last executing test programs: 9m6.190390507s ago: executing program 0 (id=1794): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000600)}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="4cdea1bc185e204c8014521788d95cd7f06966f0bb0b5a4a02d0174059b3a8cea566722c424b7eb8cca4f30c3949f93930c9a9eaec562a3471cd000000003234190fad166e", 0x45}], 0x5c}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 9m5.119444943s ago: executing program 0 (id=1801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000810, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @loopback}}}}}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfff], [0x0, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffff, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x89f8c55f46292553}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x804) 8m56.485956774s ago: executing program 0 (id=1813): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414"], 0xfdef) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2, &(0x7f0000000580)}, {0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="9d743c98d6ba81ce36d9efebfb6de188b7b617f3d155b430231050738b9aaeba5db4f14f166043fc6657ba56868d9a1444b779e27d584d557c50ef38b1662cfa43ebd2d820caeb07be36f11ea68da7b6cee5a11f46592f4380025bfe93a0e0fffef7ae6033cae128915a7cc47209cd7b7387efb03bae9746", 0x78}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x3c0c}, @assoc={0x18, 0x117, 0x4, 0x18}], 0x30, 0x10}], 0x2, 0x800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m53.41913499s ago: executing program 0 (id=1826): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m50.706243335s ago: executing program 0 (id=1832): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/8, 0x8}], 0x1}, 0x10022) 8m49.364886514s ago: executing program 0 (id=1836): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000feffff0000000005000000c4000005ffff00ff95"], &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) unshare(0x68040200) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0xffffffffffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c0100001800db5b2cbd7000fedbdf251d010300150001000100004007000000af2c9b0175e0a0350600000008000500fa01f8031e010600061437"], 0x15c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400000000000d}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000040) 8m34.253500259s ago: executing program 32 (id=1836): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000feffff0000000005000000c4000005ffff00ff95"], &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) unshare(0x68040200) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0xffffffffffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c0100001800db5b2cbd7000fedbdf251d010300150001000100004007000000af2c9b0175e0a0350600000008000500fa01f8031e010600061437"], 0x15c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400000000000d}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000040) 8m32.124705963s ago: executing program 2 (id=1870): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x8, 0x3, 0x0) 8m23.759414889s ago: executing program 4 (id=1900): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x8, 0x3, 0x0) 8m22.052028749s ago: executing program 2 (id=1901): recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04"], 0x24}, 0x1, 0x0, 0x0, 0x4048091}, 0xc000) 8m21.070312115s ago: executing program 2 (id=1903): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/242, 0xf2}, {&(0x7f0000002180)=""/144, 0x90}], 0x2}, 0x0) 8m20.915525162s ago: executing program 2 (id=1904): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x8, 0x3, 0x0) 8m20.658540978s ago: executing program 1 (id=1905): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x801) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x400, 0x103) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'dummy0\x00', @broadcast}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x40050) syz_fuse_handle_req(r1, &(0x7f0000006300)="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", 0x200d, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x130, 0x0, 0x2, {0x2, 0x3, 0x0, '\x00', {0x2, 0x7ff, 0xadf, 0x10, 0x0, 0x0, 0x2000, '\x00', 0x6, 0x9, 0x1, 0x3, {0x8, 0x6}, {0x4000000000006, 0xb}, {0x2000001, 0x10}, {0x6, 0x9fe}, 0x2000, 0x6, 0x8, 0x7}}}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) writev(r0, &(0x7f0000003400)=[{0x0}, {&(0x7f00000020c0)="2890d1b12fb7c5b4948a84bcd5a8b830d9080624d863f59c3b96f5ce6e82cee8bdd5a507bab894f9f234c59bc9c790ad6ab7ff835cf35c5637db6427708bfa97c858251d3e85e5c4", 0x48}, {&(0x7f0000002180)="6f661ecd27910ad4518ec8c386249ed938fcb17093900b101d8b20340e85088bda13b1c6027e85ad52b02500", 0x2c}, {0x0}, {&(0x7f00000022c0)="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", 0x768}], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x5e) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x894, &(0x7f0000000000)={0xa, 0x4e02, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000580), 0x4) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde1700450000740000000000019078ac1efc01ac1414aa05009078e00000e046000000000000000011000000000000000000003bdd05832300070300443c00037f00000100000000ac1414bb000000000000000000000000ac14140ba2cc5b007fa2dc00000100000000ac141400000000"], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 8m13.624064728s ago: executing program 3 (id=1908): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@init={0x18, 0x84, 0x0, {0x7d88, 0x5, 0x1f, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x2}}], 0x30, 0x20004004}, 0x0) sendto(r0, &(0x7f0000000100)="9209ab1c3ac16b09c253af7a6410662cfb59440dd61aa6e2d1fe04239101f9d319d6d96fe097fe9d1cd470addcc17ebd1e1adb61b5a6252b8b6b1686acb073f13965004b9b93d4519ededd0ed3fde76e5de223897f86c42608e495bc7bf5d81cdc54a70859f4a1a14f245b9a09cbc975", 0x70, 0x10, &(0x7f0000000200)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x0, 0x7, 0x8000, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x34}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000240)=0x30) 8m12.42214674s ago: executing program 3 (id=1909): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 8m12.119776725s ago: executing program 1 (id=1910): socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="0002020000000000000000000000ffffac1414bb86dd"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) 8m11.998345799s ago: executing program 3 (id=1911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004000) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x4000) 8m11.916258315s ago: executing program 3 (id=1912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x4, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 8m11.406892043s ago: executing program 4 (id=1913): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x8, 0x3, 0x0) 8m11.112727199s ago: executing program 1 (id=1914): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc8", 0x76}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f0000000800)}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m10.745022173s ago: executing program 1 (id=1915): r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="540100001800010029bd7000fddbdf251d0100001e010600020103000771ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c005c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea00000800050001f7f9fb150002000400002008010000f57de0eb74757e1d"], 0x154}}, 0x404c004) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)}], 0x1}, 0x4008000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r10}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r12, &(0x7f0000000500), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r13, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x32, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f631"}}) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x64, 0x0, 0x20, 0x70bd2f, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 8m10.171021453s ago: executing program 4 (id=1916): socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="0002020000000000000000000000ffffac1414bb86dd"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) 8m9.109844196s ago: executing program 4 (id=1917): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x3ff, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x5, "72ef6a"}, @md5sig={0x13, 0x12, "8f2ad2c4ce015a29c6f0bac5ad3c2629"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x9, "2cdfcd76de488c"}, @md5sig={0x13, 0x12, "dcd178c02088867cbaae2e20a2c242c6"}]}}}}}}}}, 0x0) 8m8.634163406s ago: executing program 4 (id=1918): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="eb", 0x1}], 0x1, &(0x7f0000000580)}, {0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0x10}], 0x2, 0x800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m7.770968522s ago: executing program 3 (id=1919): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd89, &(0x7f0000001780)={@local, @empty, @val={@val={0x88a8, 0x2, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x3, 0xd73, 0x66, 0x0, 0x4, 0x2f, 0x0, @private=0xa010101, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0xfa, 0x1, 0x0, 0x3, 0x7, 0x5}, 0x1, {0x800}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x9, 0x1, 0x1, 0x1, 0x6, 0x10}, 0x2, {0x1000, 0x40, 0x1, 0x15, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x1, "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"}}}}}}, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESHEX=r0, @ANYBLOB="0000007d541deb94687689f26c3461fb2d3da600", @ANYRES16, @ANYRES32, @ANYRES32=r4], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r7, 0xffffffffffffffff}, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r10, 0x29, 0x4c, &(0x7f0000000340)=0xfffff5f5, 0x4) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback={0x2}}, 0x1c) listen(r9, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a310000000005000400000000001400078008001240000100000800114000000000050001000600000005000500000000000d000300686173683a6d6163"], 0x5c}}, 0x4004804) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x1d, &(0x7f0000000c00)=ANY=[@ANYBLOB="180500000800000000000000f7ffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7040000080000008500000095000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000008000000000b70500000800000085000000a50000009500000000000000adb6ace44d3b65b0358999669008b063c443efd7431fd813203618a75c6ab81681cde644470eb7d0dc0fc978db57f430ea8746"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r12, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000065461adc023dff6800000000000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r0, @ANYRES64=r9, @ANYBLOB="260000000000000000000000de71afc50815ac395d1f910c36c3790724232001e5222b20b46541b243c0d0b2530554419b22883b58e0966ed6028264", @ANYRES32, @ANYBLOB="6f7647ac35c92262d69554ef37e5ca42c314a44c079fa339debbec5666ec5e2b7d68144fbacbb0b17087e089af8f4df9fb8f782cf34b267042f4c4bd896ac460341c8dd65e67939a7ad730d36f709f409e4210dd77ec3dedfff93823f47265a5c9b357c9b0415ff7ced1f496dd16a5c39395bbee1cabd4147b979804a177b63000f8aa46ba6814606e225f6c4fffd344b4b8249a9f4a183c93c1c928b83b9190e63fd783b7708b1fca5938ba720fa9d2369bc47d861365e59d3f828a7ff6386a55b83733815024131977066b5618448b0a27573f1b60", @ANYRES64=0x0], 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f40)={r6, r13, 0x5, 0x0, @void}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8m7.601263993s ago: executing program 1 (id=1920): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x44450}, 0x8095) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e9802", 0x3}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'wg1\x00'}}, 0x1e) 8m7.294773119s ago: executing program 1 (id=1921): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x5a}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES8], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4080) syz_emit_ethernet(0x76, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') 8m7.293480541s ago: executing program 4 (id=1922): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x8, 0x3, 0x0) 8m7.145145754s ago: executing program 2 (id=1923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000810, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @loopback}}}}}}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfff], [0x0, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffff, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x89f8c55f46292553}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x804) 7m56.542826897s ago: executing program 2 (id=1924): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x8, 0x3, 0x0) 7m52.967408048s ago: executing program 3 (id=1925): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc8", 0x76}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f0000000800)}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7m47.35736904s ago: executing program 33 (id=1921): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x5a}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES8], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4080) syz_emit_ethernet(0x76, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') 7m43.038697421s ago: executing program 34 (id=1922): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x8, 0x3, 0x0) 7m38.055534887s ago: executing program 35 (id=1924): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x8, 0x3, 0x0) 7m29.486264175s ago: executing program 36 (id=1925): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc8", 0x76}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f0000000800)}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7m13.567503416s ago: executing program 7 (id=1927): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x1000, 0x71, 0x10, 0xaf}}, &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x7, 0x0, &(0x7f0000000000)="63eced8e46dc3f", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m41.543797423s ago: executing program 5 (id=1863): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x8, 0x3, 0x0) 6m32.126187228s ago: executing program 9 (id=1929): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x44450}, 0x8095) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e9802", 0x3}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'wg1\x00'}}, 0x1e) 5m54.463396049s ago: executing program 7 (id=1927): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x1000, 0x71, 0x10, 0xaf}}, &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x7, 0x0, &(0x7f0000000000)="63eced8e46dc3f", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m15.22623133s ago: executing program 7 (id=1927): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x1000, 0x71, 0x10, 0xaf}}, &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x7, 0x0, &(0x7f0000000000)="63eced8e46dc3f", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23.105786187s ago: executing program 9 (id=1929): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x44450}, 0x8095) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e9802", 0x3}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'wg1\x00'}}, 0x1e) 0s ago: executing program 9 (id=1929): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x44450}, 0x8095) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e9802", 0x3}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'wg1\x00'}}, 0x1e) kernel console output (not intermixed with test programs): 0) [ 216.259746][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 216.259756][ T31] gspca_stk1135: Sensor read failed [ 216.259793][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 216.259803][ T31] gspca_stk1135: Sensor read failed [ 216.264306][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 216.264343][ T31] gspca_stk1135: Sensor write failed [ 216.264380][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 216.264389][ T31] gspca_stk1135: Sensor write failed [ 216.264549][ T31] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 217.779785][ T5724] usb 5-1: USB disconnect, device number 8 [ 218.925661][ T5738] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 219.085762][ T5738] usb 1-1: Using ep0 maxpacket: 8 [ 219.189315][ T5738] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 219.237488][ C0] vcan0: j1939_tp_rxtimer: 0xffff888037fc3400: rx timeout, send abort [ 219.399436][ T5738] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 219.399479][ T5738] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 219.399508][ T5738] usb 1-1: Product: syz [ 219.399590][ T5738] usb 1-1: Manufacturer: syz [ 219.399606][ T5738] usb 1-1: SerialNumber: syz [ 219.407090][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 219.527097][ T7020] netlink: 11680 bytes leftover after parsing attributes in process `syz.2.378'. [ 219.731758][ C0] vcan0: j1939_tp_rxtimer: 0xffff888037fc3000: rx timeout, send abort [ 219.737611][ C0] vcan0: j1939_tp_rxtimer: 0xffff888037fc3400: abort rx timeout. Force session deactivation [ 220.234828][ C0] vcan0: j1939_tp_rxtimer: 0xffff888037fc3000: abort rx timeout. Force session deactivation [ 220.705610][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 220.861407][ T31] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 220.861438][ T31] usb 4-1: config 0 has no interface number 0 [ 220.861485][ T31] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 220.861531][ T31] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 220.861557][ T31] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 220.861583][ T31] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.883129][ T31] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 220.883201][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.151855][ T31] usb 4-1: config 0 descriptor?? [ 222.271073][ T5738] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 222.271171][ T5738] visor 1-1:1.0: probe with driver visor failed with error -110 [ 222.302194][ T31] usb 4-1: can't set config #0, error -71 [ 222.326774][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 222.326815][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 222.326839][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 222.326861][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 222.385587][ T5606] Bluetooth: hci4: command 0x0406 tx timeout [ 222.478814][ T31] usb 4-1: USB disconnect, device number 6 [ 222.623394][ T5738] usb 1-1: USB disconnect, device number 7 [ 222.706090][ T1681] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 223.337343][ T7033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.383'. [ 223.337380][ T7033] netlink: 'syz.1.383': attribute type 7 has an invalid length. [ 223.337395][ T7033] netlink: 'syz.1.383': attribute type 8 has an invalid length. [ 223.337407][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 223.402870][ T7031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.382'. [ 223.402907][ T7031] netlink: 'syz.0.382': attribute type 7 has an invalid length. [ 223.402921][ T7031] netlink: 'syz.0.382': attribute type 8 has an invalid length. [ 223.402933][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 223.998132][ T7033] bond0: entered promiscuous mode [ 223.998150][ T7033] bond_slave_0: entered promiscuous mode [ 223.998337][ T7033] bond_slave_1: entered promiscuous mode [ 224.036207][ T7033] bond0: left promiscuous mode [ 224.036373][ T7033] bond_slave_0: left promiscuous mode [ 224.036745][ T7033] bond_slave_1: left promiscuous mode [ 224.217284][ T7031] bond0: entered promiscuous mode [ 224.217306][ T7031] bond_slave_0: entered promiscuous mode [ 224.217527][ T7031] bond_slave_1: entered promiscuous mode [ 224.256116][ T7031] bond0: left promiscuous mode [ 224.256142][ T7031] bond_slave_0: left promiscuous mode [ 224.256545][ T7031] bond_slave_1: left promiscuous mode [ 224.778629][ T7046] lo speed is unknown, defaulting to 1000 [ 225.158727][ T1681] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 225.329804][ T1681] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 225.329836][ T1681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.329856][ T1681] usb 1-1: Product: syz [ 225.329871][ T1681] usb 1-1: Manufacturer: syz [ 225.329885][ T1681] usb 1-1: SerialNumber: syz [ 225.336419][ T1681] usb 1-1: config 0 descriptor?? [ 225.390428][ T1681] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 225.873578][ T7077] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 225.873601][ T7077] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 226.405899][ T1681] gspca_stk1135: reg_w 0x3 err -110 [ 226.406953][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 226.406968][ T1681] gspca_stk1135: Sensor write failed [ 226.407007][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 226.407017][ T1681] gspca_stk1135: Sensor write failed [ 226.407051][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 226.407061][ T1681] gspca_stk1135: Sensor read failed [ 226.407099][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 226.407109][ T1681] gspca_stk1135: Sensor read failed [ 226.407116][ T1681] gspca_stk1135: Detected sensor type unknown (0x0) [ 226.407159][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 226.407169][ T1681] gspca_stk1135: Sensor read failed [ 226.407206][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 226.407216][ T1681] gspca_stk1135: Sensor read failed [ 226.407253][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 226.407263][ T1681] gspca_stk1135: Sensor write failed [ 226.407300][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 226.407310][ T1681] gspca_stk1135: Sensor write failed [ 226.407401][ T1681] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 226.657558][ T7086] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.402'. [ 226.659475][ T7086] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.402'. [ 228.490384][ T820] usb 1-1: USB disconnect, device number 8 [ 228.707246][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 229.061860][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 229.075963][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 229.098993][ T10] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 229.099026][ T10] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 229.099047][ T10] usb 2-1: Product: syz [ 229.099063][ T10] usb 2-1: Manufacturer: syz [ 229.099078][ T10] usb 2-1: SerialNumber: syz [ 229.379971][ T7109] syz.4.411 (7109) used greatest stack depth: 18216 bytes left [ 229.381772][ T10] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 229.381794][ T10] usb 2-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 229.381814][ T10] usb 2-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 229.381833][ T10] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 229.625176][ T10] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 229.625263][ T10] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 229.651655][ T10] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 229.671207][ T10] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 229.699824][ T10] usb 2-1: USB disconnect, device number 9 [ 229.739540][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 229.771654][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 229.790099][ T10] visor 2-1:1.0: device disconnected [ 229.905157][ T7133] lo speed is unknown, defaulting to 1000 [ 232.015692][ T1681] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 232.207100][ T1681] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 232.207132][ T1681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.207151][ T1681] usb 3-1: Product: syz [ 232.207166][ T1681] usb 3-1: Manufacturer: syz [ 232.207181][ T1681] usb 3-1: SerialNumber: syz [ 232.231866][ T1681] usb 3-1: config 0 descriptor?? [ 232.304503][ T1681] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 232.749863][ T7169] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 232.749887][ T7169] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 233.266486][ T1681] gspca_stk1135: reg_w 0x3 err -110 [ 233.267539][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 233.267551][ T1681] gspca_stk1135: Sensor write failed [ 233.267588][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 233.267598][ T1681] gspca_stk1135: Sensor write failed [ 233.267629][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 233.267639][ T1681] gspca_stk1135: Sensor read failed [ 233.267669][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 233.267679][ T1681] gspca_stk1135: Sensor read failed [ 233.267686][ T1681] gspca_stk1135: Detected sensor type unknown (0x0) [ 233.267727][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 233.267737][ T1681] gspca_stk1135: Sensor read failed [ 233.267774][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 233.267784][ T1681] gspca_stk1135: Sensor read failed [ 233.267816][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 233.267827][ T1681] gspca_stk1135: Sensor write failed [ 233.267881][ T1681] gspca_stk1135: serial bus timeout: status=0x00 [ 233.267892][ T1681] gspca_stk1135: Sensor write failed [ 233.267979][ T1681] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 234.901318][ T5710] usb 3-1: USB disconnect, device number 6 [ 236.285649][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 236.441425][ T10] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 236.441456][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.441482][ T10] usb 3-1: Product: syz [ 236.441492][ T10] usb 3-1: Manufacturer: syz [ 236.441503][ T10] usb 3-1: SerialNumber: syz [ 236.506409][ T10] usb 3-1: config 0 descriptor?? [ 236.545094][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 236.813012][ T7246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.462'. [ 236.813047][ T7246] netlink: 'syz.1.462': attribute type 7 has an invalid length. [ 236.813061][ T7246] netlink: 'syz.1.462': attribute type 8 has an invalid length. [ 236.813073][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 236.886892][ T7246] bond0: entered promiscuous mode [ 236.886916][ T7246] bond_slave_0: entered promiscuous mode [ 236.887541][ T7246] bond_slave_1: entered promiscuous mode [ 236.938573][ T7246] bond0: left promiscuous mode [ 236.938676][ T7246] bond_slave_0: left promiscuous mode [ 236.938951][ T7246] bond_slave_1: left promiscuous mode [ 236.982856][ T7250] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 236.982879][ T7250] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 237.495962][ T10] gspca_stk1135: reg_w 0x3 err -110 [ 237.497018][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 237.497033][ T10] gspca_stk1135: Sensor write failed [ 237.497071][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 237.497081][ T10] gspca_stk1135: Sensor write failed [ 237.497118][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 237.497129][ T10] gspca_stk1135: Sensor read failed [ 237.497165][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 237.497176][ T10] gspca_stk1135: Sensor read failed [ 237.497183][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 237.497223][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 237.497233][ T10] gspca_stk1135: Sensor read failed [ 237.497268][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 237.497278][ T10] gspca_stk1135: Sensor read failed [ 237.497315][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 237.497325][ T10] gspca_stk1135: Sensor write failed [ 237.497361][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 237.497370][ T10] gspca_stk1135: Sensor write failed [ 237.497461][ T10] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 238.595545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 239.931981][ T31] usb 3-1: USB disconnect, device number 7 [ 240.265782][ T5710] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 240.419425][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 240.423808][ T5710] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 240.423836][ T5710] usb 5-1: config 0 has no interface number 0 [ 240.423878][ T5710] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.423900][ T5710] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 240.423924][ T5710] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 240.423948][ T5710] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 240.423986][ T5710] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 240.424010][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.518768][ T5710] usb 5-1: config 0 descriptor?? [ 240.573279][ T5710] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 240.906462][ T7297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.907004][ T7297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.120936][ T5710] usb 5-1: USB disconnect, device number 9 [ 241.157509][ T5710] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 241.474346][ T7314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.485'. [ 241.735695][ T5710] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 241.910989][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 241.913479][ T5710] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 241.925957][ T5710] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 241.926035][ T5710] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 241.926090][ T5710] usb 1-1: Product: syz [ 241.926138][ T5710] usb 1-1: Manufacturer: syz [ 241.926173][ T5710] usb 1-1: SerialNumber: syz [ 242.234875][ T5710] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 242.234900][ T5710] usb 1-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 242.234919][ T5710] usb 1-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 242.234939][ T5710] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 242.545867][ T5710] usb 1-1: palm_os_3_probe - error -110 getting bytes available request [ 242.545968][ T5710] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 242.558548][ T5710] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 242.566096][ T5710] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 244.063340][ T820] usb 1-1: USB disconnect, device number 9 [ 244.333109][ T820] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 244.429335][ T820] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 244.451189][ T820] visor 1-1:1.0: device disconnected [ 245.038245][ T820] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 245.195611][ T820] usb 3-1: Using ep0 maxpacket: 32 [ 245.198195][ T820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.198223][ T820] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.198260][ T820] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 245.198285][ T820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.279863][ T820] usb 3-1: config 0 descriptor?? [ 246.281651][ T7382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.513'. [ 246.281698][ T7382] netlink: 'syz.1.513': attribute type 7 has an invalid length. [ 246.281712][ T7382] netlink: 'syz.1.513': attribute type 8 has an invalid length. [ 246.281725][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 246.361793][ T7382] bond0: entered promiscuous mode [ 246.363170][ T7382] bond_slave_0: entered promiscuous mode [ 246.363538][ T7382] bond_slave_1: entered promiscuous mode [ 246.435733][ T7382] bond0: left promiscuous mode [ 246.435752][ T7382] bond_slave_0: left promiscuous mode [ 246.436042][ T7382] bond_slave_1: left promiscuous mode [ 247.227223][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.516'. [ 249.144076][ T5882] usb 3-1: USB disconnect, device number 8 [ 250.997660][ T7430] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.022682][ T7431] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.036096][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 251.044705][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 251.086055][ T7427] lo speed is unknown, defaulting to 1000 [ 251.574125][ T820] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 251.612968][ T7428] lo speed is unknown, defaulting to 1000 [ 251.735610][ T820] usb 4-1: Using ep0 maxpacket: 8 [ 251.738187][ T820] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 251.738215][ T820] usb 4-1: config 0 has no interface number 0 [ 251.738260][ T820] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.738285][ T820] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 251.738311][ T820] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.738338][ T820] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.738379][ T820] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 251.738402][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.839681][ T820] usb 4-1: config 0 descriptor?? [ 251.870091][ T820] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 252.491092][ T820] usb 4-1: USB disconnect, device number 7 [ 252.709714][ T820] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 252.732256][ T7457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'. [ 255.581372][ T820] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 255.615266][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.559'. [ 255.615303][ T7526] netlink: 'syz.3.559': attribute type 7 has an invalid length. [ 255.615315][ T7526] netlink: 'syz.3.559': attribute type 8 has an invalid length. [ 255.615326][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 255.729028][ T820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 255.729807][ T820] usb 2-1: not running at top speed; connect to a high speed hub [ 255.733381][ T820] usb 2-1: config 0 has no interfaces? [ 255.757894][ T820] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.40 [ 255.757925][ T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.757946][ T820] usb 2-1: Product: ࡃ [ 255.757961][ T820] usb 2-1: Manufacturer: а [ 255.757976][ T820] usb 2-1: SerialNumber: 鵙偔駪櫳犓៹ꏽ虿푚춤䑥쾲ᔏ㢽釣䞴ຌ⥦坢䛥䙠쇗䌽黝韂✕埰ᓤ䖱䨹㣈풃ꚞ죏렣琽퇟鄙 [ 255.832726][ T820] usb 2-1: config 0 descriptor?? [ 255.864242][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.864293][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.060667][ T820] usb 2-1: USB disconnect, device number 10 [ 257.413235][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.570'. [ 257.413376][ T7555] netlink: 'syz.3.570': attribute type 7 has an invalid length. [ 257.413392][ T7555] netlink: 'syz.3.570': attribute type 8 has an invalid length. [ 257.413405][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 257.844521][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 261.156220][ T7626] netlink: 48 bytes leftover after parsing attributes in process `syz.4.591'. [ 263.415529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 263.425554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 263.435530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 263.445576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 263.455528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 263.465533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 263.475581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 263.485547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 263.859096][ T5738] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 264.005596][ T5738] usb 3-1: Using ep0 maxpacket: 16 [ 264.063246][ T5738] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.063273][ T5738] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.115417][ T5738] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.116928][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.116961][ T5738] usb 3-1: Product: syz [ 264.116976][ T5738] usb 3-1: Manufacturer: syz [ 264.116991][ T5738] usb 3-1: SerialNumber: syz [ 264.183875][ T5738] usb 3-1: 0:2 : does not exist [ 264.251999][ T7664] netlink: 48 bytes leftover after parsing attributes in process `syz.3.604'. [ 264.333742][ T7666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.605'. [ 264.333775][ T7666] netlink: 'syz.0.605': attribute type 7 has an invalid length. [ 264.333786][ T7666] netlink: 'syz.0.605': attribute type 8 has an invalid length. [ 264.333795][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'. [ 264.515435][ T7646] program syz.2.598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.554136][ T5738] usb 3-1: USB disconnect, device number 9 [ 264.581107][ T7666] bond0: entered promiscuous mode [ 264.581131][ T7666] bond_slave_0: entered promiscuous mode [ 264.581337][ T7666] bond_slave_1: entered promiscuous mode [ 264.665656][ T7666] bond0: left promiscuous mode [ 264.665680][ T7666] bond_slave_0: left promiscuous mode [ 264.665956][ T7666] bond_slave_1: left promiscuous mode [ 264.862425][ T7669] lo speed is unknown, defaulting to 1000 [ 267.898668][ T7715] lo speed is unknown, defaulting to 1000 [ 269.199896][ T7730] lo speed is unknown, defaulting to 1000 [ 270.220764][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 270.224633][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 272.681194][ T7796] lo speed is unknown, defaulting to 1000 [ 273.155642][ T5710] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 273.236147][ T7819] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.305729][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 273.308912][ T5710] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 273.308940][ T5710] usb 1-1: config 0 has no interface number 0 [ 273.308985][ T5710] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 273.309009][ T5710] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 273.309035][ T5710] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 273.309061][ T5710] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 273.309103][ T5710] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 273.309125][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.454926][ T5710] usb 1-1: config 0 descriptor?? [ 273.544681][ T5710] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 273.743116][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 274.023705][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.024242][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.174847][ T7817] lo speed is unknown, defaulting to 1000 [ 274.451377][ T7821] syz.2.657 (7821) used greatest stack depth: 17920 bytes left [ 274.504887][ T5882] usb 1-1: USB disconnect, device number 10 [ 274.570011][ T5882] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 275.130575][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 276.965973][ T7848] lo speed is unknown, defaulting to 1000 [ 280.414983][ T7926] tipc: Enabling of bearer rejected, failed to enable media [ 281.215587][ T820] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 281.365654][ T820] usb 4-1: Using ep0 maxpacket: 16 [ 281.370132][ T820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.370159][ T820] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.404079][ T820] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.404109][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.404128][ T820] usb 4-1: Product: syz [ 281.404143][ T820] usb 4-1: Manufacturer: syz [ 281.404157][ T820] usb 4-1: SerialNumber: syz [ 281.481221][ T820] usb 4-1: 0:2 : does not exist [ 281.685393][ T7939] program syz.3.698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.756601][ T36] usb 4-1: USB disconnect, device number 8 [ 282.774345][ T7959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.707'. [ 282.774382][ T7959] netlink: 'syz.1.707': attribute type 7 has an invalid length. [ 282.774396][ T7959] netlink: 'syz.1.707': attribute type 8 has an invalid length. [ 282.774409][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 282.854105][ T7959] bond0: entered promiscuous mode [ 282.854129][ T7959] bond_slave_0: entered promiscuous mode [ 282.871383][ T7959] bond_slave_1: entered promiscuous mode [ 282.916151][ T7959] bond0: left promiscuous mode [ 282.916177][ T7959] bond_slave_0: left promiscuous mode [ 282.916450][ T7959] bond_slave_1: left promiscuous mode [ 284.608394][ T8002] lo speed is unknown, defaulting to 1000 [ 285.347603][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031f3cc00: rx timeout, send abort [ 285.398338][ T8020] netlink: 11664 bytes leftover after parsing attributes in process `syz.4.728'. [ 287.348515][ T8036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.734'. [ 287.348555][ T8036] netlink: 'syz.4.734': attribute type 7 has an invalid length. [ 287.348569][ T8036] netlink: 'syz.4.734': attribute type 8 has an invalid length. [ 287.348581][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 289.764108][ T8053] syz.3.741 (8053) used greatest stack depth: 17848 bytes left [ 290.323324][ T8075] lo speed is unknown, defaulting to 1000 [ 291.887853][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 292.149579][ T8137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.770'. [ 292.889113][ T8156] syzkaller0: entered promiscuous mode [ 292.889132][ T8156] syzkaller0: entered allmulticast mode [ 293.540853][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 293.711886][ T8177] vlan2: entered promiscuous mode [ 293.711912][ T8177] gretap0: entered promiscuous mode [ 297.105612][ T5710] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 297.246706][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'. [ 297.265597][ T5710] usb 4-1: Using ep0 maxpacket: 8 [ 297.267988][ T5710] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 297.268016][ T5710] usb 4-1: config 0 has no interface number 0 [ 297.268060][ T5710] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 297.268083][ T5710] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 297.268108][ T5710] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.268134][ T5710] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.268176][ T5710] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 297.268198][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.309899][ T5710] usb 4-1: config 0 descriptor?? [ 297.452347][ T5710] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 297.457282][ T8236] vlan2: entered promiscuous mode [ 297.457300][ T8236] gretap0: entered promiscuous mode [ 297.996364][ T5882] usb 4-1: USB disconnect, device number 9 [ 298.038436][ T5882] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 298.505621][ T5882] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 298.658143][ T5882] usb 4-1: descriptor type invalid, skip [ 298.664326][ T5882] usb 4-1: not running at top speed; connect to a high speed hub [ 298.679508][ T5882] usb 4-1: config 0 has no interfaces? [ 298.688717][ T5882] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.40 [ 298.688748][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.688768][ T5882] usb 4-1: Product: ࡃ [ 298.688783][ T5882] usb 4-1: Manufacturer: а [ 298.688798][ T5882] usb 4-1: SerialNumber: 鵙偔駪櫳犓៹ꏽ虿푚춤䑥쾲ᔏ㢽釣䞴ຌ⥦坢䛥䙠쇗䌽黝韂✕埰ᓤ䖱䨹㣈풃ꚞ죏렣琽퇟鄙 [ 298.747800][ T5882] usb 4-1: config 0 descriptor?? [ 299.013946][ T5882] usb 4-1: USB disconnect, device number 10 [ 300.269550][ T8284] ieee802154 phy0 wpan0: encryption failed: -22 [ 300.272768][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 300.600508][ T8283] lo speed is unknown, defaulting to 1000 [ 302.999107][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'. [ 303.098828][ T8318] ieee802154 phy0 wpan0: encryption failed: -22 [ 303.301955][ T8324] netlink: 40 bytes leftover after parsing attributes in process `syz.4.841'. [ 303.496939][ T8313] vlan2: entered promiscuous mode [ 303.775959][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 304.716109][ T5882] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 304.905666][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 304.922753][ T5882] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 304.922781][ T5882] usb 1-1: config 0 has no interface number 0 [ 304.922826][ T5882] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 304.922851][ T5882] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 304.922877][ T5882] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.922903][ T5882] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 304.922944][ T5882] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 304.922984][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.051123][ T5882] usb 1-1: config 0 descriptor?? [ 305.114302][ T5882] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 305.427629][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.428396][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.713439][ T10] usb 1-1: USB disconnect, device number 11 [ 305.844147][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 305.989027][ T8373] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.859'. [ 305.993742][ T8373] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.859'. [ 306.474600][ T8383] lo speed is unknown, defaulting to 1000 [ 307.783026][ T8424] lo speed is unknown, defaulting to 1000 [ 307.987276][ T8436] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.883'. [ 308.719019][ T5738] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 308.925602][ T5738] usb 3-1: Using ep0 maxpacket: 8 [ 308.943533][ T5738] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 308.963644][ T5738] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 308.963675][ T5738] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 308.963697][ T5738] usb 3-1: Product: syz [ 308.963712][ T5738] usb 3-1: Manufacturer: syz [ 308.963726][ T5738] usb 3-1: SerialNumber: syz [ 309.139926][ T8467] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.896'. [ 309.249642][ T5738] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 309.249668][ T5738] usb 3-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 309.249686][ T5738] usb 3-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 309.249704][ T5738] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 309.556917][ T5738] usb 3-1: palm_os_3_probe - error -110 getting bytes available request [ 309.557006][ T5738] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 309.634797][ T5738] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 309.713163][ T5738] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 309.860719][ T36] usb 3-1: USB disconnect, device number 10 [ 310.074901][ T36] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 310.109743][ T36] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 310.112441][ T36] visor 3-1:1.0: device disconnected [ 311.022036][ T8502] lo speed is unknown, defaulting to 1000 [ 311.829271][ T8534] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.906835][ T820] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 311.931575][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 312.055596][ T820] usb 2-1: Using ep0 maxpacket: 8 [ 312.057722][ T820] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 312.061777][ T820] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 312.061805][ T820] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 312.061824][ T820] usb 2-1: Product: syz [ 312.061838][ T820] usb 2-1: Manufacturer: syz [ 312.061852][ T820] usb 2-1: SerialNumber: syz [ 312.293937][ T8531] lo speed is unknown, defaulting to 1000 [ 312.563504][ T820] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 312.563522][ T820] usb 2-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 312.563536][ T820] usb 2-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 312.563550][ T820] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 312.876130][ T820] usb 2-1: palm_os_3_probe - error -110 getting bytes available request [ 312.876216][ T820] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 312.904064][ T820] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 313.114740][ T820] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 313.147708][ T8558] syzkaller0: entered promiscuous mode [ 313.147738][ T8558] syzkaller0: entered allmulticast mode [ 313.238905][ T820] usb 2-1: USB disconnect, device number 11 [ 313.408495][ T820] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 313.521929][ T820] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 313.557585][ T820] visor 2-1:1.0: device disconnected [ 314.344473][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803b86a000: rx timeout, send abort [ 314.380782][ T8572] netlink: 11684 bytes leftover after parsing attributes in process `syz.1.934'. [ 314.844510][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803b868000: rx timeout, send abort [ 314.844581][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803b86a000: abort rx timeout. Force session deactivation [ 315.345027][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803b868000: abort rx timeout. Force session deactivation [ 316.596598][ T8598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.944'. [ 316.603997][ T8595] netlink: 84 bytes leftover after parsing attributes in process `syz.2.943'. [ 317.218968][ T8610] lo speed is unknown, defaulting to 1000 [ 317.267644][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.267715][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.666131][ T36] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 317.837229][ T36] usb 3-1: not running at top speed; connect to a high speed hub [ 317.839538][ T36] usb 3-1: config 0 has no interfaces? [ 317.843506][ T36] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.40 [ 317.843536][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.843556][ T36] usb 3-1: Product: ࡃ [ 317.843571][ T36] usb 3-1: Manufacturer: а [ 317.843586][ T36] usb 3-1: SerialNumber: 鵙偔駪櫳犓៹ꏽ虿푚춤䑥쾲ᔏ㢽釣䞴ຌ⥦坢䛥䙠쇗䌽黝韂✕埰ᓤ䖱䨹㣈풃ꚞ죏렣琽퇟鄙 [ 317.920061][ T36] usb 3-1: config 0 descriptor?? [ 318.042391][ T8627] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.951'. [ 318.043512][ T8627] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.951'. [ 318.141239][ T820] usb 3-1: USB disconnect, device number 11 [ 320.252083][ T8664] syzkaller0: entered promiscuous mode [ 320.252111][ T8664] syzkaller0: entered allmulticast mode [ 320.328216][ T8664] tipc: Started in network mode [ 320.328252][ T8664] tipc: Node identity 524c4dbfd728, cluster identity 4711 [ 320.431705][ T8664] tipc: Enabled bearer , priority 0 [ 320.492231][ T8662] tipc: Resetting bearer [ 320.605590][ T36] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 320.768334][ T36] usb 4-1: not running at top speed; connect to a high speed hub [ 320.771732][ T36] usb 4-1: config 0 has no interfaces? [ 320.795857][ T36] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.40 [ 320.795987][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.796010][ T36] usb 4-1: Product: ࡃ [ 320.796025][ T36] usb 4-1: Manufacturer: а [ 320.796041][ T36] usb 4-1: SerialNumber: 鵙偔駪櫳犓៹ꏽ虿푚춤䑥쾲ᔏ㢽釣䞴ຌ⥦坢䛥䙠쇗䌽黝韂✕埰ᓤ䖱䨹㣈풃ꚞ죏렣琽퇟鄙 [ 320.807435][ T36] usb 4-1: config 0 descriptor?? [ 321.181889][ T36] usb 4-1: USB disconnect, device number 11 [ 322.203678][ T8662] tipc: Disabling bearer [ 322.359981][ T5710] tipc: Node number set to 2237943231 [ 323.379295][ T8705] lo speed is unknown, defaulting to 1000 [ 323.709313][ T8726] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.986'. [ 323.730761][ T8726] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.986'. [ 325.273295][ T8749] netlink: 11684 bytes leftover after parsing attributes in process `syz.1.992'. [ 326.522624][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.997'. [ 326.721599][ T8770] syzkaller0: entered promiscuous mode [ 326.721626][ T8770] syzkaller0: entered allmulticast mode [ 326.803495][ T8773] tipc: Enabled bearer , priority 0 [ 327.017128][ T8766] tipc: Resetting bearer [ 327.274632][ T8766] tipc: Disabling bearer [ 327.515822][ T5738] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 327.666476][ T5738] usb 3-1: Using ep0 maxpacket: 32 [ 327.669402][ T5738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.669428][ T5738] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 327.669466][ T5738] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 327.669489][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.739510][ T5738] usb 3-1: config 0 descriptor?? [ 328.138745][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 328.167281][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 328.351599][ T8813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1012'. [ 329.643889][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1024'. [ 329.795759][ T5710] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 329.955594][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 329.961319][ T5710] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 329.964709][ T5710] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 329.964740][ T5710] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 329.964760][ T5710] usb 1-1: Product: syz [ 329.964774][ T5710] usb 1-1: Manufacturer: syz [ 329.964789][ T5710] usb 1-1: SerialNumber: syz [ 330.246085][ T5710] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 330.246111][ T5710] usb 1-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 330.246132][ T5710] usb 1-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 330.246151][ T5710] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 331.097179][ T5710] usb 1-1: palm_os_3_probe - error -110 getting bytes available request [ 331.097266][ T5710] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 331.167284][ T5710] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 331.186240][ T5710] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 331.245755][ T8859] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1029'. [ 331.248742][ T8859] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1029'. [ 331.485980][ T5710] usb 3-1: USB disconnect, device number 12 [ 331.511101][ T10] usb 1-1: USB disconnect, device number 12 [ 331.604863][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 331.632468][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 331.705734][ T10] visor 1-1:1.0: device disconnected [ 331.855552][ T5882] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 332.005613][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 332.010852][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 332.021075][ T5882] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 332.021105][ T5882] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 332.021126][ T5882] usb 2-1: Product: syz [ 332.021141][ T5882] usb 2-1: Manufacturer: syz [ 332.021156][ T5882] usb 2-1: SerialNumber: syz [ 332.345156][ T5882] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 332.345183][ T5882] usb 2-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 332.345203][ T5882] usb 2-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 332.345223][ T5882] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 332.652226][ T5882] usb 2-1: palm_os_3_probe - error -110 getting bytes available request [ 332.652307][ T5882] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 332.748832][ T5882] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 332.890858][ T5882] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 333.210766][ T5882] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 333.365766][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 333.453272][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.453299][ T5882] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.453400][ T5882] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 333.453424][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.586728][ T5882] usb 5-1: config 0 descriptor?? [ 334.001486][ T36] usb 2-1: USB disconnect, device number 12 [ 334.048242][ T36] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 334.098233][ T36] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 334.101876][ T36] visor 2-1:1.0: device disconnected [ 336.204556][ T10] usb 5-1: USB disconnect, device number 10 [ 336.762387][ T8954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1064'. [ 336.762424][ T8954] netlink: 'syz.1.1064': attribute type 7 has an invalid length. [ 336.762438][ T8954] netlink: 'syz.1.1064': attribute type 8 has an invalid length. [ 336.762451][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 337.656905][ T8985] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1071'. [ 339.166716][ T9007] lo speed is unknown, defaulting to 1000 [ 339.511723][ T9028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1085'. [ 339.531852][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1086'. [ 339.532362][ T9027] 8021q: VLANs not supported on nlmon0 [ 341.374380][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 