last executing test programs: 2m14.689469527s ago: executing program 1 (id=504): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x21, {0xa, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x40000) 2m14.499109664s ago: executing program 1 (id=507): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNGETIFF(r0, 0x800454d2, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80), 0x0, 0x2003, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000006800010003001000fdffff7f000001db953a11000c0002000100800015000000040004"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4008000) 2m14.332143689s ago: executing program 1 (id=510): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x1000000}, 0x10) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000180)=0x4412, 0x4) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 2m14.232489272s ago: executing program 1 (id=513): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x100000000000008) 2m13.582988143s ago: executing program 1 (id=519): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, 0x0, 0x4005) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7, 0xa}, {0xa, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4, 0xff, 0x1, 0x4}]}}}], 0x40}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2m13.211356175s ago: executing program 1 (id=527): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000580)=0xff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvfrom$packet(r1, &(0x7f0000000040)=""/173, 0xad, 0x0, 0x0, 0x0) 1m58.08754867s ago: executing program 32 (id=527): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000580)=0xff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvfrom$packet(r1, &(0x7f0000000040)=""/173, 0xad, 0x0, 0x0, 0x0) 7.132374801s ago: executing program 3 (id=1976): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f000001f900)='./file1\x00', 0x2200400, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0xfe, 0x15b, &(0x7f0000000200)="$eJzs0D1rWmEYxvH/c87jC1SxpRak0Cp0sZWCL7RbKZ5SqYM90NKlk2BPX0CxVGjdqpRuGYSsDnlZJZBPoNFASNAl+RJZ3AIZDecckxDMR7h/4/Xc93XD8/bVLK249qbZ+PnLabWcL6kPdqX08XQ4LLp5ENq7N979+VERvqMZaZh3YR+YROHrj7pj1Jp1d2xehBBg3VnmNGKX96y4pqshh7+ffgLjB96cwWrmFAh4ew81WDE/ywKLzbDfd8/P3L4zwASlgstjj0z+lzPJ+wra/czO4Oj99LD8/NlrZy1f6j2NJMzMX9jCUuGDybcTc7k1mw6wK/askM+/LGRzBi+OvcJOD/0u8hs+K9Bun4HXFyTxWH+CfwrWvVvzPRUFxhvndiN09dedP2YKVLJfqyYC29X4XQMzrd2XBbfQ/i8KIYQQQgghhBBCCCGEEEIIIYQQqy4CAAD//4/VU1E=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, 0x0, 0x0) 6.600457928s ago: executing program 3 (id=1979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r6, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x200, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x9, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0xf, 0x7, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xfffffffe, 0x2, 0xc, 0x3, 0x0, 0xffffffef, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x7, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x6, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x4, 0x800, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xfffffffc, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0x3, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x7f, 0x385, 0x400, 0x100, 0x2, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x38, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x9, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x2, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x81, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x0, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0xb, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff26, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x3, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}, @TCA_TBF_RTAB={0x404, 0x2, [0x80000000, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x2, 0x5, 0x3ff, 0x2, 0x1fc, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0x100, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x6, 0x7, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x542a73c, 0xffffffff, 0x2, 0x4, 0xb0, 0xe7, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x5, 0x3, 0x8, 0x4, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2e7, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xe, 0x6, 0x80000001, 0x2, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x4, 0x9, 0x2, 0x5, 0x8000, 0x200, 0x3, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0x0, 0x80000000, 0x0, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 6.146863753s ago: executing program 3 (id=1982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x4840) 6.057938646s ago: executing program 2 (id=1983): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000080) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 5.188190144s ago: executing program 2 (id=1988): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) socket$inet6(0xa, 0x3, 0x88) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 5.056059098s ago: executing program 3 (id=1989): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x134, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.806576166s ago: executing program 4 (id=1990): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x77) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4.248844144s ago: executing program 2 (id=1993): getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000140), &(0x7f0000000180)=0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc8, 0x2e7}]}}}, 0x8) 4.024301851s ago: executing program 3 (id=1994): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6080, 0x0) 3.973646153s ago: executing program 4 (id=1995): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009b80)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}}, 0x24}}, 0x20040054) 3.968224353s ago: executing program 2 (id=1996): shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read$FUSE(r0, 0x0, 0x0) 3.836640707s ago: executing program 5 (id=1997): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, 0x0, 0x0) dup2(r2, r0) 3.41979152s ago: executing program 5 (id=2000): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x8d9, 0x6e1, 0x80, 0x8001, 0x3, 0x1000, 0x8}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e1d, 0xffffffff, @mcast1}, 0x1c) 3.404924471s ago: executing program 4 (id=2001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r8, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x200, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x9, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0xf, 0x7, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xfffffffe, 0x2, 0xc, 0x3, 0x0, 0xffffffef, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x7, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x6, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x4, 0x800, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xfffffffc, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0x3, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x7f, 0x385, 0x400, 0x100, 0x2, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x38, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x9, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x2, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x81, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x0, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0xb, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff26, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x3, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}, @TCA_TBF_RTAB={0x404, 0x2, [0x80000000, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x2, 0x5, 0x3ff, 0x2, 0x1fc, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0x100, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x6, 0x7, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x542a73c, 0xffffffff, 0x2, 0x4, 0xb0, 0xe7, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x5, 0x3, 0x8, 0x4, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2e7, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xe, 0x6, 0x80000001, 0x2, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x4, 0x9, 0x2, 0x5, 0x8000, 0x200, 0x3, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0x0, 0x80000000, 0x0, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.7938986s ago: executing program 4 (id=2003): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x496d9d793d7b54ea) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) 2.560147368s ago: executing program 0 (id=2004): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "261fbabd4e"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 2.416146023s ago: executing program 0 (id=2005): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x12) 2.375611744s ago: executing program 5 (id=2006): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8991, 0x0) 2.044123675s ago: executing program 5 (id=2007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0xffffffffffffffff, 0x4, 0x77}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1.57647137s ago: executing program 4 (id=2008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x200, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x9, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0xf, 0x7, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xfffffffe, 0x2, 0xc, 0x3, 0x0, 0xffffffef, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x7, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x6, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x4, 0x800, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xfffffffc, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0x3, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x7f, 0x385, 0x400, 0x100, 0x2, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x38, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x9, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x2, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x81, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x0, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0xb, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff26, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x3, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}, @TCA_TBF_RTAB={0x404, 0x2, [0x80000000, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x2, 0x5, 0x3ff, 0x2, 0x1fc, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0x100, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x6, 0x7, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x542a73c, 0xffffffff, 0x2, 0x4, 0xb0, 0xe7, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x5, 0x3, 0x8, 0x4, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2e7, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xe, 0x6, 0x80000001, 0x2, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x4, 0x9, 0x2, 0x5, 0x8000, 0x200, 0x3, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0x0, 0x80000000, 0x0, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 1.297159748s ago: executing program 0 (id=2009): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000080) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 880.134372ms ago: executing program 2 (id=2010): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = epoll_create(0x3) futex(&(0x7f0000000000)=0x1, 0x6, 0x2, 0x0, 0x0, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x40000018}) r3 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r3, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x2d, 0x0, 0x10000000, 0x7, 0x4, 0x7, "47af57ce8c8e5af84d109ee7a1488bd8c3df97e87f7e771f69ced4c5de6ddeb44ee59bdfb62866129f1338dba84b5d82a121c369a6837123e849c909c16b53", 0x2d}, 0x80, 0x0}}], 0x1, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'vxcan0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), 0x0}, 0x1c) open(0x0, 0x60000, 0x82) syz_io_uring_setup(0x3b1a, &(0x7f0000000100)={0x0, 0x103f28, 0x2, 0x0, 0x2fb}, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)) eventfd(0xd4a6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000008c0100008c010000060000000000000000000009050000000f0000000000000c040000000100000000000002020000000500e9ee05000084400000001000000004000000070000000600000004000000080000000300000000000000b16900001000000004000000000001000700000002000000050000000800000008000004018000000500000005000000090000000c00000005000000060000000400000000000000060000000700000004000000f0ffffff0300000001000000010000000d00000001000000180a00000900000001000000070000000000000001000000030000000900000009000006040000000c0000000c000000050000000008000001000000ffffff7f04000000070000000500000005000000100000000500000002000000040000000f000000000000"], &(0x7f0000000480)=""/23, 0x1aa, 0x17, 0x0, 0xffffffff, 0x10000}, 0x28) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r4, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xd, 0x840) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40044146, &(0x7f0000000080)=0x9) bind$alg(r0, &(0x7f0000001740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5910f", 0x6) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000000) 870.443082ms ago: executing program 5 (id=2011): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009b80)=@newtfilter={0x34, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20040054) 711.450767ms ago: executing program 0 (id=2012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x4840) 484.417805ms ago: executing program 5 (id=2013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r8, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x200, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x9, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0xf, 0x7, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xfffffffe, 0x2, 0xc, 0x3, 0x0, 0xffffffef, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x7, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x6, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x4, 0x800, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xfffffffc, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0x3, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x7f, 0x385, 0x400, 0x100, 0x2, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x38, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x9, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x2, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x81, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x0, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0xb, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff26, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x3, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}, @TCA_TBF_RTAB={0x404, 0x2, [0x80000000, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x2, 0x5, 0x3ff, 0x2, 0x1fc, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0x100, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x6, 0x7, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x542a73c, 0xffffffff, 0x2, 0x4, 0xb0, 0xe7, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x5, 0x3, 0x8, 0x4, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2e7, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xe, 0x6, 0x80000001, 0x2, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x4, 0x9, 0x2, 0x5, 0x8000, 0x200, 0x3, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0x0, 0x80000000, 0x0, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 392.159387ms ago: executing program 4 (id=2014): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 281.157011ms ago: executing program 0 (id=2015): syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040b"], 0xe) 193.623234ms ago: executing program 3 (id=2016): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb4, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x38d301, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000240)=0x559) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet(r0, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) socket$netlink(0x10, 0x3, 0x0) 108.335147ms ago: executing program 2 (id=2017): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2018): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x11}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x86}, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 79.470549][ T4531] device syzkaller0 entered promiscuous mode [ 79.870020][ T4543] netlink: 'syz.4.106': attribute type 3 has an invalid length. [ 79.896516][ T4543] __nla_validate_parse: 2 callbacks suppressed [ 79.896534][ T4543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.106'. [ 80.273702][ T4558] device syzkaller0 entered promiscuous mode [ 80.954970][ T4586] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 81.128545][ T4590] bridge0: port 3(bond0) entered blocking state [ 81.169844][ T4590] bridge0: port 3(bond0) entered disabled state [ 81.210793][ T4590] device bond0 entered promiscuous mode [ 81.234311][ T4590] device bond_slave_0 entered promiscuous mode [ 81.244905][ T4590] device bond_slave_1 entered promiscuous mode [ 81.262276][ T4590] bridge0: port 3(bond0) entered blocking state [ 81.269235][ T4590] bridge0: port 3(bond0) entered forwarding state [ 81.385880][ T4600] device syzkaller0 entered promiscuous mode [ 81.501753][ T4605] device syzkaller0 entered promiscuous mode [ 81.555870][ T4605] tipc: Started in network mode [ 81.582385][ T4605] tipc: Node identity b2cb221e5b6b, cluster identity 4711 [ 81.614699][ T4605] tipc: Enabled bearer , priority 0 [ 81.653904][ T4603] tipc: Resetting bearer [ 81.751316][ T4603] tipc: Disabling bearer [ 82.024226][ T4231] Bluetooth: hci4: command 0x0411 tx timeout [ 82.033166][ T4631] netlink: 52 bytes leftover after parsing attributes in process `syz.3.142'. [ 82.109003][ T4631] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.117550][ T4631] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.228145][ T4633] netlink: 52 bytes leftover after parsing attributes in process `syz.3.142'. [ 82.340269][ T4643] device syzkaller0 entered promiscuous mode [ 82.548369][ T4656] device syzkaller0 entered promiscuous mode [ 82.595571][ T4656] tipc: Started in network mode [ 82.600509][ T4656] tipc: Node identity f6d906d3297d, cluster identity 4711 [ 82.608582][ T4656] tipc: Enabled bearer , priority 0 [ 82.673974][ T4655] tipc: Resetting bearer [ 82.758582][ T4655] tipc: Disabling bearer [ 82.772802][ T4664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 83.040494][ T4674] netlink: 'syz.2.156': attribute type 1 has an invalid length. [ 83.109330][ T4672] tc action pedit 'at' offset 6 out of bounds [ 83.527232][ T4699] device syzkaller0 entered promiscuous mode [ 83.823255][ T4710] device syzkaller0 entered promiscuous mode [ 83.887495][ T4710] tipc: Started in network mode [ 83.929793][ T4710] tipc: Node identity 324eb1ff7fcf, cluster identity 4711 [ 83.952866][ T4710] tipc: Enabled bearer , priority 0 [ 83.996480][ T4708] tipc: Resetting bearer [ 84.161765][ T4708] tipc: Disabling bearer [ 84.411528][ T4745] device syzkaller0 entered promiscuous mode [ 85.134659][ T4783] device syzkaller0 entered promiscuous mode [ 85.156380][ T4783] tipc: Enabled bearer , priority 0 [ 85.183026][ T4782] tipc: Resetting bearer [ 85.270789][ T4782] tipc: Disabling bearer [ 85.327159][ T4789] device syzkaller0 entered promiscuous mode [ 85.342798][ T4791] device syzkaller0 entered promiscuous mode [ 85.797864][ T4813] tipc: Enabled bearer , priority 0 [ 85.851577][ T4821] device syzkaller0 entered promiscuous mode [ 85.955731][ T4813] tipc: Resetting bearer [ 86.010646][ T4811] tipc: Resetting bearer [ 86.060990][ T4811] tipc: Disabling bearer [ 86.180071][ T4831] tipc: Enabled bearer , priority 0 [ 86.352305][ T4850] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 86.387124][ T4833] device syzkaller0 entered promiscuous mode [ 86.416929][ T4836] device syzkaller0 entered promiscuous mode [ 86.509573][ T4857] netlink: 256 bytes leftover after parsing attributes in process `syz.2.207'. [ 86.520321][ T4857] netlink: 72 bytes leftover after parsing attributes in process `syz.2.207'. [ 86.548863][ T4827] tipc: Resetting bearer [ 86.609967][ T4827] tipc: Disabling bearer [ 86.652355][ T4859] device syzkaller0 entered promiscuous mode [ 86.759231][ T13] cfg80211: failed to load regulatory.db [ 87.724241][ T21] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.875531][ T154] wlan1: Trigger new scan to find an IBSS to join [ 89.518411][ T4895] device syzkaller0 entered promiscuous mode [ 89.699429][ T4913] device syzkaller0 entered promiscuous mode [ 89.775065][ T4924] netlink: 72 bytes leftover after parsing attributes in process `syz.3.230'. [ 89.784298][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 89.986312][ T4932] device wlan0 entered promiscuous mode [ 90.009652][ T4930] netlink: 10184 bytes leftover after parsing attributes in process `syz.3.232'. [ 90.032460][ T4930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.232'. [ 90.098375][ T4938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.236'. [ 90.120384][ T4938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.236'. [ 90.132858][ T4938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.236'. [ 90.151452][ T4938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.236'. [ 90.162077][ T4938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.236'. [ 90.174768][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.186766][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.196435][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.508122][ T4952] device syzkaller0 entered promiscuous mode [ 91.137154][ T4906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.327924][ T4962] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.368554][ T4955] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 91.431972][ T4963] xt_CT: No such helper "netbios-ns" [ 91.763693][ T4982] device syzkaller0 entered promiscuous mode [ 91.797777][ T4982] tipc: Enabled bearer , priority 0 [ 91.846352][ T4988] device syzkaller0 entered promiscuous mode [ 91.877882][ T4839] wlan1: Trigger new scan to find an IBSS to join [ 91.892876][ T4981] tipc: Resetting bearer [ 91.953840][ T4981] tipc: Disabling bearer [ 92.170787][ T4997] device syzkaller0 entered promiscuous mode [ 92.410781][ T5017] netlink: 'syz.1.260': attribute type 12 has an invalid length. [ 92.433715][ T5017] netlink: 'syz.1.260': attribute type 29 has an invalid length. [ 92.458100][ T5017] __nla_validate_parse: 66 callbacks suppressed [ 92.458127][ T5017] netlink: 148 bytes leftover after parsing attributes in process `syz.1.260'. [ 92.481689][ T5017] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 92.490319][ T5017] netlink: 'syz.1.260': attribute type 2 has an invalid length. [ 92.506415][ T5017] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 92.547247][ T5020] tipc: Enabled bearer , priority 0 [ 92.599845][ T5020] tipc: Resetting bearer [ 92.632153][ T5019] tipc: Disabling bearer [ 92.671630][ T5031] netlink: 256 bytes leftover after parsing attributes in process `syz.3.266'. [ 92.710986][ T5031] netlink: 80 bytes leftover after parsing attributes in process `syz.3.266'. [ 92.722084][ T5030] device syzkaller0 entered promiscuous mode [ 92.856945][ T4852] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 92.972774][ T5042] device syzkaller0 entered promiscuous mode [ 93.021468][ T5042] tipc: Enabled bearer , priority 0 [ 93.103067][ T5041] tipc: Resetting bearer [ 93.253046][ T5041] tipc: Disabling bearer [ 93.465101][ T5065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.281'. [ 93.539675][ T5067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.282'. [ 93.711321][ T5075] device syzkaller0 entered promiscuous mode [ 94.033825][ T5087] device syzkaller0 entered promiscuous mode [ 94.057208][ T5087] tipc: Enabled bearer , priority 0 [ 94.071420][ T5086] tipc: Resetting bearer [ 94.141232][ T5086] tipc: Disabling bearer [ 94.327856][ T5101] device syzkaller0 entered promiscuous mode [ 94.611513][ T5113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.304'. [ 94.820951][ T5123] device syzkaller0 entered promiscuous mode [ 94.895444][ T5123] tipc: Enabled bearer , priority 0 [ 94.943905][ T5122] tipc: Resetting bearer [ 95.042190][ T5122] tipc: Disabling bearer [ 95.081854][ T5132] tipc: Enabled bearer , priority 0 [ 95.140455][ T5133] device syzkaller0 entered promiscuous mode [ 95.175978][ T5129] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 95.271328][ T5127] tipc: Resetting bearer [ 95.372934][ T5127] tipc: Disabling bearer [ 95.414571][ T5143] device syzkaller0 entered promiscuous mode [ 95.804617][ T5157] netlink: 14 bytes leftover after parsing attributes in process `syz.2.322'. [ 96.027316][ T5166] device syzkaller0 entered promiscuous mode [ 96.122120][ T5166] tipc: Started in network mode [ 96.154411][ T5166] tipc: Node identity cac61288f51b, cluster identity 4711 [ 96.204680][ T5166] tipc: Enabled bearer , priority 0 [ 96.227604][ T5165] tipc: Resetting bearer [ 96.285245][ T5165] tipc: Disabling bearer [ 96.496451][ T5186] device syzkaller1 entered promiscuous mode [ 96.549533][ T5191] tipc: Enabled bearer , priority 29 [ 96.960108][ T5210] syz.1.337 sent an empty control message without MSG_MORE. [ 97.041165][ T5199] device syzkaller0 entered promiscuous mode [ 97.545702][ T7] tipc: Node number set to 3752068819 [ 97.807138][ T5249] netlink: 76 bytes leftover after parsing attributes in process `syz.2.351'. [ 98.028024][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'. [ 98.095498][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 98.114327][ T5263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.356'. [ 98.167649][ T5263] device geneve2 entered promiscuous mode [ 98.177043][ T5266] device syzkaller0 entered promiscuous mode [ 98.437668][ T5279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 98.574779][ T5283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.739151][ T5293] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 99.152930][ T5308] device syzkaller0 entered promiscuous mode [ 99.626912][ T5323] device syzkaller1 entered promiscuous mode [ 99.885505][ T5346] device hsr0 entered promiscuous mode [ 100.063684][ T5345] device hsr0 left promiscuous mode [ 100.230575][ T5358] device syzkaller0 entered promiscuous mode [ 100.649730][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.403'. [ 101.127941][ T5410] device syzkaller0 entered promiscuous mode [ 101.277069][ T5416] Illegal XDP return value 4294967294, expect packet loss! [ 101.541500][ T5428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 102.303386][ T5465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'. [ 102.318063][ T5465] device vlan0 entered promiscuous mode [ 102.748196][ T5482] device syzkaller0 entered promiscuous mode [ 102.807595][ T5482] tipc: Enabled bearer , priority 0 [ 102.862169][ T5479] tipc: Resetting bearer [ 102.975717][ T5479] tipc: Disabling bearer [ 103.051187][ T5489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 103.067654][ T5489] wg1: Master is either lo or non-ether device [ 103.462639][ T5515] xt_hashlimit: size too large, truncated to 1048576 [ 103.542278][ T5515] xt_hashlimit: max too large, truncated to 1048576 [ 103.843161][ T5543] device syzkaller0 entered promiscuous mode [ 104.499619][ T5554] netlink: 192 bytes leftover after parsing attributes in process `syz.3.468'. [ 104.509579][ T5554] netlink: 44 bytes leftover after parsing attributes in process `syz.3.468'. [ 104.728649][ T5570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.475'. [ 104.738694][ T5570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.475'. [ 106.540155][ T5522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.696360][ T5583] netlink: 48 bytes leftover after parsing attributes in process `syz.4.481'. [ 106.715299][ T5585] Cannot find add_set index 2 as target [ 106.736118][ T5583] netlink: 48 bytes leftover after parsing attributes in process `syz.4.481'. [ 106.863923][ T5595] device syzkaller0 entered promiscuous mode [ 106.897266][ T5595] netem: change failed [ 106.916214][ T5595] tipc: Enabled bearer , priority 0 [ 106.954603][ T5594] tipc: Resetting bearer [ 107.022294][ T5594] tipc: Disabling bearer [ 107.061743][ T5605] device syzkaller0 entered promiscuous mode [ 107.090514][ T5605] tipc: Enabled bearer , priority 0 [ 107.133787][ T5603] tipc: Resetting bearer [ 107.190420][ T5603] tipc: Disabling bearer [ 107.217854][ T5615] netlink: 64 bytes leftover after parsing attributes in process `syz.4.492'. [ 107.296830][ T5611] device syzkaller1 entered promiscuous mode [ 107.311531][ T5617] sctp: [Deprecated]: syz.2.495 (pid 5617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.311531][ T5617] Use struct sctp_sack_info instead [ 107.430543][ T5622] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.105508][ T5648] tipc: Enabled bearer , priority 0 [ 108.343163][ T5656] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.510'. [ 109.005453][ T5686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 109.137152][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 109.177062][ T5695] device hsr_slave_0 left promiscuous mode [ 109.230124][ T5695] device hsr_slave_1 left promiscuous mode [ 109.318890][ T23] tipc: Node number set to 3061462125 [ 109.486103][ T5717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.525'. [ 109.791810][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.800805][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.810768][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.198504][ T5751] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 110.208097][ T5751] netlink: 'syz.4.538': attribute type 2 has an invalid length. [ 110.430831][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.824691][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.027613][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.037765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.207294][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.552'. [ 111.866718][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.926691][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 112.846981][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.904577][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.102757][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 114.984770][ T4231] net_ratelimit: 4 callbacks suppressed [ 114.984839][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.196038][ T5929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.595'. [ 115.393804][ T5938] raw_sendmsg: syz.4.598 forgot to set AF_INET. Fix it! [ 115.503200][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.512310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.866717][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.025859][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.184622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.768298][ T5990] device syzkaller0 entered promiscuous mode [ 117.070082][ T1865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.110045][ T1865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.248224][ T6034] device hsr0 entered promiscuous mode [ 118.396026][ T6037] device syzkaller0 entered promiscuous mode [ 118.496223][ T5770] Set syz1 is full, maxelem 65536 reached [ 118.627718][ T4203] Bluetooth: hci4: link tx timeout [ 118.633283][ T4203] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.912836][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.434836][ T6072] device syzkaller0 entered promiscuous mode [ 119.753350][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 120.002255][ T6090] netlink: 164 bytes leftover after parsing attributes in process `syz.0.647'. [ 120.030869][ T7] net_ratelimit: 1 callbacks suppressed [ 120.030888][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.148905][ T6095] device syzkaller0 entered promiscuous mode [ 120.184996][ T1865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.215697][ T6095] 0: reclassify loop, rule prio 0, protocol 700 [ 120.329679][ T6103] device syzkaller0 entered promiscuous mode [ 120.374019][ T6103] tipc: Enabled bearer , priority 0 [ 120.438269][ T6102] tipc: Resetting bearer [ 