: palm_os_3_probe - error -32 getting connection information [ 215.351185][ T5834] usb 4-1: config 168 interface 0 has no altsetting 0 [ 215.366625][ T5831] visor 3-1:1.0: probe with driver visor failed with error -32 [ 215.399277][ T5834] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 215.411225][ T5834] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.456832][ T5834] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 215.472490][ T5831] usb 3-1: USB disconnect, device number 3 [ 215.499480][ T5834] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.511878][ T5834] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.532840][ T5834] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 215.544850][ T5834] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.576066][ T5834] usb 4-1: config 168 interface 0 has no altsetting 0 [ 215.629250][ T5834] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 215.643121][ T5834] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.671226][ T5834] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 215.700363][ T5834] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.761333][ T5834] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.798125][ T5834] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 215.849042][ T5834] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.920440][ T6249] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 215.942770][ T5834] usb 4-1: config 168 interface 0 has no altsetting 0 [ 215.975086][ T5834] usb 4-1: string descriptor 0 read error: -22 [ 215.991865][ T5834] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 216.008754][ T6251] netlink: 68 bytes leftover after parsing attributes in process `syz.0.103'. [ 216.021289][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.110670][ T5834] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 216.205368][ T6241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.346275][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.383608][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.436660][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.493176][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.770507][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.832919][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.897335][ T5911] usb 4-1: USB disconnect, device number 6 [ 217.391610][ T5911] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.601299][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 217.643852][ T5911] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 217.691733][ T5911] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 217.737232][ T5911] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 217.793581][ T5911] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.838047][ T5911] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.868081][ T5911] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.991233][ T5911] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 218.075440][ T5911] usb 4-1: config 168 interface 0 has no altsetting 0 [ 219.548440][ T5911] usb 4-1: unable to read config index 1 descriptor/start: -71 [ 219.607187][ T5911] usb 4-1: can't read configurations, error -71 [ 220.871387][ T5911] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 221.061534][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 221.090041][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 221.136976][ T5911] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 221.159468][ T5911] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 221.181262][ T5911] usb 4-1: Product: syz [ 221.200615][ T5911] usb 4-1: Manufacturer: syz [ 221.230775][ T5911] usb 4-1: SerialNumber: syz [ 221.531580][ T5911] usb 4-1: palm_os_3_probe - error -32 getting connection information [ 221.540169][ T5911] visor 4-1:1.0: probe with driver visor failed with error -32 [ 221.610888][ T5911] usb 4-1: USB disconnect, device number 9 [ 222.302397][ T6324] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 225.241182][ T5911] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 225.479838][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 225.498644][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 225.536211][ T5911] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 225.581994][ T5911] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 225.598774][ T5911] usb 3-1: Product: syz [ 225.608934][ T5911] usb 3-1: Manufacturer: syz [ 225.616602][ T5911] usb 3-1: SerialNumber: syz [ 225.925742][ T5911] usb 3-1: palm_os_3_probe - error -32 getting connection information [ 225.987766][ T5911] visor 3-1:1.0: probe with driver visor failed with error -32 [ 226.060650][ T5911] usb 3-1: USB disconnect, device number 4 [ 226.232710][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.242138][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.963303][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.018114][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.051294][ T5911] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 227.236953][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.272018][ T5911] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 227.299007][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 227.317924][ T5911] usb 3-1: Product: syz [ 227.330116][ T5911] usb 3-1: Manufacturer: syz [ 227.345277][ T5911] usb 3-1: SerialNumber: syz [ 227.374100][ T5911] usb 3-1: config 0 descriptor?? [ 227.425216][ T5911] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 227.442728][ T5911] pctv452e: pctv452e_power_ctrl: 1 [ 227.442728][ T5911] [ 227.452974][ T5911] usb 3-1: selecting invalid altsetting 3 [ 227.459955][ T5911] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 227.459955][ T5911] [ 227.477528][ T5911] dvb-usb: bulk message failed: -22 (5/0) [ 227.507217][ T5911] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 227.556179][ T5911] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 227.626673][ T5911] usb 3-1: USB disconnect, device number 5 [ 227.780521][ T6105] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.851445][ T6105] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.893276][ T6105] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.914777][ T6105] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.955051][ T6105] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.000229][ T6105] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.048877][ T6105] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.111207][ T6105] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.491557][ T5911] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 231.690598][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.737679][ T5911] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 231.761440][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 231.769734][ T5911] usb 5-1: Product: syz [ 231.852302][ T5911] usb 5-1: Manufacturer: syz [ 231.857088][ T5911] usb 5-1: SerialNumber: syz [ 231.913181][ T5911] usb 5-1: config 0 descriptor?? [ 231.970630][ T5911] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 231.993799][ T5911] pctv452e: pctv452e_power_ctrl: 1 [ 231.993799][ T5911] [ 232.039028][ T5911] usb 5-1: selecting invalid altsetting 3 [ 232.102005][ T5911] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 232.102005][ T5911] [ 232.184332][ T5911] dvb-usb: bulk message failed: -22 (5/0) [ 232.222107][ T5911] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 232.327682][ T5911] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 232.454749][ T5911] usb 5-1: USB disconnect, device number 3 [ 235.657537][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 236.172725][ T5911] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 236.418809][ T5911] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.531551][ T5911] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 236.593096][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 236.624095][ T5911] usb 2-1: Product: syz [ 236.628451][ T5911] usb 2-1: Manufacturer: syz [ 236.653831][ T5911] usb 2-1: SerialNumber: syz [ 236.688264][ T5911] usb 2-1: config 0 descriptor?? [ 236.816064][ T6487] syzkaller0: entered promiscuous mode [ 236.830108][ T5911] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 236.841801][ T6487] syzkaller0: entered allmulticast mode [ 236.869725][ T5911] pctv452e: pctv452e_power_ctrl: 1 [ 236.869725][ T5911] [ 236.892359][ T5911] usb 2-1: selecting invalid altsetting 3 [ 236.920117][ T5911] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 236.920117][ T5911] [ 236.958527][ T5911] dvb-usb: bulk message failed: -22 (5/0) [ 236.999044][ T5911] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 237.119341][ T5911] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 237.232162][ T5911] usb 2-1: USB disconnect, device number 2 [ 237.523885][ T2002] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 237.732086][ T2002] usb 3-1: Using ep0 maxpacket: 8 [ 237.782973][ T2002] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 237.790575][ T2002] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 237.857251][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 237.921462][ T2002] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.970394][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 238.011400][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 238.130434][ T2002] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 238.193731][ T2002] usb 3-1: config 168 interface 0 has no altsetting 0 [ 238.217802][ T2002] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 238.229457][ T2002] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 238.313151][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 238.351077][ T2002] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.377088][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 238.417485][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 238.498201][ T2002] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 238.595151][ T2002] usb 3-1: config 168 interface 0 has no altsetting 0 [ 238.655849][ T2002] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 238.770536][ T2002] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 238.836302][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 238.874813][ T6510] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 238.912140][ T2002] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.984309][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 238.996871][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 239.011194][ T2002] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 239.159843][ T2002] usb 3-1: config 168 interface 0 has no altsetting 0 [ 239.252075][ T2002] usb 3-1: string descriptor 0 read error: -22 [ 239.274764][ T2002] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 239.322866][ T2002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.518235][ T2002] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 239.695540][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.792837][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.883628][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.942534][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.238418][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.325484][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.419000][ T2002] usb 3-1: USB disconnect, device number 6 [ 240.951228][ T2002] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 241.163280][ T2002] usb 3-1: Using ep0 maxpacket: 8 [ 241.189027][ T2002] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 241.237425][ T2002] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 241.271440][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 241.294330][ T2002] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.310275][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.339456][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.391650][ T2002] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 241.465433][ T2002] usb 3-1: config 168 interface 0 has no altsetting 0 [ 241.478517][ T2002] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 241.501469][ T2002] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 241.567823][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 241.622048][ T2002] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.678658][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.751983][ T2002] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.802909][ T2002] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 241.873968][ T2002] usb 3-1: config 168 interface 0 has no altsetting 0 [ 242.048115][ T2002] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 242.075203][ T2002] usb 3-1: can't read configurations, error -71 [ 242.179850][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 242.206915][ T6536] tipc: Started in network mode [ 242.229723][ T6536] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 242.274812][ T6536] tipc: Enabled bearer , priority 0 [ 243.376007][ T2002] tipc: Node number set to 10005162 [ 253.608785][ T6654] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 253.680669][ T6654] bond1 (unregistering): Released all slaves [ 253.839771][ T2002] IPVS: starting estimator thread 0... [ 253.935618][ T6672] IPVS: using max 240 ests per chain, 12000 per kthread [ 260.332416][ T6718] netlink: 'syz.1.266': attribute type 4 has an invalid length. [ 260.506790][ T6720] netlink: 'syz.1.266': attribute type 4 has an invalid length. [ 264.958654][ T6757] netlink: 'syz.4.276': attribute type 4 has an invalid length. [ 265.010299][ T6758] netlink: 'syz.4.276': attribute type 4 has an invalid length. [ 265.600661][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.611208][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.849836][ T6772] netlink: 'syz.1.281': attribute type 4 has an invalid length. [ 265.941303][ T6772] netlink: 'syz.1.281': attribute type 4 has an invalid length. [ 269.947019][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 270.251154][ T5834] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 271.357277][ T6811] netlink: 'syz.4.296': attribute type 4 has an invalid length. [ 271.451995][ T6812] netlink: 'syz.4.296': attribute type 4 has an invalid length. [ 271.803079][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.297'. [ 271.845342][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.297'. [ 271.890834][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 272.346000][ T5834] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.137435][ T5834] usb 3-1: string descriptor 0 read error: -71 [ 273.198692][ T5834] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 273.291126][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 273.434118][ T5834] usb 3-1: config 0 descriptor?? [ 273.511414][ T5834] usb 3-1: can't set config #0, error -71 [ 273.585797][ T5834] usb 3-1: USB disconnect, device number 9 [ 275.415468][ T6847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.312'. [ 275.507500][ T6847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.312'. [ 275.559798][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 279.670121][ T6877] tipc: Started in network mode [ 279.697385][ T6877] tipc: Node identity b2e47930489b, cluster identity 4711 [ 279.759877][ T6877] tipc: Enabled bearer , priority 0 [ 280.292865][ T6879] syzkaller0: entered promiscuous mode [ 280.321103][ T6879] syzkaller0: entered allmulticast mode [ 280.366084][ T6879] tipc: Resetting bearer [ 280.672956][ T6874] tipc: Resetting bearer [ 281.183138][ T6874] tipc: Disabling bearer [ 281.244018][ T5834] tipc: Node number set to 4202658096 [ 283.765579][ T6934] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 284.755651][ T6900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.808141][ T6987] loop8: detected capacity change from 0 to 8 [ 287.886274][ T6987] Dev loop8: unable to read RDB block 8 [ 287.931434][ T6987] loop8: unable to read partition table [ 287.938064][ T6987] loop8: partition table beyond EOD, truncated [ 287.989613][ T6987] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 288.073390][ T6993] Illegal XDP return value 4294967274 on prog (id 19) dev syz_tun, expect packet loss! [ 288.132629][ T5071] Bluetooth: hci0: command 0x0406 tx timeout [ 288.140330][ T5071] Bluetooth: hci2: command 0x0406 tx timeout [ 288.146745][ T5071] Bluetooth: hci3: command 0x0406 tx timeout [ 288.153501][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 289.424456][ T7005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.362'. [ 289.704633][ T7014] netlink: 'syz.4.364': attribute type 4 has an invalid length. [ 289.776391][ T7016] netlink: 'syz.4.364': attribute type 4 has an invalid length. [ 290.794382][ T7010] xt_hashlimit: size too large, truncated to 1048576 [ 290.878950][ T7010] xt_hashlimit: max too large, truncated to 1048576 [ 291.137058][ T7025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.367'. [ 291.431810][ T7030] netlink: 'syz.3.369': attribute type 2 has an invalid length. [ 291.734047][ T7035] loop8: detected capacity change from 0 to 8 [ 291.791656][ T7035] Dev loop8: unable to read RDB block 8 [ 291.818916][ T7035] loop8: unable to read partition table [ 291.843705][ T7035] loop8: partition table beyond EOD, truncated [ 291.871638][ T7035] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 292.623033][ T7045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.377'. [ 294.235589][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.382'. [ 294.318765][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.382'. [ 295.191224][ T7076] netlink: 'syz.1.384': attribute type 2 has an invalid length. [ 295.449283][ T7083] syzkaller1: entered promiscuous mode [ 295.522415][ T7083] syzkaller1: entered allmulticast mode [ 296.351971][ T7098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.393'. [ 296.683866][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 296.772096][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.397'. [ 296.783662][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.397'. [ 296.850088][ T7108] vlan2: entered allmulticast mode [ 296.962412][ T7108] bridge1: entered allmulticast mode [ 297.367533][ T7120] netlink: 'syz.4.399': attribute type 2 has an invalid length. [ 297.991354][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 300.980403][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 301.006202][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 301.246189][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 301.281669][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 302.503846][ T7154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.971728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 302.973509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 308.514051][ T7311] loop8: detected capacity change from 0 to 7 [ 308.565958][ T7311] Dev loop8: unable to read RDB block 7 [ 308.611451][ T7311] loop8: unable to read partition table [ 308.653594][ T7311] loop8: partition table beyond EOD, truncated [ 308.660005][ T7311] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 309.872689][ T7329] tipc: Started in network mode [ 309.893458][ T7329] tipc: Node identity e65196cca4c9, cluster identity 4711 [ 309.917139][ T7329] tipc: Enabled bearer , priority 0 [ 310.008720][ T7328] tipc: Disabling bearer [ 311.131171][ T2002] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 311.243952][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.488'. [ 311.338898][ T2002] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.363561][ T2002] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 311.384697][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.391990][ T2002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 311.392119][ T2002] usb 5-1: Product: syz [ 311.392207][ T2002] usb 5-1: Manufacturer: syz [ 311.392297][ T2002] usb 5-1: SerialNumber: syz [ 311.416423][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.459098][ T2002] usb 5-1: config 0 descriptor?? [ 311.505516][ T2002] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 311.515279][ T2002] pctv452e: pctv452e_power_ctrl: 1 [ 311.515279][ T2002] [ 311.526162][ T2002] usb 5-1: selecting invalid altsetting 3 [ 311.533401][ T2002] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 311.533401][ T2002] [ 311.560199][ T2002] dvb-usb: bulk message failed: -22 (5/0) [ 311.593894][ T2002] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 311.648223][ T2002] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 311.785833][ T5834] usb 5-1: USB disconnect, device number 4 [ 312.129659][ T7342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.243868][ T7342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.355878][ T76] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.386081][ T76] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.441917][ T7382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.493'. [ 313.508832][ T7382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.493'. [ 313.568650][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 313.621634][ T76] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.652504][ T76] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.596047][ T7390] netlink: 'syz.2.497': attribute type 13 has an invalid length. [ 314.764080][ T7390] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 315.165300][ T7414] netlink: 'syz.4.507': attribute type 2 has an invalid length. [ 316.024705][ T7420] syzkaller0: entered promiscuous mode [ 316.030621][ T7420] syzkaller0: entered allmulticast mode [ 317.261528][ T7442] netlink: 'syz.0.519': attribute type 2 has an invalid length. [ 321.691918][ T7516] Bluetooth: MGMT ver 1.23 [ 322.434208][ T7526] loop8: detected capacity change from 0 to 8 [ 322.477204][ T7526] Dev loop8: unable to read RDB block 8 [ 322.505906][ T7526] loop8: unable to read partition table [ 322.517097][ T7526] loop8: partition table beyond EOD, truncated [ 322.525398][ T7526] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 322.765559][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 322.941412][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 322.965880][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 322.986082][ T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 323.030879][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 323.102426][ T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.138259][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 323.188019][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 323.222549][ T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 323.236986][ T9] usb 3-1: config 168 interface 0 has no altsetting 0 [ 323.262051][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 323.281407][ T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 323.306241][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 323.337634][ T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.374087][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 323.401205][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 323.431445][ T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 323.446618][ T9] usb 3-1: config 168 interface 0 has no altsetting 0 [ 323.466043][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 323.487064][ T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 323.503855][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 323.517146][ T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.530421][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 323.543026][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 323.629787][ T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 323.665934][ T9] usb 3-1: config 168 interface 0 has no altsetting 0 [ 323.692188][ T9] usb 3-1: string descriptor 0 read error: -22 [ 323.698925][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 323.754434][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.840701][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 324.086679][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.120368][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.235425][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.302055][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.536879][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.563766][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.614543][ T2002] usb 3-1: USB disconnect, device number 10 [ 324.910120][ T7562] loop8: detected capacity change from 0 to 8 [ 324.923361][ T7562] Dev loop8: unable to read RDB block 8 [ 324.929709][ T7562] loop8: unable to read partition table [ 324.937680][ T7562] loop8: partition table beyond EOD, truncated [ 324.954973][ T7562] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 325.091189][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 325.261156][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 325.283651][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 325.336336][ T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 325.361406][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 325.426985][ T7566] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 325.431310][ T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 325.450598][ T7566] netlink: 'syz.3.573': attribute type 3 has an invalid length. [ 325.471346][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 325.511358][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 325.575916][ T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 325.606701][ T9] usb 3-1: config 168 interface 0 has no altsetting 0 [ 325.617798][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 