341.406130][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 341.875563][ T5731] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 342.067950][ T5731] usb 4-1: Using ep0 maxpacket: 8 [ 342.071210][ T5731] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 342.071238][ T5731] usb 4-1: config 0 has no interface number 0 [ 342.071283][ T5731] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 342.071307][ T5731] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 342.071332][ T5731] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.071358][ T5731] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 342.071401][ T5731] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 342.071425][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.183865][ T5731] usb 4-1: config 0 descriptor?? [ 342.219310][ T5731] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 342.709260][ T5731] usb 4-1: USB disconnect, device number 12 [ 342.752395][ T5731] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 342.901066][ T9116] geneve0: entered promiscuous mode [ 345.500789][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1141'. [ 345.541124][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1142'. [ 345.542862][ T9165] netlink: 'syz.4.1142': attribute type 10 has an invalid length. [ 345.544552][ T9164] netlink: 'syz.0.1141': attribute type 10 has an invalid length. [ 346.082899][ T9180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1147'. [ 346.082936][ T9180] netlink: 'syz.3.1147': attribute type 7 has an invalid length. [ 346.082950][ T9180] netlink: 'syz.3.1147': attribute type 8 has an invalid length. [ 346.082963][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1147'. [ 346.364230][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 346.471437][ T9188] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1151'. [ 346.772197][ T9193] lo speed is unknown, defaulting to 1000 [ 346.867455][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 346.891226][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 347.120288][ T9211] geneve0: entered promiscuous mode [ 347.212565][ T9215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1161'. [ 348.096258][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1172'. [ 348.359034][ T9245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.007092][ T9275] syzkaller0: entered promiscuous mode [ 350.007118][ T9275] syzkaller0: entered allmulticast mode [ 351.037648][ T9299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1192'. [ 351.037791][ T9299] netlink: 'syz.1.1192': attribute type 7 has an invalid length. [ 351.037807][ T9299] netlink: 'syz.1.1192': attribute type 8 has an invalid length. [ 351.037820][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 351.358832][ T9299] netlink: 'syz.1.1192': attribute type 9 has an invalid length. [ 351.358856][ T9299] netlink: 'syz.1.1192': attribute type 6 has an invalid length. [ 352.273629][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1198'. [ 352.277520][ T9325] netlink: 'syz.2.1198': attribute type 10 has an invalid length. [ 352.615771][ T9331] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.646248][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 352.673786][ T9330] lo speed is unknown, defaulting to 1000 [ 352.777621][ T9334] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.819243][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'. [ 353.228205][ T9333] lo speed is unknown, defaulting to 1000 [ 353.438918][ T9342] ieee802154 phy0 wpan0: encryption failed: -22 [ 353.513159][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 353.794004][ T9338] lo speed is unknown, defaulting to 1000 [ 355.785626][ T820] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 355.946134][ T820] usb 1-1: Using ep0 maxpacket: 8 [ 355.949058][ T820] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 355.952421][ T820] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 355.952454][ T820] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 355.952481][ T820] usb 1-1: Product: syz [ 355.952497][ T820] usb 1-1: Manufacturer: syz [ 355.952512][ T820] usb 1-1: SerialNumber: syz [ 356.286524][ T820] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 356.286556][ T820] usb 1-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 356.286576][ T820] usb 1-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 356.286596][ T820] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 356.595926][ T820] usb 1-1: palm_os_3_probe - error -110 getting bytes available request [ 356.596143][ T820] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 357.299013][ T820] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 357.696145][ T820] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 358.676980][ T820] usb 1-1: USB disconnect, device number 13 [ 358.890652][ T820] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 358.940812][ T820] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 358.957759][ T820] visor 1-1:1.0: device disconnected [ 360.033084][ T9435] tipc: Enabled bearer , priority 0 [ 360.034465][ T9431] syzkaller0: entered promiscuous mode [ 360.034491][ T9431] syzkaller0: entered allmulticast mode [ 360.199752][ T9421] tipc: Resetting bearer [ 360.615951][ T9421] tipc: Disabling bearer [ 361.669058][ T9471] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1245'. [ 362.640013][ T9483] lo speed is unknown, defaulting to 1000 [ 362.763549][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1253'. [ 362.811681][ T9490] 8021q: VLANs not supported on nlmon0 [ 363.061663][ T9494] lo speed is unknown, defaulting to 1000 [ 363.555637][ T5710] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 363.705647][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 363.711764][ T5710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.711792][ T5710] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 363.711834][ T5710] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 363.711858][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.791442][ T5710] usb 2-1: config 0 descriptor?? [ 364.762658][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1275'. [ 364.898647][ T9549] vlan2: entered promiscuous mode [ 364.898672][ T9549] batadv0: entered promiscuous mode [ 366.534020][ T9584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1287'. [ 366.667622][ T820] usb 2-1: USB disconnect, device number 13 [ 367.955894][ T5710] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 367.960875][ T820] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 369.067936][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 369.067977][ T5710] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 369.068008][ T5710] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 369.068025][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.087682][ T820] usb 1-1: Using ep0 maxpacket: 8 [ 369.149977][ T5710] usb 3-1: config 0 descriptor?? [ 369.175215][ T820] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 369.217904][ T820] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 369.217934][ T820] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 369.217958][ T820] usb 1-1: Product: syz [ 369.217977][ T820] usb 1-1: Manufacturer: syz [ 369.218004][ T820] usb 1-1: SerialNumber: syz [ 369.541915][ T820] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 369.541942][ T820] usb 1-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 369.542143][ T820] usb 1-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 369.542165][ T820] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 369.846313][ T820] usb 1-1: palm_os_3_probe - error -110 getting bytes available request [ 369.846418][ T820] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 369.979688][ T820] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 370.051509][ T820] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 370.196972][ T820] usb 1-1: USB disconnect, device number 14 [ 370.283169][ T820] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 370.309502][ T820] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 370.316491][ T820] visor 1-1:1.0: device disconnected [ 370.571178][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1309'. [ 371.571018][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1318'. [ 371.878719][ T5710] usbhid 3-1:0.0: can't add hid device: -71 [ 371.878915][ T5710] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 371.929511][ T5710] usb 3-1: USB disconnect, device number 13 [ 372.360802][ T9684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1324'. [ 372.496175][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1328'. [ 372.602198][ T9690] vlan2: entered promiscuous mode [ 373.215694][ T36] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 373.375868][ T820] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 373.395553][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 373.397864][ T36] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 373.397891][ T36] usb 1-1: config 0 has no interface number 0 [ 373.397933][ T36] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 373.397958][ T36] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 373.397984][ T36] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.398010][ T36] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 373.398052][ T36] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 373.398076][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.508782][ T36] usb 1-1: config 0 descriptor?? [ 373.526076][ T820] usb 5-1: Using ep0 maxpacket: 8 [ 373.530059][ T820] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 373.550250][ T36] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 373.570601][ T820] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 373.570634][ T820] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 373.570657][ T820] usb 5-1: Product: syz [ 373.570672][ T820] usb 5-1: Manufacturer: syz [ 373.570687][ T820] usb 5-1: SerialNumber: syz [ 373.874033][ T9702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.911873][ T820] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 373.911917][ T820] usb 5-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 373.911937][ T820] usb 5-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 373.911957][ T820] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 373.929057][ T9702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.216039][ T820] usb 5-1: palm_os_3_probe - error -110 getting bytes available request [ 374.216318][ T820] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 374.276301][ T820] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 374.341539][ T10] usb 1-1: USB disconnect, device number 15 [ 374.537021][ T820] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 374.541409][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 374.578683][ T820] usb 5-1: USB disconnect, device number 11 [ 374.638717][ T820] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 374.713531][ T820] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 374.729896][ T820] visor 5-1:1.0: device disconnected [ 375.483912][ T9733] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.539641][ T9730] lo speed is unknown, defaulting to 1000 [ 375.700084][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1344'. [ 375.763856][ T9738] vlan2: entered promiscuous mode [ 376.308408][ T9753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1350'. [ 376.308444][ T9753] netlink: 'syz.2.1350': attribute type 7 has an invalid length. [ 376.308456][ T9753] netlink: 'syz.2.1350': attribute type 8 has an invalid length. [ 376.308467][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 376.513892][ T9758] netlink: 'syz.2.1350': attribute type 9 has an invalid length. [ 376.513920][ T9758] netlink: 'syz.2.1350': attribute type 6 has an invalid length. [ 377.282268][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1354'. [ 377.290923][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1354'. [ 378.423128][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'. [ 378.594145][ T9779] vlan2: entered promiscuous mode [ 378.594168][ T9779] dummy0: entered promiscuous mode [ 378.638084][ T36] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 378.732522][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.732599][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.795702][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 378.798655][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.798683][ T36] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 378.798721][ T36] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 378.798744][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.850959][ T36] usb 5-1: config 0 descriptor?? [ 379.461065][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1367'. [ 379.505585][ T9801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.607280][ T9797] lo speed is unknown, defaulting to 1000 [ 380.005553][ T36] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 380.260996][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 380.264510][ T36] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 380.264539][ T36] usb 2-1: config 0 has no interface number 0 [ 380.264586][ T36] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.264610][ T36] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 380.264637][ T36] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 380.264664][ T36] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 380.264709][ T36] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 380.264734][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.392195][ T36] usb 2-1: config 0 descriptor?? [ 380.438397][ T36] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 380.628424][ T9817] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.149999][ T9806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.189879][ T9806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.340563][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 381.463271][ T820] usb 2-1: USB disconnect, device number 14 [ 381.495127][ T820] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 381.616539][ T5738] usb 5-1: USB disconnect, device number 12 [ 381.923778][ T9822] vlan2: entered promiscuous mode [ 381.923802][ T9822] gretap0: entered promiscuous mode [ 382.175583][ T5738] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 382.325658][ T5738] usb 5-1: Using ep0 maxpacket: 8 [ 382.327695][ T5738] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 382.330615][ T5738] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 382.330645][ T5738] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 382.330666][ T5738] usb 5-1: Product: syz [ 382.330680][ T5738] usb 5-1: Manufacturer: syz [ 382.330695][ T5738] usb 5-1: SerialNumber: syz [ 382.600339][ T5738] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 382.600366][ T5738] usb 5-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 382.600388][ T5738] usb 5-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 382.600408][ T5738] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 382.905990][ T5738] usb 5-1: palm_os_3_probe - error -110 getting bytes available request [ 382.906082][ T5738] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 382.948337][ T5738] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 382.973976][ T5738] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 383.232263][ T5710] usb 5-1: USB disconnect, device number 13 [ 383.279901][ T5710] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 383.324380][ T5710] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 383.341083][ T5710] visor 5-1:1.0: device disconnected [ 385.170696][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1389'. [ 385.226531][ T9870] vlan2: entered promiscuous mode [ 388.631686][ T9903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1398'. [ 389.099859][ T9916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1402'. [ 389.099898][ T9916] netlink: 'syz.0.1402': attribute type 7 has an invalid length. [ 389.099912][ T9916] netlink: 'syz.0.1402': attribute type 8 has an invalid length. [ 389.099927][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 390.455069][ T9922] netlink: 'syz.0.1402': attribute type 9 has an invalid length. [ 390.455094][ T9922] netlink: 'syz.0.1402': attribute type 6 has an invalid length. [ 390.611224][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1405'. [ 390.644472][ T9934] vlan2: entered promiscuous mode [ 390.827644][ T9938] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.561911][ T9937] lo speed is unknown, defaulting to 1000 [ 396.372455][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 396.386377][T10009] 8021q: VLANs not supported on nlmon0 [ 397.015614][ T5882] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 397.165519][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 397.168916][ T5882] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 397.168946][ T5882] usb 4-1: config 0 has no interface number 0 [ 397.168995][ T5882] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.169012][ T5882] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 397.169031][ T5882] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 397.169050][ T5882] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 397.169081][ T5882] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 397.169098][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.241421][ T5882] usb 4-1: config 0 descriptor?? [ 397.315988][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1441'. [ 397.433879][ T5882] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 397.502564][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'. [ 397.502602][T10037] netlink: 'syz.0.1444': attribute type 7 has an invalid length. [ 397.502621][T10037] netlink: 'syz.0.1444': attribute type 8 has an invalid length. [ 397.502635][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'. [ 397.617202][T10028] 8021q: adding VLAN 0 to HW filter on device bond3 [ 397.777129][T10040] netlink: 'syz.0.1444': attribute type 9 has an invalid length. [ 397.777155][T10040] netlink: 'syz.0.1444': attribute type 6 has an invalid length. [ 397.795231][ T5882] usb 4-1: USB disconnect, device number 13 [ 397.827217][ T1681] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 397.857888][ T5882] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 398.017475][ T1681] usb 5-1: Using ep0 maxpacket: 8 [ 398.021277][ T1681] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 398.021378][ T1681] usb 5-1: config 0 has no interface number 0 [ 398.021425][ T1681] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 398.021450][ T1681] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 