120.488839][ T6102] tipc: Disabling bearer [ 120.534629][ T6105] device syzkaller0 entered promiscuous mode [ 120.664420][ T4231] Bluetooth: hci4: command 0x0406 tx timeout [ 121.232314][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.273492][ T6137] device syzkaller0 entered promiscuous mode [ 121.363773][ T6137] tipc: Enabled bearer , priority 0 [ 121.430186][ T6136] tipc: Resetting bearer [ 121.495861][ T6136] tipc: Disabling bearer [ 121.954387][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.007527][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.014783][ T6161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.023219][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.030433][ T6161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.165475][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.266535][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.667475][ T6179] device syzkaller0 entered promiscuous mode [ 122.755430][ T6181] tipc: Enabling of bearer rejected, already enabled [ 123.304420][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.544237][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 123.651059][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.691'. [ 123.987049][ T6214] device syzkaller0 entered promiscuous mode [ 124.036371][ T6214] tipc: Enabled bearer , priority 0 [ 124.066622][ T6213] tipc: Resetting bearer [ 124.145718][ T6213] tipc: Disabling bearer [ 124.372385][ T1865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.994596][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.309724][ T6238] chnl_net:caif_netlink_parms(): no params data found [ 125.384551][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.634890][ T6255] device syzkaller0 entered promiscuous mode [ 125.652074][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.661761][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.679896][ T6238] device bridge_slave_0 entered promiscuous mode [ 125.697468][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.713766][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.723249][ T6238] device bridge_slave_1 entered promiscuous mode [ 125.781939][ T6238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.803313][ T6238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.849753][ T6238] team0: Port device team_slave_0 added [ 125.891552][ T4839] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.902501][ T4839] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.932768][ T6238] team0: Port device team_slave_1 added [ 125.958689][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.966045][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.992646][ T6238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.011110][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.018964][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.047446][ T6238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.076993][ T4839] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.087713][ T4839] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.132039][ T6238] device hsr_slave_0 entered promiscuous mode [ 126.143061][ T6238] device hsr_slave_1 entered promiscuous mode [ 126.153326][ T6238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.167890][ T6238] Cannot create hsr debugfs directory [ 126.202213][ T4839] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.217857][ T4839] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.322392][ T4839] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.341218][ T4839] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.425382][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.632168][ T4839] tipc: Left network mode [ 126.904252][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 127.400098][ T4839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.410080][ T4839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.426718][ T4839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.441680][ T4839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.449805][ T4839] device bridge_slave_1 left promiscuous mode [ 127.464720][ T4839] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.464889][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.499037][ T4839] device bridge_slave_0 left promiscuous mode [ 127.512240][ T4839] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.557567][ T4839] device veth1_macvtap left promiscuous mode [ 127.573485][ T4839] device veth0_macvtap left promiscuous mode [ 127.579919][ T4839] device veth1_vlan left promiscuous mode [ 127.597593][ T4839] device veth0_vlan left promiscuous mode [ 127.750405][ T6230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.032317][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.193520][ T4839] team0 (unregistering): Port device team_slave_1 removed [ 128.221496][ T4839] team0 (unregistering): Port device team_slave_0 removed [ 128.242140][ T4839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.262959][ T4839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.450406][ T4839] bond0 (unregistering): Released all slaves [ 128.504466][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.543383][ T6238] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.566557][ T6259] netlink: 36 bytes leftover after parsing attributes in process `syz.4.708'. [ 128.608917][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.647717][ T6264] device bond0 left promiscuous mode [ 128.653093][ T6264] device bond_slave_0 left promiscuous mode [ 128.684447][ T6264] device bond_slave_1 left promiscuous mode [ 128.690746][ T6264] bridge0: port 3(bond0) entered disabled state [ 128.722849][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.746908][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.762186][ T6264] device bridge_slave_0 left promiscuous mode [ 128.768779][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.791349][ T6264] device bridge_slave_1 left promiscuous mode [ 128.806283][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.829314][ T6264] bond0: (slave bond_slave_0): Releasing backup interface [ 128.851143][ T6264] bond0: (slave bond_slave_1): Releasing backup interface [ 128.923861][ T6264] team0: Port device team_slave_0 removed [ 128.968806][ T6264] team0: Port device team_slave_1 removed [ 128.986647][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.011526][ T1865] Bluetooth: hci5: command 0x041b tx timeout [ 129.019135][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.053141][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.061014][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.080518][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.709'. [ 129.109510][ T6238] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.137834][ T6238] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.175516][ T6238] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.373346][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 129.430109][ T6284] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 129.440622][ T6289] device syzkaller0 entered promiscuous mode [ 129.456905][ T6287] device syzkaller0 entered promiscuous mode [ 129.510403][ T6289] tipc: Enabled bearer , priority 0 [ 129.577685][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.650614][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.693881][ T6288] tipc: Resetting bearer [ 129.772605][ T6288] tipc: Disabling bearer [ 129.919872][ T6238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.974642][ T6307] tipc: Enabled bearer , priority 0 [ 130.022099][ T6238] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.032122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.041393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.076008][ T6306] tipc: Disabling bearer [ 130.144905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.170579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.206667][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.213907][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.274636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.303814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.333481][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.340861][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.389773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.439756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.465747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.504226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.513392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.570879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.586952][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.634739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.656608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.708981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.752626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.795650][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.832022][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.878114][ T6238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.907293][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.997117][ T6340] device syzkaller0 entered promiscuous mode [ 131.064405][ T4231] Bluetooth: hci5: command 0x040f tx timeout [ 131.079018][ T6347] device syzkaller0 entered promiscuous mode [ 131.098349][ T6340] tipc: Enabled bearer , priority 0 [ 131.256353][ T6339] tipc: Resetting bearer [ 131.304819][ T6339] tipc: Disabling bearer [ 131.381456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.406214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.451056][ T6238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.569883][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.624885][ T6362] device syzkaller0 entered promiscuous mode [ 131.631122][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.037140][ T6382] tipc: Enabling of bearer rejected, already enabled [ 132.117051][ T6382] tipc: Resetting bearer [ 132.195300][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.267931][ T6393] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.361781][ T6398] device syzkaller0 entered promiscuous mode [ 132.457280][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.483496][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.542469][ T6398] tipc: Enabled bearer , priority 0 [ 132.572185][ T6238] device veth0_vlan entered promiscuous mode [ 132.592458][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.645534][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.668718][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.677772][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.695239][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.712354][ T6391] tipc: Resetting bearer [ 132.744522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.758777][ T6391] tipc: Disabling bearer [ 132.804415][ T6238] device veth1_vlan entered promiscuous mode [ 132.828095][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.840020][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.010330][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.031908][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.079721][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.111056][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.135646][ T6411] device syzkaller0 entered promiscuous mode [ 133.145059][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 133.192435][ T6238] device veth0_macvtap entered promiscuous mode [ 133.312006][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.349920][ T6238] device veth1_macvtap entered promiscuous mode [ 133.506542][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.569771][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.605744][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.642112][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.670674][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.704676][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.709782][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.766371][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.792675][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.823825][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.954651][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.021322][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.051572][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.069670][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.092979][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.116499][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.138414][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.165030][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.196444][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.214610][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.256752][ T6238] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.285161][ T6238] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.304169][ T6238] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.315375][ T6238] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.651157][ T6475] device syzkaller0 entered promiscuous mode [ 135.070107][ T6493] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.115418][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 135.152598][ T6495] device syzkaller0 entered promiscuous mode [ 135.784860][ T1865] net_ratelimit: 3 callbacks suppressed [ 135.784879][ T1865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.674717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.825180][ T1865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.984654][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.279784][ T6462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.403341][ T4839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.411644][ T4839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.448383][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.537670][ T4839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.568108][ T4839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.593496][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.678275][ T6549] device syzkaller0 entered promiscuous mode [ 137.727862][ T6549] tipc: Enabled bearer , priority 0 [ 137.792708][ T6546] tipc: Resetting bearer [ 137.827026][ T6546] tipc: Disabling bearer [ 137.864397][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.911665][ T6561] tipc: Enabling of bearer rejected, already enabled [ 138.080662][ T6572] device syzkaller0 entered promiscuous mode [ 138.249532][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.802'. [ 138.260413][ T6582] device veth0_macvtap left promiscuous mode [ 138.306365][ T6580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.801'. [ 138.334995][ T6580] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.372408][ T6585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.801'. [ 138.395328][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.802'. [ 138.546126][ T144] tipc: Resetting bearer [ 138.562315][ T6591] device syzkaller0 left promiscuous mode [ 138.593908][ T6591] tipc: Resetting bearer [ 138.796745][ T6603] device syzkaller0 entered promiscuous mode [ 138.866777][ T6603] tipc: Enabled bearer , priority 0 [ 138.882353][ T6608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.904635][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.940752][ T6602] tipc: Resetting bearer [ 138.985606][ T6602] tipc: Disabling bearer [ 139.178555][ T6617] device syzkaller0 entered promiscuous mode [ 139.224722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.264168][ T6617] tipc: Resetting bearer [ 139.301408][ T6627] netlink: 'syz.0.814': attribute type 1 has an invalid length. [ 139.387972][ T6617] netlink: 'syz.0.814': attribute type 2 has an invalid length. [ 139.442109][ T6630] tipc: Enabled bearer , priority 0 [ 139.452874][ T6638] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.467250][ T6630] device