last executing test programs: 7.674713544s ago: executing program 3 (id=2319): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x9, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x1, 0x892c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x13f6, 0x81, 0x53, 0x14, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x40000005, 0x1, 0x200003, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0xc1, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8080, 0x8, 0x6, 0xb, 0xfa, 0x7, 0x0, 0x10, 0x1ff, 0x7, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x62, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x4, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xffffffff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x1000, 0x1, 0xffff, 0x3, 0x9, 0x7474, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x1, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf2d, 0x800, 0x0, 0x6, 0x5, 0x4, 0x8, 0x7, 0x1, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x9, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0xe, 0x207, 0x4c28, 0x2, 0x480, 0x7d75, 0x52, 0xd3, 0x8, 0x0, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x7, 0xe, 0xe459, 0x6ff, 0xc4, 0x80, 0x40, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x9, 0x3, 0xfffffffb, 0x7, 0x20001, 0x8, 0x8, 0x40110a14, 0x15b9, 0x4, 0xff, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x7a94, 0x7, 0x6, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 7.629230647s ago: executing program 2 (id=2320): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b6393e90e9c35c278107469c5069f9af1b6cce3add48acf544e1ea61e9706b8311fde34712a361da44539559336541173354d63a7443c34bf3956a7d39dfde18f0ef3f45b4a695e6663524020e87c5f94e4bb4fd9243eb345fc806b6a763acb8b0debff7f96696466798cc6d40471c26cf1cd03a40d72ba67c831a1ab417eeedf86904ac662460a2ee7f9830f6ff1e15957580ae75bbcb393ed98850dd00a952a931584869bc3da8f9054dfc58d7309c1d5024afd7c862d21ce", 0xd9}], 0x1}, 0x40000000) recvmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001080)=""/215, 0xd7}], 0x1}}], 0x1, 0x200, 0x0) 7.387051862s ago: executing program 2 (id=2322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xa7, 0x807, 0x2, 0x72b2, 0x600, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 5.468889494s ago: executing program 0 (id=2324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xe, 0x6, 0xc, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x3ef, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x5, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd23, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8000000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4.299919557s ago: executing program 3 (id=2326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) 4.198751984s ago: executing program 2 (id=2328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 4.197781294s ago: executing program 1 (id=2329): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) 4.189838835s ago: executing program 3 (id=2330): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x891b, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 4.043029264s ago: executing program 0 (id=2331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="0600008000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e9ffffffffffffff0000000000000000000000ed00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "0600", 0x0, 0x2, 0x0, @private1, @mcast1}}}}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000000)=0x3) 3.957042529s ago: executing program 1 (id=2332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="740000000a0601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.955140899s ago: executing program 3 (id=2333): unshare(0x24060400) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x10000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffff7) 3.875160225s ago: executing program 2 (id=2334): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480), 0x0, 0x1, 0xd) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 3.684343787s ago: executing program 3 (id=2335): syz_usb_connect(0x0, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a2401"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x8000000000000002, 0x100, 0x2, 0x9, {0x6, 0x9, 0x0, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0xffffffff, 0x8000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x3, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) getdents64(r4, 0x0, 0x0) getdents(r4, &(0x7f0000000340)=""/151, 