398.021477][ T1681] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 398.021504][ T1681] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 398.021547][ T1681] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 398.021571][ T1681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.115800][ T1681] usb 5-1: config 0 descriptor?? [ 398.141615][ T1681] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 398.552965][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 398.622171][T10039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.622812][T10039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.866461][ T820] usb 5-1: USB disconnect, device number 14 [ 398.917110][ T820] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 398.989369][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1453'. [ 399.923162][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'. [ 400.346548][ T5710] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 400.505531][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 400.509731][ T5710] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 400.509759][ T5710] usb 2-1: config 0 has no interface number 0 [ 400.509805][ T5710] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 400.510040][ T5710] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 400.510068][ T5710] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 400.510095][ T5710] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 400.510138][ T5710] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 400.510163][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.612676][ T5710] usb 2-1: config 0 descriptor?? [ 400.690137][ T5710] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 401.078643][T10113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.096667][T10113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.683202][ T5724] usb 2-1: USB disconnect, device number 15 [ 401.718241][ T5724] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 402.092916][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1473'. [ 404.016410][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1483'. [ 404.040789][T10152] vlan2: entered promiscuous mode [ 404.040813][T10152] bond0: entered promiscuous mode [ 404.040827][T10152] bond_slave_0: entered promiscuous mode [ 404.041076][T10152] bond_slave_1: entered promiscuous mode [ 405.295681][ T5724] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 405.625525][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 406.830099][ T5724] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.830127][ T5724] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 406.830171][ T5724] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 406.830189][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.834588][ T5724] usb 3-1: config 0 descriptor?? [ 408.024686][T10211] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.036454][T10211] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.464182][T10211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.483301][T10211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.040623][ T36] usb 3-1: USB disconnect, device number 14 [ 409.825759][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.876631][T10234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1513'. [ 409.876673][T10234] netlink: 'syz.1.1513': attribute type 7 has an invalid length. [ 409.876688][T10234] netlink: 'syz.1.1513': attribute type 8 has an invalid length. [ 409.876702][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 410.045845][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.048044][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.048490][ T1071] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.179292][T10234] netlink: 'syz.1.1513': attribute type 9 has an invalid length. [ 410.179320][T10234] netlink: 'syz.1.1513': attribute type 6 has an invalid length. [ 410.476626][T10258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1519'. [ 410.476661][T10258] netlink: 'syz.4.1519': attribute type 7 has an invalid length. [ 410.476674][T10258] netlink: 'syz.4.1519': attribute type 8 has an invalid length. [ 410.476721][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1519'. [ 410.739419][T10258] netlink: 'syz.4.1519': attribute type 9 has an invalid length. [ 410.739444][T10258] netlink: 'syz.4.1519': attribute type 6 has an invalid length. [ 411.157934][ T1681] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 411.306237][ T1681] usb 4-1: Using ep0 maxpacket: 8 [ 411.311835][ T1681] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 411.311864][ T1681] usb 4-1: config 0 has no interface number 0 [ 411.311910][ T1681] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 411.312088][ T1681] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 411.312116][ T1681] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.312143][ T1681] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 411.312186][ T1681] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 411.312211][ T1681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.407618][ T1681] usb 4-1: config 0 descriptor?? [ 411.431768][ T1681] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 411.606460][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1525'. [ 411.753523][T10280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 411.833765][ T5724] usb 4-1: USB disconnect, device number 14 [ 411.890282][ T5724] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 412.240606][T10284] syzkaller0: entered promiscuous mode [ 412.240628][T10284] syzkaller0: entered allmulticast mode [ 412.283230][T10289] tipc: Enabled bearer , priority 0 [ 412.355999][T10283] tipc: Resetting bearer [ 412.634893][T10283] tipc: Disabling bearer [ 412.852967][T10313] lo speed is unknown, defaulting to 1000 [ 413.065370][T10315] lo speed is unknown, defaulting to 1000 [ 413.090480][T10321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1538'. [ 413.239179][T10324] syzkaller0: entered promiscuous mode [ 413.239206][T10324] syzkaller0: entered allmulticast mode [ 413.752568][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1541'. [ 413.898467][T10335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.022208][T10331] lo speed is unknown, defaulting to 1000 [ 414.943324][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 415.046186][T10365] 8021q: VLANs not supported on nlmon0 [ 415.190413][T10369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1552'. [ 415.190450][T10369] netlink: 'syz.3.1552': attribute type 7 has an invalid length. [ 415.190464][T10369] netlink: 'syz.3.1552': attribute type 8 has an invalid length. [ 415.190477][T10369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 416.253438][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'. [ 416.313313][T10397] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1561'. [ 416.430061][T10383] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.432683][T10383] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.929756][T10383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.961107][T10383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.078742][T10394] 8021q: VLANs not supported on nlmon0 [ 418.085091][ T1071] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.108933][ T820] lo speed is unknown, defaulting to 1000 [ 418.109622][ T820] syz2: Port: 1 Link DOWN [ 418.156780][T10415] tipc: Enabled bearer , priority 0 [ 418.175635][T10412] syzkaller0: entered promiscuous mode [ 418.175670][T10412] syzkaller0: entered allmulticast mode [ 418.200747][ T1071] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.201940][ T1071] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.201989][ T1071] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.270122][T10405] tipc: Resetting bearer [ 418.599955][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1572'. [ 418.633200][T10405] tipc: Disabling bearer [ 419.794697][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'. [ 419.824102][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'. [ 419.831193][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'. [ 420.128502][T10470] lo speed is unknown, defaulting to 1000 [ 420.466329][T10476] lo speed is unknown, defaulting to 1000 [ 421.304658][ T5882] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 421.505479][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 421.511647][ T5882] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 421.542979][ T5882] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 421.543013][ T5882] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 421.543036][ T5882] usb 1-1: Product: syz [ 421.543141][ T5882] usb 1-1: Manufacturer: syz [ 421.543158][ T5882] usb 1-1: SerialNumber: syz [ 421.838343][ T5882] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 421.838369][ T5882] usb 1-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 421.838389][ T5882] usb 1-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 421.838409][ T5882] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 422.145792][ T5882] usb 1-1: palm_os_3_probe - error -110 getting bytes available request [ 422.145878][ T5882] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 422.263179][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1599'. [ 422.375066][ T5882] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 422.444514][ T5882] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 422.492798][ T5882] usb 1-1: USB disconnect, device number 16 [ 422.523518][ T5882] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 422.584059][ T5882] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 422.589002][ T5882] visor 1-1:1.0: device disconnected [ 423.363506][T10532] syzkaller0: entered promiscuous mode [ 423.363534][T10532] syzkaller0: entered allmulticast mode [ 425.006549][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 425.024832][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 425.101645][ T820] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 425.246546][ T820] usb 3-1: Using ep0 maxpacket: 8 [ 425.249762][ T820] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 425.249793][ T820] usb 3-1: config 0 has no interface number 0 [ 425.249849][ T820] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 425.249875][ T820] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 425.249901][ T820] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 425.249927][ T820] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 425.249969][ T820] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 425.249993][ T820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.353947][ T820] usb 3-1: config 0 descriptor?? [ 425.420630][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 425.455858][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 425.482360][ T820] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 425.680486][T10566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.681995][T10566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.397169][ T5607] usb 3-1: USB disconnect, device number 15 [ 426.454688][ T5607] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 426.490289][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1633'. [ 426.490708][T10592] 8021q: VLANs not supported on vcan0 [ 428.298386][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1645'. [ 428.298821][T10631] 8021q: VLANs not supported on vcan0 [ 428.630586][T10636] lo speed is unknown, defaulting to 1000 [ 429.949198][T10675] syzkaller0: entered promiscuous mode [ 429.949227][T10675] syzkaller0: entered allmulticast mode [ 430.301581][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 430.336824][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 431.187838][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1668'. [ 431.742470][T10692] lo speed is unknown, defaulting to 1000 [ 432.095555][ T820] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 432.245588][ T5724] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 432.248348][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 432.248381][ T820] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.248425][ T820] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 432.248449][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.308442][ T820] usb 4-1: config 0 descriptor?? [ 432.395686][ T5724] usb 1-1: Using ep0 maxpacket: 8 [ 432.398479][ T5724] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 432.398508][ T5724] usb 1-1: config 0 has no interface number 0 [ 432.398559][ T5724] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 432.398584][ T5724] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 432.398611][ T5724] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 432.398638][ T5724] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 432.398683][ T5724] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 432.398708][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.505081][ T5724] usb 1-1: config 0 descriptor?? [ 432.581122][ T5724] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 432.951066][T10714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.992473][T10714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.240439][ T5724] usb 1-1: USB disconnect, device number 17 [ 433.260043][ T820] usbhid 4-1:0.0: can't add hid device: -71 [ 433.341506][ T820] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 433.362577][ T5724] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 433.427494][ T820] usb 4-1: USB disconnect, device number 15 [ 433.573959][T10722] syzkaller0: entered promiscuous mode [ 433.573986][T10722] syzkaller0: entered allmulticast mode [ 434.064357][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1682'. [ 434.515665][ T5724] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 434.652468][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 434.668509][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 434.668547][ T5724] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 434.668591][ T5724] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 434.668615][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.718155][ T5724] usb 1-1: config 0 descriptor?? [ 434.867947][T10753] vlan2: entered promiscuous mode [ 434.867973][T10753] dummy0: entered promiscuous mode [ 435.198021][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1692'. [ 435.290219][T10741] vlan2: entered promiscuous mode [ 435.378987][T10761] 8021q: VLANs not supported on nlmon0 [ 435.525705][ T36] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 435.608368][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1694'. [ 435.675563][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 435.682408][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.682434][ T36] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 435.682528][ T36] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 435.682552][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.745246][ T36] usb 4-1: config 0 descriptor?? [ 435.940794][T10772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1696'. [ 436.405204][ T5882] usb 4-1: USB disconnect, device number 16 [ 436.435610][ T36] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 436.585642][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 436.590461][ T36] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 436.590490][ T36] usb 2-1: config 0 has no interface number 0 [ 436.590933][ T36] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 436.590975][ T36] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 436.591001][ T36] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 436.591606][ T36] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 436.591654][ T36] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 436.592074][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.598951][T10784] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 436.706660][ T36] usb 2-1: config 0 descriptor?? [ 436.792505][ T36] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 436.831772][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'. [ 437.052277][T10789] vlan2: entered promiscuous mode [ 437.052304][T10789] dummy0: entered promiscuous mode [ 437.104084][T10781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.105043][T10781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.317867][ T5724] usbhid 1-1:0.0: can't add hid device: -71 [ 437.317999][ T5724] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 437.325135][ T5724] usb 1-1: USB disconnect, device number 18 [ 437.427154][ T5882] usb 2-1: USB disconnect, device number 16 [ 437.455256][ T5882] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 437.519642][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1706'. [ 438.357878][T10815] lo speed is unknown, defaulting to 1000 [ 438.487487][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 438.682717][T10827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1715'. [ 438.704632][T10823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.425973][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1723'. [ 440.154107][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.154180][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.177591][T10860] lo speed is unknown, defaulting to 1000 [ 440.669933][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 440.715331][T10869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 441.950715][T10881] lo speed is unknown, defaulting to 1000 [ 442.153563][T10891] lo speed is unknown, defaulting to 1000 [ 444.122711][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1747'. [ 444.258634][T10923] 8021q: VLANs not supported on nlmon0 [ 444.481589][T10912] lo speed is unknown, defaulting to 1000 [ 444.599680][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1751'. [ 445.794332][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1760'. [ 445.794787][T10957] 8021q: VLANs not supported on nlmon0 [ 445.878973][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1763'. [ 445.908827][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1763'. [ 446.318366][T10971] netlink: 9636 bytes leftover after parsing attributes in process `syz.0.1765'. [ 446.883603][T10974] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1768'. [ 447.534301][T10983] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1770'. [ 451.250493][T11052] lo speed is unknown, defaulting to 1000 [ 462.969557][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1824'. [ 463.000428][T11137] IPVS: Unknown mcast interface: vcan0 [ 463.117127][ T5724] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 463.275711][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 