last executing test programs: 7m15.81600417s ago: executing program 0 (id=2347): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x25dfdbfe, {0xa, 0x18, 0x0, 0xfd, r0}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x180}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 7m15.551771969s ago: executing program 0 (id=2350): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 7m15.318233125s ago: executing program 0 (id=2355): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x565a9c7ba55e863, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c890}, 0x4008010) 7m15.090928543s ago: executing program 0 (id=2360): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 7m14.445367304s ago: executing program 1 (id=2369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable', 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno', 0x4) shutdown(r0, 0x1) 7m14.289058968s ago: executing program 1 (id=2372): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6bd10bf24a80bed, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 7m13.941212629s ago: executing program 1 (id=2376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x30, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0xc, 0x4, 0x1001, 0x0, 0x0, {[@eol, @eol, @exp_fastopen={0xfe, 0x5, 0xf989, "17"}, @md5sig={0x13, 0x12, "14e062e6bd2826d7a939c230321a06b1"}]}}}}}}}}, 0x0) 7m13.739976432s ago: executing program 1 (id=2379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x9, @loopback, 0x40}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "7a0afacb1ba30ef3", "a3966a9c2c799501471a53222718e691", "b728f3ff", "0d461df8b401a3a2"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 7m13.520727814s ago: executing program 1 (id=2382): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xfffc) 7m13.373555633s ago: executing program 0 (id=2384): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}}, 0x20}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7m12.768551198s ago: executing program 0 (id=2392): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x25dfdbfe, {0xa, 0x18, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x180}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 7m12.351378209s ago: executing program 1 (id=2396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xb, 0x196, 0x7ff, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0xc, 0xf, 0x0, 0x8}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) 7m12.350180361s ago: executing program 2 (id=2397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) writev(r0, &(0x7f0000000580)=[{&(0x7f00000006c0)="581a17919cc7749e9438c65fb6", 0xd}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c7576f78f3260c7c00", "e9be1eae", "bb10000000000001"}, 0x28) 7m12.02071372s ago: executing program 2 (id=2398): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xc001}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) 7m11.679350359s ago: executing program 2 (id=2399): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x21dfcbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x96}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) 7m11.326511997s ago: executing program 2 (id=2400): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000300)={0x18, 0x0, {0x4, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) 7m11.172931816s ago: executing program 2 (id=2401): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r0, 0x565a9c7ba55e863, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c890}, 0x4008010) 7m11.063339988s ago: executing program 2 (id=2402): r0 = socket$kcm(0x10, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x109000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8f}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 6m58.576774723s ago: executing program 32 (id=2378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) 6m57.568200438s ago: executing program 33 (id=2392): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x25dfdbfe, {0xa, 0x18, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x180}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 6m57.009147344s ago: executing program 34 (id=2396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xb, 0x196, 0x7ff, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "6699b5420526c2b529551b7300f32470fdaa4202a9cb5ba3886655871959310f380b6d35a9fd2f86d1efc53088b52a1b9c21d32f66ea6b2d242dea4fe5dc911b5950c094f10b91ea9208e09d67c338889fba0729c7164814dd0d360c3114a5167c4b82c081e0e03b1a0b6b791b9672dc03be41a15835fe63768530566f97d34dfc85b3cb68ea368327f996c66dcc07d8b238d24b45ee16400c8e7c83f936ce3081a11ff0e414a764e95eb33e3c6f86757aa03de173915ba0961a8b21931f84bc43e54f6c371b31a7a25e96c5af49dd307cea7828d8c497158ad2319a3a2db561f65658cb1f916ad84e04d7a8436e2a9a378b6924447e34baf5970edf572109a3"}, @TCA_GRED_DPS={0x10, 0x3, {0xc, 0xf, 0x0, 0x8}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) 6m55.542073635s ago: executing program 35 (id=2402): r0 = socket$kcm(0x10, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x109000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8f}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 6m12.957578353s ago: executing program 7 (id=2420): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 6m12.250745536s ago: executing program 8 (id=2406): recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0}, {&(0x7f0000004300)=""/214, 0xd6}], 0x3}, 0x4}], 0x1, 0x23, 0x0) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0x88ca}}}, 0x0) unshare(0x20000400) bpf$PROG_LOAD(0x25, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0fd11ffb880485f8c4030050000000000000000000"], 0x48) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6m12.013469395s ago: executing program 8 (id=2421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 6m11.190916176s ago: executing program 7 (id=2422): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 6m11.103087904s ago: executing program 7 (id=2423): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="a687", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable', 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno', 0x4) shutdown(r0, 0x1) 6m10.973008513s ago: executing program 7 (id=2424): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0x7) 6m10.467771196s ago: executing program 7 (id=2425): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x565a9c7ba55e863, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c890}, 0x4008010) 6m10.407853322s ago: executing program 7 (id=2426): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(r1) 5m56.997890184s ago: executing program 36 (id=2421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 5m55.023386751s ago: executing program 37 (id=2426): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(r1) 45.740481249s ago: executing program 3 (id=3221): unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 45.097249932s ago: executing program 4 (id=3224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x3, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) socket$inet6(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r4, &(0x7f0000000600)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x20000000, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 45.096958891s ago: executing program 3 (id=3225): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x48840}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380)={0x0, 0xf}, &(0x7f0000000440)=0x8) listen(r2, 0xc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r9, 0x4048587b, &(0x7f00000002c0)={{r0, &(0x7f0000000080)='-]\x00', 0x800, &(0x7f0000000140)={@_ha_fsid={[0xff]}, {0x4, 0xf, 0x8}}, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0xae7}, 0x1, &(0x7f0000000280)=[{0x3, 0x1, &(0x7f0000000200)=')&&\'\'\x00', &(0x7f0000000240)="e9613a6939450297ce3f8bb89fff80f3d0c0ce13b05732ec83994058830aea79cb356c309fa9a9f7439378f2", 0x2c, 0x20}]}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000280001801400040000000002000000000000ffffac1414aa060001000a00800008000600075aecb0156a772935c9"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 44.313612072s ago: executing program 9 (id=3229): syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB], 0x0) 43.072313774s ago: executing program 5 (id=3230): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 42.7372527s ago: executing program 9 (id=3233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41.838209757s ago: executing program 5 (id=3237): bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x51]}}, 0x0, 0x40}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 41.52282581s ago: executing program 3 (id=3238): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r4, 0x2}, 0x8) 41.378723235s ago: executing program 5 (id=3239): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x68, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x4}]}, 0x68}}, 0x0) 40.996911467s ago: executing program 4 (id=3240): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYBLOB="0000000000000000668800000000000018000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 40.965865872s ago: executing program 5 (id=3241): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 40.899916679s ago: executing program 3 (id=3242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) 40.499108862s ago: executing program 3 (id=3243): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x9, 0xf, 0x5b}, 0x2c) 39.94023376s ago: executing program 4 (id=3244): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 39.901206929s ago: executing program 3 (id=3245): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x13}]}}}]}, 0x3c}}, 0x0) 35.234567039s ago: executing program 4 (id=3250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x3, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) socket$inet6(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r4, &(0x7f0000000600)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x20000000, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 35.154212619s ago: executing program 6 (id=3251): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) 34.924924812s ago: executing program 6 (id=3252): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r4, 0x2}, 0x8) 34.049634039s ago: executing program 6 (id=3253): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) 33.501566372s ago: executing program 6 (id=3254): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x84) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0xf8000) socket(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="11002dbd7020fcdbdf251b000000200001801400020076657468305f766c616e00000000000008000100", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4008810}, 0x1000c810) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0), 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000240)=0x2) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r10, 0x7434, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@empty, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) 32.484876233s ago: executing program 9 (id=3255): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x12) write(r2, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x110) mmap$xdp(&(0x7f00001f7000/0x4000)=nil, 0x4000, 0x800001, 0x20010, r1, 0x100000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0xfffe, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 32.379158559s ago: executing program 5 (id=3256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x400019e, 0x24044005) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 25.436159836s ago: executing program 5 (id=3257): syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20.888765425s ago: executing program 38 (id=3245): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x13}]}}}]}, 0x3c}}, 0x0) 20.775392476s ago: executing program 6 (id=3259): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0xb, 0x33a4, 0x543}, {0x4, 0x8000000000000002}, {0x2}, 0x70bd2b, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0xf}}}, @algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc881}, 0x0) 20.774306385s ago: executing program 4 (id=3260): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 20.769329301s ago: executing program 9 (id=3261): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x51]}}, 0x0, 0x40}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 20.460659419s ago: executing program 6 (id=3262): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) 20.348160142s ago: executing program 9 (id=3263): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000200), &(0x7f0000000240)=0x4) chmod(&(0x7f0000000040)='.\x00', 0x35e) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x9580a8, &(0x7f0000001380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000002c00)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 19.273611489s ago: executing program 9 (id=3264): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x34, r0, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x34}}, 0x0) 15.141965548s ago: executing program 4 (id=3265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.005476876s ago: executing program 39 (id=3257): syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.002330144s ago: executing program 40 (id=3262): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) 3.967217966s ago: executing program 41 (id=3264): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x34, r0, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x34}}, 0x0) 0s ago: executing program 42 (id=3265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 3149] veth1_vlan: entered promiscuous mode [ 879.638921][T13167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.658340][T13156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.870621][T13149] veth0_macvtap: entered promiscuous mode [ 880.036048][T13149] veth1_macvtap: entered promiscuous mode [ 880.387935][ T67] bridge_slave_1: left allmulticast mode [ 880.387975][ T67] bridge_slave_1: left promiscuous mode [ 880.388239][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.520189][ T67] bridge_slave_0: left allmulticast mode [ 880.520227][ T67] bridge_slave_0: left promiscuous mode [ 880.520512][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.936577][ T5587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 880.965513][ T5587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 880.967131][ T5587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 881.001018][ T5587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 881.001785][ T5587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 881.209953][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.309813][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.392751][ T67] bond0 (unregistering): Released all slaves [ 881.463291][T13149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.463537][T13162] veth0_vlan: entered promiscuous mode [ 881.552593][ T5587] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 881.605695][ T5587] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 881.624973][ T5587] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 881.663076][ T5587] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 881.664328][ T5587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 881.823986][ T4894] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 881.863923][ T4894] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 881.902988][ T4894] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 881.940162][ T4894] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 881.983685][ T4894] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 883.067366][ T67] hsr_slave_0: left promiscuous mode [ 883.150881][ T67] hsr_slave_1: left promiscuous mode [ 883.151937][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.181439][T11455] Bluetooth: hci0: command tx timeout [ 883.262707][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.718010][T11455] Bluetooth: hci6: command tx timeout [ 883.953941][ T4894] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 883.995326][ T4894] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 883.996614][ T4894] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 884.019234][ T4894] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 884.021611][ T4894] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 884.178238][ T67] team0 (unregistering): Port device team_slave_1 removed [ 884.197623][T11455] Bluetooth: hci7: command tx timeout [ 884.248348][ T67] team0 (unregistering): Port device team_slave_0 removed [ 885.247906][T11455] Bluetooth: hci0: command tx timeout [ 885.799208][T11455] Bluetooth: hci6: command tx timeout [ 886.045546][T13531] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 886.194116][T13531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 886.198893][T11455] Bluetooth: hci1: command tx timeout [ 886.283080][T13531] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 886.292223][T11455] Bluetooth: hci7: command tx timeout [ 886.323638][T13531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 886.411511][T13531] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 886.539732][T13531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 886.576536][T13531] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 886.662871][T13531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 887.317594][T11455] Bluetooth: hci0: command tx timeout [ 887.887988][T11455] Bluetooth: hci6: command tx timeout [ 888.277848][T11455] Bluetooth: hci1: command tx timeout [ 888.357935][T11455] Bluetooth: hci7: command tx timeout [ 889.407639][T11455] Bluetooth: hci0: command tx timeout [ 889.506372][T13775] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.506747][T13775] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.506990][T13775] bridge_slave_0: entered allmulticast mode [ 889.531875][T13775] bridge_slave_0: entered promiscuous mode [ 889.606906][T13775] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.607015][T13775] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.631887][T13775] bridge_slave_1: entered allmulticast mode [ 889.633956][T13775] bridge_slave_1: entered promiscuous mode [ 889.899354][T13775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.957617][T11455] Bluetooth: hci6: command tx timeout [ 889.994720][T13775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.022155][T13781] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.022241][T13781] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.022634][T13781] bridge_slave_0: entered allmulticast mode [ 890.025975][T13781] bridge_slave_0: entered promiscuous mode [ 890.062810][T13785] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.062937][T13785] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.063183][T13785] bridge_slave_0: entered allmulticast mode [ 890.095284][T13785] bridge_slave_0: entered promiscuous mode [ 890.299104][T13781] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.299197][T13781] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.299389][T13781] bridge_slave_1: entered allmulticast mode [ 890.301394][T13781] bridge_slave_1: entered promiscuous mode [ 890.305193][T13785] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.305317][T13785] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.305503][T13785] bridge_slave_1: entered allmulticast mode [ 890.311535][T13785] bridge_slave_1: entered promiscuous mode [ 890.378404][T11455] Bluetooth: hci1: command tx timeout [ 890.387637][T13815] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.387735][T13815] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.387934][T13815] bridge_slave_0: entered allmulticast mode [ 890.431050][T13815] bridge_slave_0: entered promiscuous mode [ 890.447579][T11455] Bluetooth: hci7: command tx timeout [ 890.485123][T13775] team0: Port device team_slave_0 added [ 890.494576][T13815] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.494685][T13815] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.494888][T13815] bridge_slave_1: entered allmulticast mode [ 890.496872][T13815] bridge_slave_1: entered promiscuous mode [ 890.603370][T13775] team0: Port device team_slave_1 added [ 