0x97) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="2c7f3a6fc245d681b084e71bc56b18ce046e3a78ede7077c0fa7890497e6e51fd41654be1eb9c2d19317839140b4519f3e8565dc8567eb4b60ef31856b8e5102bce08854a96fa59e2f9514cc941a2e3504fc642f22ba91631cb35ba6f5efaa8802c2daedb17217aa436fd3590f633dec00a56bca002732e08f28d42af0e9bb20e30a34ffedf9471ab60e2f7648d568edb191c6732ecf6704e27e979602663071244e9155fb4408944b5e4a60149debcab2f2e13b8200e917010b4f2dc8ea98d45a77ef00daec0f4852d2ea050606cae921869f9c5f6e5eeb4b1e83ab8bb7b28a69abd09e9221a22bab9f4be89261775b6932c5cb364895849722c4b46ed80289a881638b763d84ce5f70509a47f08c4f20e02119d15f1d85ac57c9ed6fb042fcca5cfac8fa563254ba5d093ee77d00ba8a73e328777d8b4e8bfc298e2d51ad63d8c546480093883aece2e0692c240f45b6771adb53c79731488afbf6231364c546daf3f55c48c79412c1b2c7b2170e29c514046d095e5fcaa7bf5d18d06ee00b067a23f8287929f977e9740469f479103d44df9368f5961998829cb66cf61ed458b1a55d3328cb757894d3202e886645122d995d3cd2c30c47ff46897cb880cd1409026cee957dbc154665664cfb725eef87cc39992dcc7b740693050e32398c91f1cd13a9fe7ef5268e8602149275c512a2aafcb4e9b3d484f7814516c569299b9b81a02facf43c0c5753b3000fb68f29c88d1e920c26f9ca0c002a20fe64857a025b249cebef97915dd708f9006cde6a7dab39422cf537ff9ef14802526a70bf477504c3d1059a75d8eb5378528c5edaaa096019bfe89cf9ed8b9aded0d93bc5f0e6dc21294948b630a5c1613ce168338152e1dc63c4d63b9bc64aad9836e24019d32327cb30f3e22a509dcd210d1e906b57a96013c589e8a96edf92baf736f0c69988030d93c5afac4f31d09a2b23d0bde1c818c58ce828d33bc810d8116807ec1a4acf537c077b1a5956edb9a581737fd3039420750ce4ea71564f071b55682487ba33e1478289a37cdcda771feb1d5864fce210036174bd24896844049a13a4f8a540bd7dfe32cf5896e2018f1b1b7dd603a019c3f5485c851b9e98e3110719c9680ba15578cbb5120730ebe8860b199eba93fbd63bb5150963bfac8bd5893a1b3d5ae457a1d74a8684aa7aaed4a28413ab4d59559cbd3a8c592c7bdb34e03e36809d9d8e470d4a88d38a6b1ffa1be60ab73c3eaef6a07f1d1572a438acc52e4a4d370eb87f3445daadc7ae52c15523414aa0b21abbef0bb97eee7b84e5e4d6b4573ce84eb16cc9139a03a100adad0aa2ec509b3fdc50aaa37244346071fdc3b23d10df5a9eaadb9aede01e02d67d0b5924a92f1d24c6d83329c4cec5abfc9678fb7dbd1aedf558eeda4bc917599948b8efafc9fbe0052559e9d2f94b779dc3b59825ae867bf647de5211ce8916c8ac01347804c9c5fe7958d44e63cea3241eeac5981ed5d93cadc2d21610f7d398d4526395d71cc97e5fbb20396a777977d92c47b912f0fcc93c171df535729e783337d0260db9db9959909c4913a3496f23244258419562f410ee8d68e30b05fd6d5cc88dc39659540d74a9d1eff09afc760ba6a32bd6405377881716de82a22970678c792d46b71e268ddcff321e1109cb27051ca54d9093da5e32d17bda5f90ee37cd172585489ff764f16adddcc59e94e7c3159ae4f60cf66c05af269d93f350a58ea0d5b6963a70264886170142f0502e81f0d922004f1776014ad2ed56175340d80f424702966438809542ff082033d1bcfd428fab8d54572a84fd1c1b357e8bce5db197af4f3110ef2b23379103e3f7d188f50c45e057cf468ef3e44123f7227ee60e2bbac3ae0311d9326660f8208e8544dc5aa66cfb3b9598585594d1dbd60f58bc7364baedc58062fad0854370d9788da40cebabf1ef729ed92ebfc74627c55c1b37ddbe7a2c8c254cf4121fc6d6686ae23c620e6615a594b975fcb49a319ea27a668c555dda48c4a1b40bdd45adc170d0cf1e02a5aa3856ad06c1951c77745e72420aca20348aadacb0ba9dc66ed46aa56c939228cbee5c8ad7f7aca94c2302c4908476290bdea9e7d262c23d9ddd9d5855eadb151eedf6d8d95766319bcf330a94110b0895657dcfb7d12dcbab7cc15df4b3cca9ff3b2295f0ad13c21f22573d1fdf5630c79b5fe46f1adfe7bb9cadb850418aea1ff10e2df9b49c5d07a000a619d21e13809414549ee0d89cf39f3c00fc2113b2884edbf18b00a8b1103d4f40bd5fccc6e50d8ee3d0f2588774fbbdde3869ac9940d74feb11983244a4517d57690a6503c63ed56d7d52ddb10bc0e331f4738b804c429d1c208de672296b3f87acbac1c9874e0f0b33edd5e1e2ebb0927730c86d7ad07e36402c3f1515d4cf29ac68789242f44bfaf775e5ba5fcfb6f4d4371ab8ad9d6eb8b2ae27fa8ffc9801fec0a107d19ddd4c25d36eb750ef4ed805e4fbff4122bc2b8afcd329c9170ae410731169f11e2015e9e2228d37b775809a28ec6a3b67e0572f47bf6498c2a147a594ab309b6a18ff5b8f41fa8535bc3b342bd5c23576c2fc78626a84765c71644e8bb2b033a5080f70ea05cbdef77922a668ea9415ca6602aab534187402e2840393854b331e91dbf9ac337a6d0d80deeb4ab423f0690babfe0571e355d2ac548d889abc896cfb867c147b29162d47899c4961354a5531baafa04aff30f1ce0eecb8218e922575037c19ad74f76e489a2d18b6fc5f1fa765a005c9acf03aa723f7321e8eedddcb4ebc839c188da378dc15575a6804e0cd79b9bfbc0c7fbbeaedd292b14644d3e962cad174fd62f9ded4630d27b6ad66575349d96ea055f26ab5645a41d64706c47036674180ea39e8d9031218bba148cc26d77fff99029629b88a644821f5e8149011cc0e2e3803680eda38bc771ff7f5eff707388d1d87f94cbfaa55e1a0de5e945f3aa0086114b5c64f29a0d09e2a7de267d61ba09b11020e34b17180f9929a1dd3d781df95365fd638cf3d858755b481880c6e529cc44b9fbd417a7cbf4f4e7bc5deed2c7f038afd951872baad9799f53b197182c917d3605cbb5de2c95fa9d09b883c3d9f6cf1cb30ff6aaadd6e17010325cabdb247af05faf9df9b0aee027857f88c3da7ad19e08da3cb5f663cc9dce6eec8416a0bfbe2e77a5b20a6da4e4acc9670c7cc63eddf615d13fd89e2f00aefb1439e69a2818b8f24d7ae04bc718a401fba508b0685e1e52dc7bca6c53c049d757d5755ba6394427ba45bafec43c39cbc3a5f68b88afdefa51df6be63a0c63f39c69e2ad10567cf7b408e15fd441ac365be897d6b60fe30bba997045c0ae891326369206cf9c53a609292eebe3f67c58964535710929c37211cade7dae9c965933b1aa2377d056ae400d8ef9f540f11c907f48858007fcb9303b0f2814cc6dd30636389f167d88847c9a55fb6a70adf41e54f7a433a79c9464f72ad2f615386cfa0b14081f1f55eb54b9dc96f4910ad369f37cb33259a4fae1dcf051699017ec8dce20f5401a768275f54cb61c346f06217de6eb195982b49b0a576d894fdeb1796a1b99b72d99783eca623fee56d239c263b0db23caea3462136cdac22128f0acbab8b332a7c1303bbb5997114f987398e0afbce9678ec9ce3a93b7d66fc8359c9ba1b53a65d90a1eb62caa8c56b98b337289809a56874f631edf56c508ef43106147be721c4597291f19dc8cd4150d2b34ea30846fcd8531b34dbbae516e7c42366e980c91d0180421195fb6bfb9574c2741d0a45583e275b1fd0e48f4b164957247b81a5c0292075a38f5016ab017