325.631195][ T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 325.682221][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 325.697270][ T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 325.761119][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 325.824808][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 325.879002][ T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 325.953933][ T9] usb 3-1: config 168 interface 0 has no altsetting 0 [ 326.040568][ T9] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 326.052264][ T2002] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 326.070517][ T9] usb 3-1: can't read configurations, error -71 [ 326.265906][ T2002] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.278036][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 326.305810][ T2002] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.325947][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 326.350135][ T2002] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 326.380762][ T2002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 326.405340][ T2002] usb 1-1: SerialNumber: syz [ 326.632257][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 326.646484][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 326.736739][ T2002] usb 1-1: 0:2 : does not exist [ 327.035827][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.042776][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.108103][ T2002] usb 1-1: USB disconnect, device number 3 [ 327.370478][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.757070][ T7599] loop8: detected capacity change from 0 to 8 [ 327.807271][ T7599] Dev loop8: unable to read RDB block 8 [ 327.836915][ T7599] loop8: unable to read partition table [ 327.875588][ T7599] loop8: partition table beyond EOD, truncated [ 327.902202][ T7599] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 328.707698][ T7614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'. [ 329.004957][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 329.030427][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 329.514956][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 329.536707][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 330.084645][ T7632] loop8: detected capacity change from 0 to 8 [ 330.127816][ T7632] Dev loop8: unable to read RDB block 8 [ 330.151860][ T7632] loop8: unable to read partition table [ 330.182381][ T7632] loop8: partition table beyond EOD, truncated [ 330.241218][ T7632] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 331.431827][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'. [ 331.647319][ T7663] tipc: Enabling of bearer rejected, failed to enable media [ 331.692456][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 331.711230][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 332.175226][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 332.229780][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 332.635479][ T7683] loop8: detected capacity change from 0 to 8 [ 332.695123][ T7683] Dev loop8: unable to read RDB block 8 [ 332.734486][ T7683] loop8: unable to read partition table [ 332.772546][ T7683] loop8: partition table beyond EOD, truncated [ 332.812059][ T7683] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 333.761280][ T2002] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 333.853425][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 333.955903][ T2002] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.987269][ T2002] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.024384][ T2002] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 334.041215][ T2002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 334.095327][ T2002] usb 2-1: SerialNumber: syz [ 334.388872][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 334.423732][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'. [ 334.447864][ T2002] usb 2-1: 0:2 : does not exist [ 334.843399][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 334.881745][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'. [ 334.963183][ T2002] usb 2-1: USB disconnect, device number 3 [ 335.278233][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.351265][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 335.513012][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 335.565214][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 335.587916][ T9] usb 3-1: config 179 has no interface number 0 [ 335.600608][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 335.652030][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 335.697353][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 335.740521][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 335.781251][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 335.816057][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 335.874704][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.920866][ T7724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 336.858323][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.964280][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.047612][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.117257][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.209044][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.277815][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.392774][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.453690][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.588899][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.694600][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.831479][ T9] usb 3-1: USB disconnect, device number 13 [ 337.838381][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 337.846930][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 338.313033][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 338.332704][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 338.649938][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 338.682700][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 338.816010][ T7767] netlink: 'syz.3.639': attribute type 13 has an invalid length. [ 338.864179][ T7767] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 340.423247][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 340.507997][ T7756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.572085][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 340.600301][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 340.611355][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 340.650436][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 340.673795][ T9] usb 4-1: config 179 has no interface number 0 [ 340.680270][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 340.711253][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 340.751399][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 340.811793][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 340.834867][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 340.896699][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 340.948859][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.018696][ T7801] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.057991][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 341.058527][ T7810] netlink: 'syz.0.656': attribute type 13 has an invalid length. [ 341.131794][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 341.758807][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.803287][ T7810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.830017][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.876155][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.917909][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.044583][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.091342][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.159783][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.271336][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.286173][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.362842][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.458879][ T2002] usb 4-1: USB disconnect, device number 10 [ 342.458899][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 342.459060][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 342.871828][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 342.937112][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 342.994686][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 343.095484][ T7828] team1: entered promiscuous mode [ 