890.656405][T13781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.692925][T13785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.737247][T13781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.782693][T13785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.812117][T13815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.875581][T13775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.875599][T13775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.875632][T13775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.896078][T13815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.969512][T13531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.129905][T13775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.129925][T13775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.129958][T13775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.215844][T13781] team0: Port device team_slave_0 added [ 891.234659][T13785] team0: Port device team_slave_0 added [ 891.344352][T13781] team0: Port device team_slave_1 added [ 891.355647][T13785] team0: Port device team_slave_1 added [ 891.661446][T13815] team0: Port device team_slave_0 added [ 891.708811][T13815] team0: Port device team_slave_1 added [ 892.073229][T13781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.073243][T13781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.073266][T13781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.074666][T13785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.074682][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.074713][T13785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.202136][T13781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.202149][T13781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.202171][T13781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.206049][T13785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.206063][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.206085][T13785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.307138][T13775] hsr_slave_0: entered promiscuous mode [ 892.311008][T13775] hsr_slave_1: entered promiscuous mode [ 892.323062][T13815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.323076][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.323098][T13815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.383719][T13815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.383733][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.383755][T13815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.441920][T11455] Bluetooth: hci1: command tx timeout [ 892.466637][T13531] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.840284][T13781] hsr_slave_0: entered promiscuous mode [ 892.841869][T13781] hsr_slave_1: entered promiscuous mode [ 892.842867][T13781] debugfs: 'hsr0' already exists in 'hsr' [ 892.842893][T13781] Cannot create hsr debugfs directory [ 892.872526][T13785] hsr_slave_0: entered promiscuous mode [ 892.873662][T13785] hsr_slave_1: entered promiscuous mode [ 892.874386][T13785] debugfs: 'hsr0' already exists in 'hsr' [ 892.874405][T13785] Cannot create hsr debugfs directory [ 893.145389][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.145540][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.179511][T13815] hsr_slave_0: entered promiscuous mode [ 893.180570][T13815] hsr_slave_1: entered promiscuous mode [ 893.181273][T13815] debugfs: 'hsr0' already exists in 'hsr' [ 893.181291][T13815] Cannot create hsr debugfs directory [ 893.455879][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.455994][ T1523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.958797][ T5241] 8021q: adding VLAN 0 to HW filter on device eth2 [ 897.840389][T13531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.843526][ T5241] 8021q: adding VLAN 0 to HW filter on device eth3 [ 898.589467][T13531] veth0_vlan: entered promiscuous mode [ 898.919776][T13531] veth1_vlan: entered promiscuous mode [ 899.041222][T13531] veth0_macvtap: entered promiscuous mode [ 899.071766][T13531] veth1_macvtap: entered promiscuous mode [ 899.145662][T13531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.209417][T13531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.498695][ T5241] 8021q: adding VLAN 0 to HW filter on device eth4 [ 900.667905][ T2257] bridge_slave_1: left allmulticast mode [ 900.667935][ T2257] bridge_slave_1: left promiscuous mode [ 900.668149][ T2257] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.798863][ T2257] bridge_slave_0: left allmulticast mode [ 900.798893][ T2257] bridge_slave_0: left promiscuous mode [ 900.799141][ T2257] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.037973][ T2257] bridge_slave_1: left allmulticast mode [ 901.038011][ T2257] bridge_slave_1: left promiscuous mode [ 901.038263][ T2257] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.169979][ T2257] bridge_slave_0: left allmulticast mode [ 901.170013][ T2257] bridge_slave_0: left promiscuous mode [ 901.170216][ T2257] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.407985][ T2257] bridge_slave_1: left allmulticast mode [ 901.408014][ T2257] bridge_slave_1: left promiscuous mode [ 901.408247][ T2257] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.508992][ T2257] bridge_slave_0: left allmulticast mode [ 901.509022][ T2257] bridge_slave_0: left promiscuous mode [ 901.509298][ T2257] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.729057][ T2257] bridge_slave_1: left allmulticast mode [ 901.729095][ T2257] bridge_slave_1: left promiscuous mode [ 901.729370][ T2257] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.848918][ T2257] bridge_slave_0: left allmulticast mode [ 901.848947][ T2257] bridge_slave_0: left promiscuous mode [ 901.851546][ T2257] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.928326][ T2257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.013079][ T2257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.050155][ T2257] bond0 (unregistering): Released all slaves [ 903.698395][ T2257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.758493][ T2257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.801569][ T2257] bond0 (unregistering): Released all slaves [ 904.338420][ T2257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.418382][ T2257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.441073][ T2257] bond0 (unregistering): Released all slaves [ 905.018378][ T2257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.099872][ T2257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.119938][ T2257] bond0 (unregistering): Released all slaves [ 905.616707][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.616730][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.867731][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.867784][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.867816][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.867846][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.936463][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.936487][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.883134][T14007] syzkaller0: entered promiscuous mode [ 906.883167][T14007] syzkaller0: entered allmulticast mode [ 907.145625][ T5241] 8021q: adding VLAN 0 to HW filter on device eth24 [ 907.607770][ T2257] hsr_slave_0: left promiscuous mode [ 907.650074][ T2257] hsr_slave_1: left promiscuous mode [ 907.651100][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.691955][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.919079][ T2257] hsr_slave_0: left promiscuous mode [ 907.969665][ T2257] hsr_slave_1: left promiscuous mode [ 907.972028][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.021482][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.218488][ T2257] hsr_slave_0: left promiscuous mode [ 908.237805][ T2257] hsr_slave_1: left promiscuous mode [ 908.239008][ T2257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.239038][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.298454][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.438060][ T2257] hsr_slave_0: left promiscuous mode [ 908.477741][ T2257] hsr_slave_1: left promiscuous mode [ 908.478592][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.508731][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.648116][ T2257] veth1_macvtap: left promiscuous mode [ 908.648192][ T2257] veth0_macvtap: left promiscuous mode [ 908.648384][ T2257] veth1_vlan: left promiscuous mode [ 908.648508][ T2257] veth0_vlan: left promiscuous mode [ 908.688876][ T2257] veth0_vlan: left promiscuous mode [ 909.469539][ T2257] team0 (unregistering): Port device team_slave_1 removed [ 909.508320][ T2257] team0 (unregistering): Port device team_slave_0 removed [ 910.029123][ T2257] team0 (unregistering): Port device team_slave_1 removed [ 910.078506][ T2257] team0 (unregistering): Port device team_slave_0 removed [ 910.839775][ T2257] team0 (unregistering): Port device team_slave_1 removed [ 910.878273][ T2257] team0 (unregistering): Port device team_slave_0 removed [ 911.399171][ T2257] team0 (unregistering): Port device team_slave_1 removed [ 911.449473][ T2257] team0 (unregistering): Port device team_slave_0 removed [ 912.053112][T14038] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2432'. [ 913.836117][T14054] netlink: 'syz.3.2435': attribute type 22 has an invalid length. [ 913.836144][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 914.818529][T14064] syzkaller0: entered promiscuous mode [ 914.818558][T14064] syzkaller0: entered allmulticast mode [ 917.713905][T13775] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 917.777715][T13775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 917.793772][T13775] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 917.907015][T13775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 917.915851][T13775] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 918.038469][T13775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 918.059918][T13775] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 918.060137][T14120] netlink: 'syz.3.2442': attribute type 22 has an invalid length. [ 918.060157][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 918.141743][T13775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 920.530768][T13781] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 921.220800][T13781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 921.364231][T13781] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 921.480764][T13781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 921.486292][T13781] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 921.516485][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2444'. [ 921.552644][T13781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 921.688420][T14149] bond0: (slave bond_slave_0): Releasing backup interface [ 921.984778][T13781] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 922.011883][T13781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 922.422998][T13775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.424830][T13785] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 922.519543][T13785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 922.551282][T13785] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 922.606092][T13785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 922.650098][T13785] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 922.743389][T13785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 922.840794][T13785] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 922.875873][T13785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 923.070942][T14184] kernel profiling enabled (shift: 0) [ 923.161560][T13775] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.333314][ T2257] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.333454][ T2257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.541733][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.542318][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.615716][T13815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 923.655533][T13815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 923.678639][T13815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 923.774025][T13815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 923.831761][T13815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 923.994421][T13815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 924.020747][T13815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 924.103787][T13815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 924.404972][T13781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.633550][T13781] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.694092][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.695868][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.863281][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.865084][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.012477][T13785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.184189][T13785] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.435297][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.435527][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.529667][T13815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.691344][ T980] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.693186][ T980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.943844][T13815] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.052312][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.052449][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.269023][T14244] 9p: Bad value for 'wfdno' [ 927.282765][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.282902][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.883219][T13775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.405362][T14270] input: syz1 as /devices/virtual/input/input6 [ 929.444139][T13781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.586843][T13785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.650012][T13775] veth0_vlan: entered promiscuous mode [ 929.728929][T13775] veth1_vlan: entered promiscuous mode [ 930.039560][T13775] veth0_macvtap: entered promiscuous mode [ 930.072302][T13775] veth1_macvtap: entered promiscuous mode [ 930.156623][T13815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.253151][T13775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.399397][T13775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.560774][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.593854][T13785] veth0_vlan: entered promiscuous mode [ 931.803685][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.803762][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.962918][T13952] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 931.985136][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.985159][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.042958][T13785] veth1_vlan: entered promiscuous mode [ 932.046647][T13781] veth0_vlan: entered promiscuous mode [ 932.125926][T13952] usb 4-1: Using ep0 maxpacket: 16 [ 932.135467][T13952] usb 4-1: config 8 has an invalid interface number: 143 but max is 0 [ 932.135498][T13952] usb 4-1: config 8 has no interface number 0 [ 932.135537][T13952] usb 4-1: config 8 interface 143 has no altsetting 0 [ 932.179081][T13952] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=4a.5e [ 932.179117][T13952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.179132][T13952] usb 4-1: Product: syz [ 932.179143][T13952] usb 4-1: Manufacturer: syz [ 932.179155][T13952] usb 4-1: SerialNumber: syz [ 932.356087][T13781] veth1_vlan: entered promiscuous mode [ 932.426330][T13815] veth0_vlan: entered promiscuous mode [ 932.481571][T14341] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2455'. [ 932.614122][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.614146][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.663886][T13815] veth1_vlan: entered promiscuous mode [ 932.746596][T13785] veth0_macvtap: entered promiscuous mode [ 932.795998][T13785] veth1_macvtap: entered promiscuous mode [ 932.904671][T13781] veth0_macvtap: entered promiscuous mode [ 933.015166][T13781] veth1_macvtap: entered promiscuous mode [ 933.032611][T13785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.217888][T13785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.226832][T13815] veth0_macvtap: entered promiscuous mode [ 933.319911][T13815] veth1_macvtap: entered promiscuous mode [ 933.462347][T13781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.492681][T13952] usb 4-1: USB disconnect, device number 23 [ 933.628857][T13781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.730011][T14342] udevd[14342]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.143/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 934.059989][T13815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.477937][T13815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.170974][ T980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.171000][ T980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.655906][ T1523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.655923][ T1523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.867027][ T5834] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 937.922228][ T155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.938982][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.939006][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.088981][ T5834] usb 6-1: unable to get BOS descriptor or descriptor too short [ 938.091305][ T5834] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 938.102164][ T5834] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 938.102194][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.102224][ T5834] usb 6-1: Product: syz [ 938.102239][ T5834] usb 6-1: Manufacturer: syz [ 938.102253][ T5834] usb 6-1: SerialNumber: syz [ 938.343305][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.343322][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.558381][ T5834] usb 6-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 938.558468][ T5834] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 938.585130][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.585630][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.635904][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.636439][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.673459][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.673864][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.717006][ T5834] usb 6-1: unit 2 not found! [ 938.717057][ T5834] usb 6-1: unit 0 not found! [ 938.729294][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.730313][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.762490][ T1523] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.763995][ T1119] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.764392][ T1119] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.780596][ T1119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.837030][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.845447][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.251572][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.251591][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.640468][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.640491][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.746301][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803a9dbc00: rx timeout, send abort [ 939.804751][ T5834] usb 6-1: USB disconnect, device number 2 [ 940.252285][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803a9dbc00: abort rx timeout. Force session deactivation [ 940.254399][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803a9db000: rx timeout, send abort [ 940.754488][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803a9db000: abort rx timeout. Force session deactivation [ 940.961593][T14406] loop2: detected capacity change from 0 to 7 [ 941.107716][T14406] Dev loop2: unable to read RDB block 7 [ 941.107760][T14406] loop2: AHDI p1 p2 p3 [ 941.107786][T14406] loop2: partition table partially beyond EOD, truncated [ 941.208155][T14406] loop2: p1 start 1601398130 is beyond EOD, truncated [ 941.208184][T14406] loop2: p2 start 1702059890 is beyond EOD, truncated [ 941.745823][T14418] udevd[14418]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 947.833063][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2528'. [ 947.833098][T14567] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2528'. [ 