d39c5783eb8b602281867cfdd980ee1fbe181617c526f2b3bc64905474d352b07ae36e89f5829c49b3bd2f27df0d11d1b893cfc16d2e3dcca2adc1f54915fdf6bf55be5995197bfdae10dec6556ff5f61e5e1f64112f153892b79051fa92f852854360eab66a2d9012eca143affe992ed5ad883bcb736a883e12c25d025790a1c477258a413b71fdf6321f2624efbe74f7bf816f6b07ef348bc8a8389c73293f320951d093307baa49f7544bab3b51cdc52a0cb1994358d4ca436aa66f791adae81921a01c807f1212e38b7dacc6ab7cd2a0809069c88787daecb201e7e82d321248c1f747eb9c31f76017436c2aa345c13ed45227214d37eb6701c15ff52b1d5d3d490dc80d67bd3b779009939a7dd65e759317103f21695ba06260f455d98454e3992f419899047e8ae24ef10b3c96621506d65a5c20dc5732a71478c019b240f1194fc959d77df7a1d5d6b1b6f8f43cf7e4d4d72dadf888041c3936f354045b15f2530bbdc38a2fbd8a966732ffe26d994b7ffa0c558259ff7395e4bad1f3225250ba85707e5c653e742bed1a342e6fe56c75a4c7cdf7f342e83b6a83e5dff2ee9aaab8edcc7a3ee33631887b2492995da3190e3ca8ba74ac2732a27d6524218605207c8387baf8372e3cc79879b78590dc5447ddc0aadd6c7aacbd354a445d826d6a07f89245c26ea48871a01dc9cdb40e0c6d20e5aae8141aa3aa15b5e6c85abf6eb8be70b056cabdd6da3f383b8e94fbbb1a0d9480dc55542cedb897a90b48a61776ddc4532c995c10c262c22bbac38ba5b111a09d3587ea98feaa6288bdb3f5bb3bee3ea69e4440f0192a34bf3498b933abdbfbeec830a6e74171cedc90847bc05047402f7f0501e5ca2503022c613dc779fe618ffec011ff69b9e37ad5cc2340f28656093f792742a3069c8a96e213cde8c33d110a2723bd41db10e3842e4f019f10b56c18d2093d9b508a043e1242bbc9de165f21df3530c470cda9e60a3859833bcccb9715ffd7313bac4ac1b9c1d0a3e71bb5ddba842084683a3e2ebb2b1d9fc9dbb6ecfc92af8c7bba41f3eee1c861e73d1e1e6aa7310b9adf5fc32f94913ce8cb2f924c6fb5df0be37b10d50c58b201833b03c1712d4fe50a2054a045084b892fb77457d2f0e399256a599bd91feffe659f3feeab33f8ffa4e4747ccad3814d43980d5cdb46b3a1f033b782162cdc89162a1d901590f5344781ec7d96713103893766684a4a71bf482d4223ab8c0f71b09bdfe176063ba3a967f5b5907f501302d00ad10f030aa640559feca28d9d2362ad4be69d9012ccb8ed8bb031ed27c03134c2e00de5743adf4deb78f3162f3d194d70250b4020ff64d52a30755e699d58460cac659c63c4633b43317a2265d8be16bb1abbe492033ede9d12744741124370e441e6614ab896aa239b30cfe55db1cf09c527fd23725bbd209e89aab62e517bf1449c2fbc203d78ad763892cdd5934fdbc97f023334201501260588ec39bc7b6231fe38b5b9ac8fc121049cd61c33fd23ff0480363ddd82fcb6f5d118724427fde4671cd416b96298727927f476e83bbc17f0856c7988b88e76f0cedb5d397ce4cb76efc02d7fc626e838b08ed594659cba8537f319585365f83b1269c3d4dd253bf238690dcf542b715b419100b03857f57a0dad7d2f0e099597de6bdbd9f0e18ce6a6ca478bfd7644e3ddb913bef96569c74f5733176fd25749436d6f6c8852821ad5653401814657f7ff5ccb1d47161eabdf56573f38f766827cb8bbd1fd9fd26d5eeb2e9dc5c0b0e05d0a8e335da8180f384c6bac1ad872accfe09ac9ca9102f2c35dad7689cf734a5378dc8d834b267560a089da2372d5cfbbce9aa13a55dba0b03def8ee1dec2f6a97ff7ff9a35e65272a0fff7db3aec4e9456b1d310f9b69e910be07fd161de8f67b845805282a51572a7b3668c923d03a600cfa68a881bddcf814ff4a98d9adfa2d06e883d3e65f8b6d4ca5dc4667be08449be9d08cd6fbb78c11873b1ef3f081b10cf6314bbd06ffb380df233d0e644dc8ee498bd95333c2daf9db0e6801fb274577205e791071debdb01d9786b1cc624e1425b1561afb438feaf5069937de348c51e0b4c79c88856791e9bf736d6c748025f9b28182521b67596acdf15a9e41fa02b592de42d72702ba41c1976029e082d4bb2f63da60d73732bb98783db88cc0d09e849ffac5323b2b28290ba34d1a3e0c1228a2fb0c2e92503b51d54fd0825948ca15c5511b032c36cce2c04431a47cbc378e3ec1c57ad3b37aa2b667bbc23f21880dce621a3b203579da06ffb79359619b181a72ed4d192e52c13f2dacfc18ba40f7254071e1103a164f5cf8323bbec9cd9fa6f2c9eae70715a1ef57b18c6908dabb0f7c1efe1a6ae9b6068e510209d54f760f922ed4401f1709ab65a1e4953772054d585b8a8a738463f6d70ee9dc180feeab307e6ee094ad80050a3dd450a75a7e7dff6e7a74256f2b651ce905d1c99eb30786c00e1544872b76892286848b297f31d8222cf23a4a4a664bd784ffb7a2c3abadac43cc7a791926e59e0471bdc45186ff4f564b68a9b8beedd2ef63b79823acc0a81c867b443d8f8a2242e6efe1838a8db801930644cbc73d769c0e1668a413eb2609b6151329edce4a024c5ff11110beb54a408e752729e033baccecbd321dfd8e4f16f79d16d13aa4ef212139d0cb81c8f755b6d189ef9c2869e5c2cee655df4b75c00828333c8b62c93b3ec270fe0c1af3fae784c950b441f6f78639ea5678652fbd216700d4ee85cd8662db78a061e959507787e12c7ba002f08fa01a860b34549e89bd1d3da3d23befc59ce2d50abcecba8671f4e8c312816f3977e65479b6fa8cfc618e1f569e9a12c8faea700e86748ff468c43adbd7ea74ce1702d2659bfc26ce49b24c62731dfc1f161bd31d8b6af4ea1100caf248ec18976f1a6c8143df40416e42ef9d225e40436b5fbf34450fad6f3bb8abfcffa367e0a16305dda8205bfdd33625667f709ec3a947e6ea1329c4f7d7aa8917aeccd6078e54ec7196ec7dfb27ee64e26df48a6a705c2ce330ca7b3f21a9ba1f55e2fc334adccbd7b05b489008a6d8c01f81b2b0d8933770e277ab8ceae9776e30df8573cc0032c487eea774893b300b7680188093074c71b4856436fb6dff8c82de2e227af5ea8dae0387a239c70ed977b9bc3087c55af8ec448eb4d819156fde9104bc6443d49ef5a4f3cf27614b99507c894af487637377d06476b3671c7158a870613e0a7d9ee3c693a7fd132adcc06c22e6d4655a2eef2570ab323f8a5a4b50360b0ec14c528b6cffa26b160a07c798947315ec19dafcb805b06dd45fd9a2f328dff773e680435b53349bb241cd82842f915fd23b27099b5ba5483a81fdea7f28408654f4932edfa33d10fd90281b208a9a5915543bc7e15427b4e5db36d1d1ab238e1c1cd5ffb646bf7cb033dd613bd2ddb6d56983d943618c5bd0e44f5c2d981b54ec7e5e7a988dbeb6d8b7c2707c3e7685ddbfe80fc77c1d9cb31