463.275749][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 463.275947][ T5724] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 463.275973][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.377260][ T5724] usb 3-1: config 0 descriptor?? [ 465.750704][T11163] overlayfs: missing 'workdir' [ 468.106712][ T5724] usbhid 3-1:0.0: can't add hid device: -71 [ 468.106849][ T5724] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 468.244802][ T5724] usb 3-1: USB disconnect, device number 16 [ 470.567101][T11177] lo speed is unknown, defaulting to 1000 [ 473.363609][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1839'. [ 476.086147][ T36] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 476.240985][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 476.241019][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 476.241055][ T36] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 476.241075][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.311763][ T36] usb 5-1: config 0 descriptor?? [ 479.310298][ T36] usbhid 5-1:0.0: can't add hid device: -71 [ 479.310480][ T36] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 479.355022][ T36] usb 5-1: USB disconnect, device number 15 [ 480.910700][T11234] syzkaller0: entered promiscuous mode [ 480.910731][T11234] syzkaller0: entered allmulticast mode [ 484.244436][T11283] netlink: 'syz.4.1868': attribute type 9 has an invalid length. [ 484.244460][T11283] netlink: 'syz.4.1868': attribute type 6 has an invalid length. [ 484.342163][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 484.380604][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 484.382032][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 484.383640][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 484.384442][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.499118][T11291] lo speed is unknown, defaulting to 1000 [ 485.511819][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 485.679792][ T31] usb 2-1: config 0 has no interfaces? [ 485.679832][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 485.679858][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.799129][ T31] usb 2-1: config 0 descriptor?? [ 486.140230][T11303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1874'. [ 486.140268][T11303] netlink: 'syz.3.1874': attribute type 7 has an invalid length. [ 486.140284][T11303] netlink: 'syz.3.1874': attribute type 8 has an invalid length. [ 486.140297][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 486.574096][ T1681] usb 2-1: USB disconnect, device number 17 [ 486.634561][ T5611] Bluetooth: hci5: command tx timeout [ 486.987208][T11280] lo speed is unknown, defaulting to 1000 [ 487.441826][T11309] block nbd1: shutting down sockets [ 488.301697][T11326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1879'. [ 488.301736][T11326] netlink: 'syz.4.1879': attribute type 7 has an invalid length. [ 488.301751][T11326] netlink: 'syz.4.1879': attribute type 8 has an invalid length. [ 488.301764][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1879'. [ 488.705843][ T5611] Bluetooth: hci5: command tx timeout [ 489.687153][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 490.744091][T11348] vlan2: entered promiscuous mode [ 490.785510][ T5611] Bluetooth: hci5: command tx timeout [ 490.980243][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1889'. [ 490.980288][T11357] netlink: 'syz.3.1889': attribute type 7 has an invalid length. [ 490.980303][T11357] netlink: 'syz.3.1889': attribute type 8 has an invalid length. [ 490.980318][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'. [ 492.189156][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1894'. [ 492.189214][T11377] netlink: 'syz.3.1894': attribute type 7 has an invalid length. [ 492.189229][T11377] netlink: 'syz.3.1894': attribute type 8 has an invalid length. [ 492.189243][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 492.499349][T11280] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.514462][T11280] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.514733][T11280] bridge_slave_0: entered allmulticast mode [ 492.557686][T11280] bridge_slave_0: entered promiscuous mode [ 492.656632][T11280] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.661474][T11280] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.661766][T11280] bridge_slave_1: entered allmulticast mode [ 492.703410][T11280] bridge_slave_1: entered promiscuous mode [ 492.871843][ T5611] Bluetooth: hci5: command tx timeout [ 493.076736][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1899'. [ 493.076777][T11389] netlink: 'syz.1.1899': attribute type 7 has an invalid length. [ 493.076792][T11389] netlink: 'syz.1.1899': attribute type 8 has an invalid length. [ 493.076806][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1899'. [ 493.199405][T11280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.394824][T11280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.849421][T11280] team0: Port device team_slave_0 added [ 495.016534][T11400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1901'. [ 496.214691][T11396] lo speed is unknown, defaulting to 1000 [ 496.248519][T11280] team0: Port device team_slave_1 added [ 496.511238][T11280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.511258][T11280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.511288][T11280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.512026][T11406] lo speed is unknown, defaulting to 1000 [ 496.613697][T11280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.613717][T11280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.613748][T11280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.866807][T11280] hsr_slave_0: entered promiscuous mode [ 497.872133][T11280] hsr_slave_1: entered promiscuous mode [ 497.892737][T11280] debugfs: 'hsr0' already exists in 'hsr' [ 497.892787][T11280] Cannot create hsr debugfs directory [ 499.940262][T11280] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 501.588670][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.588763][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.650958][T11280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.750352][T11280] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 504.760877][T11280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.808833][T11280] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 505.042889][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 505.095925][T11431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1910'. [ 505.237327][T11280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.302659][T11280] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 505.830871][T11280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 506.283257][T11439] lo speed is unknown, defaulting to 1000 [ 506.554176][T11451] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 506.554321][T11451] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 506.554670][T11451] veth0_virt_wifi: entered allmulticast mode [ 506.588599][T11451] veth0_virt_wifi: entered promiscuous mode [ 507.079081][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1916'. [ 507.112159][T11280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.130619][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1916'. [ 507.321174][T11280] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.378673][ T9416] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.379841][ T9416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.471701][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.471881][ T6511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.482247][T11482] bridge5: entered promiscuous mode [ 510.482278][T11482] bridge5: entered allmulticast mode [ 510.518997][T11482] team0: Port device bridge5 added [ 518.377510][T11477] bridge0: port 4(team0) entered blocking state [ 518.377664][T11477] bridge0: port 4(team0) entered disabled state [ 518.378590][T11477] team0: entered allmulticast mode [ 518.378611][T11477] team_slave_0: entered allmulticast mode [ 518.378813][T11477] team_slave_1: entered allmulticast mode [ 518.396396][T11477] team0: entered promiscuous mode [ 518.396424][T11477] team_slave_0: entered promiscuous mode [ 518.396680][T11477] team_slave_1: entered promiscuous mode [ 527.985973][T11280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.896588][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 539.968712][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 542.212769][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 543.202898][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 543.206006][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 548.488340][ T5615] Bluetooth: hci1: command tx timeout [ 548.491119][ T5611] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 548.497343][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 551.393391][T11513] Bluetooth: hci1: command tx timeout [ 551.566668][T11511] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 553.452642][T11506] Bluetooth: hci1: command tx timeout [ 555.553371][T11513] Bluetooth: hci1: command tx timeout [ 563.487799][T11506] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 563.538755][T11506] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 563.544458][T11506] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 563.562080][T11506] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 563.571335][T11506] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 563.995401][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.995477][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.242863][T11513] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 569.243522][T11513] Bluetooth: hci7: command tx timeout [ 570.348301][T11506] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 571.351495][T11506] Bluetooth: hci7: command tx timeout [ 571.364750][T11529] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 573.466781][T11513] Bluetooth: hci7: command tx timeout [ 579.361007][T11513] Bluetooth: hci7: command tx timeout [ 583.754780][T11505] lo speed is unknown, defaulting to 1000 [ 587.523603][T11513] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 589.570916][T11506] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 590.905366][T11534] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 624.902685][T11506] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 624.903759][T11506] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 624.922933][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.923012][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.929094][T11506] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 627.015844][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 627.017219][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 627.292624][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 630.083691][T11506] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 630.733522][T11559] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 631.740281][T11506] Bluetooth: hci2: command tx timeout [ 632.759544][T11513] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 633.828851][ T5611] Bluetooth: hci2: command tx timeout [ 634.263083][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 636.305435][T11561] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 636.860948][T11506] Bluetooth: hci2: command tx timeout [ 636.861636][T11513] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 637.984218][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 639.030983][ T5615] Bluetooth: hci2: command tx timeout [ 640.357377][T11513] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 640.364564][T11513] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 640.365585][T11513] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 643.397128][T11513] Bluetooth: hci4: command tx timeout [ 645.549349][ T5611] Bluetooth: hci4: command tx timeout [ 645.557903][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.570584][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 647.585444][ T5611] Bluetooth: hci4: command tx timeout [ 648.586167][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 648.665505][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 648.672475][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 650.581358][ T5611] Bluetooth: hci4: command tx timeout [ 655.419679][T11513] Bluetooth: hci0: command tx timeout [ 657.475529][T11513] Bluetooth: hci0: command tx timeout [ 660.048382][T11513] Bluetooth: hci0: command tx timeout [ 662.549112][T11513] Bluetooth: hci0: command tx timeout [ 666.329131][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 669.343076][T11513] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 669.348704][T11513] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 671.747674][T11587] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 674.492098][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 676.588402][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 677.605418][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 677.611179][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 677.619703][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 677.624858][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 682.738378][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 682.770536][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 682.772692][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 682.773938][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 682.783131][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.761787][ T5615] Bluetooth: hci5: command tx timeout [ 686.840964][T11513] Bluetooth: hci5: command tx timeout [ 686.842062][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.842140][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.928734][ T5615] Bluetooth: hci3: command tx timeout [ 688.900622][ T5615] Bluetooth: hci5: command tx timeout [ 689.998602][ T5615] Bluetooth: hci3: command tx timeout [ 693.024156][T11506] Bluetooth: hci3: command tx timeout [ 693.028400][T11506] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 693.263219][T11513] Bluetooth: hci5: command tx timeout [ 694.115822][T11513] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 694.122187][T11513] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 695.125430][T11513] Bluetooth: hci3: command tx timeout [ 695.134001][T11605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 695.134824][T11605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 699.357030][ T5615] Bluetooth: hci6: command tx timeout [ 701.448897][ T5615] Bluetooth: hci6: command tx timeout [ 704.239400][ T5615] Bluetooth: hci6: command tx timeout [ 706.438230][ T5615] Bluetooth: hci6: command tx timeout [ 708.844911][T11605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 708.877994][T11605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 709.862150][T11513] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 709.885517][T11513] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 710.900305][T11513] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 713.189368][T11513] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 714.157405][T11513] Bluetooth: hci7: command tx timeout [ 715.203855][T11513] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 717.030825][T11513] Bluetooth: hci7: command tx timeout [ 717.277872][T11605] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 717.279184][T11605] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 717.280666][T11605] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 719.268706][ T5615] Bluetooth: hci7: command tx timeout [ 722.160799][ T5615] Bluetooth: hci7: command tx timeout [ 724.196826][ T5615] Bluetooth: hci8: command tx timeout [ 726.293680][ T5615] Bluetooth: hci8: command tx timeout [ 728.348039][T11605] Bluetooth: hci8: command tx timeout [ 730.445644][T11605] Bluetooth: hci8: command tx timeout [ 747.880050][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.880126][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.141227][T11647] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 757.172205][ T5611] Bluetooth: hci2: command 0x0406 tx timeout [ 759.142345][T11647] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 759.148140][T11647] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 759.154513][T11647] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 759.156635][T11647] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 764.237779][T11605] Bluetooth: hci9: command tx timeout [ 766.498354][ T5615] Bluetooth: hci9: command tx timeout [ 766.498392][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 768.599044][ T5615] Bluetooth: hci9: command tx timeout [ 771.403524][T11605] Bluetooth: hci9: command tx timeout [ 773.451732][ T5611] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 773.456977][ T5615] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 773.490021][ T5615] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 775.604373][ T5611] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 776.628182][ T5615] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 776.628294][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 782.712635][T11647] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 783.735672][T11647] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 800.138256][ T5611] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 800.387035][ T5611] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 800.425338][ T5611] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 800.428686][ T5611] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 801.430539][ T5611] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 804.187323][ T5615] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 807.265556][T11605] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 807.577362][T11665] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 809.336041][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.336118][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.589901][ T5615] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 822.640138][T11605] Bluetooth: hci13: Opcode 0x1003 failed: -110 [ 822.648873][ T5615] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 825.054706][T11506] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 827.113342][T11647] Bluetooth: hci12: command tx timeout [ 827.940610][T11647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 827.974721][T11647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 827.976806][T11647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 828.053183][ T5615] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 