last executing test programs: 9m38.286889354s ago: executing program 32 (id=470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @random="f287a0060f06", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0xff31, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local}, @time_exceeded={0x3, 0x8998bcce58ae484, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3f}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 9m36.748930603s ago: executing program 33 (id=480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x1, 0x7, 0xfffffffc}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x20000800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 9m36.165803675s ago: executing program 34 (id=481): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 9m36.078699888s ago: executing program 35 (id=482): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000480140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 9m18.765573103s ago: executing program 36 (id=515): r0 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60044040}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'team_slave_0\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 5m51.561863198s ago: executing program 37 (id=1390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffe, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 3m22.684552266s ago: executing program 38 (id=2003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) 3m21.210488265s ago: executing program 39 (id=2007): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001002bbd70000000000000000000", @ANYBLOB="0100000000000000", @ANYRES32, @ANYBLOB="1400030076657468305f746f5f6261746164760008"], 0x48}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) 3m20.662876456s ago: executing program 40 (id=2009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x92}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r1], 0x20) 3m18.206307357s ago: executing program 41 (id=2013): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0x4010) socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf250000", @ANYRES32=r2, @ANYBLOB="089805000750050008001300", @ANYRES32=r3, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 1m18.146361612s ago: executing program 3 (id=2377): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x7, 0x204, 0x8, 0x9, 0xd20, 0x0, 0x8}, 0x20) 1m18.065619396s ago: executing program 1 (id=2378): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@can_newroute={0x14c, 0x18, 0x1, 0x709d29, 0x25dfdbfb, {0x1d, 0x1, 0x6}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x2, 0x0, 0x0, "81909118e1356961"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x70, 0x1b, 0x7, 0x0, "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", 0x1, "b30900000000000000067d0a3cc66e9353d68969"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) 1m17.790136621s ago: executing program 1 (id=2380): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 1m17.534171861s ago: executing program 1 (id=2383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x3c, r1, 0x629, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xbf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000104}, 0x40) 1m17.263200582s ago: executing program 1 (id=2385): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m16.970442817s ago: executing program 3 (id=2388): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x6}, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m16.970031768s ago: executing program 1 (id=2389): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m16.732305418s ago: executing program 1 (id=2392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000010c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20008050) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) 1m16.046958631s ago: executing program 5 (id=2398): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x10200}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1m15.904131281s ago: executing program 3 (id=2399): unshare(0x22020600) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback, 0xffffffffffffffff, 0x2f, 0x2000, 0x4}, 0x20) 1m15.547265293s ago: executing program 3 (id=2403): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @local, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f770", 0x2c8}, {&(0x7f0000000f40)="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", 0x1b4}, {&(0x7f0000000440)="05437c98b91b1455047157b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352a033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df40543d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9daf66a3041d0de9e5fbd87ec15057e0482016aac90fb7c7cd0b8d3571dcb6d0984d7e5512c9b872fd702b8b8710b9aeca6e7141502b792dc834af6d6a4e8007b552d950d5", 0xde}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0xc004080) 1m15.546850795s ago: executing program 2 (id=2404): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x70}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0) 1m15.306448758s ago: executing program 2 (id=2405): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)="0f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="a6", 0x1}], 0x218}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000049c0)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}], 0x4, 0x448c0) close(0x4) 1m15.298051502s ago: executing program 5 (id=2406): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=""/4096, 0x1000}, 0xfffff453}], 0x1, 0x10120, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1m15.20826033s ago: executing program 3 (id=2407): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000010) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x10c, 0x0, 0x104, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x6}, {0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x750c}, {0x8, 0x13, 0x4a}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xfffffff9}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x23e}, {0x8}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4008810}, 0x5) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES16=r4], 0x14) 1m14.959697122s ago: executing program 5 (id=2408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000000000000000aacc0000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000006000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa000000000000002d000000000600000004"], 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) 1m14.953161557s ago: executing program 2 (id=2409): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m14.640653992s ago: executing program 5 (id=2410): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1m14.584621573s ago: executing program 2 (id=2411): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[], 0x30}}, 0x4090) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x3, "1fe473"}, &(0x7f0000000700)=0xb) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000300)=0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) 1m14.447076665s ago: executing program 5 (id=2413): unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff0307680426b1929e14f08800", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x2f) 1m14.279166938s ago: executing program 2 (id=2414): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced000000000a9f33c9f7b9e5", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m14.02781127s ago: executing program 5 (id=2416): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="61202a3a2a2082987531b2f5"], 0xa) 1m13.94237799s ago: executing program 2 (id=2418): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0) 1m13.699313577s ago: executing program 4 (id=2419): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=""/4096, 0x1000}, 0xfffff453}], 0x1, 0x10120, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1m13.482944437s ago: executing program 4 (id=2420): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x54, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_LOOKUP_FLAGS={0x8}]}}}]}]}, @NFT_MSG_DELSETELEM={0x2a0, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x260, 0x3, 0x0, 0x1, [{0x25c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xae}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x4a}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_ELEM_DATA={0x1cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xed, 0x1, "6035967fd74701dea2feaf2ace37aa8ae7ce11ed83010333d829ddc4e2281dd1014f41d03d9b494663553b7cf01a65c67b134dcbaffc5b20b78944623e9b13d9700e4d5c3b43c2bd8025e48c215b907cdb6006b5e21e2d0b29c036f58de2d57c9123c191a3200264b1ef3551f09fc6c964a956d8753a7e977bc99b8c7a2f928f3681ec1956a4efcbcc97ba1e3b986b2f476c919ba9423a03b62abb1fba957dbcdfdb0f8d1120bce7fc3dfeaab1cf360bf6809b1a3b6316ffc7407704c661192cb44a2557d44e340482531dddd456fda5a5970e7a6374f28ec86b6ea72f97e4f3b0b1032ba4b095b40a"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xd, 0x1, "51f3d77fe7752bde34"}, @NFTA_DATA_VALUE={0x6d, 0x1, "84432efb85608b18b813b3f5d2ecc58c9ac0e371146a4bba9f7bce387d63bc4f8761e70accd3c311ec6b2c3eb49dbbf6fe0f8935e7350724d623453c0e029a7a5dc03ff464d9ebf05b47547e1d913ef9d01b43e00aa3d6e578a3136bd5761527274e732eb3417db00e"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x338}, 0x1, 0x0, 0x0, 0x44014}, 0x20000080) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000010101020000000000050800084000000401"], 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b01"], 0x28}, 0x4004004) 1m13.354738403s ago: executing program 4 (id=2421): syz_emit_ethernet(0x362, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60160000032c2b0000000000000000000000000000000000fe8000000000000000000000000000aa896200000000000005020000000b1247dea3ebd4fc7bd5709fd4b24e7b351135539e58dabafc2ade2c67b7d4dc7af9683a74dffa1d599f867f7eb800605240523c52f1c1611bf2cb3d7211ae6dda5662a5524498a0e38c982131951eb76549de2592e48f22e509ad59da8a475e6c6a28673a76f5861991b19fa17105e4e65549a8345ec1973c5a95a9ceb0893366e04aa22a3e51cf12307ffedf7b94645cb7a2cd3f8ee224137e306602153cb043b7817b248b4e3b61623ec6d4d256aca7b8d81b42eb8cd741c768cc2ab3cdc1ee3baea5254c244a1fb36704a5d219885eee02454533fb94ae2d16d4e64b183a448bfd34affc4d102566ca27b31ccc0f9a55b3b93ee4db96db8806fa9b75dbc0de38786b586cc4f946b6b2cce27973f76c74a8b808dfccf3a6dce53a62070622eda5b826d88d5bddac7edc649e47cef0259f9182f74e358294be51ed31947ae6dbc3f2bc7fc1913404d6a8aff046017514c23f790c31c8e49999de250e881612d7387db0cd04067c80ba89e0d239bd9fc03b09624bf06dd768862ca974114f792403bc3b9cdf68b040f9312e0a06369cbeece95b9d3d941fed57105b063c5ea829d602e59a7ef5a9a0cc7fdb96ed0ce02d3b85fbc91a4e2e0b84839531c2c495f6187df2d2db9a92df359a2a43b1d3052b794fff4d7174468f424f096747c43df24d26962744d31354832abb20185f36c927a70c9c2889ea338d8560dec5224d3da3efd170d7fe579617aeb2ae61b624bb2a4960f72a067abd0824308646c777379065f41a4108a37fb377f7858308069db09689af853946ce74efd2fad69ade4fef5414b5d46a2064fd1ee5042c430f7a3ec017fa0a5141d023fa875ba0e265e02d43ba0939b3d75d034b240c8c1b09a8bf02a75ee7f098a716389929757d41460dc776ee05ab627571a1b9763f0e2d5d4084a20c37a43fb97411f321913b9f35de77ab857942f025f4c3f108fc94c92aa1dab24d255a66de4c784a56a2bf72bea167bfbc24250636a7aaea40c1b1519473d6ed74df68dacde43ae6761b793d9e4186760e402e85fcacb03bcd8960a7425adca5d8729f3ec59a774507dc035170899e062d97450000000000000000000000000c90780100"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011002ff00030004"], 0x28}, 0x4004004) 1m13.179183718s ago: executing program 4 (id=2422): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f80)={0x28, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffe, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000000)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000240)=""/98, 0x62}], 0x3, &(0x7f0000000540)}, 0x40000012) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000b40)={0x0, 0x100000001, 0x0, [0x1, 0x9, 0x3ff, 0x4], [0x38099339, 0x3, 0x2, 0x8000, 0xfffffffffffffffa, 0x1000, 0xaa2f4d6, 0x200, 0xfffffffffffffffa, 0x4, 0x28f, 0x7, 0x3, 0x1, 0x7, 0x3, 0x3, 0xff, 0x10, 0x800, 0x0, 0x0, 0xfc, 0x8001, 0xfffffffffffffff8, 0x8, 0x5, 0x6c6800000000000, 0x401, 0x9, 0x7, 0x6, 0x1, 0x10, 0x2, 0x8000, 0x5, 0x8000, 0x5, 0x6, 0x4, 0x0, 0x5, 0x0, 0x6, 0x1, 0xfffffffffffffffb, 0x5, 0x101, 0xd0, 0x9, 0x100, 0xfffffffffffff3ff, 0xc, 0x6, 0x2, 0xffffffffffffffff, 0xc55e, 0x4, 0x88, 0x8, 0x9, 0x6, 0xb, 0x2, 0x9, 0x1, 0x0, 0x42, 0x3, 0x3, 0x7, 0x4, 0x38a0, 0x0, 0x81, 0x1, 0x3, 0x81, 0xfe2, 0x8, 0x0, 0x7, 0x10001, 0xffffffffffffffff, 0x9, 0x5, 0x890, 0x0, 0x3, 0x4, 0xed, 0x45c, 0x2, 0x8, 0xfffffffffffffffd, 0x4, 0x5, 0x0, 0x6, 0x402, 0x1, 0x4, 0x5, 0x8, 0x2, 0x6, 0x4, 0x66cd, 0x6, 0x3, 0x8000000000000000, 0x60d0, 0x9, 0x4, 0x6, 0x6, 0x4, 0x6, 0x100, 0x6]}) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62043fff590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) 1m12.715850445s ago: executing program 3 (id=2423): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x1, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r1, {0x2}, {}, {0xa, 0x3}}}, 0x24}}, 0x0) 1m8.7717638s ago: executing program 4 (id=2424): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x3, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000340)) 1m8.651926452s ago: executing program 4 (id=2425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000940)) 1m1.46642493s ago: executing program 42 (id=2392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000010c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20008050) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) 58.962473469s ago: executing program 43 (id=2416): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="61202a3a2a2082987531b2f5"], 0xa) 58.330933282s ago: executing program 44 (id=2418): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0) 57.477609572s ago: executing program 45 (id=2423): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x1, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r1, {0x2}, {}, {0xa, 0x3}}}, 0x24}}, 0x0) 53.473958926s ago: executing program 46 (id=2425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000940)) 7.743971417s ago: executing program 7 (id=2450): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x3, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0xfffffffffffffc7c}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.658767888s ago: executing program 7 (id=2451): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 6.051071332s ago: executing program 7 (id=2453): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) 5.725663952s ago: executing program 0 (id=2430): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10120, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 5.609560017s ago: executing program 7 (id=2455): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.607179937s ago: executing program 8 (id=2456): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x400c1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 5.209087936s ago: executing program 0 (id=2457): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x90) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000800000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa001, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="894476234618"}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r8, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@val={0x8, 0x12b, 0xffffffff}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x88, 0x30, 0x9, 0x0, 0x0, {}, [{0x74, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x28}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 5.120841789s ago: executing program 7 (id=2458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="7f04079bef05d195", 0x8}], 0x1, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)="40b4", 0x2}], 0x1}}], 0x2, 0x44041) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) 5.084124914s ago: executing program 6 (id=2459): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa1400198008000100040000000800"], 0x44}}, 0x0) 4.871197894s ago: executing program 8 (id=2460): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4.56972531s ago: executing program 7 (id=2461): socket(0x21, 0x5, 0x20081) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)="00213ae50deba8cd1caf190e1ae69f52cf98f3a1309b", 0x16}], 0x1, 0x807, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c000003"], 0x0) socket$inet6(0xa, 0x3, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.567691116s ago: executing program 6 (id=2462): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000040)={0x0, 0xffffffaf, 0x3, 0x5b, 0x7fff, 0xf3fb, 0x6, 0x80000001, {0x0, @in6={{0xa, 0x4e20, 0x4, @private2, 0x1}}, 0x2, 0xfffffffc, 0x2, 0x6, 0x401}}, &(0x7f0000000140)=0xb0) 4.354276914s ago: executing program 8 (id=2463): r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x9081}], 0x1, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x24}}, 0x400400c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000003c0)={r6, 0x0, 0x20}, 0xc) 4.214495695s ago: executing program 6 (id=2464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)}], 0x1}}], 0x2, 0x2004080) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) 3.859252325s ago: executing program 6 (id=2465): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) 3.824407393s ago: executing program 0 (id=2466): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000040e4080500000000001b52078de76d00000000000000000105000000200000010000"], 0x0, 0x2a}, 0x28) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x0, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000a40)={r2, 0x1, 0x6, @multicast}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{0x8c, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xc4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x0, 0x8, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) 