syzkaller0 entered promiscuous mode [ 139.579919][ T6630] tipc: Resetting bearer [ 139.648005][ T6628] tipc: Resetting bearer [ 139.737490][ T6628] tipc: Disabling bearer [ 139.944466][ T1865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.038078][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.073904][ T6671] device syzkaller0 entered promiscuous mode [ 140.082499][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'. [ 140.119497][ T6671] tipc: Started in network mode [ 140.144162][ T6671] tipc: Node identity f66c158c7d9f, cluster identity 4711 [ 140.160438][ T6671] tipc: Enabled bearer , priority 0 [ 140.173999][ T6670] tipc: Resetting bearer [ 140.233672][ T6670] tipc: Disabling bearer [ 140.987952][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.002014][ T6728] netlink: 'syz.0.845': attribute type 2 has an invalid length. [ 141.155669][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.768834][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 141.778244][ T6741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.850'. [ 141.788478][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.802090][ T6741] device bridge1 entered promiscuous mode [ 141.934259][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.853'. [ 142.028402][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.076251][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.146477][ T6675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.344807][ T6764] netlink: 'syz.0.868': attribute type 2 has an invalid length. [ 143.354845][ T6764] tipc: Enabling of bearer rejected, already enabled [ 144.105353][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.184538][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.155307][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.184518][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.316601][ T6765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.505135][ T6796] netlink: 76 bytes leftover after parsing attributes in process `syz.4.867'. [ 146.558246][ T6798] netlink: 64 bytes leftover after parsing attributes in process `syz.0.869'. [ 146.595444][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.870'. [ 146.644832][ T6798] device syzkaller1 entered promiscuous mode [ 147.152298][ T6839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.882'. [ 147.232441][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.241077][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.267404][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.497759][ T6847] device syzkaller0 entered promiscuous mode [ 147.580865][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.888'. [ 147.792865][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'. [ 147.995129][ T6885] device syzkaller1 left promiscuous mode [ 148.265088][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.467474][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 148.656221][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 149.115405][ T6937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.327684][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.097441][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'. [ 150.275490][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.344398][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.350311][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 150.384325][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 150.628620][ T6991] device syzkaller0 entered promiscuous mode [ 150.646892][ T6991] tipc: Enabled bearer , priority 0 [ 150.656753][ T6990] tipc: Resetting bearer [ 150.720062][ T6990] tipc: Disabling bearer [ 150.767348][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 150.809099][ T4203] Bluetooth: hci4: link tx timeout [ 150.816869][ T4203] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 150.824913][ T4203] Bluetooth: hci4: link tx timeout [ 150.830080][ T4203] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.847596][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.935'. [ 150.937807][ T7007] tipc: Enabled bearer , priority 0 [ 150.946569][ T7007] device syzkaller0 entered promiscuous mode [ 150.973578][ T7007] tipc: Resetting bearer [ 150.981146][ T7006] tipc: Resetting bearer [ 151.022192][ T7006] tipc: Disabling bearer [ 151.391562][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.399841][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.796680][ T7052] device syzkaller0 entered promiscuous mode [ 152.043284][ T7067] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.050834][ T7067] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.281481][ T7077] __nla_validate_parse: 2 callbacks suppressed [ 152.281497][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 152.391033][ T7079] tipc: Enabled bearer , priority 0 [ 152.406889][ T7078] tipc: Disabling bearer [ 152.425360][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.770280][ T7108] tipc: Enabling of bearer rejected, already enabled [ 152.909226][ T4231] Bluetooth: hci4: command 0x0406 tx timeout [ 153.237280][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.979'. [ 153.314703][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.464591][ T1865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.482493][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 153.555964][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.986'. [ 153.562379][ T7164] netlink: 'syz.4.988': attribute type 18 has an invalid length. [ 153.579617][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 153.775132][ T7173] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.992'. [ 153.795439][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.992'. [ 154.092133][ T7174] crypto_alloc_aead failed rc=-4 [ 154.232375][ T7203] tipc: Enabling of bearer rejected, already enabled [ 154.519123][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.662630][ T7226] device syzkaller0 entered promiscuous mode [ 155.544971][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.672484][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1022'. [ 156.069420][ T7351] tipc: Enabling of bearer rejected, already enabled [ 156.207099][ T7357] device syzkaller0 entered promiscuous mode [ 156.233661][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1032'. [ 156.355157][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.453255][ T7365] device syzkaller0 entered promiscuous mode [ 156.519442][ T7365] tipc: Enabled bearer , priority 0 [ 156.577032][ T7364] tipc: Resetting bearer [ 156.584495][ T1865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.688871][ T7364] tipc: Disabling bearer [ 156.738942][ T7388] tipc: Enabled bearer , priority 0 [ 156.779058][ T7387] tipc: Disabling bearer [ 157.590859][ T7422] tipc: Enabling of bearer rejected, already enabled [ 157.625140][ T1865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.431582][ T7459] device syzkaller0 entered promiscuous mode [ 158.513155][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1070'. [ 158.664406][ T1865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.759425][ T7466] device syzkaller0 entered promiscuous mode [ 159.332293][ T7495] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.384631][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.704799][ T1865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.982140][ T7510] device syzkaller0 entered promiscuous mode [ 160.391074][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1091'. [ 160.744302][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.943802][ T7548] device syzkaller0 entered promiscuous mode [ 160.995724][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.046085][ T7443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.257050][ T7554] device syzkaller0 entered promiscuous mode [ 161.396171][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 161.475418][ T7] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 161.785010][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.895856][ T7588] tipc: Enabled bearer , priority 0 [ 161.944872][ T7588] device syzkaller0 entered promiscuous mode [ 162.023713][ T7588] tipc: Resetting bearer [ 162.082733][ T7587] tipc: Resetting bearer [ 162.164697][ T7587] tipc: Disabling bearer [ 162.300033][ T7601] device syzkaller0 entered promiscuous mode [ 162.434644][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.473339][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1115'. [ 162.830333][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.199027][ T7643] tipc: Enabled bearer , priority 0 [ 163.237759][ T7643] device syzkaller0 entered promiscuous mode [ 163.348088][ T7643] tipc: Resetting bearer [ 163.417469][ T7640] tipc: Resetting bearer [ 163.489203][ T7640] tipc: Disabling bearer [ 163.718271][ T7664] device syzkaller0 entered promiscuous mode [ 163.870129][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.181082][ T7691] tipc: Enabling of bearer rejected, already enabled [ 164.375441][ T7699] device syzkaller1 entered promiscuous mode [ 164.656678][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1144'. [ 164.729139][ T7716] device syzkaller0 entered promiscuous mode [ 164.816743][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1144'. [ 164.894802][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.906406][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.924659][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.944278][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.974402][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.018712][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.064123][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.104142][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.154453][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.478899][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.944811][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.110302][ T7773] device syzkaller0 entered promiscuous mode [ 166.485632][ T7799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.677309][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 166.992899][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 167.067723][ T7825] device syzkaller0 entered promiscuous mode [ 167.767111][ T7879] device syzkaller0 entered promiscuous mode [ 167.789423][ T7878] device syzkaller0 entered promiscuous mode [ 167.895998][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 167.984712][ T7892] tipc: Resetting bearer [ 168.287951][ T7915] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 168.396689][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1206'. [ 168.446267][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 168.616998][ T7928] device syzkaller0 entered promiscuous mode [ 169.074009][ T7944] device syzkaller0 entered promiscuous mode [ 169.470817][ T7956] device syzkaller0 entered promiscuous mode [ 169.575380][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 169.593166][ T7958] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1222'. [ 169.996754][ T7976] device ipip0 entered promiscuous mode [ 170.004540][ T7976] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 170.016684][ T7976] bond1: (slave ipip0): Error -95 calling set_mac_address [ 170.396314][ T7847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.572066][ T7988] tipc: Resetting bearer [ 170.703669][ T7996] device syzkaller0 entered promiscuous mode [ 171.037598][ T8017] device syzkaller0 entered promiscuous mode [ 171.062957][ T8017] tipc: Enabled bearer , priority 0 [ 171.171881][ T8016] tipc: Resetting bearer [ 171.213278][ T8023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1245'. [ 171.251395][ T8016] tipc: Disabling bearer [ 171.473464][ T8031] device syzkaller0 entered promiscuous mode [ 171.586832][ T8035] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1250'. [ 171.624400][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'. [ 171.688973][ T8042] device syzkaller0 entered promiscuous mode [ 172.075828][ T8059] device syzkaller0 entered promiscuous mode [ 172.260725][ T8076] device syzkaller0 entered promiscuous mode [ 172.297071][ T8075] tipc: Enabled bearer , priority 0 [ 172.422230][ T8075] device syzkaller0 entered promiscuous mode [ 172.464731][ T8084] tipc: Resetting bearer [ 172.487295][ T8073] tipc: Resetting bearer [ 172.534138][ T8073] tipc: Disabling bearer [ 172.570726][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1267'. [ 173.061763][ T8120] device syzkaller0 entered promiscuous mode [ 173.110659][ T8120] tipc: Enabled bearer , priority 0 [ 173.199358][ T8118] tipc: Resetting bearer [ 173.314380][ T8118] tipc: Disabling bearer [ 173.328719][ T8136] device syzkaller0 entered promiscuous mode [ 173.571781][ T8147] tipc: Enabled bearer , priority 0 [ 173.612428][ T8147] device syzkaller0 entered promiscuous mode [ 173.683139][ T8147] tipc: Resetting bearer [ 173.719771][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1285'. [ 173.739229][ T8145] tipc: Resetting bearer [ 173.789056][ T8145] tipc: Disabling bearer [ 173.830555][ T8155] tipc: Enabled bearer , priority 0 [ 174.045301][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1287'. [ 174.142536][ T8155] device syzkaller0 entered promiscuous mode [ 174.200700][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1291'. [ 174.245922][ T8151] infiniband syz1: set active [ 174.262836][ T8151] infiniband syz1: added bond0 [ 174.277184][ T8154] tipc: Resetting bearer [ 174.356342][ T8154] tipc: Disabling bearer [ 174.512102][ T8185] device syzkaller0 entered promiscuous mode [ 174.521292][ T8151] RDS/IB: syz1: added [ 174.553928][ T8151] smc: adding ib device syz1 with port count 1 [ 174.601097][ T8151] smc: ib device syz1 port 1 has pnetid [ 175.319412][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1304'. [ 175.875185][ T8259] device syzkaller0 entered promiscuous mode [ 176.008102][ T8266] tipc: Enabled bearer , priority 0 [ 176.035138][ T8266] device syzkaller0 entered promiscuous mode [ 176.104794][ T8266] tipc: Resetting bearer [ 176.145471][ T8265] tipc: Resetting bearer [ 176.187495][ T8275] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1317'. [ 176.205436][ T8265] tipc: Disabling bearer [ 176.429416][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 176.733838][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1324'. [ 176.852816][ T8304] device syzkaller0 entered promiscuous mode [ 177.341346][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 177.660793][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1341'. [ 177.851991][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1347'. [ 178.050697][ T8361] tipc: Enabled bearer , priority 0 [ 178.090808][ T8361] tipc: Resetting bearer [ 178.133417][ T8359] tipc: Disabling bearer [ 178.154270][ T8363] tipc: Enabled bearer , priority 0 [ 178.202132][ T8363] device syzkaller0 entered promiscuous mode [ 178.362252][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 178.393338][ T8362] tipc: Resetting bearer [ 178.498919][ T8362] tipc: Disabling bearer [ 178.527620][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1358'. [ 178.647675][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 178.841341][ T8394] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1366'. [ 178.887627][ T8397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1368'. [ 179.128469][ T8409] tipc: Enabling of bearer rejected, already enabled [ 179.389175][ T8423] tipc: Enabling of bearer rejected, already enabled [ 179.998653][ T8458] device bridge_slave_1 entered promiscuous mode [ 180.789160][ T8513] device syzkaller0 entered promiscuous mode [ 180.843490][ T8513] tipc: Enabled bearer , priority 0 [ 180.865300][ T8511] tipc: Enabled bearer , priority 0 [ 180.881296][ T8509] tipc: Resetting bearer [ 180.927101][ T8509] tipc: Disabling bearer [ 180.943633][ T8511] syzkaller0: MTU too low for tipc bearer [ 180.949798][ T8511] tipc: Disabling bearer [ 181.527458][ T8561] __nla_validate_parse: 12 callbacks suppressed [ 181.527476][ T8561] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1422'. [ 181.710926][ T8570] netlink: 'syz.2.1425': attribute type 2 has an invalid length. [ 181.723291][ T8570] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1425'. [ 181.883138][ T8568] device syzkaller0 entered promiscuous mode [ 181.949062][ T8583] device syzkaller0 entered promiscuous mode [ 181.994013][ T8571] tipc: Enabled bearer , priority 0 [ 182.148393][ T8566] tipc: Resetting bearer [ 182.301866][ T8566] tipc: Disabling bearer [ 183.274530][ T8640] device syzkaller0 entered promiscuous mode [ 183.525358][ T8664] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1453'. [ 183.596398][ T8666] device syzkaller0 entered promiscuous mode [ 183.662561][ T8674] tipc: Enabled bearer , priority 0 [ 183.803808][ T8665] tipc: Resetting bearer [ 183.891914][ T8665] tipc: Disabling bearer [ 184.190540][ T8703] device syzkaller0 entered promiscuous mode [ 184.577937][ T8730] device syzkaller0 entered promiscuous mode [ 184.905117][ T8749] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1478'. [ 185.028735][ T8754] device syzkaller0 entered promiscuous mode [ 185.167198][ T8760] tipc: Enabling of bearer rejected, already enabled [ 185.399246][ T8776] netlink: 'syz.3.1488': attribute type 29 has an invalid length. [ 185.453213][ T8782] netlink: 'syz.2.1490': attribute type 10 has an invalid length. [ 185.472301][ T8782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1490'. [ 185.483952][ T8782] device team0 entered promiscuous mode [ 185.492415][ T8782] device team_slave_0 entered promiscuous mode [ 185.499448][ T8782] device team_slave_1 entered promiscuous mode [ 185.507317][ T8782] bridge0: port 3(team0) entered blocking state [ 185.526287][ T8782] bridge0: port 3(team0) entered disabled state [ 185.555979][ T8782] bridge0: port 3(team0) entered blocking state [ 185.562439][ T8782] bridge0: port 3(team0) entered forwarding state [ 185.599095][ T8776] netlink: 'syz.3.1488': attribute type 29 has an invalid length. [ 185.623311][ T8784] netlink: 'syz.3.1488': attribute type 29 has an invalid length. [ 185.799596][ T8797] netlink: 'syz.3.1495': attribute type 29 has an invalid length. [ 185.852080][ T8797] netlink: 'syz.3.1495': attribute type 29 has an invalid length. [ 185.866223][ T8800] netlink: 'syz.3.1495': attribute type 29 has an invalid length. [ 185.883154][ T8799] device syzkaller0 entered promiscuous mode [ 185.908744][ T8797] netlink: 'syz.3.1495': attribute type 29 has an invalid length. [ 186.016677][ T8800] netlink: 'syz.3.1495': attribute type 29 has an invalid length. [ 186.062604][ T8804] tipc: Enabled bearer , priority 0 [ 186.110935][ T8803] tipc: Disabling bearer [ 186.418473][ T8824] team0: Port device dummy0 added [ 186.615285][ T8844] device syzkaller0 entered promiscuous mode [ 187.460470][ T8890] validate_nla: 1 callbacks suppressed [ 187.460488][ T8890] netlink: 'syz.4.1528': attribute type 10 has an invalid length. [ 187.526128][ T8890] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 187.573116][ T8896] device syzkaller0 entered promiscuous mode [ 187.602966][ T8894] tipc: Enabled bearer , priority 0 [ 187.625820][ T8891] tipc: Resetting bearer [ 187.673402][ T8891] tipc: Disabling bearer [ 187.683786][ T8898] netlink: 'syz.2.1531': attribute type 21 has an invalid length. [ 187.986477][ T8917] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1538'. [ 188.032509][ T8917] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1538'. [ 188.064725][ T8917] bond0: (slave bond_slave_0): Releasing backup interface [ 188.096593][ T8917] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 188.135787][ T8920] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1539'. [ 188.155288][ T8921] device syzkaller0 entered promiscuous mode [ 188.312426][ T8923] device syzkaller0 entered promiscuous mode [ 188.686301][ T8942] device syzkaller0 entered promiscuous mode [ 189.025082][ T8952] netlink: 'syz.5.1553': attribute type 29 has an invalid length. [ 189.043982][ T8952] netlink: 'syz.5.1553': attribute type 29 has an invalid length. [ 189.058148][ T8953] device syzkaller0 entered promiscuous mode [ 189.068210][ T8952] netlink: 'syz.5.1553': attribute type 29 has an invalid length. [ 189.080622][ T8952] netlink: 'syz.5.1553': attribute type 29 has an invalid length. [ 189.137369][ T8952] netlink: 'syz.5.1553': attribute type 29 has an invalid length. [ 189.219431][ T8955] device syzkaller0 entered promiscuous mode [ 189.492075][ T8968] device syzkaller0 entered promiscuous mode [ 189.756013][ T8978] device syzkaller0 entered promiscuous mode [ 189.826121][ T8982] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.1567'. [ 189.844222][ T8982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1567'. [ 190.054622][ T8990] device syzkaller0 entered promiscuous mode [ 190.503972][ T9010] netlink: 'syz.4.1581': attribute type 2 has an invalid length. [ 190.553101][ T9010] netlink: 'syz.4.1581': attribute type 8 has an invalid length. [ 190.582445][ T9010] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1581'. [ 190.841502][ T9025] device syzkaller0 entered promiscuous mode [ 191.001356][ T9032] tipc: Enabled bearer , priority 0 [ 191.021500][ T9031] tipc: Disabling bearer [ 191.032151][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1592'. [ 191.047146][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1592'. [ 191.060569][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1592'. [ 191.151829][ T9036] netlink: 'syz.5.1593': attribute type 33 has an invalid length. [ 191.193863][ T9036] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1593'. [ 191.217594][ T9038] device syzkaller0 entered promiscuous mode [ 191.224428][ T4231] Bluetooth: hci2: command 0x0406 tx timeout [ 191.234309][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 191.700638][ T9055] tipc: Enabled bearer , priority 0 [ 191.739444][ T9054] tipc: Disabling bearer [ 191.980225][ T9069] device syzkaller0 entered promiscuous mode [ 192.641609][ T9104] netlink: 'syz.2.1622': attribute type 29 has an invalid length. [ 192.658826][ T9104] netlink: 'syz.2.1622': attribute type 29 has an invalid length. [ 192.680247][ T9104] netlink: 'syz.2.1622': attribute type 29 has an invalid length. [ 192.709302][ T9104] netlink: 'syz.2.1622': attribute type 29 has an invalid length. [ 192.892412][ T9114] device syzkaller0 entered promiscuous mode [ 193.104371][ T4231] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 193.140093][ T9120] device syzkaller0 entered promiscuous mode [ 193.149219][ T9121] tipc: Enabled bearer , priority 0 [ 193.194942][ T9119] tipc: Resetting bearer [ 193.251678][ T9119] tipc: Disabling bearer [ 193.364209][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 193.389020][ T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 193.438032][ T9136] __nla_validate_parse: 3 callbacks suppressed [ 193.438052][ T9136] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1634'. [ 193.464416][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 193.494719][ T4231] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 193.494848][ T4231] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.494873][ T4231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.494899][ T4231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.494925][ T4231] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.494976][ T4231] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.495002][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.664312][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 193.814472][ T4231] usb 5-1: usb_control_msg returned -32 [ 193.822772][ T4231] usbtmc 5-1:16.0: can't read capabilities [ 193.874337][ T13] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 193.882870][ T13] usb 6-1: config 0 has an invalid interface number: 98 but max is 1 [ 194.057100][ T13] usb 6-1: config 0 has no interface number 0 [ 194.063363][ T13] usb 6-1: config 0 has no interface number 1 [ 194.089831][ T4231] usb 5-1: USB disconnect, device number 2 [ 194.254598][ T13] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 194.265369][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.274352][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.280732][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.296513][ T13] usb 6-1: Product: syz [ 194.300896][ T13] usb 6-1: Manufacturer: syz [ 194.305686][ T13] usb 6-1: SerialNumber: syz [ 194.315093][ T13] usb 6-1: config 0 descriptor?? [ 194.342984][ T9155] loop0: detected capacity change from 0 to 2048 [ 194.447558][ T9158] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.514197][ T13] viperboard 6-1:0.61: version 0.00 found at bus 006 address 002 [ 194.594605][ T13] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 194.603691][ T13] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 194.680829][ T9160] device syzkaller0 entered promiscuous mode [ 194.687175][ T13] viperboard 6-1:0.98: version 0.00 found at bus 006 address 002 [ 194.762520][ T9160] tipc: Enabled bearer , priority 0 [ 194.782020][ T9159] tipc: Resetting bearer [ 194.789975][ T13] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 194.801108][ T13] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 194.827378][ T13] usb 6-1: USB disconnect, device number 2 [ 194.868766][ T9165] loop4: detected capacity change from 0 to 256 [ 195.003575][ T9165] FAT-fs (loop4): Directory bread(block 64) failed [ 195.043962][ T9165] FAT-fs (loop4): Directory bread(block 65) failed [ 195.060132][ T9159] tipc: Disabling bearer [ 195.089656][ T9165] FAT-fs (loop4): Directory bread(block 66) failed [ 195.113828][ T9165] FAT-fs (loop4): Directory bread(block 67) failed [ 195.164531][ T9165] FAT-fs (loop4): Directory bread(block 68) failed [ 195.180347][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 195.206881][ T9165] FAT-fs (loop4): Directory bread(block 69) failed [ 195.239578][ T9165] FAT-fs (loop4): Directory bread(block 70) failed [ 195.271985][ T9165] FAT-fs (loop4): Directory bread(block 71) failed [ 195.318990][ T9165] FAT-fs (loop4): Directory bread(block 72) failed [ 195.344361][ T9165] FAT-fs (loop4): Directory bread(block 73) failed [ 195.805180][ T9197] tipc: Enabled bearer , priority 0 [ 195.836058][ T9196] tipc: Disabling bearer [ 196.098538][ T9205] loop4: detected capacity change from 0 to 4096 [ 196.135514][ T9205] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 196.568402][ T9220] tipc: Enabling of bearer rejected, already enabled [ 196.649415][ T9220] syzkaller0: mtu less than device minimum [ 196.869012][ T9234] tipc: Enabled bearer , priority 0 [ 196.953738][ T9232] tipc: Disabling bearer [ 197.359297][ T9251] tipc: Enabled bearer , priority 0 [ 197.395068][ T9248] tipc: Disabling bearer [ 197.440003][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 197.518441][ T9256] device syzkaller0 entered promiscuous mode [ 197.854719][ T13] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.883916][ T13] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 197.928652][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.978899][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 198.036406][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 198.214523][ T13] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.233016][ T13] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.252340][ T13] usb 1-1: Product: syz [ 198.280459][ T13] usb 1-1: Manufacturer: syz [ 198.294584][ T9278] tipc: Enabled bearer , priority 0 [ 198.341768][ T9277] tipc: Disabling bearer [ 198.370200][ T13] cdc_wdm 1-1:1.0: skipping garbage [ 198.379194][ T13] cdc_wdm 1-1:1.0: skipping garbage [ 198.413648][ T13] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 198.445970][ T13] cdc_wdm 1-1:1.0: Unknown control protocol [ 198.794704][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 199.393045][ T9296] device syzkaller0 entered promiscuous mode [ 199.685846][ T9301] device syzkaller0 entered promiscuous mode [ 199.720421][ T9304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 199.979262][ T9309] tipc: Enabled bearer , priority 0 [ 200.028274][ T9308] tipc: Disabling bearer [ 200.177505][ T4273] usb 1-1: USB disconnect, device number 2 [ 200.602406][ T9326] device syzkaller0 entered promiscuous mode [ 200.834226][ T4273] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 200.882895][ T9337] tipc: Enabled bearer , priority 0 [ 200.908801][ T9335] tipc: Disabling bearer [ 201.024195][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 201.274249][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 201.284373][ T4273] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.344808][ T4273] usb 1-1: not running at top speed; connect to a high speed hub [ 201.361646][ T9357] team0: No ports can be present during mode change [ 201.404354][ T4231] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 201.424819][ T4231] usb 4-1: config 0 has no interface number 0 [ 201.433535][ T4231] usb 4-1: config 0 interface 184 has no altsetting 0 [ 201.488262][ T4273] usb 1-1: config 14 has an invalid interface number: 57 but max is 0 [ 201.506949][ T4273] usb 1-1: config 14 has no interface number 0 [ 201.513225][ T4273] usb 1-1: config 14 interface 57 has no altsetting 0 [ 201.574929][ T9366] loop5: detected capacity change from 0 to 128 [ 201.599488][ T4231] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 201.615614][ T9366] ======================================================= [ 201.615614][ T9366] WARNING: The mand mount option has been deprecated and [ 201.615614][ T9366] and is ignored by this kernel. Remove the mand [ 201.615614][ T9366] option from the mount to silence this warning. [ 201.615614][ T9366] ======================================================= [ 201.621676][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.650557][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.681688][ T4231] usb 4-1: Product: syz [ 201.686411][ T4231] usb 4-1: Manufacturer: syz [ 201.691189][ T4231] usb 4-1: SerialNumber: syz [ 201.720590][ T4231] usb 4-1: config 0 descriptor?? [ 201.750863][ T9366] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 201.763645][ T4273] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 201.780688][ T4231] smsc75xx v1.0.0 [ 201.783672][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.792930][ T4273] usb 1-1: Product: syz [ 201.804243][ T4273] usb 1-1: Manufacturer: syz [ 201.809007][ T4273] usb 1-1: SerialNumber: syz [ 201.831869][ T9366] hpfs: filesystem error: improperly stopped [ 201.846140][ T9366] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 201.871097][ T9366] hpfs: You really don't want any checks? You are crazy... [ 201.889481][ T9366] hpfs: hpfs_map_sector(): read error [ 201.899098][ T9366] hpfs: code page support is disabled [ 201.914177][ T9366] hpfs: hpfs_map_4sectors(): unaligned read [ 201.923253][ T9366] hpfs: hpfs_map_4sectors(): unaligned read [ 201.936866][ T9366] hpfs: filesystem error: unable to find root dir [ 202.323910][ T9370] device syzkaller0 entered promiscuous mode [ 202.368655][ T4273] legousbtower 1-1:14.57: interrupt endpoints not found [ 202.424428][ T4273] usb 1-1: USB disconnect, device number 3 [ 202.864214][ T4231] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 202.880994][ T4231] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 202.939609][ T9377] tipc: Enabling of bearer rejected, already enabled [ 202.945224][ T4231] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 202.971931][ T4231] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 202.993406][ T4231] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 203.021076][ T4231] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 203.049652][ T4231] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 203.114842][ T4231] usb 4-1: USB disconnect, device number 2 [ 203.913878][ T9402] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1722'. [ 204.051559][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1724'. [ 204.166865][ T9409] tipc: Enabling of bearer rejected, failed to enable media [ 