948.476159][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2528'. [ 948.476197][T14567] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2528'. [ 948.479255][ T68] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 948.485550][ T1119] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 948.485699][ T1119] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 948.485800][ T1119] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 948.657006][T14595] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2535'. [ 951.313270][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2553'. [ 952.569279][T14673] veth1_to_bond: entered allmulticast mode [ 952.569482][T14671] veth1_to_bond: left allmulticast mode [ 953.655553][T14701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2569'. [ 954.402325][T14717] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2573'. [ 954.464136][T14717] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.479005][T14717] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.985953][T14735] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2580'. [ 961.553285][T14792] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2592'. [ 963.286997][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2604'. [ 964.014477][T14846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 964.647595][ T5834] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 964.832644][ T5834] usb 10-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 964.832688][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.832713][ T5834] usb 10-1: Product: syz [ 964.832731][ T5834] usb 10-1: Manufacturer: syz [ 964.832748][ T5834] usb 10-1: SerialNumber: syz [ 964.946639][ T5834] ums-karma 10-1:1.0: USB Mass Storage device detected [ 964.980099][ T5834] ums-karma 10-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 964.980099][ T5834] Please send a copy of this message to and [ 965.340190][T14865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2618'. [ 965.416374][ T5834] ums-karma 10-1:1.0: probe with driver ums-karma failed with error -5 [ 965.642083][ T5834] usb 10-1: USB disconnect, device number 2 [ 966.140658][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2622'. [ 966.259388][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880352bd000: rx timeout, send abort [ 966.759468][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880352bd000: abort rx timeout. Force session deactivation [ 966.767109][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888025572800: rx timeout, send abort [ 967.804646][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2626'. [ 967.804928][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2626'. [ 968.072447][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2631'. [ 968.237546][T13953] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 968.357561][ T5880] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 968.409849][T13953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.409883][T13953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.409906][T13953] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 968.409951][T13953] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 968.409974][T13953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.472157][T13953] usb 5-1: config 0 descriptor?? [ 968.568021][ T5880] usb 6-1: config index 0 descriptor too short (expected 1372, got 92) [ 968.568057][ T5880] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.572147][ T5880] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 968.572181][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.572205][ T5880] usb 6-1: Product: syz [ 968.572222][ T5880] usb 6-1: Manufacturer: syz [ 968.572238][ T5880] usb 6-1: SerialNumber: syz [ 969.662837][ T5880] cdc_ncm 6-1:1.0: SET_CRC_MODE failed [ 969.663296][ T5880] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 969.680946][ T5880] cdc_ncm 6-1:1.0: bind() failure [ 969.738968][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2637'. [ 969.799339][T13953] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 969.804953][T13953] usb 5-1: USB disconnect, device number 13 [ 969.867000][ T5880] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 969.867046][ T5880] cdc_ncm 6-1:1.1: bind() failure [ 970.154675][ T5880] usb 6-1: USB disconnect, device number 3 [ 970.371051][T14952] fido_id[14952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 970.727120][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2643'. [ 971.211559][ T5589] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 971.269713][T14979] tipc: Started in network mode [ 971.269748][T14979] tipc: Node identity 7f000001, cluster identity 4711 [ 971.917826][T14986] input: syz1 as /devices/virtual/input/input7 [ 972.350261][T14979] tipc: Enabled bearer , priority 10 [ 972.774740][T13953] tipc: Node number set to 2130706433 [ 972.812138][ T5589] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.812192][ T5589] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 972.812220][ T5589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.025465][ T5589] wacom 0003:056A:033B.0010: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 975.275742][ T5589] wacom 0003:056A:033B.0010: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 975.451306][ T5589] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0010/input/input8 [ 975.799392][T15008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2657'. [ 975.933915][T15023] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 978.207975][ T5589] usb 4-1: USB disconnect, device number 24 [ 980.079736][T15055] tipc: Started in network mode [ 980.079756][T15055] tipc: Node identity , cluster identity 4711 [ 989.455128][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2710'. [ 989.681352][T15167] overlayfs: failed to clone upperpath [ 991.129863][ T4894] Bluetooth: hci3: command 0x0406 tx timeout [ 991.444035][ T37] audit: type=1326 audit(1786038159.678:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.5.2718" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eed8fe0d9 code=0x7ffc0000 [ 991.460047][ T37] audit: type=1326 audit(1786038159.678:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.5.2718" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eed8fe0d9 code=0x7ffc0000 [ 991.479875][ T37] audit: type=1326 audit(1786038159.718:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.5.2718" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5eed8be90e code=0x7ffc0000 [ 991.522917][ T37] audit: type=1326 audit(1786038159.758:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.5.2718" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5eed8be90e code=0x7ffc0000 [ 991.555579][ T37] audit: type=1326 audit(1786038159.778:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.5.2718" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eed8fe0d9 code=0x7ffc0000 [ 991.555650][ T37] audit: type=1326 audit(1786038159.788:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.5.2718" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eed8fe0d9 code=0x7ffc0000 [ 991.555988][ T37] audit: type=1326 audit(1786038159.788:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.5.2718" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f5eed8fe0d9 code=0x7ffc0000 [ 991.556452][ T37] audit: type=1326 audit(1786038159.788:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.5.2718" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eed8fe0d9 code=0x7ffc0000 [ 992.587585][ T5880] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 992.743787][ T5880] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 992.743821][ T5880] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 992.771471][ T5880] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 992.771502][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.771522][ T5880] usb 10-1: Product: syz [ 992.771537][ T5880] usb 10-1: Manufacturer: syz [ 992.771550][ T5880] usb 10-1: SerialNumber: syz [ 993.242522][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.242598][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.346246][ T5880] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 993.511250][ T5880] usb 10-1: USB disconnect, device number 3 [ 993.572638][ T5880] usblp0: removed [ 993.812947][T15228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2736'. [ 996.965012][T15259] syzkaller0: entered promiscuous mode [ 996.965044][T15259] syzkaller0: entered allmulticast mode [ 998.497551][ T31] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 998.625638][ T37] audit: type=1326 audit(1786038166.858:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15305 comm="syz.6.2767" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452876e0d9 code=0x7fc00000 [ 998.734738][ T31] usb 10-1: unable to get BOS descriptor or descriptor too short [ 998.738337][ T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.738367][ T31] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 998.738456][ T31] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 998.738500][ T31] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 998.738547][ T31] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 998.738576][ T31] usb 10-1: config 1 interface 1 has no altsetting 0 [ 998.759733][ T31] usb 10-1: string descriptor 0 read error: -22 [ 998.759879][ T31] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 998.759907][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.343787][ T37] audit: type=1326 audit(1786038167.578:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15305 comm="syz.6.2767" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f452876e0d9 code=0x7fc00000 [ 1000.167566][ T31] usb 10-1: USB disconnect, device number 4 [ 1000.635313][T15295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.703694][T15295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.171252][T15339] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 1002.364979][ T5828] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.370383][ T5828] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.370518][ T5828] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.370635][ T5828] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.527606][ T5713] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1002.564924][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2790'. [ 1002.701158][ T5713] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1002.703149][ T5713] usb 6-1: not running at top speed; connect to a high speed hub [ 1002.706754][ T5713] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1002.738872][ T5713] usb 6-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 1002.738905][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.738926][ T5713] usb 6-1: Product: syz [ 1002.738942][ T5713] usb 6-1: Manufacturer: syz [ 1002.738958][ T5713] usb 6-1: SerialNumber: syz [ 1002.797557][ T31] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1002.797578][T15359] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1002.953280][ T31] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1002.953331][ T31] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1002.953426][ T31] usb 10-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 1002.953600][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.027793][ T31] usb 10-1: config 0 descriptor?? [ 1003.028797][T15365] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1003.106469][T15377] overlayfs: failed to clone lowerpath [ 1003.121529][ T5713] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1003.124059][ T5713] usb 6-1: invalid MIDI in EP 0 [ 1003.171207][ T6251] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1003.318831][ T6251] usb 4-1: Using ep0 maxpacket: 16 [ 1003.335163][ T6251] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 1003.335272][ T6251] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1003.335305][ T6251] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1003.335343][ T6251] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1003.335369][ T6251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.439674][ T6251] usb 4-1: config 0 descriptor?? [ 1003.745482][ T31] a4tech 0003:09DA:0006.0011: unknown main item tag 0x0 [ 1003.745525][ T31] a4tech 0003:09DA:0006.0011: unknown main item tag 0x0 [ 1003.745615][ T31] a4tech 0003:09DA:0006.0011: unknown main item tag 0x0 [ 1003.745644][ T31] a4tech 0003:09DA:0006.0011: unknown main item tag 0x0 [ 1003.745673][ T31] a4tech 0003:09DA:0006.0011: unknown main item tag 0x0 [ 1003.745700][ T31] a4tech 0003:09DA:0006.0011: unknown main item tag 0x0 [ 1003.745787][ T31] a4tech 0003:09DA:0006.0011: unknown main item tag 0x0 [ 1003.745817][ T31] a4tech 0003:09DA:0006.0011: unknown main item tag 0x0 [ 1003.745846][ T31] a4tech 0003:09DA:0006.0011: unknown main item tag 0x0 [ 1003.750117][ T31] a4tech 0003:09DA:0006.0011: unknown main item tag 0x0 [ 1003.955620][ T31] a4tech 0003:09DA:0006.0011: hidraw0: USB HID v0.c1 Device [HID 09da:0006] on usb-dummy_hcd.9-1/input0 [ 1004.042546][ T31] usb 10-1: USB disconnect, device number 5 [ 1005.103825][ T6251] logitech 0003:046D:C50C.0012: hidraw1: USB HID v0.01 Device [HID 046d:c50c] on usb-dummy_hcd.3-1/input0 [ 1005.478447][ T6251] usb 4-1: USB disconnect, device number 25 [ 1005.651979][ T5587] Bluetooth: hci0: command 0x0406 tx timeout [ 1005.652020][ T5587] Bluetooth: hci6: command 0x0406 tx timeout [ 1005.652079][T15380] Bluetooth: hci7: command 0x0406 tx timeout [ 1005.832344][T15391] fido_id[15391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1005.899655][T15389] fido_id[15389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1005.994678][T15397] Invalid ELF header type: 2 != 1 [ 1006.209971][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2803'. [ 1006.283458][ T5713] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1006.298586][ T5713] usb 6-1: USB disconnect, device number 4 [ 1006.356450][T14853] udevd[14853]: setting mode of /dev/bus/usb/006/004 to 020664 failed: No such file or directory [ 1006.356661][T14853] udevd[14853]: setting owner of /dev/bus/usb/006/004 to uid=0, gid=0 failed: No such file or directory [ 1006.435100][T14940] udevd[14940]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1007.505230][T15412] binder: 15411:15412 ioctl 400c620e 200000004e40 returned -22 [ 1007.919377][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2814'. [ 1008.121550][T15432] erspan0: entered promiscuous mode [ 1008.259301][T15432] erspan0: left promiscuous mode [ 1008.816875][T15451] program syz.3.2825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1008.890365][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2826'. [ 1008.907890][T13626] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1009.008080][T15457] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2827'. [ 1009.057491][T13626] usb 10-1: Using ep0 maxpacket: 32 [ 1009.061685][T13626] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.061712][T13626] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.074502][T13626] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1009.074535][T13626] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1009.074560][T13626] usb 10-1: Product: syz [ 1009.074576][T13626] usb 10-1: Manufacturer: syz [ 1009.135362][T13626] hub 10-1:4.0: USB hub found [ 1009.350900][T13626] hub 10-1:4.0: 2 ports detected [ 1009.391871][ T37] audit: type=1326 audit(1786038177.628:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15463 comm="syz.6.2830" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f452876e0d9 code=0x0 [ 1009.530016][T13953] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1009.565070][T13626] hub 10-1:4.0: hub_hub_status failed (err = -71) [ 1009.565177][T13626] hub 10-1:4.0: config failed, can't get hub status (err -71) [ 1009.642111][T13626] usb 10-1: USB disconnect, device number 6 [ 1009.689669][T13953] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.689729][T13953] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1009.689758][T13953] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1009.695659][T13953] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1009.695694][T13953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.695718][T13953] usb 6-1: Product: syz [ 1009.695734][T13953] usb 6-1: Manufacturer: syz [ 1009.695751][T13953] usb 6-1: SerialNumber: syz [ 1009.781239][T15460] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1009.787006][T13953] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1009.787033][T13953] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1009.787151][T13953] usbserial_generic 6-1:1.0: generic converter detected [ 1009.865365][T13953] usb 6-1: generic converter now attached to ttyUSB0 [ 1010.326000][T13626] usb 6-1: USB disconnect, device number 5 [ 1010.626933][T13626] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1010.636210][T13626] usbserial_generic 6-1:1.0: device disconnected [ 1010.677632][ T4894] Bluetooth: hci1: command 0x0406 tx timeout [ 1015.092946][T15524] overlayfs: missing 'lowerdir' [ 1015.522995][T15532] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1020.507600][ T6251] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1020.660657][ T6251] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.660700][ T6251] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.660747][ T6251] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1020.664816][ T6251] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1020.664854][ T6251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.664880][ T6251] usb 4-1: Product: syz [ 1020.664900][ T6251] usb 4-1: Manufacturer: syz [ 1020.664918][ T6251] usb 4-1: SerialNumber: syz [ 1021.006065][T15565] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1021.022931][T15571] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2867'. [ 1021.652896][ T6251] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1021.653059][ T6251] cdc_ncm 4-1:1.0: bind() failure [ 1021.736003][ T6251] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1021.736054][ T6251] cdc_ncm 4-1:1.1: bind() failure [ 1021.776255][ T6251] usb 4-1: USB disconnect, device number 26 [ 1023.825817][T15614] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2882'. [ 1025.507730][ T8234] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1025.681347][ T8234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.681388][ T8234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.681432][ T8234] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1025.681458][ T8234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.722032][ T8234] usb 5-1: config 0 descriptor?? [ 1026.204761][ T8234] hid_parser_main: 67 callbacks suppressed [ 1026.204787][ T8234] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 1026.206034][ T8234] hid-steam 0003:28DE:1142.0013: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1026.261629][ T8234] hid-steam 0003:28DE:1142.0013: Steam wireless receiver connected [ 1026.287128][ T8234] hid-steam 0003:28DE:1142.0013: No HID_FEATURE_REPORT submitted - nothing to read [ 1026.632594][ T8234] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 1027.074796][ T8234] hid-steam 0003:28DE:1142.0014: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1027.289262][ T8234] usb 5-1: USB disconnect, device number 14 [ 1027.383800][ T37] audit: type=1326 audit(1786038195.618:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.4.2897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e65e0d9 code=0x7ffc0000 [ 1027.384003][ T37] audit: type=1326 audit(1786038195.618:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.4.2897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e65e0d9 code=0x7ffc0000 [ 1027.466526][ T37] audit: type=1326 audit(1786038195.698:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.4.2897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e3e65e0d9 code=0x7ffc0000 [ 1027.466588][ T37] audit: type=1326 audit(1786038195.698:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.4.2897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e65e0d9 code=0x7ffc0000 [ 1027.466638][ T37] audit: type=1326 audit(1786038195.698:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.4.2897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e65e0d9 code=0x7ffc0000 [ 1027.521090][ T37] audit: type=1326 audit(1786038195.718:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.4.2897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0e3e65e0d9 