3.736048141s ago: executing program 8 (id=2467): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)="0f", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000049c0)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}], 0x4, 0x448c0) close(0x4) 3.244017528s ago: executing program 8 (id=2469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 2.782166176s ago: executing program 8 (id=2471): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x9000000000000001, {0x0, 0x0, 0x3}}, 0x18) readv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000180)=""/230, 0xe6}, {0x0}], 0x2) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) close(0x3) 2.633233936s ago: executing program 6 (id=2473): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000040)={0x0, 0xffffffaf, 0x3, 0x5b, 0x7fff, 0xf3fb, 0x6, 0x80000001, {0x0, @in6={{0xa, 0x4e20, 0x4, @private2, 0x1}}, 0x2, 0xfffffffc, 0x2, 0x6, 0x401}}, &(0x7f0000000140)=0xb0) 2.401487469s ago: executing program 0 (id=2474): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="1c", 0xffffffffffffff1f, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="f8", 0x1, 0x20000040, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 2.309620033s ago: executing program 9 (id=2475): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x3, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0xfffffffffffffc7c}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.21917626s ago: executing program 6 (id=2476): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x90) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000800000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa001, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="894476234618"}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r8, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@val={0x8, 0x12b, 0xffffffff}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x88, 0x30, 0x9, 0x0, 0x0, {}, [{0x74, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x28}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 2.218819275s ago: executing program 0 (id=2477): r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x9081}], 0x1, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x24}}, 0x400400c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r3) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000003c0)={r5, 0x0, 0x20}, 0xc) 2.023122834s ago: executing program 9 (id=2478): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @local, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x2d3}, {&(0x7f0000000f40)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f", 0x1b4}, {&(0x7f0000000440)="05437c98b91b1455047157b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352a033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df40543d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9daf66a3041d0de9e5fbd87ec15057e0482016aac90fb7c7cd0b8d3571dcb6d0984d7e5512c9b872fd702b8b8710b9aeca6e7141502b792dc834af6d6a4e8007b552d950d5", 0xde}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0xc004080) 1.903558495s ago: executing program 0 (id=2479): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c80)={r2, 0x0, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000000e00)=ANY=[], 0x0) 1.68685159s ago: executing program 9 (id=2480): syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0011424203"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.038069942s ago: executing program 9 (id=2481): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 99.058459ms ago: executing program 9 (id=2482): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd9a8}, 0x3e) 0s ago: executing program 9 (id=2483): bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @local, @empty, @multicast, @local}}}}, 0x0) kernel console output (not intermixed with test programs): .852669][ T8450] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input50 [ 575.879625][ T9] usb 1-1: USB disconnect, device number 27 [ 575.893602][ T8450] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 575.906704][ T8450] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 575.935506][ T8450] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 575.955565][ T8450] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 575.974997][ T8450] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 575.994643][ T8450] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 576.014697][ T8450] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 576.034665][ T8450] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 576.055858][ T8450] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 576.074721][ T8450] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 576.102960][ T8450] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 576.102984][ T8450] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 576.204820][ T9] usb 7-1: USB disconnect, device number 60 [ 576.288217][ T8350] usb 6-1: USB disconnect, device number 41 [ 576.354267][ T37] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 576.494361][ T1609] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 576.521415][ T37] usb 10-1: unable to get BOS descriptor or descriptor too short [ 576.535928][ T37] usb 10-1: config 64 has an invalid interface number: 44 but max is 0 [ 576.535956][ T37] usb 10-1: config 64 has no interface number 0 [ 576.535998][ T37] usb 10-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 576.536024][ T37] usb 10-1: config 64 interface 44 has no altsetting 0 [ 576.554219][ T37] usb 10-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 576.554248][ T37] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.554268][ T37] usb 10-1: Product: syz [ 576.554282][ T37] usb 10-1: Manufacturer: syz [ 576.554295][ T37] usb 10-1: SerialNumber: syz [ 576.671890][ T1609] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.671917][ T1609] usb 9-1: config 0 has no interfaces? [ 576.671946][ T1609] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 576.671969][ T1609] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.683598][ T1609] usb 9-1: config 0 descriptor?? [ 576.857227][T12719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.860277][T12719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.866721][T12719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.867283][T12719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.923073][ T1609] usb 9-1: USB disconnect, device number 52 [ 576.995716][ T37] iowarrior 10-1:64.44: no interrupt-out endpoint found [ 577.015020][ T37] usb 10-1: USB disconnect, device number 47 [ 577.324247][ T6066] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 577.493174][ T6066] usb 7-1: unable to get BOS descriptor or descriptor too short [ 577.508703][ T6066] usb 7-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 577.508731][ T6066] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.508750][ T6066] usb 7-1: Product: syz [ 577.508763][ T6066] usb 7-1: Manufacturer: syz [ 577.508776][ T6066] usb 7-1: SerialNumber: syz [ 577.661308][T12746] netlink: 5 bytes leftover after parsing attributes in process `syz.8.1971'. [ 577.662391][T12746] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 577.710165][T12746] 0ªî{X¹¦: entered allmulticast mode [ 577.710800][T12746] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 577.954196][ T5844] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 578.103913][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1976'. [ 578.124679][ T5844] usb 10-1: unable to get BOS descriptor or descriptor too short [ 578.126182][ T5844] usb 10-1: config 64 has an invalid interface number: 44 but max is 0 [ 578.126208][ T5844] usb 10-1: config 64 has no interface number 0 [ 578.126251][ T5844] usb 10-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 578.126290][ T5844] usb 10-1: config 64 interface 44 has no altsetting 0 [ 578.129076][ T5844] usb 10-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 578.129231][ T5844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.129252][ T5844] usb 10-1: Product: syz [ 578.129264][ T5844] usb 10-1: Manufacturer: syz [ 578.129276][ T5844] usb 10-1: SerialNumber: syz [ 578.252110][T12738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.254341][T12738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.910198][T12751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.911322][T12751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.596349][T12780] syzkaller1: entered promiscuous mode [ 579.596376][T12780] syzkaller1: entered allmulticast mode [ 579.832232][ T6066] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 579.832286][ T6066] usb 7-1: MIDIStreaming interface descriptor not found [ 579.861401][ T5844] iowarrior 10-1:64.44: no interrupt-out endpoint found [ 579.891566][ T5623] block nbd0: Receive control failed (result -1) [ 580.012689][ T5844] usb 10-1: USB disconnect, device number 48 [ 580.290329][ T6066] usb 7-1: USB disconnect, device number 61 [ 580.641601][ T8713] udevd[8713]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.815742][ T8450] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 580.990730][ T8450] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.990756][ T8450] usb 10-1: config 0 has no interfaces? [ 580.990786][ T8450] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 580.990809][ T8450] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.030781][ T8450] usb 10-1: config 0 descriptor?? [ 581.084250][ T6066] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 581.231895][T12808] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1990'. [ 581.231987][T12808] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1990'. [ 581.262009][ T6066] usb 7-1: unable to get BOS descriptor or descriptor too short [ 581.273090][ T6066] usb 7-1: config 64 has an invalid interface number: 44 but max is 0 [ 581.273116][ T6066] usb 7-1: config 64 has no interface number 0 [ 581.273150][ T6066] usb 7-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 581.273172][ T6066] usb 7-1: config 64 interface 44 has no altsetting 0 [ 581.284378][ T5844] usb 10-1: USB disconnect, device number 49 [ 581.314935][ T6066] usb 7-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 581.314961][ T6066] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.314977][ T6066] usb 7-1: Product: syz [ 581.314988][ T6066] usb 7-1: Manufacturer: syz [ 581.314999][ T6066] usb 7-1: SerialNumber: syz [ 581.607517][T12793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.608026][T12793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.609729][T12793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.611647][T12793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.684413][T12814] overlayfs: failed to resolve './bus': -2 [ 582.434180][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 582.553567][ T6066] iowarrior 7-1:64.44: no interrupt-out endpoint found [ 582.587296][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 582.590978][ T9] usb 6-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 582.591006][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.591022][ T9] usb 6-1: Product: syz [ 582.591035][ T9] usb 6-1: Manufacturer: syz [ 582.591048][ T9] usb 6-1: SerialNumber: syz [ 582.620873][ T6066] usb 7-1: USB disconnect, device number 62 [ 583.097762][T12812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.100875][T12812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.768177][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2002'. [ 583.768225][T12839] netlink: 'syz.0.2002': attribute type 1 has an invalid length. [ 583.768240][T12839] netlink: 'syz.0.2002': attribute type 2 has an invalid length. [ 583.888973][T12843] tipc: Enabled bearer , priority 0 [ 584.249091][T12850] overlayfs: failed to resolve './bus': -2 [ 584.891927][T12843] syzkaller0: entered promiscuous mode [ 584.891980][T12843] syzkaller0: entered allmulticast mode [ 584.893202][T12843] tipc: Resetting bearer [ 584.953818][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 584.953872][ T9] usb 6-1: MIDIStreaming interface descriptor not found [ 584.984201][ T6066] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 585.004269][T12840] tipc: Resetting bearer [ 585.013660][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2007'. [ 585.160086][ T6066] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.160113][ T6066] usb 1-1: config 0 has no interfaces? [ 585.160141][ T6066] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 585.160161][ T6066] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.225210][ T6066] usb 1-1: config 0 descriptor?? [ 585.380384][ T9] usb 6-1: USB disconnect, device number 42 [ 585.450542][ T6066] usb 1-1: USB disconnect, device number 28 [ 585.528084][ T8713] udevd[8713]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.974342][ T5623] Bluetooth: hci0: command tx timeout [ 586.201175][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 586.466549][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 586.467763][ T9] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 586.467787][ T9] usb 6-1: config 64 has no interface number 0 [ 586.467827][ T9] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 586.467854][ T9] usb 6-1: config 64 interface 44 has no altsetting 0 [ 586.469975][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 586.470002][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.470021][ T9] usb 6-1: Product: syz [ 586.470034][ T9] usb 6-1: Manufacturer: syz [ 586.470047][ T9] usb 6-1: SerialNumber: syz [ 586.699369][T12863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.700179][T12863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.709993][T12863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.713872][T12863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.925923][ T9] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 586.933675][ T9] usb 6-1: USB disconnect, device number 43 [ 587.292048][T12869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2013'. [ 588.034173][ T37] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 588.237938][ T37] usb 6-1: unable to get BOS descriptor or descriptor too short [ 588.239081][ T37] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 588.239107][ T37] usb 6-1: config 64 has no interface number 0 [ 588.239149][ T37] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 588.239176][ T37] usb 6-1: config 64 interface 44 has no altsetting 0 [ 588.241581][ T37] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 588.241610][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.241630][ T37] usb 6-1: Product: syz [ 588.241643][ T37] usb 6-1: Manufacturer: syz [ 588.241656][ T37] usb 6-1: SerialNumber: syz [ 588.513610][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.579455][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.591833][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.594639][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.776712][ T37] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 588.782878][ T37] usb 6-1: USB disconnect, device number 44 [ 590.780138][T12881] overlayfs: failed to resolve './bus': -2 [ 592.278450][ T8450] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 592.470601][ T8450] usb 6-1: unable to get BOS descriptor or descriptor too short [ 592.474334][ T8450] usb 6-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 592.474364][ T8450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.474383][ T8450] usb 6-1: Product: syz [ 592.474396][ T8450] usb 6-1: Manufacturer: syz [ 592.474404][ T8450] usb 6-1: SerialNumber: syz [ 592.926320][T12894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.926796][T12894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.531504][ T8450] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 593.531557][ T8450] usb 6-1: MIDIStreaming interface descriptor not found [ 593.601312][ T8450] usb 6-1: USB disconnect, device number 45 [ 593.918866][ T8713] udevd[8713]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.853384][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 598.928541][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 598.964764][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 598.967706][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 598.968630][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 600.373183][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 600.389677][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 600.446380][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 600.447695][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 600.448580][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 600.919623][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 601.000596][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 601.003035][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 601.082423][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 601.083101][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 601.174838][ T5627] Bluetooth: hci1: command tx timeout [ 602.728446][ T5623] Bluetooth: hci3: command tx timeout [ 603.094295][ T5623] Bluetooth: hci4: command tx timeout [ 603.272092][ T5623] Bluetooth: hci1: command tx timeout [ 603.467844][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 603.528116][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 603.530094][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 603.531013][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 603.531607][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 604.774227][ T5627] Bluetooth: hci3: command tx timeout [ 605.211255][ T5627] Bluetooth: hci4: command tx timeout [ 605.364476][ T5627] Bluetooth: hci1: command tx timeout [ 605.849723][ T5627] Bluetooth: hci7: command tx timeout [ 606.855294][ T5627] Bluetooth: hci3: command tx timeout [ 607.278098][ T5627] Bluetooth: hci4: command tx timeout [ 607.441608][ T5627] Bluetooth: hci1: command tx timeout [ 607.932901][ T5627] Bluetooth: hci7: command tx timeout [ 608.316102][T12840] tipc: Disabling bearer [ 608.434694][ T1048] tipc: Node number set to 2466597210 [ 609.047389][ T5627] Bluetooth: hci3: command tx timeout [ 609.844129][ T5627] Bluetooth: hci4: command tx timeout [ 609.974270][ T5627] Bluetooth: hci7: command tx timeout [ 612.054404][ T5627] Bluetooth: hci7: command tx timeout [ 612.351681][T12858] syz_tun (unregistering): left allmulticast mode [ 612.847890][ T1676] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.288300][ T1676] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.876790][ T1676] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.306402][ T1676] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.964557][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2037'. [ 616.031257][T12917] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.031473][T12917] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.031677][T12917] bridge_slave_0: entered allmulticast mode [ 616.033487][T12917] bridge_slave_0: entered promiscuous mode [ 616.177235][T12917] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.177403][T12917] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.177602][T12917] bridge_slave_1: entered allmulticast mode [ 616.180149][T12917] bridge_slave_1: entered promiscuous mode [ 616.293337][T12912] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.293549][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.293753][T12912] bridge_slave_0: entered allmulticast mode [ 616.319555][T12912] bridge_slave_0: entered promiscuous mode [ 616.359689][T12912] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.360095][T12912] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.360404][T12912] bridge_slave_1: entered allmulticast mode [ 616.362961][T12912] bridge_slave_1: entered promiscuous mode [ 616.414587][T12917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.517070][T12917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.640867][T12912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.641563][T12922] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.641894][T12922] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.642117][T12922] bridge_slave_0: entered allmulticast mode [ 616.647012][T12922] bridge_slave_0: entered promiscuous mode [ 616.734514][T12912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.735229][T12922] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.735493][T12922] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.735769][T12922] bridge_slave_1: entered allmulticast mode [ 616.737566][T12922] bridge_slave_1: entered promiscuous mode [ 616.739591][T12906] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.739745][T12906] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.739919][T12906] bridge_slave_0: entered allmulticast mode [ 616.752752][T12906] bridge_slave_0: entered promiscuous mode [ 616.786310][T12917] team0: Port device team_slave_0 added [ 616.974785][ T1676] bridge_slave_1: left allmulticast mode [ 616.974808][ T1676] bridge_slave_1: left promiscuous mode [ 616.974994][ T1676] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.114170][ T1048] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 617.312086][ T1048] usb 6-1: unable to get BOS descriptor or descriptor too short [ 617.313239][ T1048] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 617.313264][ T1048] usb 6-1: config 64 has no interface number 0 [ 617.313306][ T1048] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 617.313321][ T1048] usb 6-1: config 64 interface 44 has no altsetting 0 [ 617.393530][ T1048] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 617.393549][ T1048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.393559][ T1048] usb 6-1: Product: syz [ 617.393566][ T1048] usb 6-1: Manufacturer: syz [ 617.393574][ T1048] usb 6-1: SerialNumber: syz [ 617.641567][T13011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.643527][T13011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.705646][T13011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.706635][T13011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.840600][ T1048] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 617.853584][ T1048] usb 6-1: USB disconnect, device number 46 [ 617.994925][ T1676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.075134][ T1676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.097539][ T1676] bond0 (unregistering): Released all slaves [ 618.136581][T12906] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.136774][T12906] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.136995][T12906] bridge_slave_1: entered allmulticast mode [ 618.138991][T12906] bridge_slave_1: entered promiscuous mode [ 618.142684][T12917] team0: Port device team_slave_1 added [ 618.589750][T12912] team0: Port device team_slave_0 added [ 618.658122][T12922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.762562][T12912] team0: Port device team_slave_1 added [ 618.772149][T12922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.804534][T12906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.809038][T12917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.809053][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.809078][T12917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.988726][T12906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.991005][T12917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.991019][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.991045][T12917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.581677][T12912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.581694][T12912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.581719][T12912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.588730][T12922] team0: Port device team_slave_0 added [ 619.705651][ T5736] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 619.846213][T12912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.846229][T12912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.846251][T12912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.850230][T12922] team0: Port device team_slave_1 added [ 619.922129][T12906] team0: Port device team_slave_0 added [ 619.973451][ T5736] usb 6-1: unable to get BOS descriptor or descriptor too short [ 619.976945][ T5736] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 619.976972][ T5736] usb 6-1: config 64 has no interface number 0 [ 619.977014][ T5736] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 619.977041][ T5736] usb 6-1: config 64 interface 44 has no altsetting 0 [ 619.982750][ T5736] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 619.982780][ T5736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.982796][ T5736] usb 6-1: Product: syz [ 619.982808][ T5736] usb 6-1: Manufacturer: syz [ 619.982818][ T5736] usb 6-1: SerialNumber: syz [ 620.133870][T12906] team0: Port device team_slave_1 added [ 620.261393][T12922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.261407][T12922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.261432][T12922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.296736][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.300626][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.313478][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.317806][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.401071][ T5736] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 620.421221][ T5736] usb 6-1: USB disconnect, device number 47 [ 620.590735][T12917] hsr_slave_0: entered promiscuous mode [ 620.591941][T12917] hsr_slave_1: entered promiscuous mode [ 620.622858][T12922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.622869][T12922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.622884][T12922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.669880][T12906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.669894][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.669917][T12906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.796449][T12906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.796459][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.796474][T12906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.851998][T12912] hsr_slave_0: entered promiscuous mode [ 620.853186][T12912] hsr_slave_1: entered promiscuous mode [ 620.865712][T12912] debugfs: 'hsr0' already exists in 'hsr' [ 620.865738][T12912] Cannot create hsr debugfs directory [ 620.976504][T13029] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2046'. [ 621.074429][ T1676] hsr_slave_0: left promiscuous mode [ 621.095839][ T1676] hsr_slave_1: left promiscuous mode [ 621.096714][ T1676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.096737][ T1676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.135294][ T1676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.135320][ T1676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.222804][ T1676] veth1_macvtap: left promiscuous mode [ 621.222882][ T1676] veth0_macvtap: left promiscuous mode [ 621.223043][ T1676] veth1_vlan: left promiscuous mode [ 621.223147][ T1676] veth0_vlan: left promiscuous mode [ 622.064797][ T1676] team0 (unregistering): Port device team_slave_1 removed [ 622.104905][ T1676] team0 (unregistering): Port device team_slave_0 removed [ 622.451978][T12922] hsr_slave_0: entered promiscuous mode [ 622.453220][T12922] hsr_slave_1: entered promiscuous mode [ 622.467510][T12922] debugfs: 'hsr0' already exists in 'hsr' [ 622.467531][T12922] Cannot create hsr debugfs directory [ 622.467894][ T5844] IPVS: starting estimator thread 0... [ 622.554633][T13032] IPVS: using max 12 ests per chain, 28800 per kthread [ 622.570005][T12906] hsr_slave_0: entered promiscuous mode [ 622.575119][T12906] hsr_slave_1: entered promiscuous mode [ 622.578722][T12906] debugfs: 'hsr0' already exists in 'hsr' [ 622.578748][T12906] Cannot create hsr debugfs directory [ 624.248795][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 624.493075][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.511455][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.011739][ T8350] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 625.216681][ T8350] usb 6-1: unable to get BOS descriptor or descriptor too short [ 625.218444][ T8350] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 625.218468][ T8350] usb 6-1: config 64 has no interface number 0 [ 625.218509][ T8350] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 625.218536][ T8350] usb 6-1: config 64 interface 44 has no altsetting 0 [ 625.220839][ T8350] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 625.220866][ T8350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.220886][ T8350] usb 6-1: Product: syz [ 625.220900][ T8350] usb 6-1: Manufacturer: syz [ 625.220915][ T8350] usb 6-1: SerialNumber: syz [ 625.482729][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.483328][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.489490][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.490293][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.573870][ T8350] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 625.593462][ T8350] usb 6-1: USB disconnect, device number 48 [ 625.796535][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 626.342643][ T1661] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.635543][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 627.479236][ T1661] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.521987][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 628.280696][ T1661] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.444156][ T1048] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 628.662661][ T1048] usb 6-1: unable to get BOS descriptor or descriptor too short [ 628.666175][ T1048] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 628.666201][ T1048] usb 6-1: config 64 has no interface number 0 [ 628.666241][ T1048] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 628.666274][ T1048] usb 6-1: config 64 interface 44 has no altsetting 0 [ 628.675463][ T1048] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 628.675492][ T1048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.675512][ T1048] usb 6-1: Product: syz [ 628.675526][ T1048] usb 6-1: Manufacturer: syz [ 628.675539][ T1048] usb 6-1: SerialNumber: syz [ 628.931245][ T1661] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.013395][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.040195][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.057782][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.061008][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.155492][ T1048] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 629.174718][ T1048] usb 6-1: USB disconnect, device number 49 [ 631.234281][ T37] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 631.391797][ T37] usb 6-1: Using ep0 maxpacket: 16 [ 631.409260][ T37] usb 6-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 631.409314][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 631.409340][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 631.409365][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 631.409391][ T37] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.422543][ T37] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 631.422571][ T37] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 631.422590][ T37] usb 6-1: Manufacturer: syz [ 631.436640][ T37] usb 6-1: config 0 descriptor?? [ 631.756147][ T37] rc_core: IR keymap rc-hauppauge not found [ 631.756167][ T37] Registered IR keymap rc-empty [ 631.756567][ T37] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 631.761799][ T1661] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.776054][ T37] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 631.809416][ T37] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 631.812522][ T37] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input51 [ 631.818985][ T37] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 631.841978][ T37] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 631.854420][ T37] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 631.874501][ T37] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 631.895590][ T37] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 631.923623][ T37] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 631.936151][ T37] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 631.954570][ T37] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 631.975373][ T37] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 631.994746][ T37] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 632.023917][ T37] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 632.023942][ T37] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 632.131306][ T37] usb 6-1: USB disconnect, device number 50 [ 632.911308][ T1661] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.490656][ T1661] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.747781][T13256] netlink: 'syz.5.2069': attribute type 8 has an invalid length. [ 633.747802][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2069'. [ 634.150484][T13256] veth1_to_team: entered promiscuous mode [ 634.151995][T13256] gretap0: entered promiscuous mode [ 634.174327][T13256] veth1_to_team: left promiscuous mode [ 634.196260][T13256] gretap0: left promiscuous mode [ 634.525394][ T1661] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.003527][T13277] netlink: 'syz.5.2072': attribute type 39 has an invalid length. [ 638.666029][ T37] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 638.686144][ T1661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.686179][ T1661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.832773][ T37] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.832825][ T37] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 638.832850][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 638.832886][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 638.832918][ T37] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 638.904832][ T37] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 638.904862][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.904879][ T37] usb 6-1: Product: syz [ 638.904890][ T37] usb 6-1: Manufacturer: syz [ 638.904903][ T37] usb 6-1: SerialNumber: syz [ 638.922129][ T37] usb 6-1: config 0 descriptor?? [ 638.951585][ T37] xbox_remote_probe: endpoint_in message size==0? [ 639.146837][T13344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.147423][T13344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.786912][ T1609] usb 6-1: USB disconnect, device number 51 [ 639.952565][ T1661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.952598][ T1661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.655882][T13396] netlink: 'syz.5.2079': attribute type 1 has an invalid length. [ 640.750011][T13396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 640.928740][T13405] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2079'. [ 641.004790][ T1661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.004812][ T1661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.250345][T13399] bond1: (slave veth3): Enslaving as an active interface with a down link [ 641.371606][T13396] bond1: (slave dummy0): making interface the new active one [ 641.373481][T13396] dummy0: entered promiscuous mode [ 641.373924][T13396] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 641.495280][T13405] bond1: (slave dummy0): Releasing active interface [ 641.495411][T13405] dummy0 (unregistering): left promiscuous mode [ 641.554477][T13409] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2079'. [ 641.914234][ T1609] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 642.047165][ T1661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.047188][ T1661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.074228][ T1609] usb 6-1: Using ep0 maxpacket: 16 [ 642.081664][ T1609] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.081716][ T1609] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 642.081730][ T1609] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 642.081743][ T1609] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.082846][ T1609] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 642.082873][ T1609] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 642.082892][ T1609] usb 6-1: Manufacturer: syz [ 642.093415][ T1609] usb 6-1: config 0 descriptor?? [ 643.078485][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13 [ 643.416561][ T1661] bridge_slave_1: left allmulticast mode [ 643.416588][ T1661] bridge_slave_1: left promiscuous mode [ 643.416761][ T1661] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.515001][ T1661] bridge_slave_0: left allmulticast mode [ 643.515024][ T1661] bridge_slave_0: left promiscuous mode [ 643.522113][ T1661] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.415411][ T1661] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 644.415430][ T1661] bridge0 (unregistering): left promiscuous mode [ 644.615087][ T1661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.639639][ T5628] usb 6-1: USB disconnect, device number 52 [ 644.714905][ T1661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.764144][ T1661] bond0 (unregistering): Released all slaves [ 644.772133][ T1661] bond1 (unregistering): Released all slaves [ 645.499284][ T1661] bond0 (unregistering): Released all slaves [ 646.385086][ T1661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.464863][ T1661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.474249][ T8350] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 646.486998][ T1661] bond0 (unregistering): Released all slaves [ 646.728267][ T8350] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.728321][ T8350] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 646.728346][ T8350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 646.728371][ T8350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 646.728393][ T8350] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 646.876342][ T8350] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 646.876371][ T8350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.876391][ T8350] usb 6-1: Product: syz [ 646.876405][ T8350] usb 6-1: Manufacturer: syz [ 646.876422][ T8350] usb 6-1: SerialNumber: syz [ 646.917181][ T8350] usb 6-1: config 0 descriptor?? [ 646.964740][ T8350] xbox_remote_probe: endpoint_in message size==0? [ 647.195577][T13451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.196067][T13451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.359443][ T1661] tipc: Left network mode [ 647.545178][T12917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 647.613602][T12917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 647.619158][T12917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 647.702553][T12917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 647.718306][ T5269] 8021q: adding VLAN 0 to HW filter on device eth14 [ 647.778910][T12917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 647.820169][T12917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 647.821660][T12917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 647.858999][T12917] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.011674][ T1661] rxrpc: Call ffff88803d72f1c0 still in use (1,Complete,1489,0)! [ 648.144694][ T5736] usb 6-1: USB disconnect, device number 53 [ 648.729424][T12912] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 648.823855][T12912] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.835105][T12912] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 648.891410][T12912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.911517][T12912] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 648.947748][T12912] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.960013][T12912] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 649.001047][T12912] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 649.005639][T13488] tipc: Started in network mode [ 649.005669][T13488] tipc: Node identity 9eff8496bed2, cluster identity 4711 [ 649.006012][T13488] tipc: Enabled bearer , priority 0 [ 649.073250][T13488] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2086'. [ 649.073275][T13488] bridge_slave_1: default FDB implementation only supports local addresses [ 649.084495][T13489] syzkaller0: entered promiscuous mode [ 649.084521][T13489] syzkaller0: entered allmulticast mode [ 649.304561][T13487] tipc: Resetting bearer [ 649.476406][T13487] tipc: Disabling bearer [ 649.819498][T12922] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 649.857924][T12922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 649.866381][T12922] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 649.913007][T12922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 649.927174][T12922] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 649.957482][T12922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 649.976897][T12917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.986000][ T8350] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 650.030433][T12922] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 650.048209][T12922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 650.159652][ T8350] usb 6-1: Using ep0 maxpacket: 16 [ 650.175080][ T8350] usb 6-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 650.175143][ T8350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 650.175164][ T8350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 650.175178][ T8350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 650.175192][ T8350] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.176197][ T8350] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 650.176224][ T8350] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 650.176243][ T8350] usb 6-1: Manufacturer: syz [ 650.179407][ T8350] usb 6-1: config 0 descriptor?? [ 650.420304][T12917] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.484226][ T8350] rc_core: IR keymap rc-hauppauge not found [ 650.484246][ T8350] Registered IR keymap rc-empty [ 650.484653][ T8350] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 650.488677][T12906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 650.505395][ T8350] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 650.536613][ T8350] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 650.553675][ T8350] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input52 [ 650.556361][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.584489][ T8350] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 650.584680][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.584855][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.596256][T12906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 650.607338][ T8350] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 650.631102][ T8350] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 650.651667][ T8350] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 650.666957][ T8350] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 650.708463][ T8350] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 650.728490][ T8350] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 650.744778][ T8350] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 650.761415][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.766096][ T8350] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 650.784460][ T8350] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 650.788354][T12906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 650.820957][ T8350] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 650.820981][ T8350] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 650.893210][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 650.931460][ T9483] usb 6-1: USB disconnect, device number 54 [ 650.943447][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.943534][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.960860][T12906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 651.002119][T12906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.187788][T12912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.295968][T12912] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.358878][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.359063][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.417352][T12922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.457323][ T8260] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.457550][ T8260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.662817][T12922] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.730460][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.730686][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.782965][T12906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.806795][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.807031][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.130069][T12906] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.249546][ T1676] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.249698][ T1676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.329974][ T8260] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.330134][ T8260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.581085][T12917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.938062][T12912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.198588][T12917] veth0_vlan: entered promiscuous mode [ 654.373894][T12917] veth1_vlan: entered promiscuous mode [ 654.474918][T12922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.763530][T12912] veth0_vlan: entered promiscuous mode [ 654.841574][T12906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.002130][T12912] veth1_vlan: entered promiscuous mode [ 655.038939][T12917] veth0_macvtap: entered promiscuous mode [ 655.055898][ T8350] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 655.137191][T12917] veth1_macvtap: entered promiscuous mode [ 655.206847][ T8350] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.206917][ T8350] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 655.206932][ T8350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 655.206946][ T8350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 655.206958][ T8350] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.236619][ T8350] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 655.236648][ T8350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.236667][ T8350] usb 6-1: Product: syz [ 655.236681][ T8350] usb 6-1: Manufacturer: syz [ 655.236695][ T8350] usb 6-1: SerialNumber: syz [ 655.269763][T12922] veth0_vlan: entered promiscuous mode [ 655.275347][ T8350] usb 6-1: config 0 descriptor?? [ 655.302841][ T8350] xbox_remote_probe: endpoint_in message size==0? [ 655.446048][T12917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.472623][T12922] veth1_vlan: entered promiscuous mode [ 655.491809][T13585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.492359][T13585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.540999][T12917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.567081][T12912] veth0_macvtap: entered promiscuous mode [ 655.607097][T12906] veth0_vlan: entered promiscuous mode [ 655.642078][T12912] veth1_macvtap: entered promiscuous mode [ 655.677246][ T159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.693943][ T159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.699186][ T159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.724071][ T159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.765056][T12906] veth1_vlan: entered promiscuous mode [ 655.961310][T12912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.165208][T12922] veth0_macvtap: entered promiscuous mode [ 656.297477][T12912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.590712][ T6027] usb 6-1: USB disconnect, device number 55 [ 656.595442][T12922] veth1_macvtap: entered promiscuous mode [ 656.726254][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.728757][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.746520][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.791400][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.817890][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.817910][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.857876][T12906] veth0_macvtap: entered promiscuous mode [ 656.970677][T12906] veth1_macvtap: entered promiscuous mode [ 657.088656][T12922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.625819][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.625839][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.639998][T12922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.641696][T13621] tipc: Enabled bearer , priority 0 [ 657.717190][T13620] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2093'. [ 657.717217][T13620] bridge_slave_1: default FDB implementation only supports local addresses [ 657.754964][T13621] syzkaller0: entered promiscuous mode [ 657.754985][T13621] syzkaller0: entered allmulticast mode [ 658.304563][ T1322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.349156][T13619] tipc: Resetting bearer [ 658.597277][T13619] tipc: Disabling bearer [ 658.757387][ T1322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.834994][ T1322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.859880][ T1322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.913661][T13649] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 658.925359][T13649] IPVS: rr: FWM 3 0x00000003 - no destination available [ 658.928037][ T1048] IPVS: starting estimator thread 0... [ 658.970760][ T1676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.970796][ T1676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.026503][T13650] IPVS: using max 12 ests per chain, 28800 per kthread [ 659.159217][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 659.220976][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 659.232786][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 659.251050][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 659.251731][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 659.984811][ T5844] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 660.217390][ T5844] usb 6-1: Using ep0 maxpacket: 16 [ 660.278869][ T8260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.279095][ T8260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.380358][ T5844] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.380454][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 660.380482][ T5844] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 660.380505][ T5844] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.383635][ T5844] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 660.383663][ T5844] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 660.383682][ T5844] usb 6-1: Manufacturer: syz [ 660.478442][ T5844] usb 6-1: config 0 descriptor?? [ 661.467688][ T5623] Bluetooth: hci0: command tx timeout [ 661.716776][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 661.769664][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 661.780320][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 661.797416][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 661.812489][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 662.213574][ T782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.213593][ T782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.516490][ T5844] usb 6-1: USB disconnect, device number 56 [ 662.974146][ T5844] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 663.070763][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.070794][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.145824][ T5844] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.145875][ T5844] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 663.145901][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 663.145927][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 663.145949][ T5844] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.148194][ T5844] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 663.148222][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.148240][ T5844] usb 6-1: Product: syz [ 663.148253][ T5844] usb 6-1: Manufacturer: syz [ 663.148266][ T5844] usb 6-1: SerialNumber: syz [ 663.249015][ T5844] usb 6-1: config 0 descriptor?? [ 663.286077][ T5844] xbox_remote_probe: endpoint_in message size==0? [ 663.466756][T13692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.472266][T13692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.496681][ T5623] Bluetooth: hci0: command tx timeout [ 663.894858][ T5623] Bluetooth: hci1: command tx timeout [ 664.296722][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 664.339366][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 664.410123][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 664.418456][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 664.419477][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 664.836907][T13729] loop4: detected capacity change from 0 to 512 [ 664.878235][T13729] ext2: Bad value for 'barrier' [ 665.589730][ T5627] Bluetooth: hci0: command tx timeout [ 665.619320][ T1609] usb 6-1: USB disconnect, device number 57 [ 665.974191][ T5627] Bluetooth: hci1: command tx timeout [ 666.013669][T13749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2104'. [ 666.203253][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2104'. [ 666.614585][ T5627] Bluetooth: hci2: command tx timeout [ 667.016497][ T6027] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 667.238676][T13653] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.238931][T13653] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.239255][T13653] bridge_slave_0: entered allmulticast mode [ 667.242514][T13653] bridge_slave_0: entered promiscuous mode [ 667.244169][ T6027] usb 6-1: Using ep0 maxpacket: 16 [ 667.246529][ T6027] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.246579][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 667.246608][ T6027] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 667.246630][ T6027] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.248940][ T6027] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 667.248967][ T6027] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 667.248987][ T6027] usb 6-1: Manufacturer: syz [ 667.323817][ T6027] usb 6-1: config 0 descriptor?? [ 667.639458][T13653] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.640153][T13653] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.640796][T13653] bridge_slave_1: entered allmulticast mode [ 667.659295][ T5627] Bluetooth: hci0: command tx timeout [ 667.752237][T13653] bridge_slave_1: entered promiscuous mode [ 667.979561][T13653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.038445][T13653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.054161][ T5627] Bluetooth: hci1: command tx timeout [ 668.292613][T13653] team0: Port device team_slave_0 added [ 668.370189][T13653] team0: Port device team_slave_1 added [ 668.598772][T13653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.598791][T13653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.598818][T13653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.694577][ T5627] Bluetooth: hci2: command tx timeout [ 668.728244][T13653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.728309][T13653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.728347][T13653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.790534][T13679] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.791179][T13679] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.820786][T13679] bridge_slave_0: entered allmulticast mode [ 668.837250][T13679] bridge_slave_0: entered promiscuous mode [ 668.892001][T13679] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.892259][T13679] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.892938][T13679] bridge_slave_1: entered allmulticast mode [ 668.919059][T13679] bridge_slave_1: entered promiscuous mode [ 669.590364][T13679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.664194][ T5736] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 669.669611][T13679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.713772][T13653] hsr_slave_0: entered promiscuous mode [ 669.717121][T13653] hsr_slave_1: entered promiscuous mode [ 669.718593][T13653] debugfs: 'hsr0' already exists in 'hsr' [ 669.718617][T13653] Cannot create hsr debugfs directory [ 669.722058][ T9483] usb 6-1: USB disconnect, device number 58 [ 669.812310][T13834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2113'. [ 669.836268][ T5736] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.836318][ T5736] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 669.836344][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 669.836370][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 669.836391][ T5736] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 669.839402][ T5736] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 669.839427][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.839443][ T5736] usb 5-1: Product: syz [ 669.839454][ T5736] usb 5-1: Manufacturer: syz [ 669.839466][ T5736] usb 5-1: SerialNumber: syz [ 669.943667][ T5736] usb 5-1: config 0 descriptor?? [ 669.965568][ T5736] xbox_remote_probe: endpoint_in message size==0? [ 670.052270][T13679] team0: Port device team_slave_0 added [ 670.134570][ T5627] Bluetooth: hci1: command tx timeout [ 670.154566][T13679] team0: Port device team_slave_1 added [ 670.160315][T13825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.160861][T13825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.766801][T13679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.766820][T13679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.766847][T13679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.774254][ T5627] Bluetooth: hci2: command tx timeout [ 670.861328][T13679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.861339][T13679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.861354][T13679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.930241][ T9483] usb 5-1: USB disconnect, device number 18 [ 671.340670][T13679] hsr_slave_0: entered promiscuous mode [ 671.342835][T13679] hsr_slave_1: entered promiscuous mode [ 671.345155][T13679] debugfs: 'hsr0' already exists in 'hsr' [ 671.345181][T13679] Cannot create hsr debugfs directory [ 671.419942][T13719] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.420299][T13719] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.422843][T13719] bridge_slave_0: entered allmulticast mode [ 671.430771][T13719] bridge_slave_0: entered promiscuous mode [ 671.434139][ T8350] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 671.468794][T13719] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.469045][T13719] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.469620][T13719] bridge_slave_1: entered allmulticast mode [ 671.472655][T13719] bridge_slave_1: entered promiscuous mode [ 671.610996][ T8350] usb 6-1: Using ep0 maxpacket: 16 [ 671.618467][ T8350] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.618531][ T8350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 671.618558][ T8350] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 671.618577][ T8350] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.620642][ T8350] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 671.620669][ T8350] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 671.620687][ T8350] usb 6-1: Manufacturer: syz [ 671.633525][ T8350] usb 6-1: config 0 descriptor?? [ 671.848331][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2121'. [ 671.963280][T13719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.157876][T13892] IPVS: fo: FWM 3 0x00000003 - no destination available [ 672.399615][T13719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.509044][T13900] netlink: 'syz.4.2127': attribute type 1 has an invalid length. [ 672.509066][T13900] netlink: 'syz.4.2127': attribute type 2 has an invalid length. [ 672.854446][ T5627] Bluetooth: hci2: command tx timeout [ 673.240517][T13719] team0: Port device team_slave_0 added [ 673.349567][T13719] team0: Port device team_slave_1 added [ 673.524604][T13719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.524619][T13719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.524645][T13719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.685978][ T8350] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 673.748594][T13719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.748605][T13719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.748619][T13719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.848978][ T8350] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.849030][ T8350] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 673.849061][ T8350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 673.849076][ T8350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 673.849087][ T8350] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.907794][ T8350] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 673.907824][ T8350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.907843][ T8350] usb 5-1: Product: syz [ 673.907856][ T8350] usb 5-1: Manufacturer: syz [ 673.907869][ T8350] usb 5-1: SerialNumber: syz [ 673.941165][ T8350] usb 5-1: config 0 descriptor?? [ 673.968270][ T8350] xbox_remote_probe: endpoint_in message size==0? [ 674.045672][T13719] hsr_slave_0: entered promiscuous mode [ 674.057691][T13719] hsr_slave_1: entered promiscuous mode [ 674.059339][T13719] debugfs: 'hsr0' already exists in 'hsr' [ 674.059362][T13719] Cannot create hsr debugfs directory [ 674.087732][ T5269] 8021q: adding VLAN 0 to HW filter on device eth15 [ 674.170694][T13915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.172376][T13915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.226488][ T9] usb 6-1: USB disconnect, device number 59 [ 674.725759][ T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 674.785750][ T5628] usb 5-1: USB disconnect, device number 19 [ 674.936883][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 674.938932][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 674.941190][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 674.941218][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 674.941238][ T9] usb 6-1: Product: syz [ 674.941249][ T9] usb 6-1: Manufacturer: syz [ 674.941256][ T9] usb 6-1: SerialNumber: syz [ 674.994400][ T9] usb 6-1: config 0 descriptor?? [ 675.001642][T13920] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 675.016761][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 675.016790][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 675.410509][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.412430][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.940325][T13926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.942148][T13926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.411681][ T6027] usb 6-1: USB disconnect, device number 60 [ 676.620145][ T6027] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 676.858184][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 676.860233][ T6027] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 676.860260][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 676.860280][ T6027] usb 6-1: Product: syz [ 676.860294][ T6027] usb 6-1: Manufacturer: syz [ 676.860317][ T6027] usb 6-1: SerialNumber: syz [ 676.868443][ T6027] usb 6-1: config 0 descriptor?? [ 676.869633][T13926] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 676.871739][ T6027] hub 6-1:0.0: bad descriptor, ignoring hub [ 676.871772][ T6027] hub 6-1:0.0: probe with driver hub failed with error -5 [ 677.080586][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.081134][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.239724][T13963] IPVS: fo: FWM 3 0x00000003 - no destination available [ 677.315393][ T5736] usb 6-1: USB disconnect, device number 61 [ 677.412362][T13679] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.599101][ T5269] 8021q: adding VLAN 0 to HW filter on device eth16 [ 677.814254][ T5736] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 677.987413][ T5736] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.987464][ T5736] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 677.987488][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 677.987510][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 677.987532][ T5736] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 677.989842][ T5736] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 677.989873][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.989894][ T5736] usb 5-1: Product: syz [ 677.989908][ T5736] usb 5-1: Manufacturer: syz [ 677.989921][ T5736] usb 5-1: SerialNumber: syz [ 678.001103][ T5736] usb 5-1: config 0 descriptor?? [ 678.026220][ T5736] xbox_remote_probe: endpoint_in message size==0? [ 678.310582][T13971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.311154][T13971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.300990][T13679] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.877329][ T9483] usb 5-1: USB disconnect, device number 20 [ 680.023110][ T6027] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 680.049483][T13679] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.175505][ T6027] usb 6-1: Using ep0 maxpacket: 32 [ 680.193298][ T6027] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 680.220950][ T6027] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 680.220981][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 680.221001][ T6027] usb 6-1: Product: syz [ 680.221015][ T6027] usb 6-1: Manufacturer: syz [ 680.221029][ T6027] usb 6-1: SerialNumber: syz [ 680.263525][ T6027] usb 6-1: config 0 descriptor?? [ 680.270828][T14007] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 680.278823][ T6027] hub 6-1:0.0: bad descriptor, ignoring hub [ 680.278859][ T6027] hub 6-1:0.0: probe with driver hub failed with error -5 [ 680.722138][T14007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.722746][T14007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.893302][T13679] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.015927][T14028] tipc: Started in network mode [ 681.015954][T14028] tipc: Node identity ac14140f, cluster identity 4711 [ 681.050289][T14028] tipc: New replicast peer: 255.255.255.255 [ 681.082544][T14028] tipc: Enabled bearer , priority 10 [ 681.206854][T14029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.207396][T14029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.227174][ T5628] usb 6-1: USB disconnect, device number 62 [ 681.816386][ T5628] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 681.967795][ T5628] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 681.972235][ T5628] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 681.972264][ T5628] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 681.972284][ T5628] usb 6-1: Product: syz [ 681.972297][ T5628] usb 6-1: Manufacturer: syz [ 681.972311][ T5628] usb 6-1: SerialNumber: syz [ 681.984713][ T5628] usb 6-1: config 0 descriptor?? [ 681.988307][T14007] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 681.998926][ T5628] hub 6-1:0.0: bad descriptor, ignoring hub [ 681.998972][ T5628] hub 6-1:0.0: probe with driver hub failed with error -5 [ 682.087695][T13719] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.167876][ T10] tipc: Node number set to 2886997007 [ 682.202735][T14007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.203229][T14007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.397063][ T10] usb 6-1: USB disconnect, device number 63 [ 682.729603][T13719] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.015454][ T10] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 683.178054][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.178701][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 683.178729][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 683.178755][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 683.178777][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.182161][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 683.182189][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.182209][ T10] usb 5-1: Product: syz [ 683.182222][ T10] usb 5-1: Manufacturer: syz [ 683.182237][ T10] usb 5-1: SerialNumber: syz [ 683.193329][ T10] usb 5-1: config 0 descriptor?? [ 683.213930][ T10] xbox_remote_probe: endpoint_in message size==0? [ 683.318138][T13719] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.351338][T14093] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2157'. [ 683.403035][T14075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.403613][T14075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.421354][T14093] veth1_to_team: entered promiscuous mode [ 683.475452][T14093] gretap0: entered promiscuous mode [ 683.502235][T14093] hsr1: entered promiscuous mode [ 683.871635][T13719] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.179729][ T5628] usb 5-1: USB disconnect, device number 21 [ 684.964100][ T8351] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 685.127266][ T8351] usb 6-1: Using ep0 maxpacket: 32 [ 685.129215][ T8351] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 685.131802][ T8351] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 685.131829][ T8351] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 685.131850][ T8351] usb 6-1: Product: syz [ 685.131864][ T8351] usb 6-1: Manufacturer: syz [ 685.131878][ T8351] usb 6-1: SerialNumber: syz [ 685.145486][ T8351] usb 6-1: config 0 descriptor?? [ 685.147743][T14125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 685.154791][ T8351] hub 6-1:0.0: bad descriptor, ignoring hub [ 685.154825][ T8351] hub 6-1:0.0: probe with driver hub failed with error -5 [ 685.576203][T14125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.576665][T14125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.643872][T13653] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 