343.101374][ T7828] team1: entered allmulticast mode [ 343.120580][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.125299][ T7828] 8021q: adding VLAN 0 to HW filter on device team1 [ 343.141352][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.163859][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 343.204005][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 343.218430][ T9] usb 3-1: SerialNumber: syz [ 343.384725][ T7830] team2: entered promiscuous mode [ 343.392958][ T7830] team2: entered allmulticast mode [ 343.400159][ T7830] 8021q: adding VLAN 0 to HW filter on device team2 [ 343.491964][ T9] usb 3-1: 0:2 : does not exist [ 343.951671][ T9] usb 3-1: USB disconnect, device number 14 [ 344.088342][ T7844] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 344.259048][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.396211][ T7844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.498990][ T7847] ipvlan2: entered promiscuous mode [ 344.534137][ T7847] ipvlan2: entered allmulticast mode [ 344.582188][ T7847] bond1: entered allmulticast mode [ 344.708709][ T7848] bond1: (slave ip6gretap1): making interface the new active one [ 344.717227][ T7848] ip6gretap1: entered allmulticast mode [ 344.727014][ T7848] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 344.744318][ T7852] netlink: 36 bytes leftover after parsing attributes in process `syz.1.672'. [ 344.843245][ T7852] netlink: 36 bytes leftover after parsing attributes in process `syz.1.672'. [ 346.770806][ T7889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.686'. [ 347.234843][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'. [ 347.245404][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'. [ 347.262717][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.684'. [ 347.316340][ T7889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.686'. [ 349.399286][ T7931] netlink: 36 bytes leftover after parsing attributes in process `syz.0.701'. [ 349.474431][ T7931] netlink: 36 bytes leftover after parsing attributes in process `syz.0.701'. [ 349.504173][ T7933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.702'. [ 351.651397][ T2002] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 351.811176][ T2002] usb 3-1: device descriptor read/64, error -71 [ 352.111311][ T2002] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 352.280314][ T7987] __nla_validate_parse: 2 callbacks suppressed [ 352.280382][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 352.284109][ T2002] usb 3-1: device descriptor read/64, error -71 [ 352.319146][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 352.387350][ T7987] netlink: 'syz.0.721': attribute type 18 has an invalid length. [ 352.689861][ T2002] usb usb3-port1: attempt power cycle [ 353.051156][ T2002] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 353.104392][ T2002] usb 3-1: device descriptor read/8, error -71 [ 353.316716][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'. [ 353.361324][ T2002] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 353.383290][ T8002] team1: entered promiscuous mode [ 353.388446][ T8002] team1: entered allmulticast mode [ 353.398755][ T2002] usb 3-1: device descriptor read/8, error -71 [ 353.402565][ T8002] 8021q: adding VLAN 0 to HW filter on device team1 [ 353.431123][ C1] hrtimer: interrupt took 221914 ns [ 353.512125][ T2002] usb usb3-port1: unable to enumerate USB device [ 353.683626][ T8005] syzkaller0: entered promiscuous mode [ 353.689205][ T8005] syzkaller0: entered allmulticast mode [ 355.293068][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 355.301484][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'. [ 355.316881][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 355.326225][ T8023] netlink: 'syz.3.734': attribute type 18 has an invalid length. [ 355.832734][ T7989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.395234][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 357.689423][ T8065] tipc: Enabled bearer , priority 0 [ 357.782340][ T8068] syzkaller0: entered promiscuous mode [ 357.825785][ T8068] syzkaller0: entered allmulticast mode [ 357.922738][ T8065] tipc: Resetting bearer [ 358.010790][ T8063] tipc: Resetting bearer [ 358.077721][ T8063] tipc: Disabling bearer [ 360.248772][ T8114] syzkaller0: entered promiscuous mode [ 360.256334][ T8114] syzkaller0: entered allmulticast mode [ 361.004795][ T8075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.791045][ T2002] IPVS: starting estimator thread 0... [ 361.921381][ T8140] IPVS: using max 240 ests per chain, 12000 per kthread [ 362.772525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 365.018425][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 365.059324][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 365.099135][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 365.177170][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 365.928134][ T2002] IPVS: starting estimator thread 0... [ 366.052758][ T8212] IPVS: using max 240 ests per chain, 12000 per kthread [ 366.075060][ T8211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.801'. [ 366.137694][ T8211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.801'. [ 366.191329][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.801'. [ 367.360061][ T8240] netlink: 48 bytes leftover after parsing attributes in process `syz.0.809'. [ 367.422767][ T8240] netlink: 48 bytes leftover after parsing attributes in process `syz.0.809'. [ 368.687703][ T8265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.818'. [ 369.751125][ T5831] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 369.935769][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 369.953507][ T5831] usb 2-1: no configurations [ 369.966101][ T5831] usb 2-1: can't read configurations, error -22 [ 370.053282][ T5787] Bluetooth: hci4: command 0x0406 tx timeout [ 370.122352][ T5831] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 370.301190][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 370.314751][ T5831] usb 2-1: no configurations [ 370.345201][ T5831] usb 2-1: can't read configurations, error -22 [ 370.399842][ T5831] usb usb2-port1: attempt power cycle [ 370.774750][ T5831] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 370.831724][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 370.846637][ T5831] usb 2-1: no configurations [ 370.866916][ T5831] usb 2-1: can't read configurations, error -22 [ 371.053712][ T5831] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 371.143171][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 371.152399][ T5831] usb 2-1: no configurations [ 371.172003][ T5831] usb 2-1: can't read configurations, error -22 [ 371.212199][ T5831] usb usb2-port1: unable to enumerate USB device [ 371.658203][ T8313] __nla_validate_parse: 2 callbacks suppressed [ 371.658250][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.833'. [ 371.776979][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.833'. [ 371.862293][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 372.578149][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.837'. [ 373.361254][ T8340] netlink: 'syz.4.842': attribute type 4 has an invalid length. [ 373.453001][ T8341] netlink: 'syz.4.842': attribute type 4 has an invalid length. [ 373.715470][ T8346] loop8: detected capacity change from 0 to 8 [ 373.782183][ T8346] Dev loop8: unable to read RDB block 8 [ 373.814578][ T8346] loop8: unable to read partition table [ 373.837028][ T8346] loop8: partition table beyond EOD, truncated [ 373.854483][ T8346] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 374.058869][ T8352] lo: entered allmulticast mode [ 374.083106][ T8352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.421535][ T2002] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 374.614382][ T2002] usb 5-1: Using ep0 maxpacket: 32 [ 374.629294][ T2002] usb 5-1: no configurations [ 374.653565][ T2002] usb 5-1: can't read configurations, error -22 [ 374.821670][ T2002] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 375.001544][ T2002] usb 5-1: Using ep0 maxpacket: 32 [ 375.015091][ T2002] usb 5-1: no configurations [ 375.026550][ T2002] usb 5-1: can't read configurations, error -22 [ 375.042665][ T2002] usb usb5-port1: attempt power cycle [ 375.282442][ T8369] tipc: Enabling of bearer rejected, failed to enable media [ 375.421259][ T2002] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 375.463314][ T2002] usb 5-1: Using ep0 maxpacket: 32 [ 375.479536][ T2002] usb 5-1: no configurations [ 375.492904][ T2002] usb 5-1: can't read