c63c5436cd5b2b105dbc1cb7d024dcda8a47ba30068f24677b38503ba582c286437435d7b8a16dca4a56dad4db7e715a578391acfc62d6350ef92ef8b789877158c904803c3354affc8a235f2cc768856a13edf0a4cd9de6b67f7333e1b882a8ecadeb0fbc2005a708f838daf2dc86fe35d953a15d2ede3cc093e45f2719653da1d8936d10c596a66cfd588b5663e8c2afe73b5bc23c967826cf4d24fbbf9d68d18b8f65347933238d7242f69a458959cf51ae79f3f5c5a7180fe23cab53edbf0d81534b7f9b5c697981a0822c36aa483fd95111417834e5062e4ac25817727ac3380c91c7440bcb212a4354035c3813664c0fbf042623bd791873e90646940ef658f4784cdcb714e55d48cc3a30b0195895850aedc32df9435a53c0a9fab07ecfd8778d64b44be1d270fce94c2ff04e984b9f50d541e4d4d871d193a37a05f83d557be8d9cc66027d7dd3a6315b3c9838c0da8c897ca81bcb44e076bee3a7614d9806d018541c46c196b7fd677e2960306849be082875b535dd411428847dddfc2ee9af77a16c282c1ad32151ad2e2ec2a9a1281c593bddddda03afe69cd5bfd83a6e416fa2d47066533877a4dcf24b24d84dadd27acee6127fd94db9be4e3efe74650f2ad01a9adfcecfdc535cc48e3b770a9a8cde6cea193501fb89097c97d25f1bdf00c8b69ce94bd38e1c133b9f52fb8b05a7c477ce4bcaeffda896f457e21e4e93c779657cf05712a7ca161f9680a8619e1dee220ad153729b47789e737675a04733cf94fb494ecebfc8750dfe44e3959558d21ae42f76b705bf092e45445b2521162409cacc720aad8f00f5821f452953512798548369f5a5700c8d02d49cf797e7a48d05c7d7fcc09b9bbe21a907c81d5f4cbb978f21d25d802a047cd46640025f75f2c01c10a21c92a9dec5618dcbd6025dd67b215b038aaae91e76f7c729dd5b61092858013930675f124fc3c62b130f0d898affd9972a202785def90fe7f9ddd821c7de4b5acc2a30bc74085225c23e091cdb2ec42df6f5c88a6666ced41b601374c9e761c0686f71cc1c8f0daade0ba730dd6c2670df4db97c1d1ad250bf7eeaf7f5309ec18a4331e0c3a9808832898d208d7cd293bdfbb7c51d17e3f3d1397a579b8c81e5aec1e1b0ce4cd796f1cf68a49b19841126c73affc13641756cd954ad3c0e62caca61e71c9491441a294739e172d3306b00e4230febdb13bd7630184c8db1dc363fe62015e5985997d56b059dd0602b98a6bb4c0a8e0a10853cc19b2e9e187c0b2e8d70789cb863c71544445acb31edb4459698a21c1aed76a592786053f904f144d5e7715737c253a34a038cc47d4877f8140eb06fd7da9633772b445b21a7c6fe985997b64732bdf022538d57952f6f7340981ea8a2e1f19d639a3138e5f1e58f9413e74d1017f6f0649be152a3fb01a6f53521a446fd5f1a70d0279730a4ae15bc300490f55880232a3dc10a6519dc7b489160ef480e8fb3029428005c4cbee70ac0360094228e70afa66460d09e8d6ea83e89932d58a6a7ba76059de6ed122d3a02ca42bcb1572d214112e906ee607351663efea2dfd7d1a2bcb6d1d9f5d8351703b990944ca1db5452132de124677da884939c6b4890cb94f000d71f2edb511bb94a4f61afb5ee1edc7f4e14cf81ca27bbc5bcf7dd84dd495e0f174d3c9b43469c1ab1514430d7dd3adce3bdfeaa714162ea45e43f6a3b57d719449c7a191383d23069779fe7e57032c2d37d04054728acc67c2c87351d7615239978373bf22d2f5d70366eb7f3fb4a155293f98c9078b28aef1449e552616dc44963dd2b79061784f57a72105e180a6b2770c7cede4d321efda0dd526e0b5c05af55bfe606abf51569316dc0bdbc2f6f46c47a33b4bf9536acdf783dee9424605bd290f6ece0745b0890d836b24efb5361c457cc5fe6a61fe5251d60c60819365377c878a3a53229e88f3b02616ed33a23b46da3d3ecec20d174981ddb45bbfdafafc6d3296f6952e063f24a5024499b1a6b2045a29c1b8a7090e70c9f32bc187da0df89e3a1445057010206dc172ad0e247a84d8f665687f5c50eba70e019b88ebff42e9091675882af7c04c540e5b779603510d46f8e504a8a0cdcb9709ec0db4f882292c791398eefe3ac8951c0e055872c8cd29acf3b785dbd145a7c5b9e1e57853e6287ea09c2a167fd3f55ee323191dbc54f77c6875cd000a587896c658ccf47c66727d4e866206edd84b198a39adec533369ebaadb85b230b3457ed685548aa09c7c8a6e256b4c668a27a85871456e447fc221228a205ffe2b78276928416626d788feb47054db5409b03d923ab7d5443b135161171f70eee14f596d386707354be9422fcc4f3f318cd81ba2cce3e3d357b67e8fc70490a9a04d639d772077d5d8fb5665e4721e8142de055952f6c0152eb59d042f336e8e3b988de0cbad82fed64932fe71c3276ea1ec3034799b32761c71534f3b3db4037a9c541ccc6984b963c8da9cdc1ea4feaeb95ffece5aac1424a4e9d5e215c74c0f5d760e82d92126fc36eb5809ccc9e84e185494f5c0d01f68fc5623fedf20ba355166f22deabaaff5911b82ffefcb7e625ba4c3fd280d49eff03fe4114ed658c43a9d5321bd20ab75055fc3ae4270326f67e6d4ffc4ec54a727a5385f690aa18ca103edeeaf1725d4e13a7079314165e0ab1ed9e035bd530aaaaaee8f7e2a0134be70988795b535aefa64a8f52efb7ccaa3464dd9800a4281443dadfcc3d31d1acf1e205ff6f351a15efb2f19d587fbce90029ab9bc9d3dd3425c54b836492ae2c3726b91ce7e4b5082d83c8c22e394a529cb301c1288c03da50b3f16bb450522fcac0a2e7508640d130682557a615906be3506c27e6edfe2248182a5eb8f6df2da7be7d8db534b4f39e9ef46f336340e820a8433fd5df91c629e6bb459b770f750b3dd80f402b9297e72df4ef5a06d0e43acde89303cc7f5ed771f2b9fbc97166c48b277f6aa37766903d7d210899eede048a3ab9485edd521f917488913b5da3521c7b97717d27c26c7416276e9de97ea8427060c6c6c1d5049af3d793c99dd767177a6d5b123c688f93050956b024d4d49aa4573e9e99f9aa5402da85eafc14979cba26420a6bf0bb2621948295d45c3279065cd3a7313c280864f78d4b274f5f92adb20e374c6d2f7cda8938a52da1f56ac226612b95ea1e4ef5bfd11c5e3fe9604972447d3aa7fd4d78f56ecd2dd3d9f79ee12485f1b8ba3cd86e62402a76a5cad273a5446da398a66f4c36cd14bf834cdde99f18201ed3d1922b48171cc9b62d632b5fb34424e610f2fdcc8595d28842d78b26b1f2a7dcdad1c02f91a09626079470eea9f90d08a543ecf9e6b50756a160d240bcfdc5f3ee6ed995c98fb64efca7dcdba8223c07902e3117161ce2ec916888a9780cfd34ac52083301e30fdddb111c1bb61fe38d3489f09f89ef5823a6fa0b41ea013056c0a7f27ed2f3deba06b68661f5eeffe5d53829edace17a81d788f8eb8c7ce644312