code=0x7ffc0000 [ 1027.521247][ T37] audit: type=1326 audit(1786038195.718:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.4.2897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e65e0d9 code=0x7ffc0000 [ 1027.728408][T15651] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2898'. [ 1027.986283][ T8234] hid-steam 0003:28DE:1142.0013: Steam wireless receiver disconnected [ 1028.235185][T15660] futex_wake_op: syz.5.2900 tries to shift op by 144; fix this program [ 1029.377725][T15664] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2901'. [ 1030.097583][T13626] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1030.116807][T15674] tipc: Started in network mode [ 1030.116826][T15674] tipc: Node identity , cluster identity 4711 [ 1030.250456][T13626] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.250486][T13626] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1030.252504][T13626] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1030.252531][T13626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1030.252548][T13626] usb 6-1: SerialNumber: syz [ 1030.578194][T13626] usb 6-1: 0:2 : does not exist [ 1030.701632][T15686] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2908'. [ 1030.759370][T15684] veth1_to_bond: entered allmulticast mode [ 1030.759474][T15685] veth1_to_bond: entered promiscuous mode [ 1030.830494][T13626] usb 6-1: USB disconnect, device number 6 [ 1030.907236][T15686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.165707][T14921] udevd[14921]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.500161][T15686] bridge_slave_0 (unregistering): left allmulticast mode [ 1031.500198][T15686] bridge_slave_0 (unregistering): left promiscuous mode [ 1031.500283][T15686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.846961][T15683] veth1_to_bond: left promiscuous mode [ 1031.847328][T15683] veth1_to_bond: left allmulticast mode [ 1032.026663][T15708] futex_wake_op: syz.9.2917 tries to shift op by 144; fix this program [ 1034.685962][T15750] futex_wake_op: syz.5.2931 tries to shift op by 144; fix this program [ 1034.987789][ T8234] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1035.158471][ T8234] usb 5-1: Using ep0 maxpacket: 16 [ 1035.161329][ T8234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.161360][ T8234] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1035.163033][ T8234] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1035.163063][ T8234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1035.163104][ T8234] usb 5-1: SerialNumber: syz [ 1035.288178][ T8234] usb 5-1: 0:2 : does not exist [ 1035.915357][ T8234] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1036.207147][ T8234] usb 5-1: USB disconnect, device number 15 [ 1036.664665][T15779] futex_wake_op: syz.4.2943 tries to shift op by 144; fix this program [ 1036.945413][T15781] syzkaller0: entered promiscuous mode [ 1036.945442][T15781] syzkaller0: entered allmulticast mode [ 1039.243521][T15810] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2953'. [ 1039.243784][T15810] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2953'. [ 1039.355251][T15815] futex_wake_op: syz.4.2955 tries to shift op by 144; fix this program [ 1039.417534][ T5834] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1040.587578][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2958'. [ 1041.544880][T13952] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1041.546049][ T5834] usb 10-1: Using ep0 maxpacket: 16 [ 1041.583709][ T5834] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.583737][ T5834] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1041.599735][ T5834] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1041.599817][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.599880][ T5834] usb 10-1: Product: syz [ 1041.599925][ T5834] usb 10-1: Manufacturer: syz [ 1041.599968][ T5834] usb 10-1: SerialNumber: syz [ 1041.765354][T13952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.765393][T13952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.765420][T13952] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1041.765467][T13952] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1041.765493][T13952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.812083][T13952] usb 4-1: config 0 descriptor?? [ 1041.862119][ T5834] usb 10-1: 0:2 : does not exist [ 1041.935152][ T5834] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1042.312768][T13952] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1042.312811][T13952] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1042.312842][T13952] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1042.312871][T13952] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1042.312902][T13952] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1042.312961][T13952] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1042.312991][T13952] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1042.313020][T13952] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1042.313049][T13952] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1042.313077][T13952] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1042.705927][T15845] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2967'. [ 1042.706191][T15845] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2967'. [ 1043.060631][T13952] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1043.134238][T15855] futex_wake_op: syz.6.2969 tries to shift op by 144; fix this program [ 1044.165482][T13952] usb 4-1: USB disconnect, device number 27 [ 1044.169936][ T5834] usb 10-1: USB disconnect, device number 7 [ 1044.791807][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2973'. [ 1045.182417][T15872] fido_id[15872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1045.412959][T14921] udevd[14921]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1045.641685][T15887] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2979'. [ 1045.641828][T15887] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2979'. [ 1045.757609][ T5834] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1045.903785][T15893] futex_wake_op: syz.5.2982 tries to shift op by 144; fix this program [ 1047.007471][ T5834] usb 10-1: Using ep0 maxpacket: 32 [ 1047.009815][ T5834] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.009846][ T5834] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1047.013671][ T5834] usb 10-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 1047.013706][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.013739][ T5834] usb 10-1: Product: syz [ 1047.013756][ T5834] usb 10-1: Manufacturer: syz [ 1047.013774][ T5834] usb 10-1: SerialNumber: syz [ 1047.322239][ T5834] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 1047.592086][ T5834] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1047.609225][ T5834] usb 10-1: USB disconnect, device number 8 [ 1047.676957][T14921] udevd[14921]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1048.409950][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2989'. [ 1048.638475][ T5834] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1048.821310][ T5834] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1048.821347][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.821372][ T5834] usb 4-1: Product: syz [ 1048.821390][ T5834] usb 4-1: Manufacturer: syz [ 1048.821408][ T5834] usb 4-1: SerialNumber: syz [ 1049.131663][ T5834] ums-karma 4-1:1.0: USB Mass Storage device detected [ 1049.186120][ T5834] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1049.186120][ T5834] Please send a copy of this message to and [ 1049.389593][T15931] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2992'. [ 1049.389863][T15931] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2992'. [ 1049.551077][ T5834] ums-karma 4-1:1.0: probe with driver ums-karma failed with error -5 [ 1049.662890][T15936] futex_wake_op: syz.9.2993 tries to shift op by 144; fix this program [ 1050.665861][ T5834] usb 4-1: USB disconnect, device number 28 [ 1051.108673][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2996'. [ 1051.326546][T15944] ip6erspan0: entered allmulticast mode [ 1052.977672][T15962] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3003'. [ 1052.978026][T15962] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3003'. [ 1054.248047][T13626] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1054.853379][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.855607][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.304312][T13626] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1055.304344][T13626] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1055.304365][T13626] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1055.304416][T13626] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1055.304455][T13626] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1055.360595][T13626] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1055.360631][T13626] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1055.360655][T13626] usb 5-1: Product: syz [ 1055.360670][T13626] usb 5-1: Manufacturer: syz [ 1055.422155][T13626] cdc_wdm 5-1:1.0: skipping garbage [ 1055.422178][T13626] cdc_wdm 5-1:1.0: skipping garbage [ 1055.465449][T13626] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1055.465555][T13626] cdc_wdm 5-1:1.0: Unknown control protocol [ 1055.627613][T13952] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1055.803807][T13952] usb 6-1: Using ep0 maxpacket: 16 [ 1055.855690][T13952] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1055.855721][T13952] usb 6-1: config 0 has no interface number 0 [ 1055.855771][T13952] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1055.931099][T13952] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1055.931167][T13952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.931184][T13952] usb 6-1: Product: syz [ 1055.931196][T13952] usb 6-1: Manufacturer: syz [ 1055.931208][T13952] usb 6-1: SerialNumber: syz [ 1055.977531][T13626] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1055.985343][T13952] usb 6-1: config 0 descriptor?? [ 1056.067313][T13952] cypress_m8 6-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1056.130192][T13626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.130231][T13626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.130274][T13626] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1056.130361][T13626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.179360][ C0] cdc_wdm 5-1:1.0: Unexpected error -71 [ 1056.180231][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1056.180346][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1056.180619][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1056.180642][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1056.180887][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1056.180916][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1056.181148][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1056.181179][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1056.181425][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1056.181449][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1056.181670][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1056.181685][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1056.181882][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1056.181896][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1056.182090][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1056.182105][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1056.182308][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1056.182321][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1056.182515][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1056.182529][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1056.403259][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1056.403328][ T5589] usb 5-1: USB disconnect, device number 16 [ 1056.612143][T13626] usb 4-1: config 0 descriptor?? [ 1056.638126][T13952] usb 6-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1056.716684][T13952] usb 6-1: USB disconnect, device number 7 [ 1056.788650][T13952] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1056.789585][T13952] cypress_m8 6-1:0.35: device disconnected [ 1057.092489][T13626] hid_parser_main: 5 callbacks suppressed [ 1057.092517][T13626] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 1057.092552][T13626] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 1057.092769][T13626] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 1057.092799][T13626] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 1057.092829][T13626] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 1057.165364][T13626] playstation 0003:054C:0DF2.0016: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 1057.714304][T13626] playstation 0003:054C:0DF2.0016: Failed to retrieve feature with reportID 32: -71 [ 1057.714508][T13626] playstation 0003:054C:0DF2.0016: Failed to retrieve DualSense firmware info: -71 [ 1057.715092][T13626] playstation 0003:054C:0DF2.0016: Failed to get firmware info from DualSense [ 1057.715113][T13626] playstation 0003:054C:0DF2.0016: Failed to create dualsense. [ 1058.159025][ T5589] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1058.403253][T13626] playstation 0003:054C:0DF2.0016: probe with driver playstation failed with error -71 [ 1058.463638][T13626] usb 4-1: USB disconnect, device number 29 [ 1058.665745][T16006] fido_id[16006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1058.877751][T13953] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1058.987846][T16018] usb usb7: usbfs: process 16018 (syz.4.3022) did not claim interface 0 before use [ 1059.050336][T13953] usb 6-1: Using ep0 maxpacket: 32 [ 1059.053507][T13953] usb 6-1: config 0 has too many interfaces: 197, using maximum allowed: 32 [ 1059.053538][T13953] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 197 [ 1059.053562][T13953] usb 6-1: config 0 has no interface number 0 [ 1059.053627][T13953] usb 6-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice= 6.2d [ 1059.053651][T13953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.123528][T13953] usb 6-1: config 0 descriptor?? [ 1059.754732][T16023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.755386][T16023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.776631][T16023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.780448][T16023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.002994][T16023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.003674][T16023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.027018][T16023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.035354][T16023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.249804][T16023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.251647][T16023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.270343][T13626] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1060.467591][T13626] usb 4-1: Using ep0 maxpacket: 8 [ 1060.472112][T13626] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1060.480423][T13626] usb 4-1: config 1 has an invalid interface number: 54 but max is 1 [ 1060.480454][T13626] usb 4-1: config 1 has an invalid interface number: 54 but max is 1 [ 1060.480479][T13626] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1060.480505][T13626] usb 4-1: config 1 has no interface number 0 [ 1060.480542][T13626] usb 4-1: config 1 interface 54 has no altsetting 0 [ 1060.492414][T13626] usb 4-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=e5.25 [ 1060.492451][T13626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.492474][T13626] usb 4-1: Product: syz [ 1060.492493][T13626] usb 4-1: Manufacturer: syz [ 1060.492512][T13626] usb 4-1: SerialNumber: syz [ 1060.968625][T13626] sierra 4-1:1.54: Sierra USB modem converter detected [ 1061.029557][T13626] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1061.293231][T13626] usb 4-1: USB disconnect, device number 30 [ 1061.364495][T13626] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1061.371450][T13626] sierra 4-1:1.54: device disconnected [ 1065.230559][T16048] netlink: 'syz.3.3032': attribute type 4 has an invalid length. [ 1065.287606][T16048] netlink: 'syz.3.3032': attribute type 4 has an invalid length. [ 1065.507550][ T31] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1065.657515][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 1065.663842][ T31] usb 10-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 1065.663878][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.663903][ T31] usb 10-1: Product: syz [ 1065.663928][ T31] usb 10-1: Manufacturer: syz [ 1065.663947][ T31] usb 10-1: SerialNumber: syz [ 1065.721799][T13953] usb 6-1: USB disconnect, device number 8 [ 1065.877593][T13952] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1065.941471][ T31] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1065.971537][ T31] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1065.990634][T16048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.023840][T16048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.048672][T13952] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1066.051533][T13952] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.051562][T13952] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1066.069624][T13952] usb 5-1: New USB device found, idVendor=1235, idProduct=821d, bcdDevice= 0.40 [ 1066.069710][T13952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.069767][T13952] usb 5-1: Product: syz [ 1066.069810][T13952] usb 5-1: Manufacturer: syz [ 1066.069862][T13952] usb 5-1: SerialNumber: syz [ 1066.203571][ T31] usb 10-1: USB disconnect, device number 9 [ 1066.421118][T13952] usb 5-1: Focusrite vendor-specific interface not found [ 1066.719278][T13952] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1066.722465][T13952] usb 5-1: USB disconnect, device number 18 [ 1067.714559][T15390] udevd[15390]: setting mode of /dev/bus/usb/005/018 to 020664 failed: No such file or directory [ 1067.729775][T15390] udevd[15390]: setting owner of /dev/bus/usb/005/018 to uid=0, gid=0 failed: No such file or directory [ 1067.790650][T14921] udevd[14921]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.207548][T13626] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1068.360575][T13626] usb 10-1: too many configurations: 158, using maximum allowed: 8 [ 1068.399051][T13626] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1068.399087][T13626] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.399111][T13626] usb 10-1: Product: syz [ 1068.399128][T13626] usb 10-1: Manufacturer: syz [ 1068.399144][T13626] usb 10-1: SerialNumber: syz [ 1068.495364][T16048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.565234][T16048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.106350][ T5880] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1069.415660][T13952] usb 10-1: USB disconnect, device number 10 [ 1070.198338][ T5880] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1071.350278][ T5880] ath9k_htc: Failed to initialize the device [ 1071.404219][T13952] usb 10-1: ath9k_htc: USB layer deinitialized [ 1071.683644][T16095] usb usb7: usbfs: process 16095 (syz.9.3044) did not claim interface 0 before use [ 1071.886443][ T980] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.892327][ T67] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.905745][T16087] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.905804][T16087] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.189311][T16101] futex_wake_op: syz.3.3047 tries to shift op by 144; fix this program [ 1073.447666][ T6251] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1073.600204][ T6251] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1073.600247][ T6251] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1073.605394][ T6251] usb 6-1: string descriptor 0 read error: -22 [ 1073.605545][ T6251] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1073.605574][ T6251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.747540][ T5834] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1073.907421][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 