configurations, error -22 [ 375.631592][ T2002] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 375.663013][ T2002] usb 5-1: Using ep0 maxpacket: 32 [ 375.713074][ T2002] usb 5-1: no configurations [ 375.717834][ T2002] usb 5-1: can't read configurations, error -22 [ 375.726152][ T2002] usb usb5-port1: unable to enumerate USB device [ 377.803845][ T8388] tipc: Enabling of bearer rejected, failed to enable media [ 378.778218][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.864'. [ 379.301826][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 379.322679][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 379.350632][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 379.521607][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 379.522708][ T6091] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.551728][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 379.578874][ T6091] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.581361][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 379.601605][ T6091] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.615310][ T6091] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.731265][ T2002] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 379.901260][ T2002] usb 2-1: Using ep0 maxpacket: 32 [ 379.924293][ T2002] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.945965][ T2002] usb 2-1: config 0 has no interfaces? [ 379.966661][ T2002] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 380.008148][ T2002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.046623][ T2002] usb 2-1: config 0 descriptor?? [ 380.994802][ T8439] tipc: Enabling of bearer rejected, failed to enable media [ 381.063993][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 382.005812][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 382.061215][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.884'. [ 383.012478][ T2002] usb 2-1: USB disconnect, device number 8 [ 383.317837][ T8482] tipc: Enabling of bearer rejected, failed to enable media [ 384.286555][ T8496] __nla_validate_parse: 3 callbacks suppressed [ 384.286638][ T8496] netlink: 48 bytes leftover after parsing attributes in process `syz.3.897'. [ 384.436911][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 384.493881][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 384.565730][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 384.608857][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 385.141565][ T2002] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 385.406179][ T2002] usb 4-1: Using ep0 maxpacket: 32 [ 385.458601][ T2002] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.571366][ T2002] usb 4-1: config 0 has no interfaces? [ 385.617581][ T2002] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 385.771311][ T2002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.671365][ T2002] usb 4-1: config 0 descriptor?? [ 386.860646][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'. [ 387.101277][ T8522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.906'. [ 387.783304][ T8528] tipc: Enabling of bearer rejected, failed to enable media [ 388.311209][ T2002] usb 4-1: USB disconnect, device number 11 [ 388.470773][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.482979][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.288809][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 389.347245][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 389.444937][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 389.493881][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 389.964781][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 390.107947][ T8566] syzkaller0: entered promiscuous mode [ 390.138594][ T8566] syzkaller0: entered allmulticast mode [ 391.506842][ T8588] IPVS: sh: FWM 3 0x00000003 - no destination available [ 391.551816][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 391.565812][ T8588] IPVS: sh: FWM 3 0x00000003 - no destination available [ 391.611933][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 391.781301][ T5831] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 391.984078][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 392.009363][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.037688][ T5831] usb 4-1: config 0 has no interfaces? [ 392.066201][ T5831] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 392.097691][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.139382][ T5831] usb 4-1: config 0 descriptor?? [ 392.310673][ T8596] syzkaller0: entered promiscuous mode [ 392.319937][ T8596] syzkaller0: entered allmulticast mode [ 393.791374][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.926'. [ 393.824931][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.926'. [ 393.950576][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 394.071923][ T8625] netlink: 60 bytes leftover after parsing attributes in process `syz.1.929'. [ 395.144540][ T5831] usb 4-1: USB disconnect, device number 12 [ 396.655440][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 396.710493][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'. [ 396.762541][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 396.851298][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'. [ 396.983633][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 397.489254][ T8682] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.945'. [ 397.733373][ T8686] netlink: 32 bytes leftover after parsing attributes in process `syz.3.946'. [ 399.876804][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 399.926602][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 400.034030][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 401.672415][ T8752] __nla_validate_parse: 3 callbacks suppressed [ 401.672491][ T8752] netlink: 14 bytes leftover after parsing attributes in process `syz.4.963'. [ 402.910021][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 402.993755][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'. [ 403.152357][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 403.162064][ T1078] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.206354][ T1078] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.233402][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'. [ 403.261818][ T1078] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.295523][ T1078] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.655969][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'. [ 404.279600][ T8808] netlink: 32 bytes leftover after parsing attributes in process `syz.3.977'. [ 405.198119][ T8825] netlink: 168 bytes leftover after parsing attributes in process `syz.0.983'. [ 406.040406][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 406.083665][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 407.713678][ T8863] netlink: 168 bytes leftover after parsing attributes in process `syz.1.996'. [ 408.130306][ T8876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.999'. [ 408.515751][ T8866] netlink: 'syz.2.998': attribute type 13 has an invalid length. [ 408.633069][ T8866] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 410.955341][ T8920] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1010'. [ 410.961404][ T8922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1011'. [ 411.230222][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1012'. [ 414.201715][ T9034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1024'. [ 414.561828][ T9038] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1025'. [ 415.346894][ T9047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1028'. [ 415.408633][ T9047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1028'. [ 415.493345][ T9049] netlink: 'syz.4.1029': attribute type 4 has an invalid length. [ 416.878067][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'. [ 416.978990][ T9086] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1039'. [ 417.408429][ T9073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.121897][ T9107] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1043'. [ 418.254060][ T9110] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1043'. [ 418.492484][ T9114] netlink: 'syz.2.1045': attribute type 4 has an invalid length. [ 419.067331][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'. [ 419.281185][ T9133] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1051'. [ 419.467250][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 419.533971][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'. [ 420.504412][ T9140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.086538][ T9163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1058'. [ 421.113059][ T9164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1058'. [ 421.630116][ T9178] netlink: 'syz.1.1061': attribute type 4 has an invalid length. [ 422.343420][ T9192] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1064'. [ 423.013590][ T9213] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1071'. [ 423.049548][ T9213] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1071'. [ 423.633729][ T9203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.699587][ T9228] netlink: 'syz.0.1076': attribute type 4 has an invalid length. [ 424.909389][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'. [ 424.963810][ T9252] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1081'. [ 425.019572][ T9250] team1: entered promiscuous mode [ 425.025219][ T9250] team1: entered allmulticast mode [ 425.032848][ T9250] 8021q: adding VLAN 0 to HW filter on device team1 [ 426.145731][ T9279] IPVS: sh: FWM 3 0x00000003 - no destination available [ 426.180752][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 426.225046][ T9282] IPVS: sh: FWM 3 0x00000003 - no destination available [ 426.246202][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 426.812142][ T9289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1093'. [ 427.424285][ T9301] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1098'. [ 428.036082][ T9313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1102'. [ 431.971655][ T9371] tipc: Enabling of bearer rejected, failed to enable media [ 432.591349][ T5831] IPVS: starting estimator thread 0... [ 432.685782][ T9407] IPVS: using max 240 ests per chain, 12000 per kthread [ 433.789313][ T9426] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1133'. [ 433.948486][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 434.583333][ T9447] tipc: Enabled bearer , priority 0 [ 434.623761][ T9445] syzkaller0: entered promiscuous mode [ 434.640359][ T9445] syzkaller0: entered allmulticast mode [ 434.697706][ T9445] tipc: Resetting bearer [ 434.765331][ T9443] tipc: Resetting bearer [ 434.862534][ T9443] tipc: Disabling bearer [ 435.652083][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 436.621615][ T9475] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1147'. [ 436.671668][ T9476] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1147'. [ 437.513287][ T9490] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1150'. [ 437.537540][ T9492] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1152'. [ 437.870102][ T9497] tipc: Enabled bearer , priority 0 [ 437.993191][ T9494] tipc: Resetting bearer [ 438.287118][ T9500] syzkaller0: entered promiscuous mode [ 438.293097][ T9500] syzkaller0: entered allmulticast mode [ 438.339233][ T9493] tipc: Resetting bearer [ 438.370227][ T9493] tipc: Disabling bearer [ 439.381466][ T9524] lo: entered allmulticast mode [ 439.791556][ T9532] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1165'. [ 441.028182][ T9551] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1173'. [ 441.085062][ T9551] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1173'. [ 441.795100][ T9559] lo: entered allmulticast mode [ 441.869128][ T9563] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1178'. [ 444.112400][ T9607] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1192'. [ 444.174827][ T9608] IPVS: sh: FWM 3 0x00000003 - no destination available [ 444.222876][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 444.937555][ T9616] netlink: 'syz.3.1196': attribute type 4 has an invalid length. [ 445.835209][ T9629] IPv6: Can't replace route, no match found [ 445.844616][ T9629] IPv6: Can't replace route, no match found [ 446.391331][ T9638] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1205'. [ 446.618214][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1207'. [ 447.233569][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'. [ 447.453169][ T9659] netlink: 'syz.4.1212': attribute type 4 has an invalid length. [ 447.613922][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1213'. [ 447.658584][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1213'. [ 447.740570][ T9663] IPv6: Can't replace route, no match found [ 447.766750][ T9663] IPv6: Can't replace route, no match found [ 448.202318][ T9676] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1218'. [ 448.286060][ T9678] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1218'. [ 448.437338][ T9671] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1216'. [ 448.477002][ T9683] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1219'. [ 449.401896][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'. [ 449.673216][ T9702] syzkaller0: entered promiscuous mode [ 449.704944][ T9702] syzkaller0: entered allmulticast mode [ 449.856284][ T9707] IPv6: Can't replace route, no match found [ 449.877659][ T9707] IPv6: Can't replace route, no match found [ 449.918210][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.930238][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.093173][ T36] IPVS: starting estimator thread 0... [ 451.221246][ T9734] IPVS: using max 240 ests per chain, 12000 per kthread [ 451.853423][ T9747] syzkaller0: entered promiscuous mode [ 451.900721][ T9747] syzkaller0: entered allmulticast mode [ 452.044867][ T9752] __nla_validate_parse: 2 callbacks suppressed [ 452.044937][ T9752] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1249'. [ 452.552643][ T9762] netlink: 'syz.0.1253': attribute type 8 has an invalid length. [ 452.677037][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 453.360606][ T9782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1260'. [ 453.407490][ T9782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1260'. [ 453.850349][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1265'. [ 454.795315][ T9801] netlink: 'syz.3.1269': attribute type 13 has an invalid length. [ 454.833383][ T9801] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 455.209766][ T9817] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1275'. [ 455.267669][ T9817] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1275'. [ 455.460288][ T9814] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1274'. [ 457.052980][ T9846] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1286'. [ 457.290325][ T9839] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 458.829233][ T9864] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1293'. [ 458.932954][ T9877] sctp: [Deprecated]: syz.0.1298 (pid 9877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.932954][ T9877] Use struct sctp_sack_info instead [ 461.178981][ T9915] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 461.200551][ T9915] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 461.209089][ T5834] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 461.391378][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 461.408180][ T5834] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 461.453993][ T5834] usb 1-1: config 0 has no interface number 0 [ 461.497014][ T5834] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 461.517100][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.539793][ T5834] usb 1-1: Product: syz [ 461.564485][ T5834] usb 1-1: Manufacturer: syz [ 461.575358][ T5834] usb 1-1: SerialNumber: syz [ 461.599539][ T5834] usb 1-1: config 0 descriptor?? [ 462.112111][ T5834] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 462.161419][ T5834] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 462.415038][ T5834] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 462.455552][ T5834] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 462.533100][ T5834] usb 1-1: USB disconnect, device number 4 [ 464.358991][ C0] ===================================================== [ 464.366639][ C0] BUG: KMSAN: uninit-value in eth_type_trans+0x7d5/0x9b0 [ 464.374001][ C0] eth_type_trans+0x7d5/0x9b0 [ 464.378825][ C0] ip_tunnel_rcv+0x215f/0x29c0 [ 464.384021][ C0] gre_rcv+0x1ca4/0x20f0 [ 464.388465][ C0] gre_rcv+0x285/0x380 [ 464.392747][ C0] ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 464.398474][ C0] ip_local_deliver_finish+0x409/0x720 [ 464.404218][ C0] ip_local_deliver+0x228/0x4a0 [ 464.409277][ C0] ip_rcv_finish+0x4d7/0x560 [ 464.414155][ C0] ip_rcv+0xcb/0x370 [ 464.418170][ C0] process_backlog+0x8d7/0x1500 [ 464.423429][ C0] __napi_poll+0xdc/0x950 [ 464.427916][ C0] net_rx_action+0xa5b/0x1c70 [ 464.432824][ C0] handle_softirqs+0x171/0x7e0 [ 464.437828][ C0] __do_softirq+0x14/0x1b [ 464.442448][ C0] do_softirq+0x58/0x90 [ 464.446736][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 464.451993][ C0] __dev_queue_xmit+0x384a/0x5980 [ 464.457203][ C0] neigh_resolve_output+0x9c3/0xaf0 [ 464.462631][ C0] ip_finish_output2+0x1afd/0x1e00 [ 464.467931][ C0] ip_finish_output+0x288/0x860 [ 464.473022][ C0] ip_mc_output+0x58a/0x8c0 [ 464.477671][ C0] NF_HOOK+0x16b/0x340 [ 464.481989][ C0] raw_send_hdrinc+0x18c5/0x1f40 [ 464.487059][ C0] raw_sendmsg+0x2280/0x27f0 [ 464.491859][ C0] inet_sendmsg+0x265/0x290 [ 464.496529][ C0] sock_write_iter+0x667/0x7e0 [ 464.501609][ C0] vfs_write+0xbe1/0x15c0 [ 464.506148][ C0] ksys_write+0x1d9/0x470 [ 464.510631][ C0] __x64_sys_write+0x97/0xf0 [ 464.515523][ C0] x64_sys_call+0x2ff0/0x3ea0 [ 464.518019][ T9978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1339'. [ 464.520374][ C0] do_syscall_64+0x134/0xf80 [ 464.534293][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.540344][ C0] [ 464.542819][ C0] Uninit was created at: [ 464.547316][ C0] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 464.553537][ C0] __alloc_skb+0x855/0x1190 [ 464.558259][ C0] alloc_skb_with_frags+0xc5/0xa60 [ 464.563630][ C0] sock_alloc_send_pskb+0xacb/0xc60 [ 464.569032][ C0] raw_send_hdrinc+0x34d/0x1f40 [ 464.574170][ C0] raw_sendmsg+0x2280/0x27f0 [ 464.578903][ C0] inet_sendmsg+0x265/0x290 [ 464.583681][ C0] sock_write_iter+0x667/0x7e0 [ 464.588595][ C0] vfs_write+0xbe1/0x15c0 [ 464.593223][ C0] ksys_write+0x1d9/0x470 [ 464.597707][ C0] __x64_sys_write+0x97/0xf0 [ 464.602593][ C0] x64_sys_call+0x2ff0/0x3ea0 [ 464.607423][ C0] do_syscall_64+0x134/0xf80 [ 464.612248][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.618282][ C0] [ 464.620711][ C0] CPU: 0 UID: 0 PID: 9976 Comm: syz.1.1338 Not tainted syzkaller #0 PREEMPT(full) [ 464.630268][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.640525][ C0] ===================================================== [ 464.647671][ C0] Disabling lock debugging due to kernel taint [ 464.653991][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 464.660506][ C0] CPU: 0 UID: 0 PID: 9976 Comm: syz.1.1338 Tainted: G B syzkaller #0 PREEMPT(full) [ 464.671495][ C0] Tainted: [B]=BAD_PAGE [ 464.675704][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.685850][ C0] Call Trace: [ 464.689194][ C0] [ 464.692101][ C0] __dump_stack+0x26/0x30 [ 464.696570][ C0] dump_stack_lvl+0x50/0x1c0 [ 464.701288][ C0] ? dump_stack+0x12/0x25 [ 464.705752][ C0] dump_stack+0x1e/0x25 [ 464.710031][ C0] vpanic+0x7b4/0x1430 [ 464.714262][ C0] panic+0x15d/0x160 [ 464.718343][ C0] kmsan_report+0x31a/0x320 [ 464.723015][ C0] ? __msan_warning+0x1b/0x30 [ 464.727832][ C0] ? eth_type_trans+0x7d5/0x9b0 [ 464.732807][ C0] ? ip_tunnel_rcv+0x215f/0x29c0 [ 464.737899][ C0] ? gre_rcv+0x1ca4/0x20f0 [ 464.742460][ C0] ? gre_rcv+0x285/0x380 [ 464.746819][ C0] ? ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 464.752660][ C0] ? ip_local_deliver_finish+0x409/0x720 [ 464.758431][ C0] ? ip_local_deliver+0x228/0x4a0 [ 464.763565][ C0] ? ip_rcv_finish+0x4d7/0x560 [ 464.768451][ C0] ? ip_rcv+0xcb/0x370 [ 464.772621][ C0] ? process_backlog+0x8d7/0x1500 [ 464.777786][ C0] ? __napi_poll+0xdc/0x950 [ 464.782417][ C0] ? net_rx_action+0xa5b/0x1c70 [ 464.787404][ C0] ? handle_softirqs+0x171/0x7e0 [ 464.792482][ C0] ? __do_softirq+0x14/0x1b [ 464.797096][ C0] ? do_softirq+0x58/0x90 [ 464.801557][ C0] ? __local_bh_enable_ip+0xa1/0xb0 [ 464.806891][ C0] ? __dev_queue_xmit+0x384a/0x5980 [ 464.812203][ C0] ? neigh_resolve_output+0x9c3/0xaf0 [ 464.817712][ C0] ? ip_finish_output2+0x1afd/0x1e00 [ 464.823139][ C0] ? ip_finish_output+0x288/0x860 [ 464.828295][ C0] ? ip_mc_output+0x58a/0x8c0 [ 464.833101][ C0] ? NF_HOOK+0x16b/0x340 [ 464.837469][ C0] ? raw_send_hdrinc+0x18c5/0x1f40 [ 464.842736][ C0] ? raw_sendmsg+0x2280/0x27f0 [ 464.847627][ C0] ? inet_sendmsg+0x265/0x290 [ 464.852430][ C0] ? sock_write_iter+0x667/0x7e0 [ 464.857523][ C0] ? vfs_write+0xbe1/0x15c0 [ 464.862175][ C0] ? ksys_write+0x1d9/0x470 [ 464.866838][ C0] ? __x64_sys_write+0x97/0xf0 [ 464.871744][ C0] ? x64_sys_call+0x2ff0/0x3ea0 [ 464.876747][ C0] ? do_syscall_64+0x134/0xf80 [ 464.881643][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.887845][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 464.893835][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 464.899124][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 464.905120][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 464.910420][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 464.916909][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 464.922188][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 464.927479][ C0] __msan_warning+0x1b/0x30 [ 464.932128][ C0] eth_type_trans+0x7d5/0x9b0 [ 464.936967][ C0] ip_tunnel_rcv+0x215f/0x29c0 [ 464.941923][ C0] gre_rcv+0x1ca4/0x20f0 [ 464.946304][ C0] ? __rcu_read_unlock+0x46/0xd0 [ 464.951500][ C0] ? raw_local_deliver+0x368/0x15b0 [ 464.956858][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 464.961591][ C0] gre_rcv+0x285/0x380 [ 464.965781][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 464.970493][ C0] ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 464.976194][ C0] ip_local_deliver_finish+0x409/0x720 [ 464.981801][ C0] ip_local_deliver+0x228/0x4a0 [ 464.986786][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 464.992902][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 464.998390][ C0] ip_rcv_finish+0x4d7/0x560 [ 465.003116][ C0] ip_rcv+0xcb/0x370 [ 465.007123][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 465.012354][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 465.016977][ C0] process_backlog+0x8d7/0x1500 [ 465.021970][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.027970][ C0] ? filter_irq_stacks+0x49/0x190 [ 465.033267][ C0] ? __pfx_process_backlog+0x10/0x10 [ 465.038713][ C0] __napi_poll+0xdc/0x950 [ 465.043189][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.049189][ C0] net_rx_action+0xa5b/0x1c70 [ 465.054008][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.060000][ C0] ? sched_clock_cpu+0x59/0xa70 [ 465.065068][ C0] ? try_to_wake_up+0x107e/0x21e0 [ 465.070344][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 465.075605][ C0] handle_softirqs+0x171/0x7e0 [ 465.080541][ C0] __do_softirq+0x14/0x1b [ 465.084989][ C0] do_softirq+0x58/0x90 [ 465.089279][ C0] [ 465.092341][ C0] [ 465.095354][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 465.100545][ C0] __dev_queue_xmit+0x384a/0x5980 [ 465.105700][ C0] ? __local_bh_enable_ip+0x75/0xb0 [ 465.111049][ C0] ? _raw_spin_unlock_bh+0x2d/0x40 [ 465.116338][ C0] ? ___neigh_create+0x3511/0x3bf0 [ 465.121626][ C0] ? __dev_queue_xmit+0x27a/0x5980 [ 465.126898][ C0] neigh_resolve_output+0x9c3/0xaf0 [ 465.132349][ C0] ? __pfx_neigh_resolve_output+0x10/0x10 [ 465.138217][ C0] ip_finish_output2+0x1afd/0x1e00 [ 465.143524][ C0] ip_finish_output+0x288/0x860 [ 465.148515][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.154512][ C0] ip_mc_output+0x58a/0x8c0 [ 465.159149][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 465.164673][ C0] ? __pfx_ip_mc_output+0x10/0x10 [ 465.169831][ C0] NF_HOOK+0x16b/0x340 [ 465.174024][ C0] ? __pfx_dst_output+0x10/0x10 [ 465.179003][ C0] raw_send_hdrinc+0x18c5/0x1f40 [ 465.184114][ C0] raw_sendmsg+0x2280/0x27f0 [ 465.188905][ C0] ? __pfx_raw_sendmsg+0x10/0x10 [ 465.193959][ C0] inet_sendmsg+0x265/0x290 [ 465.198587][ C0] ? __pfx_inet_sendmsg+0x10/0x10 [ 465.203734][ C0] sock_write_iter+0x667/0x7e0 [ 465.208787][ C0] vfs_write+0xbe1/0x15c0 [ 465.213318][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 465.218779][ C0] ksys_write+0x1d9/0x470 [ 465.223290][ C0] __x64_sys_write+0x97/0xf0 [ 465.228047][ C0] x64_sys_call+0x2ff0/0x3ea0 [ 465.232884][ C0] do_syscall_64+0x134/0xf80 [ 465.237624][ C0] ? clear_bhb_loop+0x50/0xa0 [ 465.242441][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.248477][ C0] RIP: 0033:0x7f80c239c799 [ 465.252993][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.272734][ C0] RSP: 002b:00007f80c3294028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 465.281301][ C0] RAX: ffffffffffffffda RBX: 00007f80c2615fa0 RCX: 00007f80c239c799 [ 465.289370][ C0] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000004 [ 465.297430][ C0] RBP: 00007f80c2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 465.305490][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.313544][ C0] R13: 00007f80c2616038 R14: 00007f80c2615fa0 R15: 00007ffcb435b3f8 [ 465.321655][ C0] [ 465.325082][ C0] Kernel Offset: disabled [ 465.329441][ C0] Rebooting in 86400 seconds..