829.108513][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 829.984015][T11647] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 829.991465][T11647] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 829.992362][T11647] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 831.115727][ T5615] Bluetooth: hci12: command tx timeout [ 831.162981][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 833.037712][T11605] Bluetooth: hci2: Opcode 0x0c14 failed: -110 [ 833.059335][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 833.094167][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 834.056234][T11605] Bluetooth: hci12: command tx timeout [ 834.088468][T11605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 834.112544][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 834.113782][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 836.093493][T11681] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 836.103532][ T5611] Bluetooth: hci12: command tx timeout [ 839.324588][T11647] Bluetooth: hci13: command tx timeout [ 841.367189][T11647] Bluetooth: hci13: command tx timeout [ 844.435343][ T5615] Bluetooth: hci13: command tx timeout [ 845.445100][ T5615] Bluetooth: hci0: command tx timeout [ 847.489039][ T5615] Bluetooth: hci13: command tx timeout [ 848.540640][ T5615] Bluetooth: hci0: command tx timeout [ 850.602953][ T5615] Bluetooth: hci0: command tx timeout [ 853.623667][ T5611] Bluetooth: hci0: command tx timeout [ 867.719396][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 869.743519][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 869.769719][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 870.775869][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.775941][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.778916][T11647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 870.779857][T11647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 875.889170][T11647] Bluetooth: hci2: command tx timeout [ 875.951882][T11647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 877.935391][ T5615] Bluetooth: hci2: command tx timeout [ 877.936013][T11647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 877.938487][T11647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 877.947478][T11647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 877.948349][T11647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 880.000541][ T5615] Bluetooth: hci2: command tx timeout [ 882.104383][T11647] Bluetooth: hci2: command tx timeout [ 887.403364][T11506] Bluetooth: hci3: command tx timeout [ 888.568030][T11506] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 888.577321][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 889.213687][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 889.578639][T11506] Bluetooth: hci3: command tx timeout [ 889.583184][T11506] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 890.243671][T11506] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 890.381834][T11506] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 890.441134][T11605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 890.443040][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 890.444653][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 892.240417][ T5615] Bluetooth: hci3: command tx timeout [ 892.241029][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 894.306672][T11605] Bluetooth: hci3: command tx timeout [ 895.374068][T11714] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 898.693944][T11506] Bluetooth: hci4: command tx timeout [ 901.063311][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 901.093047][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 901.095870][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 901.101006][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 902.120828][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 905.137231][T11506] Bluetooth: hci5: command tx timeout [ 906.454550][T11647] Bluetooth: hci6: command tx timeout [ 907.236034][T11506] Bluetooth: hci5: command tx timeout [ 908.525777][T11647] Bluetooth: hci6: command tx timeout [ 911.316213][ T5615] Bluetooth: hci5: command tx timeout [ 911.316256][ T5615] Bluetooth: hci6: command tx timeout [ 913.370814][T11647] Bluetooth: hci6: command tx timeout [ 913.370853][T11647] Bluetooth: hci5: command tx timeout [ 919.791671][ T12] team0: left allmulticast mode [ 919.791694][ T12] team_slave_0: left allmulticast mode [ 919.791912][ T12] team_slave_1: left allmulticast mode [ 919.792041][ T12] team0: left promiscuous mode [ 919.792054][ T12] team_slave_0: left promiscuous mode [ 919.792370][ T12] team_slave_1: left promiscuous mode [ 919.793717][ T12] bridge0: port 4(team0) entered disabled state [ 931.920244][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.920322][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.694032][ T12] veth0_virt_wifi: left allmulticast mode [ 935.694071][ T12] veth0_virt_wifi: left promiscuous mode [ 936.060676][T11647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 936.072857][T11647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 936.715608][ T12] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 937.055495][T11647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 937.166456][T11647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 937.212270][T11647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 942.334395][ T5615] Bluetooth: hci0: command tx timeout [ 944.815344][ T5615] Bluetooth: hci0: command tx timeout [ 947.045296][T11647] Bluetooth: hci0: command tx timeout [ 948.117027][ T12] bridge_slave_1: left allmulticast mode [ 948.117069][ T12] bridge_slave_1: left promiscuous mode [ 948.117344][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.169243][T11647] Bluetooth: hci0: command tx timeout [ 949.492824][T11506] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 951.328024][T11647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 951.416226][T11647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 951.459187][T11506] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 951.479961][T11647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 951.483746][T11647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 951.484668][T11647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 952.447266][T11647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 954.497506][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 954.498363][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 955.308920][T11605] Bluetooth: hci4: Opcode 0x0c16 failed: -110 [ 957.369296][T11774] Bluetooth: hci4: Opcode 0x0c03 failed: -4 [ 958.440801][ T5615] Bluetooth: hci1: command tx timeout [ 958.758405][T11647] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 959.480359][ T5611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 961.484498][ T5611] Bluetooth: hci1: command tx timeout [ 961.499223][T11647] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 961.505707][T11647] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 961.528184][T11647] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 962.501458][T11647] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 962.501913][ T5611] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 962.551818][ T5611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 963.521733][ T5611] Bluetooth: hci1: command tx timeout [ 964.546527][T11605] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 964.548052][T11605] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 965.655027][ T5611] Bluetooth: hci1: command tx timeout [ 965.679884][ T12] bridge_slave_0: left allmulticast mode [ 965.679921][ T12] bridge_slave_0: left promiscuous mode [ 965.680181][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.671385][ T5611] Bluetooth: hci7: command tx timeout [ 969.067304][ T5611] Bluetooth: hci7: command tx timeout [ 971.185489][T11605] Bluetooth: hci7: command tx timeout [ 973.259732][T11605] Bluetooth: hci8: command tx timeout [ 973.275596][T11605] Bluetooth: hci7: command tx timeout [ 975.889630][T11605] Bluetooth: hci8: command tx timeout [ 978.177670][T11605] Bluetooth: hci8: command tx timeout [ 980.267534][ T5615] Bluetooth: hci8: command tx timeout [ 987.546403][T11605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 989.692536][ T5615] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 991.740165][T11790] Bluetooth: hci4: Opcode 0x0c03 failed: -4 [ 993.996815][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.996894][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.995969][T11605] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 996.997998][T11605] Bluetooth: hci2: command 0x0406 tx timeout [ 1001.043383][ T5611] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 1001.124772][T11506] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1003.182912][ T5615] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1003.184242][ T5615] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1003.184672][ T5615] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1003.188918][ T5615] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1003.189760][ T5615] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1006.023452][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1007.074888][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1008.047120][T11605] Bluetooth: hci3: command 0x0406 tx timeout [ 1008.047173][T11647] Bluetooth: hci9: command tx timeout [ 1008.055842][T11647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1008.058449][T11647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1008.063239][T11647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1010.095195][T11647] Bluetooth: hci9: command tx timeout [ 1012.178862][T11506] Bluetooth: hci9: command tx timeout [ 1012.360626][T11506] Bluetooth: hci4: command tx timeout [ 1014.412659][T11506] Bluetooth: hci9: command tx timeout [ 1015.261623][T11647] Bluetooth: hci4: command tx timeout [ 1017.281431][T11647] Bluetooth: hci4: command tx timeout [ 1019.372758][T11647] Bluetooth: hci4: command tx timeout [ 1026.573600][T11506] Bluetooth: hci5: command 0x0406 tx timeout [ 1028.068030][ T5615] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1029.260924][ T5615] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1032.331873][T11513] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1032.333611][T11513] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1032.400242][T11817] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1034.455258][T11817] Bluetooth: hci6: command 0x0406 tx timeout [ 1034.455464][T11817] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1034.854925][T11513] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1035.450192][ T5615] Bluetooth: hci11: Opcode 0x1003 failed: -110 [ 1035.906122][T11647] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1036.504266][ T5615] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1036.508931][ T5615] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1036.514188][ T5615] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1036.516650][ T5611] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1036.521678][ T5611] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1036.528315][ T5611] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1037.084647][ T5611] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1037.096872][ T5611] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1038.005934][T11605] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1041.672504][T11605] Bluetooth: hci12: command tx timeout [ 1041.673117][T11605] Bluetooth: hci10: command tx timeout [ 1042.103723][ T5611] Bluetooth: hci11: command tx timeout [ 1043.745292][T11605] Bluetooth: hci10: command tx timeout [ 1043.745336][T11605] Bluetooth: hci12: command tx timeout [ 1044.164561][ T5611] Bluetooth: hci11: command tx timeout [ 1046.132849][T11605] Bluetooth: hci12: command tx timeout [ 1046.132899][T11605] Bluetooth: hci10: command tx timeout [ 1046.250531][ T5611] Bluetooth: hci11: command tx timeout [ 1048.384854][ T5611] Bluetooth: hci10: command tx timeout [ 1048.384897][ T5611] Bluetooth: hci12: command tx timeout [ 1048.384922][ T5611] Bluetooth: hci11: command tx timeout [ 1055.551822][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.551905][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.616760][ T5611] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1057.648003][ T5611] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1057.652196][ T5611] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1057.661257][ T5611] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1057.662357][ T5611] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1060.726853][ T5611] Bluetooth: hci13: command tx timeout [ 1062.888755][ T5611] Bluetooth: hci13: command tx timeout [ 1063.963961][T11605] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1064.063418][T11605] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1064.986466][T11506] Bluetooth: hci13: command tx timeout [ 1065.975424][ T38] INFO: task kworker/u8:16:6511 blocked for more than 146 seconds. [ 1065.975452][ T38] Not tainted syzkaller #0 [ 1065.975464][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1065.975475][ T38] task:kworker/u8:16 state:D stack:20392 pid:6511 tgid:6511 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1065.975560][ T38] Workqueue: events_unbound linkwatch_event [ 1065.975798][ T38] Call Trace: [ 1065.975840][ T38] [ 1065.975894][ T38] __schedule+0x16dc/0x5500 [ 1065.976047][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1065.976155][ T38] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1065.976264][ T38] ? __pfx___schedule+0x10/0x10 [ 1065.976287][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1065.976364][ T38] rt_mutex_schedule+0x76/0xf0 [ 1065.976420][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1065.976466][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1065.976523][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1065.976562][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1065.976599][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1065.976645][ T38] ? linkwatch_event+0xe/0x60 [ 1065.976695][ T38] ? linkwatch_event+0xe/0x60 [ 1065.976728][ T38] mutex_lock_nested+0x168/0x1d0 [ 1065.976761][ T38] ? rcu_is_watching+0x15/0xb0 [ 1065.976849][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 1065.976946][ T38] linkwatch_event+0xe/0x60 [ 1065.976979][ T38] process_scheduled_works+0xa8e/0x14e0 [ 1065.977044][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1065.977087][ T38] ? assign_work+0x3cf/0x5d0 [ 1065.977127][ T38] worker_thread+0xa47/0xfb0 [ 1065.977194][ T38] kthread+0x388/0x470 [ 1065.977257][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1065.977291][ T38] ? __pfx_kthread+0x10/0x10 [ 1065.977320][ T38] ret_from_fork+0x514/0xb70 [ 1065.977403][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1065.977431][ T38] ? __switch_to+0xc89/0x1420 [ 1065.977509][ T38] ? __pfx_kthread+0x10/0x10 [ 1065.977536][ T38] ret_from_fork_asm+0x1a/0x30 [ 1065.977599][ T38] [ 1065.977654][ T38] INFO: task syz-executor:1[ 1065.977654][ T38] INFO: task syz-executor:11706 blocked for more than 146 seconds. [ 1065.977672][ T38] Not tainted syzkaller #0 [ 1065.977684][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1065.977695][ T38] task:syz-executor state:D stack:25800 pid:11706 tgid:11706 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1065.977763][ T38] Call Trace: [ 1065.977771][ T38] [ 1065.977786][ T38] __schedule+0x16dc/0x5500 [ 1065.977843][ T38] ? __pfx___schedule+0x10/0x10 [ 1065.977884][ T38] rt_mutex_schedule+0x76/0xf0 [ 1065.977917][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1065.977969][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1065.978006][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1065.978042][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1065.978090][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1065.978188][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1065.978230][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1065.978271][ T38] mutex_lock_nested+0x168/0x1d0 [ 1065.978313][ T38] inet_rtm_newaddr+0x464/0x19e0 [ 1065.978349][ T38] ? unwind_get_return_address+0x4d/0x90 [ 1065.978414][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1065.978486][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1065.978542][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1065.978577][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 1065.978606][ T38] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 1065.978696][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1065.978724][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1065.978754][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1065.978824][ T38] netlink_rcv_skb+0x226/0x4a0 [ 1065.978928][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1065.978959][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1065.979007][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1065.979040][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1065.979079][ T38] netlink_unicast+0x7f5/0x990 [ 1065.979127][ T38] netlink_sendmsg+0x813/0xb40 [ 1065.979172][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1065.979208][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1065.979317][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1065.979351][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 1065.979428][ T38] __sys_sendto+0x41e/0x5d0 [ 1065.979491][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1065.979519][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1065.979595][ T38] ? fput_close_sync+0x11f/0x240 [ 1065.979661][ T38] ? kmem_cache_free+0x526/0x6c0 [ 1065.979727][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 1065.979767][ T38] __x64_sys_sendto+0xde/0x100 [ 1065.979799][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.979869][ T38] do_syscall_64+0x174/0x580 [ 1065.979921][ T38] ? trace_irq_disable+0x3b/0x140 [ 1065.980009][ T38] ? clear_bhb_loop+0x40/0x90 [ 1065.980039][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.980068][ T38] RIP: 0033:0x7fd20dd0e68e [ 1065.980094][ T38] RSP: 002b:00007ffe42d09e58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1065.980145][ T38] RAX: ffffffffffffffda RBX: 00005555874fc500 RCX: 00007fd20dd0e68e [ 1065.980162][ T38] RDX: 0000000000000028 RSI: 00007fd20eb04670 RDI: 0000000000000003 [ 1065.980176][ T38] RBP: 0000000000000001 R08: 00007ffe42d09ed4 R09: 000000000000000c [ 1065.980190][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1065.980203][ T38] R13: 0000000000000000 