1073.912166][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1073.912205][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1073.912237][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1073.912265][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1073.912296][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1073.916908][ T5834] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1073.916944][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.916969][ T5834] usb 4-1: Product: syz [ 1073.916987][ T5834] usb 4-1: Manufacturer: syz [ 1073.917005][ T5834] usb 4-1: SerialNumber: syz [ 1073.962188][ T5834] usb 4-1: config 0 descriptor?? [ 1074.118744][ T6251] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 1074.172125][ T6251] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:0926:3333.0017/input/input13 [ 1074.303892][T16098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.333160][T16098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.445603][ T5834] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1074.445675][ T5834] input input12: Device does not respond to id packet M [ 1074.446434][ T5834] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1074.446483][ T5834] input input12: Device does not respond to id packet P [ 1074.454134][ T5834] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1074.454281][ T5834] input input12: Device does not respond to id packet B [ 1074.498320][T16105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.499010][T16105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.506246][T16105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.506868][T16105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.604717][T16105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.605548][T16105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.665666][T16105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.680666][T16105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.760427][ T5834] input input12: Device does not respond to id packet N [ 1074.992904][T16105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.993546][T16105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.196575][ T6251] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1075.262772][ T6251] usb 6-1: USB disconnect, device number 9 [ 1076.335300][ T5834] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 1076.337108][ T5834] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1076.337874][ T5834] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1076.338366][ T5834] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1076.480666][T16115] fido_id[16115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1076.591192][ T5834] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 1078.093223][T16138] futex_wake_op: syz.6.3058 tries to shift op by 144; fix this program [ 1079.112974][ T5834] usb 4-1: USB disconnect, device number 31 [ 1079.289042][ T6251] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1079.437568][ T6251] usb 6-1: Using ep0 maxpacket: 16 [ 1079.440847][ T6251] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1079.444434][ T6251] usb 6-1: config 0 has an invalid interface number: 42 but max is 0 [ 1079.444462][ T6251] usb 6-1: config 0 has no interface number 0 [ 1079.444492][ T6251] usb 6-1: config 0 interface 42 has no altsetting 0 [ 1079.487082][ T6251] usb 6-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=d0.bc [ 1079.487116][ T6251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.487142][ T6251] usb 6-1: Product: syz [ 1079.487159][ T6251] usb 6-1: Manufacturer: syz [ 1079.487178][ T6251] usb 6-1: SerialNumber: syz [ 1079.577832][ T6251] usb 6-1: config 0 descriptor?? [ 1079.657546][ T31] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1079.811044][ T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.814569][ T31] usb 10-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 1079.814604][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1079.814691][ T31] usb 10-1: Product: syz [ 1079.814710][ T31] usb 10-1: Manufacturer: syz [ 1079.927547][ T5834] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1080.154509][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1080.156630][ T5834] usb 4-1: config 4 has an invalid interface number: 176 but max is 0 [ 1080.156661][ T5834] usb 4-1: config 4 has no interface number 0 [ 1080.156698][ T5834] usb 4-1: config 4 interface 176 has no altsetting 0 [ 1080.200180][ T5834] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=59.64 [ 1080.200209][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.200229][ T5834] usb 4-1: Product: syz [ 1080.200243][ T5834] usb 4-1: Manufacturer: syz [ 1080.200259][ T5834] usb 4-1: SerialNumber: syz [ 1080.295562][T16146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.329691][T16146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.375628][T16146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.417056][T16146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.452824][T16146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.539387][T16146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.581011][ T31] usb 10-1: selecting invalid altsetting 1 [ 1080.581054][ T31] speedtch 10-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 1080.581148][ T31] speedtch 10-1:1.0: usbatm_usb_probe: bind failed: -22! [ 1080.581277][ T31] speedtch 10-1:1.0: probe with driver speedtch failed with error -22 [ 1080.703966][ T5834] mvusb_mdio 4-1:4.176: probe with driver mvusb_mdio failed with error -5 [ 1080.706168][ T31] usb 10-1: selecting invalid altsetting 1 [ 1080.706194][ T31] speedtch 10-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1080.714106][ T31] speedtch 10-1:1.1: usbatm_usb_probe: bind failed: -22! [ 1080.714179][ T31] speedtch 10-1:1.1: probe with driver speedtch failed with error -22 [ 1080.761458][ T6251] dvb-usb: found a 'DiBcom NIM8096MD reference design' in warm state. [ 1080.780845][ T5834] usb 4-1: USB disconnect, device number 32 [ 1080.786353][ T31] usb 10-1: USB disconnect, device number 11 [ 1081.000462][ T6251] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1081.001675][ T6251] dvbdev: DVB: registering new adapter (DiBcom NIM8096MD reference design) [ 1081.001725][ T6251] usb 6-1: media controller created [ 1081.213652][ T6251] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1081.507515][T16168] usb usb7: usbfs: process 16168 (syz.3.3067) did not claim interface 0 before use [ 1081.513249][ T6251] DVB: Unable to find symbol dib8000_attach() [ 1081.513267][ T6251] dvb-usb: no frontend was attached by 'DiBcom NIM8096MD reference design' [ 1081.601073][T16170] futex_wake_op: syz.4.3070 tries to shift op by 144; fix this program [ 1083.077499][ T6251] rc_core: IR keymap rc-dib0700-rc5 not found [ 1083.077525][ T6251] Registered IR keymap rc-empty [ 1083.141249][ T6251] dvb-usb: could not initialize remote control. [ 1083.141270][ T6251] dvb-usb: DiBcom NIM8096MD reference design successfully initialized and connected. [ 1083.312592][ T6251] usb 6-1: USB disconnect, device number 10 [ 1083.621062][ T6251] dvb-usb: DiBcom NIM8096MD reference design successfully deinitialized and disconnected. [ 1084.075514][T16187] ip6erspan0: entered allmulticast mode [ 1084.628215][ T5589] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1084.792170][ T5589] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.796573][ T5589] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 1084.796617][ T5589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1084.796642][ T5589] usb 5-1: Product: syz [ 1084.796660][ T5589] usb 5-1: Manufacturer: syz [ 1085.118431][T16193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.126620][T16193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.161574][T16193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.163235][T16193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.192939][T16193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.259453][T16193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.282811][ T5589] usb 5-1: selecting invalid altsetting 1 [ 1085.282835][ T5589] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 1085.282896][ T5589] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -22! [ 1085.282943][ T5589] speedtch 5-1:1.0: probe with driver speedtch failed with error -22 [ 1085.356776][ T5589] usb 5-1: selecting invalid altsetting 1 [ 1085.356803][ T5589] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1085.390155][ T5589] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -22! [ 1085.390234][ T5589] speedtch 5-1:1.1: probe with driver speedtch failed with error -22 [ 1085.416175][ T5589] usb 5-1: USB disconnect, device number 19 [ 1086.057706][ T8234] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1086.108306][T16220] sctp: [Deprecated]: syz.4.3089 (pid 16220) Use of int in max_burst socket option deprecated. [ 1086.108306][T16220] Use struct sctp_assoc_value instead [ 1086.237499][ T8234] usb 10-1: Using ep0 maxpacket: 32 [ 1086.242872][ T8234] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1086.242918][ T8234] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1086.242958][ T8234] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1086.242985][ T8234] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1086.243011][ T8234] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1086.247257][ T8234] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1086.247285][ T8234] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1086.247306][ T8234] usb 10-1: Product: syz [ 1086.276740][ T8234] usb 10-1: Manufacturer: syz [ 1086.276762][ T8234] usb 10-1: SerialNumber: syz [ 1086.348213][ T8234] usb 10-1: config 0 descriptor?? [ 1086.355968][ T8234] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1086.407582][ T8234] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1086.609355][T16214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.613359][T16214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.804261][ T8234] usb 10-1: USB disconnect, device number 12 [ 1086.804353][ C0] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 1086.804416][T16214] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1086.806451][T16228] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 1086.842241][ T8234] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1086.846516][T16230] usb usb7: usbfs: process 16230 (syz.4.3091) did not claim interface 0 before use [ 1090.068843][T16278] usb usb7: usbfs: process 16278 (syz.4.3106) did not claim interface 0 before use [ 1090.491196][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3110'. [ 1090.885789][T16296] TCP: tcp_parse_options: Illegal window scaling value 227 > 14 received [ 1091.095296][T16302] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3115'. [ 1091.189833][ T8234] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1091.339122][ T5589] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1091.359927][ T8234] usb 6-1: Using ep0 maxpacket: 16 [ 1091.364130][ T8234] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1091.364174][ T8234] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1091.364206][ T8234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1091.364239][ T8234] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1091.364268][ T8234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1091.364293][ T8234] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1091.364321][ T8234] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1091.464963][ T8234] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1091.464998][ T8234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.465023][ T8234] usb 6-1: Product: syz [ 1091.465040][ T8234] usb 6-1: Manufacturer: syz [ 1091.465058][ T8234] usb 6-1: SerialNumber: syz [ 1091.511650][ T8234] usb 6-1: config 0 descriptor?? [ 1091.513990][T16297] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1091.534412][ T8234] iuu_phoenix 6-1:0.0: iuu_phoenix converter detected [ 1091.544433][ T5589] usb 4-1: Using ep0 maxpacket: 32 [ 1091.550524][ T5589] usb 4-1: config 0 has too many interfaces: 197, using maximum allowed: 32 [ 1091.550559][ T5589] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 197 [ 1091.550586][ T5589] usb 4-1: config 0 has no interface number 0 [ 1091.550654][ T5589] usb 4-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice= 6.2d [ 1091.550682][ T5589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.631324][ T8234] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 1091.646234][ T5589] usb 4-1: config 0 descriptor?? [ 1091.749506][ T31] usb 6-1: USB disconnect, device number 11 [ 1091.813355][ T31] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1092.056257][ T31] iuu_phoenix 6-1:0.0: device disconnected [ 1092.944923][T16310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.945546][T16310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.962738][T16310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.963388][T16310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.212392][T16310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.213029][T16310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.246417][T16310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.247044][T16310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.498753][T16310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.499489][T16310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.307742][ T6251] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1094.480522][ T6251] usb 5-1: Using ep0 maxpacket: 32 [ 1094.483011][ T6251] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1094.483042][ T6251] usb 5-1: config 0 has no interface number 0 [ 1094.483093][ T6251] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1094.535670][ T6251] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1094.535708][ T6251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.535733][ T6251] usb 5-1: Product: syz [ 1094.535752][ T6251] usb 5-1: Manufacturer: syz [ 1094.535769][ T6251] usb 5-1: SerialNumber: syz [ 1094.594842][ T6251] usb 5-1: config 0 descriptor?? [ 1094.991648][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3124'. [ 1096.148576][ T5589] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1096.271086][ T5834] usb 4-1: USB disconnect, device number 33 [ 1096.282623][ T6251] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1096.282657][ T6251] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1096.308960][ T5589] usb 10-1: Using ep0 maxpacket: 16 [ 1096.312679][ T6251] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1096.312716][ T6251] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1096.312739][ T6251] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1096.312760][ T6251] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1096.313148][ T6251] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1096.317300][ T5589] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1096.322891][ T5589] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1096.322928][ T5589] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1096.322959][ T5589] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1096.322997][ T5589] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1096.323023][ T5589] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1096.323049][ T5589] usb 10-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1096.462896][ T5589] usb 10-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1096.462931][ T5589] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.462956][ T5589] usb 10-1: Product: syz [ 1096.462974][ T5589] usb 10-1: Manufacturer: syz [ 1096.462991][ T5589] usb 10-1: SerialNumber: syz [ 1096.529227][ T6251] usb 5-1: USB disconnect, device number 20 [ 1096.669080][ T5589] usb 10-1: config 0 descriptor?? [ 1096.685135][T16341] raw-gadget.7 gadget.9: fail, usb_ep_enable returned -22 [ 1096.786864][ T5589] iuu_phoenix 10-1:0.0: iuu_phoenix converter detected [ 1096.874697][ T5589] usb 10-1: iuu_phoenix converter now attached to ttyUSB0 [ 1096.952383][ T31] usb 10-1: USB disconnect, device number 13 [ 1097.019547][ T31] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1097.020478][ T31] iuu_phoenix 10-1:0.0: device disconnected [ 1097.057702][ T5834] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1097.227466][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 1097.231704][ T5834] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.231768][ T5834] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.231799][ T5834] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.231826][ T5834] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1097.231857][ T5834] usb 4-1: config 7 interface 0 has no altsetting 0 [ 1097.231895][ T5834] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1097.231922][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.022824][ T5834] usbhid 4-1:7.0: can't add hid device: -32 [ 1104.025635][ T5834] usbhid 4-1:7.0: probe with driver usbhid failed with error -32 [ 1106.521226][ T8234] usb 4-1: USB disconnect, device number 34 [ 1109.207572][ T5700] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1109.361055][ T5700] usb 5-1: Using ep0 maxpacket: 16 [ 1109.365997][ T5700] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.366067][ T5700] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.366116][ T5700] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.366144][ T5700] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1109.366175][ T5700] usb 5-1: config 7 interface 0 has no altsetting 0 [ 1109.366213][ T5700] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1109.366241][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.004890][ T5700] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0018/input/input15 [ 1110.382714][ T5700] kye 0003:0458:5010.0018: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 1110.603270][ T5700] usb 5-1: USB disconnect, device number 21 [ 1110.824752][T16416] fido_id[16416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1113.717697][ T8234] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1113.867437][ T8234] usb 4-1: device descriptor read/64, error -71 [ 1114.117530][ T8234] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1114.267619][ T8234] usb 4-1: device descriptor read/64, error -71 [ 1115.168111][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1115.188507][ T8234] usb usb4-port1: attempt power cycle [ 1115.339370][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1115.341664][ T9] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.341720][ T9] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1115.341753][ T9] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1115.341786][ T9] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1115.346977][ T9] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1115.347011][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.347036][ T9] usb 6-1: Product: syz [ 1115.347053][ T9] usb 6-1: Manufacturer: syz [ 1115.347071][ T9] usb 6-1: SerialNumber: syz [ 1117.180264][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.859533][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1117.988259][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input16 [ 1118.254865][T16475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3173'. [ 1118.255144][T16475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3173'. [ 1118.719594][ T9] imon:send_packet: packet tx failed (-71) [ 1118.764892][ T9] imon 6-1:155.0: panel buttons/knobs setup failed [ 1118.765002][ T9] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1118.765020][ T9] (id 0x00) [ 1118.807988][T16489] syzkaller1: entered allmulticast mode [ 1118.841348][T16491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3183'. [ 1123.352347][ T9] rc_core: IR keymap rc-imon-pad not found [ 1123.352374][ T9] Registered IR keymap rc-empty [ 1123.352565][ T9] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1123.352588][ T9] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1123.415873][ T9] imon:send_packet: packet tx failed (-71) [ 1123.437536][ T9] imon 6-1:155.0: remote input dev register failed [ 1123.437716][ T9] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 1123.747872][T16512] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3190'. [ 1123.748137][T16512] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3190'. [ 