204.226533][ T9411] loop5: detected capacity change from 0 to 764 [ 204.514098][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 204.534074][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 204.544069][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 204.910276][ T9428] device syzkaller0 entered promiscuous mode [ 205.702007][ T9450] tipc: Enabling of bearer rejected, failed to enable media [ 205.783403][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 205.857820][ T9457] device syzkaller0 entered promiscuous mode [ 206.532460][ T9474] loop3: detected capacity change from 0 to 4096 [ 206.573410][ T9474] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 206.715222][ T26] audit: type=1800 audit(2000000002.170:2): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1746" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 206.930158][ T9482] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1749'. [ 207.118074][ T9490] device syzkaller0 entered promiscuous mode [ 207.192646][ T9485] loop2: detected capacity change from 0 to 8192 [ 207.296454][ T9492] tipc: Enabling of bearer rejected, failed to enable media [ 207.364845][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1755'. [ 207.703282][ T13] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 207.990885][ T9522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1763'. [ 208.100236][ T9526] device syzkaller0 entered promiscuous mode [ 208.109615][ T13] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 208.123683][ T13] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 208.143388][ T13] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 208.234568][ T13] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 208.249640][ T13] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 208.264917][ T13] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 208.359910][ T13] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 208.367641][ T13] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 208.385074][ T13] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 208.394339][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 208.449615][ T9533] tipc: Enabling of bearer rejected, failed to enable media [ 208.654343][ T13] usb 6-1: string descriptor 0 read error: -22 [ 208.660704][ T13] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 208.713840][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.769910][ T21] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 208.799892][ T13] adutux 6-1:168.0: interrupt endpoints not found [ 208.804913][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.830418][ T9548] device syzkaller0 entered promiscuous mode [ 208.853937][ T21] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.868620][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.892788][ T21] usb 1-1: config 0 descriptor?? [ 208.898925][ T9548] tipc: Enabled bearer , priority 0 [ 208.916718][ T9547] tipc: Resetting bearer [ 208.944608][ T21] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 209.019633][ T9547] tipc: Disabling bearer [ 209.056821][ T1865] usb 6-1: USB disconnect, device number 3 [ 209.097730][ T9558] loop3: detected capacity change from 0 to 64 [ 209.192934][ T26] audit: type=1800 audit(2000000004.650:3): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1773" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 209.401274][ T9568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1776'. [ 209.681510][ T9583] tipc: Enabling of bearer rejected, failed to enable media [ 209.733900][ T1865] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 210.105315][ T1865] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 210.123848][ T1865] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.155865][ T1865] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 210.173910][ T1865] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.314059][ T1865] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.344148][ T1865] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.352204][ T1865] usb 4-1: Product: syz [ 210.377112][ T1865] usb 4-1: Manufacturer: syz [ 210.435024][ T1865] cdc_wdm 4-1:1.0: skipping garbage [ 210.448965][ T1865] cdc_wdm 4-1:1.0: skipping garbage [ 210.507826][ T1865] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 210.517747][ T1865] cdc_wdm 4-1:1.0: Unknown control protocol [ 210.595454][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1787'. [ 210.659068][ T13] usb 4-1: USB disconnect, device number 3 [ 211.169659][ T4236] usb 1-1: USB disconnect, device number 4 [ 211.244184][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 211.398613][ T9638] loop0: detected capacity change from 0 to 8192 [ 211.413758][ T1865] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 211.585951][ T9641] loop_set_status: loop0 () has still dirty pages (nrpages=3) [ 211.634211][ T13] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.642878][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.657166][ T9644] tipc: Enabling of bearer rejected, failed to enable media [ 211.692861][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.742966][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.783978][ T1865] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.817241][ T1865] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.905513][ T1865] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.924183][ T13] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.948933][ T13] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.957726][ T1865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.000103][ T13] usb 4-1: Product: syz [ 212.029412][ T13] usb 4-1: Manufacturer: syz [ 212.105014][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 212.120850][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 212.152525][ T13] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 212.162263][ T13] cdc_wdm 4-1:1.0: Unknown control protocol [ 212.264170][ T1865] usb 6-1: usb_control_msg returned -32 [ 212.269952][ T1865] usbtmc 6-1:16.0: can't read capabilities [ 212.412424][ T4193] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 212.441800][ T4193] FAT-fs (loop0): Filesystem has been set read-only [ 212.852612][ T9680] device syzkaller0 entered promiscuous mode [ 212.885320][ T9680] tipc: Enabled bearer , priority 0 [ 212.905686][ T9678] tipc: Resetting bearer [ 212.946170][ T9678] tipc: Disabling bearer [ 213.054692][ T9686] device syzkaller0 entered promiscuous mode [ 213.115468][ T9694] tipc: Enabled bearer , priority 0 [ 213.154381][ T9693] tipc: Enabled bearer , priority 0 [ 213.164435][ T9685] tipc: Resetting bearer [ 213.229763][ T9685] tipc: Disabling bearer [ 213.254382][ T9693] device syzkaller0 entered promiscuous mode [ 213.262781][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1806'. [ 213.275695][ T9693] tipc: Resetting bearer [ 213.314486][ T9691] tipc: Resetting bearer [ 213.369876][ T9691] tipc: Disabling bearer [ 213.644072][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 213.890092][ T9732] device syzkaller0 entered promiscuous mode [ 214.077552][ T21] usb 6-1: USB disconnect, device number 4 [ 214.127118][ T1865] usb 4-1: USB disconnect, device number 4 [ 214.207881][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1818'. [ 214.244219][ T13] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 214.255014][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.275118][ T13] usb 3-1: Product: syz [ 214.279544][ T13] usb 3-1: Manufacturer: syz [ 214.285269][ T13] usb 3-1: SerialNumber: syz [ 214.318564][ T9748] tipc: Enabled bearer , priority 0 [ 214.394365][ T9746] tipc: Disabling bearer [ 214.480189][ T9756] tipc: Enabled bearer , priority 0 [ 214.489643][ T9756] device syzkaller0 entered promiscuous mode [ 214.547699][ T9756] tipc: Resetting bearer [ 214.573188][ T9755] tipc: Resetting bearer [ 214.611154][ T9755] tipc: Disabling bearer [ 214.672159][ T4203] Bluetooth: hci4: link tx timeout [ 214.677693][ T4203] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 214.685777][ T4203] Bluetooth: hci4: link tx timeout [ 214.690929][ T4203] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.779321][ T9770] device syzkaller0 entered promiscuous mode [ 214.786143][ T13] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 214.814630][ T13] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 214.831788][ T13] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 214.847498][ T13] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 214.874971][ T13] lan78xx: probe of 3-1:1.0 failed with error -71 [ 214.935404][ T13] usb 3-1: USB disconnect, device number 2 [ 215.299615][ T9791] process 'syz.5.1832' launched '/dev/fd/4/./file0' with NULL argv: empty string added [ 215.324064][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 215.392799][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1834'. [ 215.573986][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 215.589632][ T9806] tipc: Enabled bearer , priority 0 [ 215.626014][ T9805] tipc: Disabling bearer [ 215.664642][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 215.682506][ T9811] tipc: Enabled bearer , priority 0 [ 215.691779][ T9811] device syzkaller0 entered promiscuous mode [ 215.743207][ T9811] tipc: Resetting bearer [ 215.765975][ T9810] tipc: Resetting bearer [ 215.805275][ T7] usb 1-1: config 8 has an invalid interface number: 46 but max is 0 [ 215.820138][ T9810] tipc: Disabling bearer [ 215.824685][ T7] usb 1-1: config 8 has no interface number 0 [ 215.832146][ T7] usb 1-1: config 8 interface 46 has no altsetting 0 [ 215.967518][ T9818] device syzkaller0 entered promiscuous mode [ 216.013998][ T7] usb 1-1: New USB device found, idVendor=2040, idProduct=1700, bcdDevice=a7.db [ 216.023126][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.036998][ T7] usb 1-1: Product: syz [ 216.041242][ T7] usb 1-1: Manufacturer: syz [ 216.056963][ T7] usb 1-1: SerialNumber: syz [ 216.143431][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 216.153423][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 216.163417][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 216.173417][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 216.193410][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 216.203407][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 216.213400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 216.415392][ T7] smsusb:smsusb_probe: board id=5, interface number 46 [ 216.437796][ T7] usb 1-1: USB disconnect, device number 5 [ 216.611166][ T9840] loop3: detected capacity change from 0 to 1024 [ 216.907281][ T9851] tipc: Enabling of bearer rejected, already enabled [ 216.953959][ T4273] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 217.015055][ T9854] tipc: Enabling of bearer rejected, already enabled [ 217.138790][ T9862] device syzkaller0 entered promiscuous mode [ 217.321277][ T9869] device syzkaller0 entered promiscuous mode [ 217.339432][ T4273] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 217.350946][ T4273] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.364362][ T4273] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.375380][ T4273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.393903][ T4273] usb 3-1: config 0 descriptor?? [ 217.436394][ T4273] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 217.602577][ T9879] device syzkaller1 entered promiscuous mode [ 217.771031][ T9887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1862'. [ 217.847065][ T9891] tipc: Enabled bearer , priority 0 [ 217.881869][ T9890] tipc: Disabling bearer [ 217.932653][ T9893] tipc: Enabling of bearer rejected, failed to enable media [ 218.333750][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 218.348714][ T9909] device syzkaller0 entered promiscuous mode [ 218.609129][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 218.743511][ T7] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 218.948940][ T7] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 218.969116][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.981736][ T7] usb 1-1: Product: syz [ 218.986797][ T7] usb 1-1: Manufacturer: syz [ 218.991573][ T7] usb 1-1: SerialNumber: syz [ 219.008469][ T7] r8152-cfgselector 1-1: config 0 descriptor?? [ 219.145287][ T23] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 219.477347][ T9958] chnl_net:caif_netlink_parms(): no params data found [ 219.513533][ T23] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 219.521040][ T23] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 219.551887][ T23] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 219.571262][ T9958] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.578634][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.587374][ T9958] device bridge_slave_0 entered promiscuous mode [ 219.600241][ T9958] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.607901][ T7] r8152-cfgselector 1-1: Unknown version 0x0000 [ 219.614756][ T7] r8152-cfgselector 1-1: bad CDC descriptors [ 219.621058][ T9958] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.641009][ T9958] device bridge_slave_1 entered promiscuous mode [ 219.653628][ T7] r8152-cfgselector 1-1: Unknown version 0x0000 [ 219.670853][ T7] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 219.674185][ T23] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 219.704229][ T23] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 219.726589][ T9958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.738645][ T9958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.760142][ T23] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 219.800610][ T4231] usb 3-1: USB disconnect, device number 3 [ 219.815942][ T9958] team0: Port device team_slave_0 added [ 219.826319][ T9958] team0: Port device team_slave_1 added [ 219.878045][ T23] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 219.892422][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.893997][ T23] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 219.921601][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.959261][ T9958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.959619][ T23] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 219.978433][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.998414][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.033394][ T9958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.146993][ T9958] device hsr_slave_0 entered promiscuous mode [ 220.154292][ T9958] device hsr_slave_1 entered promiscuous mode [ 220.161159][ T9958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.173025][ T9958] Cannot create hsr debugfs directory [ 220.183551][ T4231] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 220.246840][ T23] usb 6-1: string descriptor 0 read error: -22 [ 220.257881][ T23] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 220.287360][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.358322][ T23] adutux 6-1:168.0: interrupt endpoints not found [ 220.476068][ T21] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 220.496050][ T9958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.553418][ T4231] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 220.565838][ T4231] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 220.583927][ T4231] usb 3-1: config 0 interface 0 has no altsetting 0 [ 220.602505][ T7] usb 6-1: USB disconnect, device number 5 [ 220.642544][ T9958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.737569][ T9958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.744877][ T4231] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.761979][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 220.771141][ T4231] usb 3-1: Product: syz [ 220.776258][ T4231] usb 3-1: Manufacturer: syz [ 220.780925][ T4231] usb 3-1: SerialNumber: syz [ 220.792985][ T4231] usb 3-1: config 0 descriptor?? [ 220.813490][ T9980] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 220.829638][ T9958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.864335][ T4231] usb 3-1: selecting invalid altsetting 0 [ 220.884036][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 220.924306][ T21] usb 1-1: not running at top speed; connect to a high speed hub [ 221.033657][ T21] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 221.052204][ T21] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 221.060455][T10015] tipc: Enabling of bearer rejected, failed to enable media [ 221.073213][ T21] usb 1-1: config 14 has no interface number 0 [ 221.079504][ T21] usb 1-1: config 14 has no interface number 1 [ 221.096601][ T21] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 221.110781][ T9980] usb 3-1: selecting invalid altsetting 0 [ 221.163299][ T9980] usb 3-1: 0:0: usb_set_interface failed (-22) [ 221.169624][ T9980] usb 3-1: selecting invalid altsetting 0 [ 221.180395][ T21] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 221.201191][ T9958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.217897][ T21] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.233530][ T4236] Bluetooth: hci1: command 0x0409 tx timeout [ 221.234181][ T9980] usb 3-1: 0:0: usb_set_interface failed (-22) [ 221.257171][ T9980] usb 3-1: selecting invalid altsetting 0 [ 221.273196][ T21] usb 1-1: config 14 interface 57 has no altsetting 0 [ 221.282453][ T21] usb 1-1: config 14 interface 228 has no altsetting 0 [ 221.313331][ T9980] usb 3-1: 0:0: usb_set_interface failed (-22) [ 221.315331][ T4236] usb 3-1: USB disconnect, device number 4 [ 221.328409][ T9958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.363859][ T9980] usb 3-1: 0:0: usb_set_interface failed (-19) [ 221.393848][T10027] device syzkaller0 entered promiscuous mode [ 221.427100][ T9958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.484866][ T9958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.488778][ T21] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 221.522750][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.548891][ T21] usb 1-1: Product: syz [ 221.569011][ T21] usb 1-1: Manufacturer: syz [ 221.579128][ T21] usb 1-1: SerialNumber: syz [ 221.733482][ T9958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.762347][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.797781][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.838676][ T9958] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.878774][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.920293][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.980559][ T7327] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.987776][ T7327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.074544][ T21] legousbtower 1-1:14.57: interrupt endpoints not found [ 222.096824][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.114355][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.158190][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.196074][ T7327] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.203274][ T7327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.231536][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.285041][ T21] legousbtower 1-1:14.228: interrupt endpoints not found [ 222.333863][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.354554][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.372209][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.381366][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.420369][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.440132][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.474834][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.492945][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.508320][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.535980][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.546884][ T9958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.776358][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.791302][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.809044][ T9958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.839433][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.857599][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.896378][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.913504][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.931807][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 222.939922][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.957095][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.973348][ T9958] device veth0_vlan entered promiscuous mode [ 223.000815][ T9958] device veth1_vlan entered promiscuous mode [ 223.038864][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.048393][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.057389][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.077410][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.104379][ T9958] device veth0_macvtap entered promiscuous mode [ 223.118739][ T9958] device veth1_macvtap entered promiscuous mode [ 223.167047][ T9958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.186858][ T9958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.187589][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 223.208114][ T9958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.237767][ T9958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.248143][ T9958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.264241][ T9958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.283045][ T9958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.303267][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 223.304013][ T9958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.344426][ T9958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.350012][ T21] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.361080][ T9958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.383737][ T21] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.403479][ T9958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.411575][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 223.432138][ T9958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.453082][ T21] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 223.454005][ T9958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.462181][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.515223][ T21] usb 3-1: config 0 descriptor?? [ 223.524160][ T9958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.536105][ T9958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.547711][ T9958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.563062][ T9958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.575441][ T9958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.620930][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.645218][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.669491][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.680481][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.697131][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.710527][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.736812][ T9958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.751910][ T9958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.762030][ T9958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.771886][ T9958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.911367][ T7327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.930757][ T7327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.952872][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.998868][ T7327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.007878][ T21] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 224.021236][ T7327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.038376][ T21] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 224.048271][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.069337][ T21] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 224.092899][ T21] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 224.124995][ T21] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 224.180875][ T21] hid-generic 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 224.242651][ T21] usb 3-1: USB disconnect, device number 5 [ 224.280383][ T4232] usb 1-1: USB disconnect, device number 7 [ 224.432733][T10133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1897'. [ 224.460553][T10129] fido_id[10129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 224.734280][T10145] device syzkaller0 entered promiscuous mode [ 225.090260][T10165] tipc: Enabled bearer , priority 0 [ 225.159420][T10162] tipc: Disabling bearer [ 225.260058][T10170] device syzkaller0 entered promiscuous mode [ 225.383400][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 226.221315][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1910'. [ 226.338492][T10202] loop4: detected capacity change from 0 to 4096 [ 226.350627][T10205] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1912'. [ 226.399556][T10205] device bond1 entered promiscuous mode [ 226.412552][T10205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.423143][T10202] ntfs3: Unknown parameter 'windows_names' [ 226.464010][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1912'. [ 226.493404][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1912'. [ 226.722623][T10220] device syzkaller0 entered promiscuous mode [ 227.311871][T10247] loop5: detected capacity change from 0 to 1024 [ 227.357643][T10247] EXT4-fs (loop5): Ignoring removed orlov option [ 227.404445][T10247] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,usrjquota=,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 227.461509][T10247] EXT4-fs error (device loop5): __ext4_new_inode:1292: comm syz.5.1919: failed to insert inode 12: doubly allocated? [ 227.466139][ T9754] Bluetooth: hci1: command 0x0419 tx timeout [ 227.769651][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1922'. [ 228.245718][T10268] device syzkaller0 entered promiscuous mode [ 228.266794][T10268] tipc: Started in network mode [ 228.272168][T10268] tipc: Node identity 6a1c7ecd1b63, cluster identity 4711 [ 228.289702][T10268] tipc: Enabled bearer , priority 0 [ 228.299919][T10266] tipc: Resetting bearer [ 228.303683][ T23] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 228.385592][T10266] tipc: Disabling bearer [ 228.683081][ T23] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 228.692501][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.739219][ T23] usb 6-1: config 0 descriptor?? [ 228.780994][ C1] hrtimer: interrupt took 365286 ns [ 228.880327][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'. [ 228.903117][ T26] audit: type=1326 audit(2000000024.361:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.4.1934" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2942ae59 code=0x7ffc0000 [ 228.992454][ T26] audit: type=1326 audit(2000000024.391:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.4.1934" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7c2942ae59 code=0x7ffc0000 [ 229.143470][ T26] audit: type=1326 audit(2000000024.401:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.4.1934" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2942ae59 code=0x7ffc0000 [ 229.233028][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 229.251937][ T26] audit: type=1326 audit(2000000024.411:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.4.1934" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f7c2942ae59 code=0x7ffc0000 [ 229.308137][ T26] audit: type=1326 audit(2000000024.411:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.4.1934" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2942ae59 code=0x7ffc0000 [ 229.361713][ T23] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 229.371114][ T23] [drm] Initialized udl on minor 2 [ 229.387797][ T26] audit: type=1326 audit(2000000024.411:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.4.1934" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c2942ae59 code=0x7ffc0000 [ 229.412804][ T4236] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 229.425657][ T23] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 229.439401][ T23] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 229.459220][ T26] audit: type=1326 audit(2000000024.411:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.4.1934" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2942ae59 code=0x7ffc0000 [ 229.489399][ T23] usb 6-1: USB disconnect, device number 6 [ 229.514792][ T9754] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 229.525555][T10303] device syzkaller0 entered promiscuous mode [ 229.556372][ T26] audit: type=1326 audit(2000000024.411:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.4.1934" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c2942ae59 code=0x7ffc0000 [ 229.579467][ T9754] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 229.594491][ T9754] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 229.615319][ T26] audit: type=1326 audit(2000000024.411:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.4.1934" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2942ae59 code=0x7ffc0000 [ 229.697493][ T26] audit: type=1326 audit(2000000024.411:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10293 comm="syz.4.1934" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7c2942ae59 code=0x7ffc0000 [ 229.823275][ T4236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.883297][ T4236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.933474][ T4236] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 229.980698][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.035964][ T4236] usb 4-1: config 0 descriptor?? [ 230.095953][T10315] device syzkaller0 entered promiscuous mode [ 230.205558][T10315] tipc: Enabled bearer , priority 0 [ 230.259830][T10313] tipc: Resetting bearer [ 230.361735][T10329] loop0: detected capacity change from 0 to 64 [ 230.416552][T10313] tipc: Disabling bearer [ 230.574913][ T4236] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 230.608863][ T4236] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 230.765847][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1947'. [ 230.811642][ T4193] hfs: node 4:3 still has 1 user(s)! [ 230.852780][ T4236] cp2112 0003:10C4:EA90.0002: error requesting version [ 230.874148][ T4236] cp2112: probe of 0003:10C4:EA90.0002 failed with error -32 [ 231.124442][ T4273] usb 4-1: USB disconnect, device number 5 [ 231.282422][T10349] fido_id[10349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 231.333170][ T4236] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 231.516657][T10356] device syzkaller0 entered promiscuous mode [ 231.582678][ T4236] usb 5-1: Using ep0 maxpacket: 32 [ 231.712807][ T4236] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.738952][ T4236] usb 5-1: config 0 has no interface number 0 [ 231.932983][ T4236] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 231.942098][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.004253][ T4236] usb 5-1: Product: syz [ 232.008492][ T4236] usb 5-1: Manufacturer: syz [ 232.113003][ T4236] usb 5-1: SerialNumber: syz [ 232.162812][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 232.178978][ T4236] usb 5-1: config 0 descriptor?? [ 232.315358][ T4236] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 232.422685][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 232.430713][ T4236] usb 5-1: selecting invalid altsetting 1 [ 232.471879][ T4236] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 232.550417][ T4236] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 232.554907][ T21] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 232.591957][ T21] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 232.602265][ T4236] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 232.619939][ T4236] usb 5-1: media controller created [ 232.647506][ T4236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.674117][ T21] usb 4-1: config 8 has an invalid descriptor of length 255, skipping remainder of the config [ 232.701662][ T21] usb 4-1: config 8 has no interface number 0 [ 232.729029][ T21] usb 4-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 232.765785][ T21] usb 4-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 232.787093][ T4236] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 232.797639][T10399] tipc: Enabling of bearer rejected, failed to enable media [ 232.812934][ T4236] zl10353_read_register: readreg error (reg=127, ret==-32) [ 232.818783][ T21] usb 4-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.905678][ T21] usb 4-1: config 8 interface 223 has no altsetting 0 [ 232.992897][T10404] device syzkaller0 entered promiscuous mode [ 233.046415][T10404] tipc: Enabled bearer , priority 0 [ 233.079001][T10402] tipc: Resetting bearer [ 233.113515][ T21] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 233.144939][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.179709][ T21] usb 4-1: Product: syz [ 233.195733][T10402] tipc: Disabling bearer [ 233.196809][ T21] usb 4-1: Manufacturer: syz [ 233.221350][ T21] usb 4-1: SerialNumber: syz [ 233.283652][T10364] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 233.533041][ T4236] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 233.552918][ T21] usb 4-1: USB disconnect, device number 6 [ 233.651124][T10425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1961'. [ 233.766240][ T4236] usb 5-1: USB disconnect, device number 3 [ 233.804567][T10429] loop5: detected capacity change from 0 to 64 [ 233.992676][ T4273] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 234.227531][T10437] device syzkaller0 entered promiscuous mode [ 234.442970][ T4273] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.458069][ T4273] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.494210][T10445] tipc: Enabling of bearer rejected, already enabled [ 234.643835][ T4273] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.680115][ T4273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.738180][ T4273] usb 3-1: Product: syz [ 234.773027][ T4273] usb 3-1: Manufacturer: syz [ 234.793308][ T4273] usb 3-1: SerialNumber: syz [ 234.856853][T10454] device syzkaller0 entered promiscuous mode [ 234.945258][T10454] tipc: Enabled bearer , priority 0 [ 234.968633][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1972'. [ 234.992930][T10453] tipc: Resetting bearer [ 235.047692][T10453] tipc: Disabling bearer [ 235.288281][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'. [ 235.422737][ T4273] usb 3-1: 0:2 : does not exist [ 235.516855][ T4273] usb 3-1: USB disconnect, device number 6 [ 235.670757][T10464] device syzkaller0 entered promiscuous mode [ 235.697824][T10469] loop3: detected capacity change from 0 to 16 [ 235.780275][ T9175] udevd[9175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.804352][T10469] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 236.189370][T10477] device syzkaller0 entered promiscuous mode [ 236.215725][T10475] loop0: detected capacity change from 0 to 2048 [ 236.698698][T10488] device syzkaller0 entered promiscuous mode [ 236.809760][T10488] tipc: Enabled bearer , priority 0 [ 236.974480][T10485] tipc: Resetting bearer [ 237.213613][T10485] tipc: Disabling bearer [ 237.416947][T10504] device syzkaller0 entered promiscuous mode [ 237.537841][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1987'. [ 237.902101][T10526] loop4: detected capacity change from 0 to 128 [ 238.026635][T10526] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 238.105881][T10528] device syzkaller0 entered promiscuous mode [ 238.133481][T10526] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.192757][T10526] ext2 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.379681][T10526] overlayfs: upper fs needs to support d_type. [ 238.571177][ T4204] Bluetooth: hci2: hcon ffff88801fd70000 sent 1 < count 743 [ 238.920840][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 239.063667][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 239.238939][T10560] tipc: Enabling of bearer rejected, already enabled [ 239.332260][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 239.373530][T10564] device syzkaller0 entered promiscuous mode [ 239.452684][ T21] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.477343][T10564] tipc: Enabled bearer , priority 0 [ 239.484046][ T21] usb 3-1: config 0 has no interface number 0 [ 239.540444][T10563] tipc: Resetting bearer [ 239.634285][T10563] tipc: Disabling bearer [ 239.642666][ T21] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 239.665271][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.699970][ T21] usb 3-1: Product: syz [ 239.706134][ T21] usb 3-1: Manufacturer: syz [ 239.711905][ T21] usb 3-1: SerialNumber: syz [ 239.741490][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2002'. [ 239.758726][ T21] usb 3-1: config 0 descriptor?? [ 239.828612][ T21] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 239.854243][ T21] usb 3-1: selecting invalid altsetting 1 [ 239.878137][ T21] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 239.909460][ T21] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 239.921872][ T21] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 239.932962][ T21] usb 3-1: media controller created [ 240.040911][T10576] loop4: detected capacity change from 0 to 2048 [ 240.104845][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.145309][T10576] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.253625][T10576] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.309601][T10576] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 240.351300][T10576] UDF-fs: Scanning with blocksize 512 failed [ 240.409127][T10576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.744166][T10588] device syzkaller0 entered promiscuous mode [ 240.801246][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 240.801274][ T26] audit: type=1800 audit(2000000036.262:31): pid=10585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2003" name="file1" dev="loop4" ino=834 res=0 errno=0 [ 241.072329][T10550] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 241.142643][ T21] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 241.161721][ T21] zl10353_read_register: readreg error (reg=127, ret==-71) [ 241.223451][ T21] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 241.491448][ T21] usb 3-1: USB disconnect, device number 7 [ 241.770747][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2009'. [ 241.829410][T10595] device syzkaller0 entered promiscuous mode [ 242.115106][T10613] tipc: Enabling of bearer rejected, already enabled [ 242.265998][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2014'. [ 242.316032][T10620] device syzkaller0 entered promiscuous mode [ 242.388441][T10620] tipc: Enabled bearer , priority 0 [ 242.530714][T10619] tipc: Resetting bearer [ 242.618509][ T4204] ================================================================== [ 242.627169][ T4204] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 242.635040][ T4204] Read of size 1 at addr ffff88807858040a by task kworker/u5:7/4204 [ 242.643051][ T4204] [ 242.645422][ T4204] CPU: 1 PID: 4204 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 242.652992][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.663073][ T4204] Workqueue: hci2 hci_rx_work [ 242.667810][ T4204] Call Trace: [ 242.671107][ T4204] [ 242.674061][ T4204] dump_stack_lvl+0x188/0x250 [ 242.678765][ T4204] ? show_regs_print_info+0x20/0x20 [ 242.683988][ T4204] ? load_image+0x400/0x400 [ 242.688510][ T4204] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 242.694000][ T4204] ? mutex_lock_io_nested+0x60/0x60 [ 242.699235][ T4204] print_address_description+0x60/0x2d0 [ 242.704809][ T4204] ? hci_le_meta_evt+0x1324/0x3c90 [ 242.709990][ T4204] kasan_report+0xdf/0x130 [ 242.714435][ T4204] ? hci_le_meta_evt+0x1324/0x3c90 [ 242.719578][ T4204] hci_le_meta_evt+0x1324/0x3c90 [ 242.724549][ T4204] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 242.730560][ T4204] ? lock_chain_count+0x20/0x20 [ 242.735434][ T4204] ? hci_remote_host_features_evt+0x280/0x280 [ 242.741557][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 242.747225][ T4204] ? mutex_unlock+0x10/0x10 [ 242.751754][ T4204] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 242.757945][ T4204] hci_event_packet+0xe48/0x1370 [ 242.762902][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 242.768125][ T4204] ? rcu_lock_release+0x20/0x20 [ 242.772996][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 242.778224][ T4204] hci_rx_work+0x255/0xa10 [ 242.782676][ T4204] process_one_work+0x85f/0x1010 [ 242.787681][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 242.793332][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 242.798656][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 242.803708][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 242.809371][ T4204] ? wq_worker_running+0x97/0x170 [ 242.814420][ T4204] worker_thread+0xaa6/0x1290 [ 242.819132][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 242.824370][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 242.830295][ T4204] kthread+0x436/0x520 [ 242.834390][ T4204] ? rcu_lock_release+0x20/0x20 [ 242.839275][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 242.843884][ T4204] ret_from_fork+0x1f/0x30 [ 242.848339][ T4204] [ 242.851378][ T4204] [ 242.853719][ T4204] Allocated by task 10630: [ 242.858141][ T4204] __kasan_kmalloc+0xb5/0xf0 [ 242.862753][ T4204] __alloc_skb+0x22c/0x750 [ 242.867190][ T4204] vhci_write+0xbc/0x450 [ 242.871457][ T4204] vfs_write+0x745/0xd60 [ 242.875713][ T4204] ksys_write+0x152/0x260 [ 242.880086][ T4204] do_syscall_64+0x4c/0xa0 [ 242.884523][ T4204] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 242.890435][ T4204] [ 242.892774][ T4204] Last potentially related work creation: [ 242.898511][ T4204] kasan_save_stack+0x35/0x60 [ 242.903225][ T4204] kasan_record_aux_stack+0xb8/0x100 [ 242.908543][ T4204] kvfree_call_rcu+0x105/0x7d0 [ 242.913357][ T4204] neigh_periodic_work+0x407/0xc70 [ 242.918499][ T4204] process_one_work+0x85f/0x1010 [ 242.923457][ T4204] worker_thread+0xaa6/0x1290 [ 242.928170][ T4204] kthread+0x436/0x520 [ 242.932262][ T4204] ret_from_fork+0x1f/0x30 [ 242.936700][ T4204] [ 242.939035][ T4204] The buggy address belongs to the object at ffff888078580000 [ 242.939035][ T4204] which belongs to the cache kmalloc-1k of size 1024 [ 242.953106][ T4204] The buggy address is located 10 bytes to the right of [ 242.953106][ T4204] 1024-byte region [ffff888078580000, ffff888078580400) [ 242.966926][ T4204] The buggy address belongs to the page: [ 242.972592][ T4204] page:ffffea0001e16000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78580 [ 242.982771][ T4204] head:ffffea0001e16000 order:3 compound_mapcount:0 compound_pincount:0 [ 242.991124][ T4204] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 242.999156][ T4204] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 243.007769][ T4204] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 243.016369][ T4204] page dumped because: kasan: bad access detected [ 243.022801][ T4204] page_owner tracks the page as allocated [ 243.028534][ T4204] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4194, ts 68839360570, free_ts 68736866061 [ 243.047677][ T4204] get_page_from_freelist+0x1bbd/0x1ca0 [ 243.053269][ T4204] __alloc_pages+0x1ee/0x480 [ 243.057893][ T4204] new_slab+0xc0/0x4b0 [ 243.061982][ T4204] ___slab_alloc+0x80a/0xdd0 [ 243.066589][ T4204] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 243.072421][ T4204] __alloc_skb+0x22c/0x750 [ 243.076854][ T4204] rtmsg_fib+0xe7/0x4b0 [ 243.081039][ T4204] fib_table_insert+0xd36/0x1bb0 [ 243.085993][ T4204] fib_magic+0x2e1/0x3c0 [ 243.090252][ T4204] fib_add_ifaddr+0x140/0x5e0 [ 243.094949][ T4204] fib_inetaddr_event+0x13c/0x1c0 [ 243.099998][ T4204] blocking_notifier_call_chain+0x103/0x1b0 [ 243.105912][ T4204] __inet_insert_ifa+0x9f7/0xbe0 [ 243.110881][ T4204] inet_rtm_newaddr+0x99a/0x1890 [ 243.115839][ T4204] rtnetlink_rcv_msg+0x844/0xf30 [ 243.120802][ T4204] netlink_rcv_skb+0x1f5/0x440 [ 243.125587][ T4204] page last free stack trace: [ 243.130280][ T4204] free_unref_page_prepare+0x637/0x6c0 [ 243.135943][ T4204] free_unref_page+0x8f/0x2a0 [ 243.140656][ T4204] qlist_free_all+0x35/0x90 [ 243.145187][ T4204] kasan_quarantine_reduce+0x150/0x160 [ 243.150670][ T4204] __kasan_slab_alloc+0x2f/0xd0 [ 243.155542][ T4204] slab_post_alloc_hook+0x4c/0x380 [ 243.160672][ T4204] kmem_cache_alloc_trace+0x103/0x2a0 [ 243.166065][ T4204] __ipv6_dev_mc_inc+0x3fa/0xa90 [ 243.171050][ T4204] addrconf_dad_work+0x3d1/0x1540 [ 243.176102][ T4204] process_one_work+0x85f/0x1010 [ 243.181065][ T4204] worker_thread+0xaa6/0x1290 [ 243.185769][ T4204] kthread+0x436/0x520 [ 243.189851][ T4204] ret_from_fork+0x1f/0x30 [ 243.194291][ T4204] [ 243.196627][ T4204] Memory state around the buggy address: [ 243.202266][ T4204] ffff888078580300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 243.210356][ T4204] ffff888078580380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 243.218433][ T4204] >ffff888078580400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 243.226505][ T4204] ^ [ 243.230846][ T4204] ffff888078580480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 243.238934][ T4204] ffff888078580500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 243.247093][ T4204] ================================================================== [ 243.255165][ T4204] Disabling lock debugging due to kernel taint [ 243.302207][ T4204] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 243.309466][ T4204] CPU: 1 PID: 4204 Comm: kworker/u5:7 Tainted: G B syzkaller #0 [ 243.318434][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.328529][ T4204] Workqueue: hci2 hci_rx_work [ 243.333258][ T4204] Call Trace: [ 243.336576][ T4204] [ 243.339540][ T4204] dump_stack_lvl+0x188/0x250 [ 243.344261][ T4204] ? show_regs_print_info+0x20/0x20 [ 243.349503][ T4204] ? load_image+0x400/0x400 [ 243.354050][ T4204] panic+0x2e5/0x810 [ 243.357992][ T4204] ? bpf_jit_dump+0xd0/0xd0 [ 243.362537][ T4204] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 243.368562][ T4204] ? _raw_spin_unlock+0x40/0x40 [ 243.373457][ T4204] ? hci_le_meta_evt+0x1324/0x3c90 [ 243.378600][ T4204] check_panic_on_warn+0x80/0xa0 [ 243.383581][ T4204] ? hci_le_meta_evt+0x1324/0x3c90 [ 243.388726][ T4204] end_report+0x6d/0xf0 [ 243.392919][ T4204] kasan_report+0x102/0x130 [ 243.397462][ T4204] ? hci_le_meta_evt+0x1324/0x3c90 [ 243.402963][ T4204] hci_le_meta_evt+0x1324/0x3c90 [ 243.407951][ T4204] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 243.413977][ T4204] ? lock_chain_count+0x20/0x20 [ 243.418865][ T4204] ? hci_remote_host_features_evt+0x280/0x280 [ 243.424977][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 243.430653][ T4204] ? mutex_unlock+0x10/0x10 [ 243.435211][ T4204] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 243.441422][ T4204] hci_event_packet+0xe48/0x1370 [ 243.446396][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 243.451809][ T4204] ? rcu_lock_release+0x20/0x20 [ 243.456705][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 243.461953][ T4204] hci_rx_work+0x255/0xa10 [ 243.466419][ T4204] process_one_work+0x85f/0x1010 [ 243.471408][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 243.477085][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 243.482417][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 243.487484][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 243.493068][ T4204] ? wq_worker_running+0x97/0x170 [ 243.498130][ T4204] worker_thread+0xaa6/0x1290 [ 243.502858][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 243.508098][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 243.514042][ T4204] kthread+0x436/0x520 [ 243.518151][ T4204] ? rcu_lock_release+0x20/0x20 [ 243.523046][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 243.527679][ T4204] ret_from_fork+0x1f/0x30 [ 243.532137][ T4204] [ 243.535473][ T4204] Kernel Offset: disabled [ 243.539828][ T4204] Rebooting in 86400 seconds..