cc23e9b6ff48b0153f7df30f544e33f9b791ddb45e93cfda5f9874ee1e70c0864cd295be114ab8dd42d89cc1b4c34ad91d5779dc68294c7085a166c917e72cd09b637307a1fc5efe6fe163eabe16bbbca30ee1f292a904156ac4782889378d439c3dee4f95bd63c59b5ce44104d929c93c0648279b98cb7fe8ba7638d94e8e77cb74e2ea560932b3a28017783230ff22287e5c00d93f6923f8b6edccc412522f3fcd3c9146cb5c43f261705a08c64e84d923ce6b1a06e922c8dac6d7e5c22b2e5c9b8269b2810b490b8a43c0fe42b298bbc1f03f62dcdb67e24e89b14f7558fee85ca00f0a3d34b1664aeb940917dd3f1a08c5db10858f4cffee54f480e816a6dc9553b5043870d7f0a76134ee95a5a688b50281a1836fb721abe9105f9dfd7173f32bbb2bd00a75af11bc3a7618a0111cb8d5e30c5af5fe512bc23b5c590377817c063b25e2f5eed4a64825d4ca494518c4c0b9cac88cc3ccaa5477ad3e9c0b3577c156e88cd4df354d383efa800536d62790c86feb6a862cae1543e3e9c984c64ecb2b25319d62a3308e20b8ad261ecdb746bf28f58220c5ebe03204d5fe86094d81036a36ed905d4cfcc8054e7947f3ac9e88897a983adce3e3724745df71395b959b067ddc1bd8c30f092546d25a0b24f5df9136af84fb76a96d3eccefcf9ab5", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x58, 0x0, 0x8, [{0x1, 0x3, 0x7, 0xfffffffd, 'user_id'}, {0x3, 0x40, 0xa, 0x8, '/dev/fuse\x00'}]}, 0x0, 0x0, 0x0, 0x0}) 3.680812347s ago: executing program 1 (id=2336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001d80)={@private, @multicast2}, &(0x7f0000001dc0)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r3, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x70, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8014}, 0x44000) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[@routing={0x84, 0x2, 0x0, 0x0, 0x5000000, [@loopback]}]}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) 3.639800919s ago: executing program 0 (id=2337): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 3.364784817s ago: executing program 0 (id=2338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x81, 0x8, 0x1, 0x1, 0x9}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x20004884) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 3.363100727s ago: executing program 2 (id=2339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xa7, 0x807, 0x2, 0x72b2, 0x600, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 3.348272018s ago: executing program 4 (id=2340): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}, 0x1, 0x0, 0x0, 0x44010}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_EMATCHES={0x18, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 3.347248558s ago: executing program 1 (id=2341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x884, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x92, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x479, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0xc31, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0xb9, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0xc, 0x5, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd9, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x200034, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0xffff, 0x5ca0, 0x3, 0x1000, 0x4, 0x7, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0x9, 0x66c, 0x7fc, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x2, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0xd, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x17, 0x2, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x6, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x6, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0xb, 0xce3a, 0x21f1, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x1, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0xc24, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x7ff, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x80000000, 0x400009, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e9, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x5, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x9, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x8, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0xffffffff, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 3.093272984s ago: executing program 4 (id=2342): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) 2.957051583s ago: executing program 4 (id=2343): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x891b, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 2.891587287s ago: executing program 4 (id=2344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2.733993347s ago: executing program 4 (id=2345): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) read$char_usb(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0xb9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x400, 0xf, 0x7, 0xe}, {0x6, 0x24, 0x1a, 0xf4d, 0x39}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x1, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x3, 0x2}}}}}}}]}}, 0x0) 466.92354ms ago: executing program 3 (id=2346): open(0x0, 0x0, 0x14) socketpair(0x22, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 314.96175ms ago: executing program 0 (id=2347): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 240.133375ms ago: executing program 2 (id=2348): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{}, {0x77359400}}) syz_usb_connect(0x5, 0xb1c, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="32032b8943bf95e2bd594a0b20d7039f12df0f378772179ff881b64b7dd3255ff3ce514a4030b3215a2abcd79930216d95d3"]}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = userfaultfd(0x801) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x2, @local, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f00000006c0)=ANY=[@ANYBLOB="5b685e7e778f09b16926e2b686dd6a00000000641102000000000000000000000000000000aaff0200000000000000000000000000014e234e20"], 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 222.233856ms ago: executing program 1 (id=2349): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 34.886108ms ago: executing program 4 (id=2350): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xf}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x45aa, 0x2, 0x6}, {0x11, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000540)="1e", 0x1}], 0x1}, 0x4c00c) 17.438359ms ago: executing program 0 (id=2351): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) 0s ago: executing program 1 (id=2352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001d80)={@private, @multicast2}, &(0x7f0000001dc0)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r3, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x70, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8014}, 0x44000) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[@routing={0x84, 0x2, 0x0, 0x0, 0x5000000, [@loopback]}]}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) kernel console output (not intermixed with test programs): has an invalid length. [ 78.782372][ T4431] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.810181][ T4431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.817549][ T4431] IPv6: NLM_F_CREATE should be set when creating new route [ 78.824982][ T4431] IPv6: NLM_F_CREATE should be set when creating new route [ 78.832230][ T4431] IPv6: NLM_F_CREATE should be set when creating new route [ 78.841654][ T4439] netlink: 'syz.3.17': attribute type 21 has an invalid length. [ 78.856850][ T4439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.209723][ T4479] netlink: 'syz.3.29': attribute type 3 has an invalid length. [ 80.322148][ T4483] netlink: 'syz.2.30': attribute type 21 has an invalid length. [ 80.335487][ T4483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.830011][ T4499] syz.3.34 sent an empty control message without MSG_MORE. [ 81.109317][ T4508] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET) [ 81.398140][ T4521] netlink: 'syz.4.42': attribute type 21 has an invalid length. [ 81.425283][ T4521] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.455677][ T4521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.463039][ T4521] IPv6: NLM_F_CREATE should be set when creating new route [ 81.470392][ T4521] IPv6: NLM_F_CREATE should be set when creating new route [ 81.477721][ T4521] IPv6: NLM_F_CREATE should be set when creating new route [ 81.561637][ T4527] netlink: 'syz.2.43': attribute type 3 has an invalid length. [ 81.891968][ T7] cfg80211: failed to load regulatory.db [ 82.783875][ T4551] netlink: 144 bytes leftover after parsing attributes in process `syz.4.49'. [ 83.479057][ T4569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 83.731940][ T4575] device syzkaller0 entered promiscuous mode [ 84.127050][ T4585] No such timeout policy "syz0" [ 84.510700][ T4598] netlink: 'syz.2.64': attribute type 4 has an invalid length. [ 84.520268][ T4598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.64'. [ 85.084490][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 87.680383][ T4624] netlink: 144 bytes leftover after parsing attributes in process `syz.3.71'. [ 87.864267][ T4654] device syzkaller0 entered promiscuous mode [ 88.051885][ T4656] No such timeout policy "syz0" [ 88.341620][ T4667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 88.577128][ T4673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'. [ 88.625138][ T4673] netlink: 'syz.1.83': attribute type 21 has an invalid length. [ 88.635190][ T4673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.148119][ T4692] device syzkaller0 entered promiscuous mode [ 89.814121][ T4713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 89.852958][ T4713] netlink: 'syz.2.101': attribute type 21 has an invalid length. [ 89.875988][ T4713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.623127][ T4742] device syzkaller0 entered promiscuous mode [ 90.717833][ T4745] No such timeout policy "syz0" [ 91.422236][ T4767] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 91.472642][ T4767] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 91.505752][ T4770] netlink: 'syz.2.123': attribute type 21 has an invalid length. [ 91.533497][ T4770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.837167][ T4789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.130'. [ 91.913479][ T4788] device syzkaller0 entered promiscuous mode [ 92.092850][ T4791] netlink: 64 bytes leftover after parsing attributes in process `syz.3.131'. [ 92.143371][ T4792] netlink: 64 bytes leftover after parsing attributes in process `syz.3.131'. [ 92.402956][ T4807] netlink: 'syz.3.138': attribute type 21 has an invalid length. [ 92.411824][ T4807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.703443][ T4815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 92.744506][ T4815] netlink: 'syz.3.142': attribute type 21 has an invalid length. [ 92.752516][ T4815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.806948][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 92.893943][ T4823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.901339][ T4823] IPv6: NLM_F_CREATE should be set when creating new route [ 92.986880][ T4828] No such timeout policy "syz0" [ 93.511913][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.519913][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.081429][ T4855] TCP: tcp_parse_options: Illegal window scaling value 240 > 14 received [ 94.114588][ T56] wlan1: Trigger new scan to find an IBSS to join [ 94.251500][ T4823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.307899][ T4823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.842613][ T4823] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.852039][ T4823] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.861666][ T4823] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.870627][ T4823] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.972373][ T4857] netlink: 144 bytes leftover after parsing attributes in process `syz.4.159'. [ 97.153515][ T56] wlan1: Trigger new scan to find an IBSS to join [ 99.355721][ T5011] device syzkaller0 entered promiscuous mode [ 99.455961][ T5023] No such timeout policy "syz0" [ 100.115828][ T40] wlan1: Trigger new scan to find an IBSS to join [ 101.051568][ T4485] wlan1: Creating new IBSS network, BSSID 4e:63:27:4a:b6:b9 [ 101.567844][ T5043] tipc: Started in network mode [ 101.572931][ T5043] tipc: Node identity 26ec765184e9, cluster identity 4711 [ 101.591641][ T5043] tipc: Enabled bearer , priority 0 [ 101.600040][ T5046] device syzkaller0 entered promiscuous mode [ 101.648690][ T5052] tipc: Resetting bearer [ 101.695943][ T5040] tipc: Resetting bearer [ 101.820488][ T5040] tipc: Disabling bearer [ 102.206825][ T5068] netlink: 'syz.2.224': attribute type 21 has an invalid length. [ 102.223242][ T5068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.230560][ T5068] IPv6: NLM_F_CREATE should be set when creating new route [ 102.237867][ T5068] IPv6: NLM_F_CREATE should be set when creating new route [ 102.245262][ T5068] IPv6: NLM_F_CREATE should be set when creating new route [ 102.326892][ T5072] netlink: 144 bytes leftover after parsing attributes in process `syz.0.225'. [ 102.505274][ T5086] device syzkaller0 entered promiscuous mode [ 103.111694][ T5097] tipc: Enabling of bearer rejected, failed to enable media [ 103.286131][ T5113] No such timeout policy "syz0" [ 103.594621][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 103.704441][ T5122] netlink: 88 bytes leftover after parsing attributes in process `syz.2.236'. [ 103.984655][ T5130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.238'. [ 104.087879][ T5142] device syzkaller0 entered promiscuous mode [ 104.096663][ T5130] netlink: 'syz.4.238': attribute type 21 has an invalid length. [ 104.138205][ T5130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.180442][ T5146] netlink: 144 bytes leftover after parsing attributes in process `syz.2.243'. [ 104.242090][ T5142] tipc: Enabling of bearer rejected, failed to enable media [ 105.252249][ T5167] netlink: 'syz.0.252': attribute type 21 has an invalid length. [ 105.301157][ T5167] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.320180][ T5167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.327549][ T5167] IPv6: NLM_F_CREATE should be set when creating new route [ 105.334898][ T5167] IPv6: NLM_F_CREATE should be set when creating new route [ 105.342147][ T5167] IPv6: NLM_F_CREATE should be set when creating new route [ 105.665216][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 105.721152][ T5187] netlink: 'syz.0.257': attribute type 21 has an invalid length. [ 105.746636][ T5187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.838236][ T5191] device syzkaller0 entered promiscuous mode [ 105.907025][ T5191] tipc: Enabling of bearer rejected, failed to enable media [ 106.440432][ T5204] netlink: 144 bytes leftover after parsing attributes in process `syz.4.264'. [ 107.987911][ T5235] No such timeout policy "syz0" [ 109.077446][ T5272] No such timeout policy "syz0" [ 109.300505][ T5275] device gretap0 entered promiscuous mode [ 109.528047][ T5281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 