1124.174202][T16520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3192'. [ 1124.367573][ T5585] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1124.517478][ T5585] usb 10-1: Using ep0 maxpacket: 16 [ 1124.522405][ T5585] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.522466][ T5585] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.522496][ T5585] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.522523][ T5585] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1124.522682][ T5585] usb 10-1: config 7 interface 0 has no altsetting 0 [ 1124.522720][ T5585] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1124.522746][ T5585] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.834600][T16520] team0: Port device team_slave_0 removed [ 1124.984177][ T9] imon 6-1:155.0: unable to initialize intf0, err 0 [ 1124.984203][ T9] imon:imon_probe: failed to initialize context! [ 1124.984227][ T9] imon 6-1:155.0: unable to register, err -19 [ 1125.073822][ T9] usb 6-1: USB disconnect, device number 12 [ 1125.154382][ T5585] input: HID 0458:5010 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:7.0/0003:0458:5010.0019/input/input18 [ 1125.480643][ T5585] kye 0003:0458:5010.0019: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.9-1/input0 [ 1127.619396][T16561] netlink: 'syz.3.3204': attribute type 22 has an invalid length. [ 1127.619787][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3204'. [ 1128.037965][ T5880] usb 10-1: USB disconnect, device number 14 [ 1129.679445][ T5880] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1129.828938][ T5880] usb 10-1: Using ep0 maxpacket: 16 [ 1129.831559][ T5880] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 1129.831591][ T5880] usb 10-1: config 0 has no interface number 0 [ 1129.831655][ T5880] usb 10-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1129.887924][ T5880] usb 10-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1129.887959][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.887984][ T5880] usb 10-1: Product: syz [ 1129.888001][ T5880] usb 10-1: Manufacturer: syz [ 1129.888018][ T5880] usb 10-1: SerialNumber: syz [ 1129.960740][ T5880] usb 10-1: config 0 descriptor?? [ 1129.975898][ T5880] cypress_m8 10-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1130.294680][ T5880] usb 10-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1130.361796][ T5880] usb 10-1: USB disconnect, device number 15 [ 1130.466738][ T5880] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1130.743400][ T5880] cypress_m8 10-1:0.35: device disconnected [ 1132.481415][T16602] Bluetooth: MGMT ver 1.23 [ 1132.696765][T16606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3220'. [ 1132.696799][T16606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3220'. [ 1132.834899][T16606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3220'. [ 1132.834935][T16606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3220'. [ 1133.257745][T16614] netlink: 'syz.5.3223': attribute type 22 has an invalid length. [ 1133.257770][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3223'. [ 1133.259336][T16610] netlink: 'syz.9.3222': attribute type 1 has an invalid length. [ 1134.299879][ T5880] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1134.471702][ T5880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1134.471737][ T5880] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1134.475649][ T5880] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1134.475686][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.475711][ T5880] usb 10-1: Product: syz [ 1134.475729][ T5880] usb 10-1: Manufacturer: syz [ 1134.475747][ T5880] usb 10-1: SerialNumber: syz [ 1134.559966][ T5880] usb 10-1: config 0 descriptor?? [ 1134.799413][ T5880] usb 10-1: USB disconnect, device number 16 [ 1137.557181][T16658] netlink: 'syz.5.3241': attribute type 22 has an invalid length. [ 1137.557208][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3241'. [ 1138.122662][T16663] IPVS: Scheduler module ip_vs_ not found [ 1138.213650][ T5880] IPVS: starting estimator thread 0... [ 1138.497588][T16665] IPVS: using max 7 ests per chain, 16800 per kthread [ 1146.007920][T16701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3256'. [ 1158.470011][ T4894] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1158.634571][ T4894] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1158.647720][ T4894] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1158.649244][ T4894] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1158.650222][ T4894] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1160.798903][T16747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.800568][T16747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.800914][T16747] bridge_slave_0: entered allmulticast mode [ 1160.806955][T16747] bridge_slave_0: entered promiscuous mode [ 1160.890788][T16747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.890994][T16747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.891224][T16747] bridge_slave_1: entered allmulticast mode [ 1160.895748][T16747] bridge_slave_1: entered promiscuous mode [ 1161.067264][T16747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.073953][T16747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.209138][T16747] team0: Port device team_slave_0 added [ 1161.223579][T16747] team0: Port device team_slave_1 added [ 1161.329134][T16747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.329155][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.329190][T16747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.331991][T16747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.332010][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.332045][T16747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.580888][T16747] hsr_slave_0: entered promiscuous mode [ 1161.584514][T16747] hsr_slave_1: entered promiscuous mode [ 1161.587126][T16747] debugfs: 'hsr0' already exists in 'hsr' [ 1161.587156][T16747] Cannot create hsr debugfs directory [ 1168.439965][T13786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1168.487543][T13786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1168.492868][T13786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1168.494472][T13786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1168.495281][T13786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1169.544639][T16767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.544902][T16767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.545121][T16767] bridge_slave_0: entered allmulticast mode [ 1169.569806][T16767] bridge_slave_0: entered promiscuous mode [ 1169.573451][T16767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.573673][T16767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.573891][T16767] bridge_slave_1: entered allmulticast mode [ 1169.577001][T16767] bridge_slave_1: entered promiscuous mode [ 1169.685546][T16767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.706683][T16767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.766575][T16767] team0: Port device team_slave_0 added [ 1169.777831][T16767] team0: Port device team_slave_1 added [ 1169.830539][T16767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.830558][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.830593][T16767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.833173][T16767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.833191][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.833225][T16767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.995971][T16767] hsr_slave_0: entered promiscuous mode [ 1170.003600][T16767] hsr_slave_1: entered promiscuous mode [ 1170.005217][T16767] debugfs: 'hsr0' already exists in 'hsr' [ 1170.005246][T16767] Cannot create hsr debugfs directory [ 1172.207356][ C0] sched: DL replenish lagged too much [ 1173.446146][T13786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1173.509010][T13786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1173.515799][T13786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1173.552609][T13786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1173.553630][T13786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1174.629912][T13786] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1174.702037][T13786] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1174.706618][T13786] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1174.890541][T13786] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1174.891372][T13786] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1175.273832][T16785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.274512][T16785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.275154][T16785] bridge_slave_0: entered allmulticast mode [ 1175.300979][T16785] bridge_slave_0: entered promiscuous mode [ 1175.304701][T16785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.304944][T16785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.305180][T16785] bridge_slave_1: entered allmulticast mode [ 1175.334550][T16785] bridge_slave_1: entered promiscuous mode [ 1175.404061][T16785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.419490][T16785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.478497][T16785] team0: Port device team_slave_0 added [ 1175.482597][T16785] team0: Port device team_slave_1 added [ 1175.537319][T16785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.537340][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.537374][T16785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.540086][T16785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.540104][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.540138][T16785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.704347][T16785] hsr_slave_0: entered promiscuous mode [ 1175.705909][T16785] hsr_slave_1: entered promiscuous mode [ 1175.706991][T16785] debugfs: 'hsr0' already exists in 'hsr' [ 1175.707018][T16785] Cannot create hsr debugfs directory [ 1176.724103][T16799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.724341][T16799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.724584][T16799] bridge_slave_0: entered allmulticast mode [ 1176.749294][T16799] bridge_slave_0: entered promiscuous mode [ 1176.756073][T16799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.756306][T16799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.756580][T16799] bridge_slave_1: entered allmulticast mode [ 1176.786857][T16799] bridge_slave_1: entered promiscuous mode [ 1176.848377][T16799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.870833][T16799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.930268][T16799] team0: Port device team_slave_0 added [ 1176.934534][T16799] team0: Port device team_slave_1 added [ 1176.993092][T16799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.993112][T16799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.993146][T16799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.995821][T16799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.995838][T16799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.995873][T16799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.161380][T16799] hsr_slave_0: entered promiscuous mode [ 1177.163016][T16799] hsr_slave_1: entered promiscuous mode [ 1177.164200][T16799] debugfs: 'hsr0' already exists in 'hsr' [ 1177.164228][T16799] Cannot create hsr debugfs directory [ 1179.213460][ T4894] Bluetooth: hci2: command tx timeout [ 1179.214253][ T4894] Bluetooth: hci4: command tx timeout [ 1179.214584][ T4894] Bluetooth: hci5: command tx timeout [ 1179.214916][ T4894] Bluetooth: hci8: command tx timeout [ 1179.216427][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.269120][ T4894] Bluetooth: hci8: command tx timeout [ 1181.269156][ T4894] Bluetooth: hci4: command tx timeout [ 1182.217726][T13158] Bluetooth: hci5: command tx timeout [ 1182.217762][T13158] Bluetooth: hci2: command tx timeout [ 1184.209744][ T4894] Bluetooth: hci4: command tx timeout [ 1184.209793][ T4894] Bluetooth: hci8: command tx timeout [ 1185.211243][T13158] Bluetooth: hci2: command tx timeout [ 1185.211287][T13158] Bluetooth: hci5: command tx timeout [ 1185.433382][T13158] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1185.481497][T13158] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1185.501302][T13158] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1185.578563][T13158] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1185.579969][T13158] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1186.277575][ T4894] Bluetooth: hci4: command tx timeout [ 1186.277635][T13158] Bluetooth: hci8: command tx timeout [ 1187.265733][ T4894] Bluetooth: hci2: command tx timeout [ 1187.265788][T13158] Bluetooth: hci5: command tx timeout [ 1214.224618][T13158] Bluetooth: hci9: command tx timeout [ 1217.234664][ T4894] Bluetooth: hci9: command tx timeout [ 1220.487427][ T4894] Bluetooth: hci9: command tx timeout [ 1224.247318][ T4894] Bluetooth: hci9: command tx timeout [ 1238.305252][T13158] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1239.351320][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.338592][T13786] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1241.340725][T13786] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1241.343497][T15380] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1241.348281][T15380] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1241.348951][T15380] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1241.369705][T13786] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1242.377192][T13786] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1242.379486][T13786] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1242.386631][T13786] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1246.989918][T15380] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1247.040107][T15380] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1247.045056][T15380] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1247.086316][T15380] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1247.088927][T15380] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1247.514166][T11455] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1247.551298][T11455] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1247.556376][T11455] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1247.572235][T11455] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1247.586300][T11455] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1247.986249][ T5587] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1248.040126][ T5587] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1248.043028][ T5587] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1248.044404][ T5587] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1248.045328][ T5587] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1283.047585][T16864] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1283.100996][T16864] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1283.106500][T16864] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1283.137284][T16864] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1283.138232][T16864] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1292.073306][T16873] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1292.132898][T16873] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1292.135269][T16873] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1292.187303][T16873] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1292.190756][T16873] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1296.866459][T16887] Bluetooth: hci4: command 0x0406 tx timeout [ 1297.831040][T16887] Bluetooth: hci2: command 0x0406 tx timeout [ 1299.871572][T16889] Bluetooth: hci5: command 0x0406 tx timeout [ 1299.874193][T16889] Bluetooth: hci8: command 0x0406 tx timeout [ 1300.861305][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.857170][T13158] Bluetooth: hci11: command tx timeout [ 1304.867713][T13158] Bluetooth: hci10: command tx timeout [ 1305.895591][T13158] Bluetooth: hci11: command tx timeout [ 1307.250757][T13158] Bluetooth: hci10: command tx timeout [ 1307.277143][T16886] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1307.343466][T16886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1307.345779][T16886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1307.375858][T16886] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1307.385441][T16886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1307.645887][T13158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1307.698706][T13158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1307.742959][T13158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1307.771694][T13158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1307.784856][T13158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1308.271164][T16889] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1308.325098][T16889] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1308.356149][T16889] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1308.365051][T16889] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1308.398439][T16889] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1343.263937][T16887] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1343.317019][T16887] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1343.329062][T16887] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1343.331181][T16887] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1343.332117][T16887] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1352.123777][T16915] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1352.175875][T16915] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1352.190779][T16915] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1352.193833][T16915] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1352.195996][T16915] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1354.240265][T16920] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1354.331298][T16920] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1354.333739][T16920] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1354.352346][T16920] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1354.375951][T16920] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1355.145358][ T38] INFO: task kworker/1:0:31 blocked for more than 141 seconds. [ 1355.145393][ T38] Tainted: G L syzkaller #0 [ 1355.145409][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1355.145421][ T38] task:kworker/1:0 state:D stack:21072 pid:31 tgid:31 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1355.145492][ T38] Workqueue: events_power_efficient reg_check_chans_work [ 1355.145594][ T38] Call Trace: [ 1355.145604][ T38] [ 1355.145621][ T38] __schedule+0x16dc/0x5500 [ 1355.145678][ T38] ? __pfx___schedule+0x10/0x10 [ 1355.145734][ T38] rt_mutex_schedule+0x76/0xf0 [ 1355.145801][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1355.145853][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1355.145893][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1355.145930][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1355.145979][ T38] ? reg_check_chans_work+0xac/0x1110 [ 1355.146010][ T38] ? reg_check_chans_work+0xac/0x1110 [ 1355.146043][ T38] ? reg_check_chans_work+0xac/0x1110 [ 1355.146067][ T38] mutex_lock_nested+0x168/0x1d0 [ 1355.146105][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 1355.146136][ T38] reg_check_chans_work+0xac/0x1110 [ 1355.146183][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1355.146224][ T38] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1355.146253][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 1355.146284][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 1355.146319][ T38] ? rcu_is_watching+0x15/0xb0 [ 1355.146352][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 1355.146380][ T38] process_scheduled_works+0xa8e/0x14e0 [ 1355.146440][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1355.146476][ T38] ? assign_work+0x3cf/0x5d0 [ 1355.146510][ T38] worker_thread+0xa47/0xfb0 [ 1355.146570][ T38] kthread+0x388/0x470 [ 1355.146633][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1355.146665][ T38] ? __pfx_kthread+0x10/0x10 [ 1355.146702][ T38] ret_from_fork+0x514/0xb70 [ 1355.146769][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.146806][ T38] ? __switch_to+0xc89/0x1420 [ 1355.146861][ T38] ? __pfx_kthread+0x10/0x10 [ 1355.146898][ T38] ret_from_fork_asm+0x1a/0x30 [ 1355.146955][ T38] [ 1355.146982][ T38] INFO: task kworker/u8:4:67 blocked for more than 141 seconds. [ 1355.147005][ T38] Tainted: G L syzkaller #0 [ 1355.147019][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1355.147031][ T38] task:kworker/u8:4 state:D stack:20720 pid:67 tgid:67 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1355.147098][ T38] Workqueue: ipv6_addrconf addrconf_verify_work [ 1355.147126][ T38] Call Trace: [ 1355.147134][ T38] [ 1355.147149][ T38] __schedule+0x16dc/0x5500 [ 1355.147381][ T38] ? __pfx___schedule+0x10/0x10 [ 1355.147441][ T38] rt_mutex_schedule+0x76/0xf0 [ 1355.147468][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1355.147520][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1355.147559][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1355.147596][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1355.147642][ T38] ? addrconf_verify_work+0x19/0x30 [ 1355.147672][ T38] ? addrconf_verify_work+0x19/0x30 [ 1355.147703][ T38] ? addrconf_verify_work+0x19/0x30 [ 1355.147726][ T38] mutex_lock_nested+0x168/0x1d0 [ 1355.147760][ T38] ? rcu_is_watching+0x15/0xb0 [ 1355.147792][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 1355.147819][ T38] addrconf_verify_work+0x19/0x30 [ 1355.147844][ T38] process_scheduled_works+0xa8e/0x14e0 [ 1355.147904][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1355.147941][ T38] ? assign_work+0x3cf/0x5d0 [ 1355.147975][ T38] worker_thread+0xa47/0xfb0 [ 1355.148034][ T38] kthread+0x388/0x470 [ 1355.148070][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1355.148098][ T38] ? __pfx_kthread+0x10/0x10 [ 1355.148134][ T38] ret_from_fork+0x514/0xb70 [ 1355.148181][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.148217][ T38] ? __switch_to+0xc89/0x1420 [ 1355.148250][ T38] ? __pfx_kthread+0x10/0x10 [ 1355.148287][ T38] ret_from_fork_asm+0x1a/0x30 [ 1355.148344][ T38] [ 1355.148490][ T38] INFO: task kworker/1:7:6251 blocked for more than 141 seconds. [ 1355.148512][ T38] Tainted: G L syzkaller #0 [ 1355.148527][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1355.148538][ T38] task:kworker/1:7 state:D stack:20088 pid:6251 tgid:6251 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1355.148603][ T38] Workqueue: events switchdev_deferred_process_work [ 1355.148691][ T38] Call Trace: [ 1355.148700][ T38] [ 1355.148715][ T38] __schedule+0x16dc/0x5500 [ 1355.148771][ T38] ? __pfx___schedule+0x10/0x10 [ 1355.148828][ T38] rt_mutex_schedule+0x76/0xf0 [ 1355.148854][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1355.148905][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1355.148943][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1355.148981][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1355.149030][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 1355.149074][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 1355.149103][ T38] mutex_lock_nested+0x168/0x1d0 [ 1355.149136][ T38] ? rcu_is_watching+0x15/0xb0 [ 1355.149174][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 1355.149203][ T38] switchdev_deferred_process_work+0xe/0x20 [ 1355.149233][ T38] process_scheduled_works+0xa8e/0x14e0 [ 1355.149292][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1355.149329][ T38] ? assign_work+0x3cf/0x5d0 [ 1355.149363][ T38] worker_thread+0xa47/0xfb0 [ 1355.149407][ T38] ? __kthread_parkme+0x71/0x1f0 [ 1355.149451][ T38] kthread+0x388/0x470 [ 1355.149487][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1355.149514][ T38] ? __pfx_kthread+0x10/0x10 [ 1355.149550][ T38] ret_from_fork+0x514/0xb70 [ 1355.149589][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.149625][ T38] ? __switch_to+0xc89/0x1420 [ 1355.149659][ T38] ? __pfx_kthread+0x10/0x10 [ 1355.149696][ T38] ret_from_fork_asm+0x1a/0x30 [ 1355.149752][ T38] [ 1355.149830][ T38] INFO: task syz-executor:16747 blocked for more than 141 seconds. [ 1355.149851][ T38] Tainted: G L syzkaller #0 [ 1355.149865][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1355.149877][ T38] task:syz-executor state:D stack:22352 pid:16747 tgid:16747 ppid:1 task_flags:0x480140 flags:0x00080002 [ 1355.149943][ T38] Call Trace: [ 1355.149951][ T38] [ 1355.149967][ T38] __schedule+0x16dc/0x5500 [ 1355.149998][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1355.150055][ T38] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1355.150155][ T38] ? __pfx___schedule+0x10/0x10 [ 1355.150200][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1355.150251][ T38] rt_mutex_schedule+0x76/0xf0 [ 1355.150278][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1355.150323][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1355.150361][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1355.150399][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1355.150435][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1355.150482][ T38] ? nsim_destroy+0x173/0x800 [ 1355.150583][ T38] ? nsim_destroy+0x173/0x800 [ 1355.150613][ T38] mutex_lock_nested+0x168/0x1d0 [ 1355.150652][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1355.150684][ T38] nsim_destroy+0x173/0x800 [ 1355.150724][ T38] __nsim_dev_port_del+0x14e/0x200 [ 1355.150767][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 1355.150806][ T38] ? nsim_drv_remove+0x50/0x160 [ 1355.150848][ T38] nsim_drv_remove+0x58/0x160 [ 1355.150889][ T38] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1355.150949][ T38] device_release_driver_internal+0x48b/0x880 [ 1355.151032][ T38] bus_remove_device+0x449/0x560 [ 1355.151108][ T38] ? __pfx_bus_remove_device+0x10/0x10 [ 1355.151147][ T38] ? up_read+0x34/0x180 [ 1355.151189][ T38] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1355.151261][ T38] device_del+0x528/0x8f0 [ 1355.151299][ T38] ? __pfx_device_del+0x10/0x10 [ 1355.151327][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1355.151355][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1355.151387][ T38] device_unregister+0x21/0xf0 [ 1355.151416][ T38] del_device_store+0x2b5/0x370 [ 1355.151473][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1355.151509][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1355.151548][ T38] ? sysfs_kf_write+0x166/0x260 [ 1355.151624][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1355.151661][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 1355.151703][ T38] vfs_write+0x61e/0xbb0 [ 1355.151744][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1355.151777][ T38] ? do_sys_openat2+0x14e/0x200 [ 1355.151814][ T38] ? kmem_cache_free+0x187/0x6c0 [ 1355.151859][ T38] ksys_write+0x156/0x270 [ 1355.151892][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1355.151932][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.151960][ T38] do_syscall_64+0x174/0x580 [ 1355.151988][ T38] ? trace_irq_disable+0x3b/0x140 [ 1355.152027][ T38] ? clear_bhb_loop+0x40/0x90 [ 1355.152058][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.152084][ T38] RIP: 0033:0x7f9ddd0ee90e [ 1355.152107][ T38] RSP: 002b:00007ffe5f54f228 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1355.152133][ T38] RAX: ffffffffffffffda RBX: 0000555586860500 RCX: 00007f9ddd0ee90e [ 1355.152152][ T38] RDX: 0000000000000001 RSI: 00007ffe5f54f2b0 RDI: 0000000000000005 [ 1355.152176][ T38] RBP: 00007f9ddd1c58a7 R08: 0000000000000000 R09: 0000000000000000 [ 1355.152192][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.152208][ T38] R13: 00007ffe5f54f2b0 R14: 00007f9dddee4620 R15: 0000000000000003 [ 1355.152246][ T38] [ 1355.152261][ T38] INFO: task syz-executor:16767 blocked for more than 175 seconds. [ 1355.152283][ T38] Tainted: G L syzkaller #0 [ 1355.152329][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1355.152340][ T38] task:syz-executor state:D stack:22824 pid:16767 tgid:16767 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1355.152408][ T38] Call Trace: [ 1355.152417][ T38] [ 1355.152432][ T38] __schedule+0x16dc/0x5500 [ 1355.152463][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1355.152504][ T38] ? rcu_is_watching+0x15/0xb0 [ 1355.152547][ T38] ? __pfx___schedule+0x10/0x10 [ 1355.152583][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1355.152634][ T38] rt_mutex_schedule+0x76/0xf0 [ 1355.152660][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1355.152706][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1355.152745][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1355.152783][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1355.152821][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1355.152869][ T38] ? del_device_store+0xd6/0x370 [ 1355.152908][ T38] ? del_device_store+0xd6/0x370 [ 1355.152949][ T38] ? del_device_store+0xd6/0x370 [ 1355.152980][ T38] mutex_lock_nested+0x168/0x1d0 [ 1355.153013][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1355.153055][ T38] del_device_store+0xd6/0x370 [ 1355.153089][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1355.153126][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1355.153169][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1355.153206][ T38] ? sysfs_kf_write+0x166/0x260 [ 1355.153248][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1355.153284][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 1355.153324][ T38] vfs_write+0x61e/0xbb0 [ 1355.153363][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1355.153396][ T38] ? do_sys_openat2+0x14e/0x200 [ 1355.153433][ T38] ? kmem_cache_free+0x187/0x6c0 [ 1355.153477][ T38] ksys_write+0x156/0x270 [ 1355.153510][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1355.153550][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.153578][ T38] do_syscall_64+0x174/0x580 [ 1355.153607][ T38] ? clear_bhb_loop+0x40/0x90 [ 1355.153638][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.153664][ T38] RIP: 0033:0x7f4b2705e90e [ 1355.153685][ T38] RSP: 002b:00007fff450eca38 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1355.153709][ T38] RAX: ffffffffffffffda RBX: 000055558f9eb500 RCX: 00007f4b2705e90e [ 1355.153728][ T38] RDX: 0000000000000001 RSI: 00007fff450ecac0 RDI: 0000000000000005 [ 1355.153745][ T38] RBP: 00007f4b271358a7 R08: 0000000000000000 R09: 0000000000000000 [ 1355.153762][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.153778][ T38] R13: 00007fff450ecac0 R14: 00007f4b27e54620 R15: 0000000000000003 [ 1355.153815][ T38] [ 1355.153828][ T38] INFO: task syz-executor:16785 blocked for more than 175 seconds. [ 1355.153849][ T38] Tainted: G L syzkaller #0 [ 1355.153863][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1355.153875][ T38] task:syz-executor state:D stack:22808 pid:16785 tgid:16785 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1355.153941][ T38] Call Trace: [ 1355.153949][ T38] [ 1355.153964][ T38] __schedule+0x16dc/0x5500 [ 1355.154019][ T38] ? __pfx___schedule+0x10/0x10 [ 1355.154076][ T38] rt_mutex_schedule+0x76/0xf0 [ 1355.154102][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1355.154154][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1355.154198][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1355.154236][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1355.154284][ T38] ? del_device_store+0xd6/0x370 [ 1355.154324][ T38] ? del_device_store+0xd6/0x370 [ 1355.154364][ T38] ? del_device_store+0xd6/0x370 [ 1355.154396][ T38] mutex_lock_nested+0x168/0x1d0 [ 1355.154429][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1355.154471][ T38] del_device_store+0xd6/0x370 [ 1355.154505][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1355.154542][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1355.154578][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1355.154616][ T38] ? sysfs_kf_write+0x166/0x260 [ 1355.154658][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1355.154695][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 1355.154735][ T38] vfs_write+0x61e/0xbb0 [ 1355.154774][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1355.154807][ T38] ? do_sys_openat2+0x14e/0x200 [ 1355.154842][ T38] ? kmem_cache_free+0x187/0x6c0 [ 1355.154886][ T38] ksys_write+0x156/0x270 [ 1355.154920][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1355.154960][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.154987][ T38] do_syscall_64+0x174/0x580 [ 1355.155014][ T38] ? trace_irq_disable+0x3b/0x140 [ 1355.155168][T16926] Bluetooth: hci11: command tx timeout [ 1355.155207][T16926] Bluetooth: hci10: command tx timeout [ 1355.155235][T16926] Bluetooth: hci9: command 0x0406 tx timeout [ 1355.155636][ T38] ? clear_bhb_loop+0x40/0x90 [ 1355.155671][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.155698][ T38] RIP: 0033:0x7f2a1ecce90e [ 1355.155720][ T38] RSP: 002b:00007ffcc83a32f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1355.155745][ T38] RAX: ffffffffffffffda RBX: 0000555576192500 RCX: 00007f2a1ecce90e [ 1355.155765][ T38] RDX: 0000000000000001 RSI: 00007ffcc83a3380 RDI: 0000000000000005 [ 1355.155782][ T38] RBP: 00007f2a1eda58a7 R08: 0000000000000000 R09: 0000000000000000 [ 1355.155798][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.155814][ T38] R13: 00007ffcc83a3380 R14: 00007f2a1fac4620 R15: 0000000000000003 [ 1355.155853][ T38] [ 1355.155864][ T38] INFO: task syz-executor:16799 blocked for more than 175 seconds. [ 1355.155886][ T38] Tainted: G L syzkaller #0 [ 1355.155901][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1355.155913][ T38] task:syz-executor state:D stack:22720 pid:16799 tgid:16799 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1355.155979][ T38] Call Trace: [ 1355.155987][ T38] [ 1355.156002][ T38] __schedule+0x16dc/0x5500 [ 1355.156058][ T38] ? __pfx___schedule+0x10/0x10 [ 1355.156115][ T38] rt_mutex_schedule+0x76/0xf0 [ 1355.156141][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1355.156200][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1355.156239][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1355.156276][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1355.156324][ T38] ? del_device_store+0xd6/0x370 [ 1355.156363][ T38] ? del_device_store+0xd6/0x370 [ 1355.156404][ T38] ? del_device_store+0xd6/0x370 [ 1355.156436][ T38] mutex_lock_nested+0x168/0x1d0 [ 1355.156468][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1355.156510][ T38] del_device_store+0xd6/0x370 [ 1355.156545][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1355.156581][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1355.156617][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1355.156655][ T38] ? sysfs_kf_write+0x166/0x260 [ 1355.156696][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1355.156733][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 1355.156774][ T38] vfs_write+0x61e/0xbb0 [ 1355.156813][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1355.156846][ T38] ? do_sys_openat2+0x14e/0x200 [ 1355.156883][ T38] ? kmem_cache_free+0x187/0x6c0 [ 1355.156927][ T38] ksys_write+0x156/0x270 [ 1355.156960][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1355.156999][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.157026][ T38] do_syscall_64+0x174/0x580 [ 1355.157053][ T38] ? trace_irq_disable+0x3b/0x140 [ 1355.157090][ T38] ? clear_bhb_loop+0x40/0x90 [ 1355.157122][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.157148][ T38] RIP: 0033:0x7fe70513e90e [ 1355.157176][ T38] RSP: 002b:00007fffdbeca968 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1355.157240][ T38] RAX: ffffffffffffffda RBX: 0000555578a61500 RCX: 00007fe70513e90e [ 1355.157258][ T38] RDX: 0000000000000001 RSI: 00007fffdbeca9f0 RDI: 0000000000000005 [ 1355.157274][ T38] RBP: 00007fe7052158a7 R08: 0000000000000000 R09: 0000000000000000 [ 1355.157291][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.157306][ T38] R13: 00007fffdbeca9f0 R14: 00007fe705f34620 R15: 0000000000000003 [ 1355.157344][ T38] [ 1355.157360][ T38] INFO: task syz-executor:16827 blocked for more than 141 seconds. [ 1355.157381][ T38] Tainted: G L syzkaller #0 [ 1355.157395][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1355.157407][ T38] task:syz-executor state:D stack:25800 pid:16827 tgid:16827 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1355.157478][ T38] Call Trace: [ 1355.157487][ T38] [ 1355.157501][ T38] __schedule+0x16dc/0x5500 [ 1355.157558][ T38] ? __pfx___schedule+0x10/0x10 [ 1355.157615][ T38] rt_mutex_schedule+0x76/0xf0 [ 1355.157641][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1355.157694][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1355.157733][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1355.157770][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1355.157819][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1355.157859][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1355.157897][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1355.157927][ T38] mutex_lock_nested+0x168/0x1d0 [ 1355.157968][ T38] inet_rtm_newaddr+0x464/0x19e0 [ 1355.157999][ T38] ? unwind_get_return_address+0x4d/0x90 [ 1355.158028][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1355.158078][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1355.158131][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1355.158169][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 1355.158263][ T38] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 1355.158308][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1355.158345][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1355.158385][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1355.158425][ T38] netlink_rcv_skb+0x226/0x4a0 [ 1355.158454][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1355.158494][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1355.158535][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1355.158561][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1355.158595][ T38] netlink_unicast+0x7f5/0x990 [ 1355.158647][ T38] netlink_sendmsg+0x813/0xb40 [ 1355.158686][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1355.158716][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1355.158757][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1355.158784][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 1355.158823][ T38] __sys_sendto+0x41e/0x5d0 [ 1355.158897][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1355.158969][ T38] ? do_user_addr_fault+0xc4a/0x1340 [ 1355.159012][ T38] __x64_sys_sendto+0xde/0x100 [ 1355.159052][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.159081][ T38] do_syscall_64+0x174/0x580 [ 1355.159107][ T38] ? trace_irq_disable+0x3b/0x140 [ 1355.159145][ T38] ? clear_bhb_loop+0x40/0x90 [ 1355.159185][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.159210][ T38] RIP: 0033:0x7f3c2f22e90e [ 1355.159232][ T38] RSP: 002b:00007fffe9262ca8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1355.159256][ T38] RAX: ffffffffffffffda RBX: 000055558f933500 RCX: 00007f3c2f22e90e [ 1355.159276][ T38] RDX: 0000000000000028 RSI: 00007f3c30024670 RDI: 0000000000000003 [ 1355.159293][ T38] RBP: 0000000000000001 R08: 00007fffe9262d24 R09: 000000000000000c [ 1355.159309][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1355.159324][ T38] R13: 0000000000000000 R14: 00007f3c30024670 R15: 0000000000000000 [ 1355.159361][ T38] [ 1355.159406][ T38] [ 1355.159406][ T38] Showing all locks held in the system: [ 1355.159420][ T38] 6 locks held by ktimers/1/29: [ 1355.159472][ T38] 3 locks held by kworker/1:0/31: [ 1355.159486][ T38] #0: ffff88813ff1a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.159584][ T38] #1: ffffc90000a5fc40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.159646][ T38] #2: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 1355.159705][ T38] 1 lock held by khungtaskd/38: [ 1355.159719][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1355.159784][ T38] 3 locks held by kworker/u8:4/67: [ 1355.159798][ T38] #0: ffff8880326f8938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.159859][ T38] #1: ffffc9000152fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.159922][ T38] #2: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1355.159979][ T38] 3 locks held by kworker/u8:5/68: [ 1355.159993][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.160054][ T38] #1: ffffc9000154fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.160115][ T38] #2: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1355.160206][ T38] 4 locks held by kswapd0/95: [ 1355.160232][ T38] 2 locks held by kworker/u8:11/1523: [ 1355.160247][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.160308][ T38] #1: ffffc90006a1fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.160384][ T38] 4 locks held by kworker/u9:1/4894: [ 1355.160399][ T38] #0: ffff888060010938 ((wq_completion)hci0#4){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.160464][ T38] #1: ffffc900081a7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.160525][ T38] #2: ffff88807d0c00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1355.160639][ T38] #3: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1355.160701][ T38] 2 locks held by getty/5335: [ 1355.160715][ T38] #0: ffff8880364fc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1355.160854][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1355.160921][ T38] 4 locks held by kworker/u9:3/5587: [ 1355.160935][ T38] #0: ffff88806d989938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.161002][ T38] #1: ffffc900052c7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.161063][ T38] #2: ffff8880a7f0c0b0 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xa5/0x1580 [ 1355.161152][ T38] #3: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1355.161222][ T38] 2 locks held by kworker/1:6/5880: [ 1355.161237][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.161299][ T38] #1: ffffc9000614fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.161360][ T38] 3 locks held by kworker/1:7/6251: [ 1355.161374][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.161435][ T38] #1: ffffc90007e67c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.161496][ T38] #2: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1355.161560][ T38] 4 locks held by kworker/u9:0/11455: [ 1355.161575][ T38] #0: ffff888029d30938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.161641][ T38] #1: ffffc900041f7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.161703][ T38] #2: ffff8880399c80b0 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xa5/0x1580 [ 1355.161766][ T38] #3: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1355.161827][ T38] 5 locks held by kworker/u9:2/13158: [ 1355.161841][ T38] #0: ffff88801cf62138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.161901][ T38] #1: ffffc900046b7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.161962][ T38] #2: ffff88806b82cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1355.162133][ T38] #3: ffff88806b82c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1355.162234][ T38] #4: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1355.162334][ T38] 1 lock held by syz-executor/13531: [ 1355.162349][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1355.162490][ T38] 1 lock held by syz-executor/13785: [ 1355.162504][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1355.162568][ T38] 4 locks held by kworker/u9:4/13786: [ 1355.162583][ T38] #0: ffff88804eb50138 ((wq_completion)hci6#3){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.162648][ T38] #1: ffffc900046a7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.162708][ T38] #2: ffff888039f140b0 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xa5/0x1580 [ 1355.162773][ T38] #3: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1355.162844][ T38] 4 locks held by kworker/u9:5/15380: [ 1355.162859][ T38] #0: ffff888024eaf938 ((wq_completion)hci3#4){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.162926][ T38] #1: ffffc90007f07c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.162987][ T38] #2: ffff88803e9840b0 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xa5/0x1580 [ 1355.163051][ T38] #3: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1355.163113][ T38] 2 locks held by kworker/u8:21/16729: [ 1355.163127][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.163197][ T38] #1: ffffc9000158fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.163260][ T38] 1 lock held by syz.5.3257/16732: [ 1355.163275][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1355.163339][ T38] 1 lock held by syz.6.3262/16743: [ 1355.163355][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1355.163418][ T38] 7 locks held by syz-executor/16747: [ 1355.163433][ T38] #0: ffff8880359fc500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1355.163499][ T38] #1: ffff8880ab4c1c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1355.163566][ T38] #2: ffff8880296c3b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1355.163636][ T38] #3: ffffffff8ee1ff58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1355.163704][ T38] #4: ffff888060d27160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1355.163767][ T38] #5: ffff8880258e4310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1355.163843][ T38] #6: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1355.163909][ T38] 1 lock held by syz.4.3265/16765: [ 1355.163922][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1355.163986][ T38] 4 locks held by syz-executor/16767: [ 1355.164001][ T38] #0: ffff8880359fc500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1355.164065][ T38] #1: ffff8880ae7d1478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1355.164130][ T38] #2: ffff8880296c3b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1355.164208][ T38] #3: ffffffff8ee1ff58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1355.164276][ T38] 4 locks held by syz-executor/16785: [ 1355.164290][ T38] #0: ffff8880359fc500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1355.164355][ T38] #1: ffff888073f2e878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1355.164420][ T38] #2: ffff8880296c3b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1355.164492][ T38] #3: ffffffff8ee1ff58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1355.164559][ T38] 4 locks held by syz-executor/16799: [ 1355.164573][ T38] #0: ffff8880359fc500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1355.164638][ T38] #1: ffff888074aa8c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1355.164702][ T38] #2: ffff8880296c3b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1355.164773][ T38] #3: ffffffff8ee1ff58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1355.164841][ T38] 1 lock held by syz-executor/16827: [ 1355.164855][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1355.164920][ T38] 1 lock held by syz-executor/16837: [ 1355.164934][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1355.164998][ T38] 1 lock held by syz-executor/16842: [ 1355.165012][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1355.165075][ T38] 1 lock held by syz-executor/16855: [ 1355.165090][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1355.165153][ T38] 1 lock held by syz-executor/16858: [ 1355.165174][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1355.165237][ T38] 1 lock held by syz-executor/16863: [ 1355.165252][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1355.165315][ T38] 4 locks held by kworker/u9:6/16864: [ 1355.165329][ T38] #0: ffff88802a4dd938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.165394][ T38] #1: ffffc90004467c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.165455][ T38] #2: ffff88806dfec0b0 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xa5/0x1580 [ 1355.165518][ T38] #3: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1355.165579][ T38] 1 lock held by syz-executor/16872: [ 1355.165593][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1355.165656][ T38] 4 locks held by kworker/u9:7/16873: [ 1355.165670][ T38] #0: ffff888066ba6938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.165730][ T38] #1: ffffc90004447c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.165792][ T38] #2: ffff8880a67b4f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1355.165862][ T38] #3: ffff8880a67b40b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1355.165927][ T38] 1 lock held by syz-executor/16878: [ 1355.165942][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1355.166006][ T38] 6 locks held by kworker/u9:8/16880: [ 1355.166020][ T38] #0: ffff888061275138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.166080][ T38] #1: ffffc90004387c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.166142][ T38] #2: ffff8880ab4d0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1355.166219][ T38] #3: ffff8880ab4d00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1355.166285][ T38] #4: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1355.166349][ T38] #5: ffff888061274b70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 1355.166454][ T38] 5 locks held by kworker/u9:9/16884: [ 1355.166469][ T38] #0: ffff8880a8412938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.166530][ T38] #1: ffffc90004377c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.166590][ T38] #2: ffff8880ae8a0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1355.166660][ T38] #3: ffff8880ae8a00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1355.166724][ T38] #4: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1355.166787][ T38] 5 locks held by kworker/u9:10/16885: [ 1355.166802][ T38] #0: ffff88806191b938 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.166861][ T38] #1: ffffc90004357c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1355.166922][ T38] #2: ffff8880b3670f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1355.166993][ T38] #3: ffff8880b36700b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1355.167057][ T38] #4: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1355.167120][ T38] 4 locks held by kworker/u9:11/16886: [ 1355.167134][ T38] #0: ffff88803beb1938 ((wq_completion)hci1#4){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1356.035416][ T38] #1: ffffc90005d8fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1356.035502][ T38] #2: ffff888020bf40b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1356.035564][ T38] #3: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1356.035626][ T38] 4 locks held by kworker/u9:12/16887: [ 1356.035642][ T38] #0: ffff8880a78bd138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1356.035706][ T38] #1: ffffc90004347c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1356.035768][ T38] #2: ffff88814ab2c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1356.035826][ T38] #3: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1356.035885][ T38] 4 locks held by kworker/u9:13/16889: [ 1356.035900][ T38] #0: ffff888038118938 ((wq_completion)hci7#4){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1356.035967][ T38] #1: ffffc90005aefc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1356.036028][ T38] #2: ffff88814ab140b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1356.036086][ T38] #3: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1356.036157][ T38] 1 lock held by syz-executor/16894: [ 1356.036172][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1356.036238][ T38] 1 lock held by dhcpcd/16896: [ 1356.036252][ T38] #0: ffff88803fd52478 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 1356.036323][ T38] 1 lock held by dhcpcd/16897: [ 1356.036337][ T38] #0: ffff88803fd502b8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 1356.036405][ T38] 1 lock held by syz-executor/16899: [ 1356.036420][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1356.036482][ T38] 1 lock held by syz-executor/16904: [ 1356.036497][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1356.036561][ T38] 4 locks held by kworker/u9:14/16911: [ 1356.036576][ T38] #0: ffff8880a7693138 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1356.036641][ T38] #1: ffffc90005adfc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1356.036702][ T38] #2: ffff888074ffc0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1356.036759][ T38] #3: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1356.036819][ T38] 1 lock held by syz-executor/16913: [ 1356.036833][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1356.036895][ T38] 4 locks held by kworker/u9:15/16915: [ 1356.036910][ T38] #0: ffff88805a955938 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1356.036975][ T38] #1: ffffc9000422fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1356.037037][ T38] #2: ffff88814ab440b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1356.037094][ T38] #3: ffffffff8f72f698 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1356.037161][ T38] 1 lock held by syz-executor/16919: [ 1356.037176][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1356.037326][ T38] 4 locks held by kworker/u9:16/16920: [ 1356.037341][ T38] #0: ffff8880690b1938 ((wq_completion)hci17){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1356.037402][ T38] #1: ffffc90004137c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1356.037464][ T38] #2: ffff88814ab44f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1356.037536][ T38] #3: ffff88814ab440b0 (&hdev->lock){+.+.}-{4:4}, at: hci_update_scan_sync+0x211/0x4f0 [ 1356.037602][ T38] 3 locks held by modprobe/16929: [ 1356.037616][ T38] #0: ffff88815dd5ba30 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1356.037751][ T38] #1: ffffffff8e9b38c0 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_objects_fill_pool+0x3b/0x80 [ 1356.037878][ T38] #2: ffff888140403758 (&n->list_lock){+.+.}-{3:3}, at: alloc_from_new_slab+0x2f7/0x4a0 [ 1356.037945][ T38] 3 locks held by dhcpcd/16932: [ 1356.037965][ T38] [ 1356.037972][ T38] ============================================= [ 1356.037972][ T38] [ 1356.037984][ T38] NMI backtrace for cpu 0 [ 1356.038006][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1356.038039][ T38] Tainted: [L]=SOFTLOCKUP [ 1356.038048][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1356.038064][ T38] Call Trace: [ 1356.038074][ T38] [ 1356.038086][ T38] dump_stack_lvl+0xe8/0x150 [ 1356.038122][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1356.038196][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1356.038269][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1356.038309][ T38] sys_info+0x135/0x170 [ 1356.038341][ T38] watchdog+0xfd7/0x1030 [ 1356.038410][ T38] ? watchdog+0x1c7/0x1030 [ 1356.038448][ T38] kthread+0x388/0x470 [ 1356.038481][ T38] ? __pfx_watchdog+0x10/0x10 [ 1356.038510][ T38] ? __pfx_kthread+0x10/0x10 [ 1356.038543][ T38] ret_from_fork+0x514/0xb70 [ 1356.038578][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1356.038611][ T38] ? __switch_to+0xc89/0x1420 [ 1356.038642][ T38] ? __pfx_kthread+0x10/0x10 [ 1356.038671][ T38] ret_from_fork_asm+0x1a/0x30 [ 1356.038721][ T38] [ 1356.038739][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1356.038778][ C1] NMI backtrace for cpu 1 [ 1356.038796][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1356.038822][ C1] Tainted: [L]=SOFTLOCKUP [ 1356.038829][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1356.038841][ C1] RIP: 0010:unwind_next_frame+0xb8a/0x2550 [ 1356.038865][ C1] Code: 80 3c 04 00 74 09 e8 c5 bf b7 00 4c 8b 04 24 49 8d 50 f8 4d 8b 6e 10 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 10 0f b6 04 01 <84> c0 0f 85 3b 14 00 00 41 83 3e 00 0f 95 c0 49 39 d7 0f 96 c1 20 [ 1356.038882][ C1] RSP: 0000:ffffc90000a3f2a0 EFLAGS: 00000246 [ 1356.038898][ C1] RAX: 0000000000000000 RBX: 1ffff92000147e6a RCX: 1ffff92000147e69 [ 1356.038912][ C1] RDX: ffffc90000a3fb48 RSI: 0000000000000002 RDI: ffffc90000a3f358 [ 1356.038927][ C1] RBP: 1ffffffff21b0673 R08: ffffc90000a3fb50 R09: 0000000000000000 [ 1356.038940][ C1] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 1ffff92000147e6b [ 1356.038954][ C1] R13: ffffc90000a40000 R14: ffffc90000a3f348 R15: ffffc90000a38000 [ 1356.038969][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 1356.038984][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1356.038997][ C1] CR2: 00007f4836adfac8 CR3: 000000015de32000 CR4: 00000000003526f0 [ 1356.039014][ C1] Call Trace: [ 1356.039021][ C1] [ 1356.039032][ C1] ? __iterate_interfaces+0x2af/0x5a0 [ 1356.039145][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1356.039165][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1356.039194][ C1] arch_stack_walk+0x11b/0x150 [ 1356.039216][ C1] ? __iterate_interfaces+0x2af/0x5a0 [ 1356.039245][ C1] stack_trace_save+0xa9/0x100 [ 1356.039272][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1356.039300][ C1] ? stack_depot_save_flags+0x33/0x800 [ 1356.039325][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 1356.039355][ C1] kasan_save_track+0x3e/0x80 [ 1356.039385][ C1] ? kasan_save_track+0x3e/0x80 [ 1356.039412][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1356.039429][ C1] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 1356.039458][ C1] ? __alloc_skb+0x276/0x7a0 [ 1356.039486][ C1] ? skb_copy+0x19d/0x870 [ 1356.039504][ C1] ? mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 1356.039632][ C1] ? mac80211_hwsim_tx_frame+0x199/0x1f0 [ 1356.039663][ C1] ? mac80211_hwsim_beacon_tx+0x396/0x820 [ 1356.039703][ C1] ? __iterate_interfaces+0x2af/0x5a0 [ 1356.039755][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1356.039774][ C1] kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 1356.039804][ C1] ? __alloc_skb+0x276/0x7a0 [ 1356.039829][ C1] ? __alloc_skb+0x276/0x7a0 [ 1356.039859][ C1] __alloc_skb+0x276/0x7a0 [ 1356.039889][ C1] skb_copy+0x19d/0x870 [ 1356.039908][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1356.039964][ C1] mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 1356.039999][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 1356.040022][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 1356.040051][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 1356.040071][ C1] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 1356.040096][ C1] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 1356.040124][ C1] mac80211_hwsim_beacon_tx+0x396/0x820 [ 1356.040147][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1356.040179][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1356.040206][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1356.040227][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1356.040258][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1356.040278][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1356.040310][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 1356.040338][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1356.040367][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 1356.040402][ C1] hrtimer_run_softirq+0x18f/0x260 [ 1356.040430][ C1] handle_softirqs+0x1d9/0x6c0 [ 1356.040458][ C1] run_ktimerd+0x69/0x100 [ 1356.040481][ C1] smpboot_thread_fn+0x57c/0xa80 [ 1356.040531][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 1356.040559][ C1] kthread+0x388/0x470 [ 1356.040584][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1356.040606][ C1] ? __pfx_kthread+0x10/0x10 [ 1356.040633][ C1] ret_from_fork+0x514/0xb70 [ 1356.040667][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1356.040693][ C1] ? __switch_to+0xc89/0x1420 [ 1356.040717][ C1] ? __pfx_kthread+0x10/0x10 [ 1356.040743][ C1] ret_from_fork_asm+0x1a/0x30 [ 1356.040780][ C1] [ 1356.041791][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1356.041815][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1356.041850][ T38] Tainted: [L]=SOFTLOCKUP [ 1356.041860][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1356.041875][ T38] Call Trace: [ 1356.041886][ T38] [ 1356.041897][ T38] vpanic+0x56c/0xa60 [ 1356.041940][ T38] ? __pfx_vpanic+0x10/0x10 [ 1356.041988][ T38] panic+0xc5/0xd0 [ 1356.042025][ T38] ? __pfx_panic+0x10/0x10 [ 1356.042066][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 1356.042093][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 1356.042143][ T38] watchdog+0x1030/0x1030 [ 1356.042188][ T38] ? watchdog+0x1c7/0x1030 [ 1356.042233][ T38] kthread+0x388/0x470 [ 1356.042268][ T38] ? __pfx_watchdog+0x10/0x10 [ 1356.042301][ T38] ? __pfx_kthread+0x10/0x10 [ 1356.042337][ T38] ret_from_fork+0x514/0xb70 [ 1356.042376][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1356.042411][ T38] ? __switch_to+0xc89/0x1420 [ 1356.042445][ T38] ? __pfx_kthread+0x10/0x10 [ 1356.042481][ T38] ret_from_fork_asm+0x1a/0x30 [ 1356.042536][ T38] [ 1356.043169][ T38] Kernel Offset: disabled