685.758716][T13653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 685.768471][T13653] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 685.818662][T13653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 685.831090][T13653] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 685.899932][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.900023][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.970130][T13653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 686.042207][T13653] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 686.065647][ T5628] usb 6-1: USB disconnect, device number 64 [ 686.157998][T13653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 686.360170][ T5628] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 686.516631][ T5628] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 686.516695][ T5628] usb 5-1: can't read configurations, error -61 [ 686.650595][ T5628] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 686.796490][ T5628] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 686.796527][ T5628] usb 5-1: can't read configurations, error -61 [ 686.796940][ T5628] usb usb5-port1: attempt power cycle [ 687.164102][ T5628] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 687.214864][ T5628] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 687.214901][ T5628] usb 5-1: can't read configurations, error -61 [ 687.354151][ T5628] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 687.362591][T13679] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 687.400956][ T5628] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 687.400992][ T5628] usb 5-1: can't read configurations, error -61 [ 687.418735][ T5628] usb usb5-port1: unable to enumerate USB device [ 687.497773][T13679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 687.544471][T13679] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 687.640586][T13679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 687.675593][T13679] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 687.729294][T13679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 687.922026][T13679] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 687.953299][T13679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.470356][T13653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.685714][T14236] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2177'. [ 688.898064][T13719] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 688.933776][T13719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.944365][T13719] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 688.982490][T13719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.990108][T13719] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 689.068637][T13719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 689.086119][T13653] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.093294][T13719] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 689.142956][T13719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 689.274645][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.274785][ T8252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.321916][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.325383][ T8252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.466835][T14267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2182'. [ 689.931253][T13679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.240653][T13679] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.308836][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.311017][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.749072][T14302] netlink: 'syz.5.2190': attribute type 13 has an invalid length. [ 690.975073][T14310] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2192'. [ 691.212452][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.212687][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.601305][T13719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.604261][ T5628] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 691.788103][ T5628] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.788155][ T5628] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 691.788180][ T5628] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 691.788204][ T5628] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 691.788225][ T5628] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.791539][ T5628] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 691.791568][ T5628] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.791588][ T5628] usb 6-1: Product: syz [ 691.791602][ T5628] usb 6-1: Manufacturer: syz [ 691.791615][ T5628] usb 6-1: SerialNumber: syz [ 691.894523][ T5628] usb 6-1: config 0 descriptor?? [ 691.910714][ T5628] xbox_remote_probe: endpoint_in message size==0? [ 692.172553][T14319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.173112][T14319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.607293][T13719] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.845762][ T9] usb 6-1: USB disconnect, device number 65 [ 693.076858][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.076996][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.085419][T13653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.452726][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.452815][ T8250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.840453][T14356] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2197'. [ 695.158587][T13653] veth0_vlan: entered promiscuous mode [ 695.350687][T13653] veth1_vlan: entered promiscuous mode [ 695.940194][T13653] veth0_macvtap: entered promiscuous mode [ 696.033881][T13653] veth1_macvtap: entered promiscuous mode [ 696.470061][T13653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.505445][T13679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.692537][T13653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.918457][T13719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.981758][ T149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.993557][ T149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.083287][ T149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.114234][ T149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.744202][T13679] veth0_vlan: entered promiscuous mode [ 698.816928][T13719] veth0_vlan: entered promiscuous mode [ 698.836278][T13679] veth1_vlan: entered promiscuous mode [ 698.956349][T13719] veth1_vlan: entered promiscuous mode [ 699.109555][ T5627] block nbd2: Receive control failed (result -32) [ 699.117005][ T5623] block nbd2: Receive control failed (result -32) [ 699.388982][T13679] veth0_macvtap: entered promiscuous mode [ 699.502011][T13719] veth0_macvtap: entered promiscuous mode [ 699.519384][T13679] veth1_macvtap: entered promiscuous mode [ 699.533275][ T782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.533294][ T782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.620913][T13719] veth1_macvtap: entered promiscuous mode [ 699.778039][ T782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.778057][ T782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.815841][T13679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.933814][T13679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.982219][T13719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.029738][ T3430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.041881][ T3430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.062460][T13719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.063924][ T3430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.082405][ T3430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.283680][ T782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.284750][T14496] netlink: 'syz.4.2225': attribute type 4 has an invalid length. [ 700.388474][ T782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.458322][ T782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.460519][ T782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.789298][ T8350] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 701.008386][ T8350] usb 4-1: unable to get BOS descriptor or descriptor too short [ 701.012667][ T8350] usb 4-1: config 64 has an invalid interface number: 44 but max is 0 [ 701.012696][ T8350] usb 4-1: config 64 has no interface number 0 [ 701.012739][ T8350] usb 4-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 701.012767][ T8350] usb 4-1: config 64 interface 44 has no altsetting 0 [ 701.017775][ T8350] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 701.017805][ T8350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.017823][ T8350] usb 4-1: Product: syz [ 701.017837][ T8350] usb 4-1: Manufacturer: syz [ 701.017850][ T8350] usb 4-1: SerialNumber: syz [ 701.239467][T14503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.240035][T14503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.241930][T14503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.242615][T14503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.432309][T14514] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 701.797383][ T8350] iowarrior 4-1:64.44: no interrupt-out endpoint found [ 702.020891][ T8350] usb 4-1: USB disconnect, device number 15 [ 703.689938][T14535] netlink: 'syz.4.2236': attribute type 4 has an invalid length. [ 703.808155][ T782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.808176][ T782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.451172][ T782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.451191][ T782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.895534][T14569] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 705.119486][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.119506][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.407385][ T6066] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 705.486623][ T8252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.486642][ T8252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.523344][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 705.570334][ T6066] usb 6-1: unable to get BOS descriptor or descriptor too short [ 705.645312][ T6066] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 705.645341][ T6066] usb 6-1: config 64 has no interface number 0 [ 705.645404][ T6066] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 705.645431][ T6066] usb 6-1: config 64 interface 44 has no altsetting 0 [ 705.724199][ T6066] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 705.724228][ T6066] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.724257][ T6066] usb 6-1: Product: syz [ 705.724266][ T6066] usb 6-1: Manufacturer: syz [ 705.724274][ T6066] usb 6-1: SerialNumber: syz [ 706.044129][T14578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.047395][T14578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.106649][T14578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.127341][T14578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.894728][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 706.946651][ T6066] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 707.006897][ T6066] usb 6-1: USB disconnect, device number 66 [ 707.076449][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 707.077886][ T10] usb 3-1: config 64 has an invalid interface number: 44 but max is 0 [ 707.077912][ T10] usb 3-1: config 64 has no interface number 0 [ 707.077955][ T10] usb 3-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 707.077981][ T10] usb 3-1: config 64 interface 44 has no altsetting 0 [ 707.080183][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 707.080214][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.080234][ T10] usb 3-1: Product: syz [ 707.080247][ T10] usb 3-1: Manufacturer: syz [ 707.080260][ T10] usb 3-1: SerialNumber: syz [ 707.156721][T14605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2246'. [ 707.471010][T14597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.472819][T14597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.475181][T14597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.478671][T14597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.627033][ T10] iowarrior 3-1:64.44: no interrupt-out endpoint found [ 707.662400][ T10] usb 3-1: USB disconnect, device number 18 [ 708.534868][T14625] ref_ctr_offset mismatch. inode: 0xbe offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 708.784858][T14630] team0: No ports can be present during mode change [ 708.905535][T14639] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2255'. [ 708.905570][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2255'. [ 708.991299][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 710.387200][ T6066] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 710.559057][ T6066] usb 4-1: unable to get BOS descriptor or descriptor too short [ 710.565869][ T6066] usb 4-1: config 64 has an invalid interface number: 44 but max is 0 [ 710.565897][ T6066] usb 4-1: config 64 has no interface number 0 [ 710.565938][ T6066] usb 4-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 710.565966][ T6066] usb 4-1: config 64 interface 44 has no altsetting 0 [ 710.571189][ T6066] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 710.571218][ T6066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.571237][ T6066] usb 4-1: Product: syz [ 710.571251][ T6066] usb 4-1: Manufacturer: syz [ 710.571265][ T6066] usb 4-1: SerialNumber: syz [ 710.875039][T14668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.877810][T14688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2267'. [ 710.878378][T14668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.881548][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2267'. [ 711.006475][T14668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.007048][T14668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.568527][ T6066] iowarrior 4-1:64.44: no interrupt-out endpoint found [ 711.611138][ T6066] usb 4-1: USB disconnect, device number 16 [ 712.978834][T14739] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2284'. [ 713.623375][ T782] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 715.251173][T14805] syzkaller0: refused to change device tx_queue_len [ 717.974463][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 718.208802][T14900] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2332'. [ 720.791816][T14972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2356'. [ 720.928882][T14975] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2357'. [ 721.673834][T14986] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input53 [ 721.806873][T14996] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2364'. [ 722.831402][T15029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2373'. [ 722.888803][T15029] veth1_to_team: entered promiscuous mode [ 722.895241][T15029] gretap0: entered promiscuous mode [ 722.903148][T15029] debugfs: 'hsr1' already exists in 'hsr' [ 722.903175][T15029] Cannot create hsr debugfs directory [ 722.903197][T15029] hsr1: entered promiscuous mode [ 723.119042][T15039] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2375'. [ 723.814447][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 725.764659][T15089] syzkaller0: entered promiscuous mode [ 725.764687][T15089] syzkaller0: entered allmulticast mode [ 726.432467][T15145] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2408'. [ 726.859581][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 740.030642][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 740.076293][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 740.127484][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 740.132154][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 740.134643][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 742.392638][ T5623] Bluetooth: hci3: command tx timeout [ 742.673242][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 742.698388][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 742.700233][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 742.701185][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 742.701787][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 743.152011][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 743.322404][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 743.323785][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 743.409262][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 743.409907][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 744.041361][ T5627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 744.099818][ T5627] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 744.150786][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 744.169632][ T5627] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 744.173318][ T5627] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 744.193756][ T5627] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 744.455170][ T5627] Bluetooth: hci3: command tx timeout [ 745.014340][ T5623] Bluetooth: hci6: command tx timeout [ 745.505725][ T5623] Bluetooth: hci7: command tx timeout [ 746.454325][ T5623] Bluetooth: hci8: command tx timeout [ 746.534261][ T5623] Bluetooth: hci3: command tx timeout [ 747.122063][ T5623] Bluetooth: hci6: command tx timeout [ 747.399402][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.399462][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.654519][ T5623] Bluetooth: hci7: command tx timeout [ 748.128271][ T5627] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 748.148746][ T5627] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 748.201553][ T5627] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 748.202527][ T5627] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 748.203676][ T5627] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 748.534192][ T5623] Bluetooth: hci8: command tx timeout [ 748.614604][ T5623] Bluetooth: hci3: command tx timeout [ 749.176153][ T5623] Bluetooth: hci6: command tx timeout [ 749.734298][ T5623] Bluetooth: hci7: command tx timeout [ 750.454357][ T5623] Bluetooth: hci9: command tx timeout [ 750.643631][ T5623] Bluetooth: hci8: command tx timeout [ 751.264412][ T5623] Bluetooth: hci6: command tx timeout [ 751.819557][ T5623] Bluetooth: hci7: command tx timeout [ 751.938412][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 752.547107][ T5623] Bluetooth: hci9: command tx timeout [ 752.694179][ T5623] Bluetooth: hci8: command tx timeout [ 754.634176][ T5623] Bluetooth: hci9: command tx timeout [ 755.320917][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12 [ 756.694503][ T5623] Bluetooth: hci9: command tx timeout [ 758.058110][T15201] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.058332][T15201] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.058553][T15201] bridge_slave_0: entered allmulticast mode [ 758.063538][T15201] bridge_slave_0: entered promiscuous mode [ 758.143533][T15201] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.143711][T15201] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.160184][T15201] bridge_slave_1: entered allmulticast mode [ 758.162245][T15201] bridge_slave_1: entered promiscuous mode [ 758.164285][T15194] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.164632][T15194] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.164933][T15194] bridge_slave_0: entered allmulticast mode [ 758.168440][T15194] bridge_slave_0: entered promiscuous mode [ 758.171284][T15206] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.171544][T15206] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.171820][T15206] bridge_slave_0: entered allmulticast mode [ 758.180127][T15206] bridge_slave_0: entered promiscuous mode [ 758.265569][T15194] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.265756][T15194] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.266153][T15194] bridge_slave_1: entered allmulticast mode [ 758.268577][T15194] bridge_slave_1: entered promiscuous mode [ 758.269795][T15206] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.269970][T15206] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.270142][T15206] bridge_slave_1: entered allmulticast mode [ 758.271847][T15206] bridge_slave_1: entered promiscuous mode [ 758.325965][T15216] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.326273][T15216] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.326624][T15216] bridge_slave_0: entered allmulticast mode [ 758.329852][T15216] bridge_slave_0: entered promiscuous mode [ 758.383238][T15211] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.383536][T15211] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.383822][T15211] bridge_slave_0: entered allmulticast mode [ 758.407163][T15211] bridge_slave_0: entered promiscuous mode [ 758.431967][T15216] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.432169][T15216] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.432410][T15216] bridge_slave_1: entered allmulticast mode [ 758.436063][T15216] bridge_slave_1: entered promiscuous mode [ 758.477895][T15211] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.478067][T15211] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.478555][T15211] bridge_slave_1: entered allmulticast mode [ 758.480374][T15211] bridge_slave_1: entered promiscuous mode [ 758.487579][T15201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.515683][T15194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.522372][T15206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.586089][T15201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.607278][T15194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.610599][T15206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.660819][T15216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.704632][T15211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.737371][T15216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.778026][T15211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.782811][T15201] team0: Port device team_slave_0 added [ 758.816784][T15194] team0: Port device team_slave_0 added [ 758.820067][T15206] team0: Port device team_slave_0 added [ 758.845563][T15201] team0: Port device team_slave_1 added [ 758.876426][T15194] team0: Port device team_slave_1 added [ 758.880499][T15206] team0: Port device team_slave_1 added [ 758.925493][T15216] team0: Port device team_slave_0 added [ 758.972973][T15211] team0: Port device team_slave_0 added [ 759.011405][T15216] team0: Port device team_slave_1 added [ 759.653358][T15211] team0: Port device team_slave_1 added [ 759.661728][T15201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.661744][T15201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.661766][T15201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.716070][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 759.718314][T15194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.718325][T15194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.718350][T15194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.720132][T15206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.720141][T15206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.720155][T15206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.748387][T15201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.748403][T15201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.748430][T15201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.788587][T15194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.788759][T15194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.788786][T15194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.795825][T15206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.795839][T15206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.795866][T15206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.839572][T15216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.839595][T15216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.839622][T15216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.869339][T15211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.869355][T15211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.869380][T15211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.880506][T15216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.880523][T15216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.880549][T15216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.891288][T15211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.891304][T15211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.891330][T15211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.138750][T15201] hsr_slave_0: entered promiscuous mode [ 760.148867][T15201] hsr_slave_1: entered promiscuous mode [ 760.158517][T15201] debugfs: 'hsr0' already exists in 'hsr' [ 760.158544][T15201] Cannot create hsr debugfs directory [ 760.175226][T15194] hsr_slave_0: entered promiscuous mode [ 760.177372][T15194] hsr_slave_1: entered promiscuous mode [ 760.179166][T15194] debugfs: 'hsr0' already exists in 'hsr' [ 760.179188][T15194] Cannot create hsr debugfs directory [ 760.194841][T15206] hsr_slave_0: entered promiscuous mode [ 760.197124][T15206] hsr_slave_1: entered promiscuous mode [ 760.198685][T15206] debugfs: 'hsr0' already exists in 'hsr' [ 760.198709][T15206] Cannot create hsr debugfs directory [ 760.263573][T15216] hsr_slave_0: entered promiscuous mode [ 760.271790][T15216] hsr_slave_1: entered promiscuous mode [ 760.272762][T15216] debugfs: 'hsr0' already exists in 'hsr' [ 760.272778][T15216] Cannot create hsr debugfs directory [ 760.290193][T15211] hsr_slave_0: entered promiscuous mode [ 760.292296][T15211] hsr_slave_1: entered promiscuous mode [ 760.296098][T15211] debugfs: 'hsr0' already exists in 'hsr' [ 760.296124][T15211] Cannot create hsr debugfs directory [ 761.321743][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 762.536439][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 763.101318][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8 [ 772.738220][T15194] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 772.773289][T15194] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 772.788147][T15194] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 772.830410][T15194] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 772.871590][T15194] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 772.962629][T15194] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.974612][T15194] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 773.017587][T15194] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 773.428586][T15201] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 773.461259][T15201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 773.491996][T15201] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 773.537732][T15201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 773.573160][T15201] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 773.629959][T15201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 773.686598][T15201] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 773.720759][T15201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 774.334187][T15206] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 774.402788][T15206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 774.441247][T15206] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 774.481094][T15206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 774.502091][T15206] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 774.555448][T15206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 774.716388][T15206] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 774.757789][T15206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 774.838244][T15194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.386828][T15194] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.387321][T15216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 775.437843][T15216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 775.451712][T15216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 775.500532][T15216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 775.525265][T15216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 775.559867][T15216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 775.811557][T15216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 775.887420][T15216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 775.909639][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.909909][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.233509][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.233756][ T8252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.546521][T15211] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 776.580518][T15211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 776.596768][T15211] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 776.690212][T15211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 776.715933][T15211] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 776.776146][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.841417][T15211] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 776.884595][T15201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.897808][T15211] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 776.927657][T15211] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 777.258052][T15201] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.408459][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.410081][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.512140][ T1676] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.512252][ T1676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.672981][T15206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.977486][T15206] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.102372][T15216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.140789][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.141010][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.213349][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.213502][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.329047][T15216] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.420457][T15211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.472417][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.474241][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.590936][ T1676] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.591029][ T1676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.795216][T15211] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.913240][ T8260] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.913471][ T8260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.043595][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.043741][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.247583][T15194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.214924][T15201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.780124][T15194] veth0_vlan: entered promiscuous mode [ 780.907833][T15194] veth1_vlan: entered promiscuous mode [ 781.005751][T15206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.381886][T15194] veth0_macvtap: entered promiscuous mode [ 781.471785][T15216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.500280][T15194] veth1_macvtap: entered promiscuous mode [ 781.912595][T15211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.960798][T15201] veth0_vlan: entered promiscuous mode [ 781.990178][T15194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.051600][T15194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.169375][T15201] veth1_vlan: entered promiscuous mode [ 782.236744][ T60] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.261335][ T60] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.342793][ T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.351496][ T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.751973][T15216] veth0_vlan: entered promiscuous mode [ 783.013868][T15206] veth0_vlan: entered promiscuous mode [ 783.647691][T15216] veth1_vlan: entered promiscuous mode [ 783.949714][T15201] veth0_macvtap: entered promiscuous mode [ 784.190651][T15206] veth1_vlan: entered promiscuous mode [ 784.259629][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.259648][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.260982][T15201] veth1_macvtap: entered promiscuous mode [ 784.522645][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.522664][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.719859][T15201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.721574][T15211] veth0_vlan: entered promiscuous mode [ 784.861738][T15201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.869540][T15216] veth0_macvtap: entered promiscuous mode [ 784.949736][T15216] veth1_macvtap: entered promiscuous mode [ 784.963838][ T782] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.990364][T15211] veth1_vlan: entered promiscuous mode [ 785.009638][ T782] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.019653][ T782] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.031210][T15206] veth0_macvtap: entered promiscuous mode [ 785.082464][ T782] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.312768][T15206] veth1_macvtap: entered promiscuous mode [ 786.016122][T15216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.305155][T15216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.947895][T15206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.408421][ T8253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.662097][ T8253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.694525][T15206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.696029][ T8253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.772835][ T8253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.855612][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.855632][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.857889][T15211] veth0_macvtap: entered promiscuous mode [ 788.091117][ T8260] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.216123][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.217723][T15211] veth1_macvtap: entered promiscuous mode [ 788.263744][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.515590][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.873394][ T3430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.873416][ T3430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.090013][T15211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.498181][T15211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.878507][ T8253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.878526][ T8253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.189334][ T3430] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.337332][ T3430] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.357334][ T3430] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.579994][ T8252] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.813694][ T8252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.813713][ T8252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.970202][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.970222][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.734920][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2450'. [ 793.734967][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2450'. [ 793.938525][T16027] tipc: Started in network mode [ 793.938555][T16027] tipc: Node identity 6a195022c0a2, cluster identity 4711 [ 793.938731][T16027] tipc: Enabled bearer , priority 0 [ 794.034875][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2450'. [ 794.034898][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2450'. [ 794.170467][T16026] tipc: Disabling bearer [ 794.477124][ T1322] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.499605][ T1322] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.499690][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.499703][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.779058][ T1322] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.829299][ T1322] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.214111][ T8253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.214131][ T8253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.012647][T16073] netlink: 'syz.8.2456': attribute type 8 has an invalid length. [ 796.012668][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2456'. [ 796.196439][ T782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.196460][ T782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.444418][T16113] batadv_slave_1: entered promiscuous mode [ 798.495705][T16116] batadv_slave_1: left promiscuous mode [ 800.185813][T16136] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.192164][T16136] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.669041][T16136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.675596][T16136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.735080][ T39] INFO: task kworker/u8:10:[ 801.735080][ T39] INFO: task kworker/u8:10:1661 blocked for more than 143 seconds. [ 801.735113][ T39] Not tainted syzkaller #0 [ 801.735123][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 801.735132][ T39] task:kworker/u8:10 state:D stack:21672 pid:1661 tgid:1661 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 801.735182][ T39] Workqueue: netns cleanup_net [ 801.735205][ T39] Call Trace: [ 801.735212][ T39] [ 801.735225][ T39] __schedule+0x1709/0x5530 [ 801.735248][ T39] ? __lock_acquire+0x683/0x2ce0 [ 801.735283][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 801.735308][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 801.735331][ T39] ? rt_spin_lock+0x1e0/0x400 [ 801.735350][ T39] ? __pfx___schedule+0x10/0x10 [ 801.735372][ T39] ? schedule+0x90/0x2b0 [ 801.735389][ T39] schedule+0x164/0x2b0 [ 801.735405][ T39] rxrpc_destroy_all_calls+0x443/0x570 [ 801.735426][ T39] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 801.735444][ T39] ? __pfx_var_wake_function+0x10/0x10 [ 801.735466][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 801.735487][ T39] ? __timer_delete_sync+0x538/0x600 [ 801.735514][ T39] rxrpc_exit_net+0x6f/0xc0 [ 801.735536][ T39] ops_undo_list+0x43d/0x8d0 [ 801.735561][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 801.735583][ T39] ? idr_destroy+0x21b/0x2a0 [ 801.735607][ T39] cleanup_net+0x575/0x810 [ 801.735630][ T39] ? __pfx_cleanup_net+0x10/0x10 [ 801.735652][ T39] ? process_one_work+0x8cd/0x12b0 [ 801.735677][ T39] ? rcu_is_watching+0x15/0xb0 [ 801.735696][ T39] ? process_one_work+0x8cd/0x12b0 [ 801.735719][ T39] ? process_one_work+0x8cd/0x12b0 [ 801.735741][ T39] process_one_work+0x93a/0x12b0 [ 801.735785][ T39] ? __pfx_process_one_work+0x10/0x10 [ 801.735807][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 801.735835][ T39] ? assign_work+0x3cf/0x5d0 [ 801.735864][ T39] worker_thread+0xb05/0x10d0 [ 801.735900][ T39] kthread+0x388/0x470 [ 801.735922][ T39] ? __pfx_worker_thread+0x10/0x10 [ 801.735937][ T39] ? __pfx_kthread+0x10/0x10 [ 801.735959][ T39] ret_from_fork+0x514/0xb70 [ 801.735983][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 801.736005][ T39] ? __switch_to+0xc89/0x1420 [ 801.736028][ T39] ? __pfx_kthread+0x10/0x10 [ 801.736057][ T39] ret_from_fork_asm+0x1a/0x30 [ 801.736117][ T39] [ 801.736313][ T39] [ 801.736313][ T39] Showing all locks held in the system: [ 801.736395][ T39] 3 locks held by kworker/u8:1/13: [ 801.736437][ T39] #0: ffff88801c30f138 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.736559][ T39] #1: ffffc90000127c60 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.736607][ T39] #2: ffffffff8f3883b8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xd9/0x640 [ 801.736652][ T39] 3 locks held by kworker/1:1/37: [ 801.736663][ T39] #0: ffff88813fe4b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.736709][ T39] #1: ffffc90000ae7c60 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.736755][ T39] #2: ffffffff8f3883b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 801.736802][ T39] 1 lock held by khungtaskd/39: [ 801.736813][ T39] #0: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 801.736865][ T39] 3 locks held by kworker/u8:4/67: [ 801.736875][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.736922][ T39] #1: ffffc9000152fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.736966][ T39] #2: ffffffff8f3883b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 801.737018][ T39] 12 locks held by kworker/u8:9/1322: [ 801.737029][ T39] #0: ffff88801b327138 ((wq_completion)wg-kex-wg0#23){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.737134][ T39] #1: ffffc9000553fc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.737170][ T39] #2: ffffffff8de591a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 801.737200][ T39] #3: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 801.737228][ T39] #4: ffff8880601ba240 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 801.737263][ T39] #5: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 801.737293][ T39] #6: ffffffff8de591a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 801.737321][ T39] #7: ffffffff8dfc30a0 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x255/0x920 [ 801.737462][ T39] #8: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 801.737494][ T39] #9: ffffffff8de591a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 801.737522][ T39] #10: ffffffff8dfc30a0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x291/0x3890 [ 801.737558][ T39] #11: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: ip6_neigh_lookup+0x14e/0x490 [ 801.737589][ T39] 3 locks held by kworker/u8:10/1661: [ 801.737597][ T39] #0: ffff88801b696138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.737634][ T39] #1: ffffc90005b3fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.737668][ T39] #2: ffffffff8f378d80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 801.737700][ T39] 3 locks held by kworker/u8:11/1676: [ 801.737708][ T39] #0: ffff8880362c0938 ((wq_completion)udp_tunnel_nic){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.737744][ T39] #1: ffffc90005b7fc60 ((work_completion)(&utn->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.737778][ T39] #2: ffffffff8f3883b8 (rtnl_mutex){+.+.}-{4:4}, at: udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 801.737826][ T39] 1 lock held by dhcpcd/5269: [ 801.737833][ T39] #0: ffffffff8f3883b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 801.737864][ T39] 2 locks held by getty/5365: [ 801.737872][ T39] #0: ffff888035b3c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 801.737907][ T39] #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 801.737940][ T39] 3 locks held by kworker/1:5/5736: [ 801.737948][ T39] #0: ffff88813fe4b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.737982][ T39] #1: ffffc90004fafc60 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.738018][ T39] #2: ffff88804113f280 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0 [ 801.738049][ T39] 3 locks held by kworker/1:7/6027: [ 801.738057][ T39] #0: ffff88813fe4b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.738091][ T39] #1: ffffc90005bffc60 (rx_mode_work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 801.738144][ T39] #2: ffffffff8f3883b8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x450 [ 801.738203][ T39] 1 lock held by syz.7.2461/16092: [ 801.738211][ T39] #0: ffffffff8f3883b8 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0xa9/0x140 [ 801.738246][ T39] 1 lock held by syz.6.2476/16146: [ 801.738254][ T39] #0: ffffffff8f3883b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 801.738285][ T39] 1 lock held by syz.6.2476/16148: [ 801.738293][ T39] #0: ffffffff8f3883b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 801.738326][ T39] 1 lock held by syz.0.2479/16158: [ 801.738333][ T39] #0: ffffffff8f3883b8 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_attach+0x120/0x9b0 [ 801.738368][ T39] 1 lock held by syz.9.2483/16181: [ 801.738375][ T39] #0: ffffffff8f3883b8 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_attach+0x120/0x9b0 [ 801.738410][ T39] [ 801.738414][ T39] ============================================= [ 801.738414][ T39] [ 801.738429][ T39] NMI backtrace for cpu 0 [ 801.738441][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 801.738457][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.738465][ T39] Call Trace: [ 801.738471][ T39] [ 801.738478][ T39] dump_stack_lvl+0xe8/0x150 [ 801.738497][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 801.738512][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 801.738531][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 801.738547][ T39] sys_info+0x135/0x170 [ 801.738565][ T39] watchdog+0xfd7/0x1030 [ 801.738588][ T39] ? watchdog+0x1c7/0x1030 [ 801.738609][ T39] kthread+0x388/0x470 [ 801.738626][ T39] ? __pfx_watchdog+0x10/0x10 [ 801.738640][ T39] ? __pfx_kthread+0x10/0x10 [ 801.738656][ T39] ret_from_fork+0x514/0xb70 [ 801.738675][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 801.738694][ T39] ? __switch_to+0xc89/0x1420 [ 801.738710][ T39] ? __pfx_kthread+0x10/0x10 [ 801.738725][ T39] ret_from_fork_asm+0x1a/0x30 [ 801.738756][ T39] [ 801.738789][ T39] Sending NMI from CPU 0 to CPUs 1: [ 801.738815][ C1] NMI backtrace for cpu 1 [ 801.738837][ C1] CPU: 1 UID: 0 PID: 1322 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 801.738855][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.738865][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 801.738888][ C1] RIP: 0010:__lock_acquire+0x17bd/0x2ce0 [ 801.738910][ C1] Code: 05 b8 c4 dc 13 4d 85 ff 0f 84 ac 01 00 00 49 8b 47 10 48 85 c0 0f 84 38 0d 00 00 8b 0d a4 c4 dc 13 39 48 5c 0f 84 6a ff ff ff <89> 48 5c 49 8b 47 30 48 85 c0 74 23 41 0f b6 4f 2a 89 ca 80 e2 fa [ 801.738924][ C1] RSP: 0018:ffffc9000553ead0 EFLAGS: 00000087 [ 801.738936][ C1] RAX: ffffffff93202f40 RBX: 00000000000003cd RCX: 0000000000116594 [ 801.738948][ C1] RDX: ffffffff93202ea8 RSI: ffff888028c10e10 RDI: 00000000000003cd [ 801.738959][ C1] RBP: b439272bb7f5c01f R08: ffffc9000553ea98 R09: 0000000000000020 [ 801.738970][ C1] R10: 0000000000000000 R11: ffffffff81a10810 R12: 00000000000005bc [ 801.738980][ C1] R13: ffff888028c10e10 R14: ffff888028c10000 R15: ffffffff960441a8 [ 801.738991][ C1] FS: 0000000000000000(0000) GS:ffff888125fd4000(0000) knlGS:0000000000000000 [ 801.739001][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 801.739011][ C1] CR2: 000000110c327f22 CR3: 0000000064e7a000 CR4: 00000000003526f0 [ 801.739024][ C1] Call Trace: [ 801.739030][ C1] [ 801.739047][ C1] ? raw_spin_rq_lock_nested+0x2d/0x160 [ 801.739072][ C1] lock_acquire+0x106/0x350 [ 801.739090][ C1] ? raw_spin_rq_lock_nested+0x2d/0x160 [ 801.739114][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 801.739131][ C1] ? rcu_qs+0x5e/0xe0 [ 801.739155][ C1] _raw_spin_lock_nested+0x32/0x50 [ 801.739173][ C1] ? raw_spin_rq_lock_nested+0x2d/0x160 [ 801.739193][ C1] raw_spin_rq_lock_nested+0x2d/0x160 [ 801.739216][ C1] _task_rq_lock+0xc0/0x440 [ 801.739232][ C1] __schedule+0x1888/0x5530 [ 801.739256][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 801.739276][ C1] ? __pfx___schedule+0x10/0x10 [ 801.739293][ C1] ? __lock_acquire+0x683/0x2ce0 [ 801.739316][ C1] preempt_schedule_irq+0x4d/0xa0 [ 801.739333][ C1] irqentry_exit+0x14f/0x8f0 [ 801.739351][ C1] ? trace_irq_disable+0x3b/0x140 [ 801.739372][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 801.739388][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 801.739407][ C1] Code: ff ff ff e8 d1 29 8f 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 9b 24 d4 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 c0 f2 92 09 cc 48 8d 3d b8 34 ef [ 801.739418][ C1] RSP: 0018:ffffc9000553f080 EFLAGS: 00000282 [ 801.739431][ C1] RAX: 6b9c95b02b628b00 RBX: 0000000000000000 RCX: 0000000000000046 [ 801.739441][ C1] RDX: 0000000012513376 RSI: ffffffff8d8bc64f RDI: ffffffff8baa5580 [ 801.739452][ C1] RBP: ffffffff89de050e R08: ffffffff89de050e R09: 0000000000000000 [ 801.739463][ C1] R10: 0000000000000000 R11: ffffffff8dfc3040 R12: 0000000000000002 [ 801.739473][ C1] R13: ffffffff8dfc3040 R14: 0000000000000000 R15: 0000000000000246 [ 801.739484][ C1] ? ip6_neigh_lookup+0x14e/0x490 [ 801.739500][ C1] ? ip6_neigh_lookup+0x14e/0x490 [ 801.739519][ C1] ? ip6_neigh_lookup+0x14e/0x490 [ 801.739547][ C1] ip6_neigh_lookup+0x16b/0x490 [ 801.739561][ C1] ? ip6_neigh_lookup+0x14e/0x490 [ 801.739576][ C1] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 801.739590][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 801.739614][ C1] ? unwind_next_frame+0x8f/0x2550 [ 801.739636][ C1] ? ip6_dst_neigh_lookup+0x74/0xf0 [ 801.739652][ C1] ipip6_tunnel_dst_find+0x1ea/0x4f0 [ 801.739673][ C1] sit_tunnel_xmit+0x6b6/0x1c60 [ 801.739691][ C1] ? skb_network_protocol+0x23d/0x400 [ 801.739712][ C1] ? netif_skb_features+0xd13/0x1410 [ 801.739732][ C1] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 801.739750][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 801.739773][ C1] dev_hard_start_xmit+0x2df/0x870 [ 801.739794][ C1] ? validate_xmit_skb+0xd51/0x14f0 [ 801.739817][ C1] __dev_queue_xmit+0x1549/0x3890 [ 801.739841][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 801.739855][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 801.739872][ C1] ? __dev_queue_xmit+0x291/0x3890 [ 801.739895][ C1] ? neigh_connected_output+0x1e7/0x470 [ 801.739913][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 801.739932][ C1] ? neigh_connected_output+0x1e7/0x470 [ 801.739952][ C1] ? read_seqbegin+0xae/0x1e0 [ 801.739967][ C1] ? neigh_connected_output+0x1e7/0x470 [ 801.739983][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 801.740009][ C1] ? ip6_output+0x11e/0x540 [ 801.740026][ C1] ip6_output+0x337/0x540 [ 801.740044][ C1] udp_tunnel6_xmit_skb+0x6e3/0xdc0 [ 801.740070][ C1] send6+0x5ce/0x920 [ 801.740094][ C1] ? send6+0x255/0x920 [ 801.740111][ C1] ? __pfx_send6+0x10/0x10 [ 801.740127][ C1] ? rcu_is_watching+0x15/0xb0 [ 801.740144][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 801.740160][ C1] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 801.740178][ C1] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 801.740197][ C1] wg_socket_send_skb_to_peer+0x128/0x200 [ 801.740218][ C1] wg_packet_handshake_send_worker+0x204/0x370 [ 801.740238][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 801.740264][ C1] ? process_one_work+0x8cd/0x12b0 [ 801.740284][ C1] ? rcu_is_watching+0x15/0xb0 [ 801.740298][ C1] ? process_one_work+0x8cd/0x12b0 [ 801.740318][ C1] ? process_one_work+0x8cd/0x12b0 [ 801.740338][ C1] process_one_work+0x93a/0x12b0 [ 801.740366][ C1] ? __pfx_process_one_work+0x10/0x10 [ 801.740386][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 801.740405][ C1] ? assign_work+0x3cf/0x5d0 [ 801.740427][ C1] worker_thread+0xb05/0x10d0 [ 801.740445][ C1] ? __kthread_parkme+0x71/0x1f0 [ 801.740464][ C1] kthread+0x388/0x470 [ 801.740481][ C1] ? __pfx_worker_thread+0x10/0x10 [ 801.740494][ C1] ? __pfx_kthread+0x10/0x10 [ 801.740512][ C1] ret_from_fork+0x514/0xb70 [ 801.740530][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 801.740548][ C1] ? __switch_to+0xc89/0x1420 [ 801.740564][ C1] ? __pfx_kthread+0x10/0x10 [ 801.740581][ C1] ret_from_fork_asm+0x1a/0x30 [ 801.740613][ C1] [ 801.754056][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 801.754079][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 801.754096][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.754105][ T39] Call Trace: [ 801.754111][ T39] [ 801.754118][ T39] vpanic+0x56c/0xa60 [ 801.754150][ T39] ? __pfx___schedule+0x10/0x10 [ 801.754167][ T39] ? __pfx_vpanic+0x10/0x10 [ 801.754193][ T39] panic+0xc5/0xd0 [ 801.754210][ T39] ? __pfx_panic+0x10/0x10 [ 801.754226][ T39] ? preempt_schedule_common+0x82/0xd0 [ 801.754242][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 801.754257][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 801.754274][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 801.754290][ T39] watchdog+0x1030/0x1030 [ 801.754314][ T39] ? watchdog+0x1c7/0x1030 [ 801.754335][ T39] kthread+0x388/0x470 [ 801.754352][ T39] ? __pfx_watchdog+0x10/0x10 [ 801.754366][ T39] ? __pfx_kthread+0x10/0x10 [ 801.754383][ T39] ret_from_fork+0x514/0xb70 [ 801.754402][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 801.754419][ T39] ? __switch_to+0xc89/0x1420 [ 801.754435][ T39] ? __pfx_kthread+0x10/0x10 [ 801.754451][ T39] ret_from_fork_asm+0x1a/0x30 [ 801.754479][ T39] [ 801.757254][ T39] Kernel Offset: disabled