R14: 00007fd20eb04670 R15: 0000000000000000 [ 1065.980245][ T38] [ 1065.980255][ T38] INFO: task syz-executor:11711 blocked for more than 146 seconds. [ 1065.980272][ T38] Not tainted syzkaller #0 [ 1065.980283][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1065.980294][ T38] task:syz-executor state:D stack:25800 pid:11711 tgid:11711 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1065.980358][ T38] Call Trace: [ 1065.980365][ T38] [ 1065.980379][ T38] __schedule+0x16dc/0x5500 [ 1065.980435][ T38] ? __pfx___schedule+0x10/0x10 [ 1065.980477][ T38] rt_mutex_schedule+0x76/0xf0 [ 1065.980508][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1065.980560][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1065.980598][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1065.980634][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1065.980682][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1065.980723][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1065.980767][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1065.980799][ T38] mutex_lock_nested+0x168/0x1d0 [ 1065.980841][ T38] inet_rtm_newaddr+0x464/0x19e0 [ 1065.980875][ T38] ? unwind_get_return_address+0x4d/0x90 [ 1065.980906][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1065.980947][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1065.981003][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1065.981037][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 1065.981065][ T38] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 1065.981117][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1065.992340][T11506] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1066.007974][T11506] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1066.010123][T11506] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1067.042572][ T5611] Bluetooth: hci13: command tx timeout [ 1068.079187][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1068.079232][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1068.079276][ T38] netlink_rcv_skb+0x226/0x4a0 [ 1068.079312][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1068.079340][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1068.079385][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1068.079416][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1068.079452][ T38] netlink_unicast+0x7f5/0x990 [ 1068.079490][ T38] netlink_sendmsg+0x813/0xb40 [ 1068.079533][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1068.079567][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1068.079601][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1068.079632][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 1068.079660][ T38] __sys_sendto+0x41e/0x5d0 [ 1068.079696][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1068.079723][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1068.079763][ T38] ? fput_close_sync+0x11f/0x240 [ 1068.079792][ T38] ? kmem_cache_free+0x526/0x6c0 [ 1068.079833][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 1068.079873][ T38] __x64_sys_sendto+0xde/0x100 [ 1068.079903][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.079928][ T38] do_syscall_64+0x174/0x580 [ 1068.079955][ T38] ? trace_irq_disable+0x3b/0x140 [ 1068.079984][ T38] ? clear_bhb_loop+0x40/0x90 [ 1068.080013][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.080036][ T38] RIP: 0033:0x7efe5b52e68e [ 1068.080066][ T38] RSP: 002b:00007ffc79ef6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1068.080091][ T38] RAX: ffffffffffffffda RBX: 000055557fde6500 RCX: 00007efe5b52e68e [ 1068.080110][ T38] RDX: 0000000000000028 RSI: 00007efe5c324670 RDI: 0000000000000003 [ 1068.080125][ T38] RBP: 0000000000000001 R08: 00007ffc79ef6204 R09: 000000000000000c [ 1068.080140][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1068.080153][ T38] R13: 0000000000000000 R14: 00007efe5c324670 R15: 0000000000000000 [ 1068.080188][ T38] [ 1068.080207][ T38] INFO: task syz-executor:11719 blocked for more than 148 seconds. [ 1068.080225][ T38] Not tainted syzkaller #0 [ 1068.080236][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1068.080247][ T38] task:syz-executor state:D stack:25800 pid:11719 tgid:11719 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1068.080314][ T38] Call Trace: [ 1068.080321][ T38] [ 1068.080335][ T38] __schedule+0x16dc/0x5500 [ 1068.080365][ T38] ? kernel_text_address+0xa5/0xe0 [ 1068.080396][ T38] ? __kernel_text_address+0xd/0x30 [ 1068.080447][ T38] ? __pfx___schedule+0x10/0x10 [ 1068.080488][ T38] rt_mutex_schedule+0x76/0xf0 [ 1068.080521][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1068.080572][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1068.080609][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1068.080646][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1068.080693][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 1068.080727][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 1068.080762][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 1068.080785][ T38] mutex_lock_nested+0x168/0x1d0 [ 1068.080827][ T38] rtnl_newlink+0x8a3/0x1bd0 [ 1068.080869][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1068.080899][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1068.080937][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1068.080975][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1068.081008][ T38] ? unwind_next_frame+0x8f/0x2550 [ 1068.081054][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1068.081211][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1068.081250][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1068.081284][ T38] ? kernel_text_address+0xa5/0xe0 [ 1068.081313][ T38] ? __kernel_text_address+0xd/0x30 [ 1068.081341][ T38] ? unwind_get_return_address+0x4d/0x90 [ 1068.081372][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1068.081400][ T38] ? arch_stack_walk+0xfb/0x150 [ 1068.081475][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1068.081504][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1068.081546][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1068.081573][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 1068.081600][ T38] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 1068.081634][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1068.081661][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1068.081691][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1068.081735][ T38] netlink_rcv_skb+0x226/0x4a0 [ 1068.081769][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1068.081799][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1068.081846][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1068.081877][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1068.081916][ T38] netlink_unicast+0x7f5/0x990 [ 1068.081958][ T38] netlink_sendmsg+0x813/0xb40 [ 1068.082002][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1068.082036][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1068.082079][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1068.082109][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 1068.082137][ T38] __sys_sendto+0x41e/0x5d0 [ 1068.082173][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1068.082200][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1068.082238][ T38] ? fput_close_sync+0x11f/0x240 [ 1068.082265][ T38] ? kmem_cache_free+0x526/0x6c0 [ 1068.082306][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 1068.082346][ T38] __x64_sys_sendto+0xde/0x100 [ 1068.082377][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.082402][ T38] do_syscall_64+0x174/0x580 [ 1068.082429][ T38] ? trace_irq_disable+0x3b/0x140 [ 1068.082456][ T38] ? clear_bhb_loop+0x40/0x90 [ 1068.082485][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.082508][ T38] RIP: 0033:0x7f2e3800e68e [ 1068.082527][ T38] RSP: 002b:00007fffeed0c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1068.082550][ T38] RAX: ffffffffffffffda RBX: 0000555584cf2500 RCX: 00007f2e3800e68e [ 1068.082566][ T38] RDX: 000000000000002c RSI: 00007f2e38e04670 RDI: 0000000000000003 [ 1068.082581][ T38] RBP: 0000000000000001 R08: 00007fffeed0c0d4 R09: 000000000000000c [ 1068.082596][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1068.082610][ T38] R13: 0000000000000000 R14: 00007f2e38e04670 R15: 0000000000000000 [ 1068.082644][ T38] [ 1068.082671][ T38] [ 1068.082671][ T38] Showing all locks held in the system: [ 1068.082687][ T38] 4 locks held by kworker/u8:0/12: [ 1068.082731][ T38] #0: ffff88801b2a8938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1068.082883][ T38] #1: ffffc90000117c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1068.082948][ T38] #2: ffffffff8f362b20 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1068.083040][ T38] #3: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1068.083110][ T38] 4 locks held by ktimers/0/16: [ 1068.083123][ T38] 3 locks held by pr/legacy/17: [ 1068.083138][ T38] 5 locks held by ktimers/1/29: [ 1068.083150][ T38] 3 locks held by kworker/1:0/31: [ 1068.083161][ T38] #0: ffff88801a043938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1068.083224][ T38] #1: ffffc90000a5fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1068.083287][ T38] #2: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1068.083388][ T38] 1 lock held by khungtaskd/38: [ 1068.083400][ T38] #0: ffffffff8dfc2fc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1068.083480][ T38] 2 locks held by kworker/u8:3/56: [ 1068.083493][ T38] 6 locks held by kworker/u8:5/68: [ 1068.083515][ T38] 3 locks held by kworker/u8:11/2221: [ 1068.083527][ T38] #0: ffff888031b52938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1068.083592][ T38] #1: ffffc900072efc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1068.083659][ T38] #2: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1068.083776][ T38] 6 locks held by kworker/u8:14/3325: [ 1068.083790][ T38] 6 locks held by kworker/u8:15/3398: [ 1068.083805][ T38] 1 lock held by dhcpcd/5259: [ 1068.083815][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 1068.083879][ T38] 2 locks held by getty/5356: [ 1068.083891][ T38] #0: ffff8880325340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1068.084029][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1068.084094][ T38] 8 locks held by kworker/u9:4/5611: [ 1068.084107][ T38] #0: ffff8880402bb938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1068.084187][ T38] #1: ffffc9000449fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1068.084251][ T38] #2: ffff8880651600b0 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 1068.084351][ T38] #3: ffffffff8f7197f8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 1068.084444][ T38] #4: ffffffff8dfc2fc0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 1068.084555][ T38] #5: ffff8880336edf58 (&si->socket.wq.wait){+.+.}-{3:3}, at: __wake_up_common_lock+0x2f/0x1f0 [ 1068.084639][ T38] #6: ffffffff8dfc2fc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1068.084704][ T38] #7: ffff888037d1ca08 (&ep->lock){+.+.}-{3:3}, at: ep_poll_callback+0x79/0x7e0 [ 1068.084798][ T38] 3 locks held by kworker/u8:16/6511: [ 1068.084811][ T38] #0: ffff88801a084138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1068.084876][ T38] #1: ffffc90003d9fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1068.084940][ T38] #2: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1068.085008][ T38] 3 locks held by kworker/1:6/11531: [ 1068.085020][ T38] #0: ffff88801a043938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1068.085091][ T38] #1: [ 1069.043793][T11506] Bluetooth: hci0: command 0x0406 tx timeout [ 1070.395819][ T38] ffffc900075cfc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1070.395900][ T38] #2: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x72/0x7f0 [ 1070.396078][ T38] 6 locks held by kworker/u9:2/11605: [ 1070.396110][ T38] #0: ffff8880299b1938 ((wq_completion)hci0#9){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1070.396184][ T38] #1: ffffc9000e397c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1070.396250][ T38] #2: ffff888061654f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1070.396378][ T38] #3: ffff8880616540b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1070.396444][ T38] #4: ffffffff8f4f4bb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x145/0x320 [ 1070.396548][ T38] #5: ffff88803def1b70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 1070.396608][ T38] 1 lock held by syz-executor/11706: [ 1070.396620][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.396687][ T38] 1 lock held by syz-executor/11711: [ 1070.396701][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.396766][ T38] 1 lock held by syz-executor/11719: [ 1070.396779][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1070.396838][ T38] 1 lock held by syz-executor/11734: [ 1070.396851][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.396918][ T38] 1 lock held by syz-executor/11765: [ 1070.396931][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.396996][ T38] 1 lock held by syz-executor/11773: [ 1070.397009][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.397075][ T38] 1 lock held by syz-executor/11777: [ 1070.397088][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.397153][ T38] 1 lock held by syz-executor/11780: [ 1070.397165][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.397229][ T38] 1 lock held by syz-executor/11795: [ 1070.397242][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.397309][ T38] 1 lock held by syz-executor/11801: [ 1070.397321][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.397389][ T38] 1 lock held by syz-executor/11808: [ 1070.397401][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.397474][ T38] 1 lock held by syz-executor/11811: [ 1070.397488][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.397553][ T38] 1 lock held by syz-executor/11812: [ 1070.397565][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.397632][ T38] 1 lock held by syz-executor/11828: [ 1070.397644][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.397711][ T38] 1 lock held by syz-executor/11835: [ 1070.397724][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1070.397790][ T38] [ 1070.397796][ T38] ============================================= [ 1070.397796][ T38] [ 1070.397808][ T38] NMI backtrace for cpu 0 [ 1070.397840][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1070.397864][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1070.397879][ T38] Call Trace: [ 1070.397888][ T38] [ 1070.397898][ T38] dump_stack_lvl+0xe8/0x150 [ 1070.397929][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1070.398067][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1070.398130][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1070.398171][ T38] sys_info+0x135/0x170 [ 1070.398204][ T38] watchdog+0xfd7/0x1030 [ 1070.398300][ T38] ? watchdog+0x1c7/0x1030 [ 1070.398333][ T38] kthread+0x388/0x470 [ 1070.398358][ T38] ? __pfx_watchdog+0x10/0x10 [ 1070.398382][ T38] ? __pfx_kthread+0x10/0x10 [ 1070.398408][ T38] ret_from_fork+0x514/0xb70 [ 1070.398439][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1070.398474][ T38] ? __switch_to+0xc89/0x1420 [ 1070.398499][ T38] ? __pfx_kthread+0x10/0x10 [ 1070.398526][ T38] ret_from_fork_asm+0x1a/0x30 [ 1070.398574][ T38] [ 1070.398589][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1070.398621][ C1] NMI backtrace for cpu 1 [ 1070.398644][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1070.398666][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1070.398677][ C1] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 1070.398708][ C1] Code: e8 8f 97 3b 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 30 fa c6 10 e8 1b 9c 7d 09 89 c3 83 f8 08 73 65 [ 1070.398725][ C1] RSP: 0018:ffffc90000a3fa60 EFLAGS: 00000057 [ 1070.398741][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8187da1c [ 1070.398753][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f8afef0 [ 1070.398765][ C1] RBP: 0000000000000001 R08: ffffffff8f8afef7 R09: 1ffffffff1f15fde [ 1070.398778][ C1] R10: dffffc0000000000 R11: fffffbfff1f15fdf R12: ffff8880b893d648 [ 1070.398792][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88803bf0d118 [ 1070.398806][ C1] FS: 0000000000000000(0000) GS:ffff888126211000(0000) knlGS:0000000000000000 [ 1070.398821][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1070.398833][ C1] CR2: 00007f4d6b2d585e CR3: 0000000040060000 CR4: 00000000003526f0 [ 1070.398849][ C1] Call Trace: [ 1070.398856][ C1] [ 1070.398863][ C1] trace_softirq_raise+0x3b/0x130 [ 1070.398959][ C1] raise_softirq_irqoff+0x56/0x160 [ 1070.398987][ C1] __netif_schedule+0x176/0x200 [ 1070.399037][ C1] ? advance_sched+0x9f1/0xc90 [ 1070.399118][ C1] advance_sched+0xa93/0xc90 [ 1070.399153][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1070.399182][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 1070.399253][ C1] hrtimer_run_softirq+0x18f/0x260 [ 1070.399275][ C1] handle_softirqs+0x1d9/0x6c0 [ 1070.399308][ C1] run_ktimerd+0x69/0x100 [ 1070.399326][ C1] smpboot_thread_fn+0x57c/0xa80 [ 1070.399368][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 1070.399389][ C1] kthread+0x388/0x470 [ 1070.399409][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1070.399426][ C1] ? __pfx_kthread+0x10/0x10 [ 1070.399446][ C1] ret_from_fork+0x514/0xb70 [ 1070.399469][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1070.399490][ C1] ? __switch_to+0xc89/0x1420 [ 1070.399507][ C1] ? __pfx_kthread+0x10/0x10 [ 1070.399528][ C1] ret_from_fork_asm+0x1a/0x30 [ 1070.399560][ C1] [ 1070.399626][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1070.399643][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1070.399667][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1070.399680][ T38] Call Trace: [ 1070.399689][ T38] [ 1070.399698][ T38] vpanic+0x56c/0xa60 [ 1070.399732][ T38] ? __pfx_vpanic+0x10/0x10 [ 1070.399773][ T38] panic+0xc5/0xd0 [ 1070.399802][ T38] ? __pfx_panic+0x10/0x10 [ 1070.399836][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 1070.399868][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 1070.399911][ T38] watchdog+0x1030/0x1030 [ 1070.399947][ T38] ? watchdog+0x1c7/0x1030 [ 1070.399981][ T38] kthread+0x388/0x470 [ 1070.400006][ T38] ? __pfx_watchdog+0x10/0x10 [ 1070.400030][ T38] ? __pfx_kthread+0x10/0x10 [ 1070.400053][ T38] ret_from_fork+0x514/0xb70 [ 1070.400094][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1070.400122][ T38] ? __switch_to+0xc89/0x1420 [ 1070.400146][ T38] ? __pfx_kthread+0x10/0x10 [ 1070.400173][ T38] ret_from_fork_asm+0x1a/0x30 [ 1070.400220][ T38] [ 1070.400393][ T38] Kernel Offset: disabled