109.560557][ T5281] netlink: 'syz.2.290': attribute type 21 has an invalid length. [ 109.580820][ T5281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.761667][ T5313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 110.995673][ T5318] netlink: 'syz.1.305': attribute type 21 has an invalid length. [ 111.020969][ T5318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.302068][ T5323] device syzkaller0 entered promiscuous mode [ 111.391869][ T5328] device syzkaller0 entered promiscuous mode [ 111.628328][ T5331] device syzkaller0 entered promiscuous mode [ 111.731383][ T5331] tipc: Enabling of bearer rejected, failed to enable media [ 111.921332][ T5346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.316'. [ 112.757750][ T5369] device syzkaller0 entered promiscuous mode [ 113.097577][ T5376] device syzkaller0 entered promiscuous mode [ 113.446167][ T5395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.333'. [ 114.470499][ T5432] device syzkaller0 entered promiscuous mode [ 114.719389][ T5439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.350'. [ 115.344488][ T5467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.357'. [ 115.387828][ T5467] netlink: 'syz.1.357': attribute type 21 has an invalid length. [ 115.396077][ T5467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.641695][ T5473] device syzkaller0 entered promiscuous mode [ 115.774407][ T5481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'. [ 116.118707][ T5496] device syzkaller0 entered promiscuous mode [ 116.880168][ T5527] device syzkaller0 entered promiscuous mode [ 117.276630][ T5543] device syzkaller0 entered promiscuous mode [ 117.748553][ T5556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.024571][ T5570] device syzkaller0 entered promiscuous mode [ 118.213444][ T5575] netlink: 144 bytes leftover after parsing attributes in process `syz.0.399'. [ 118.648854][ T5598] device syzkaller0 entered promiscuous mode [ 119.420604][ T5622] netlink: 68 bytes leftover after parsing attributes in process `syz.3.414'. [ 119.500324][ T5623] device syzkaller0 entered promiscuous mode [ 119.787690][ T5637] netlink: 60 bytes leftover after parsing attributes in process `syz.3.418'. [ 119.808240][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.817554][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.918140][ T5641] device syzkaller0 entered promiscuous mode [ 120.053635][ T5648] netlink: 144 bytes leftover after parsing attributes in process `syz.0.423'. [ 120.819046][ T5664] netlink: 68 bytes leftover after parsing attributes in process `syz.3.429'. [ 121.579915][ T5690] device syzkaller0 entered promiscuous mode [ 121.945569][ T5703] netlink: 144 bytes leftover after parsing attributes in process `syz.4.442'. [ 122.127649][ T5709] netlink: 68 bytes leftover after parsing attributes in process `syz.2.444'. [ 122.469000][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 122.507083][ T5719] netlink: 'syz.3.447': attribute type 21 has an invalid length. [ 122.516117][ T5719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.858712][ T5723] tipc: Enabled bearer , priority 0 [ 122.888022][ T5723] device syzkaller0 entered promiscuous mode [ 122.913023][ T5723] netlink: 44 bytes leftover after parsing attributes in process `syz.3.451'. [ 122.955449][ T5723] tipc: Resetting bearer [ 122.990276][ T5722] tipc: Resetting bearer [ 123.066393][ T5722] tipc: Disabling bearer [ 123.154051][ T5737] device syzkaller0 entered promiscuous mode [ 123.276430][ T5739] netlink: 68 bytes leftover after parsing attributes in process `syz.0.456'. [ 123.472368][ T5745] netlink: 144 bytes leftover after parsing attributes in process `syz.2.458'. [ 123.832642][ T5757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'. [ 123.874169][ T5757] netlink: 'syz.4.462': attribute type 21 has an invalid length. [ 123.882053][ T5757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.473596][ T5772] device syzkaller0 entered promiscuous mode [ 124.985969][ T5789] No such timeout policy "syz0" [ 125.156750][ T5798] __nla_validate_parse: 4 callbacks suppressed [ 125.156770][ T5798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.481'. [ 125.309892][ T5805] netlink: 'syz.0.483': attribute type 21 has an invalid length. [ 125.343416][ T5805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.372388][ T5810] netlink: 144 bytes leftover after parsing attributes in process `syz.2.485'. [ 125.657831][ T5817] device syzkaller0 entered promiscuous mode [ 125.906214][ T5826] Bluetooth: MGMT ver 1.22 [ 126.144323][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.494'. [ 126.266764][ T5836] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 126.352544][ T5836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.633562][ T5842] netlink: 'syz.3.498': attribute type 21 has an invalid length. [ 126.651704][ T5842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.087542][ T5852] device syzkaller0 entered promiscuous mode [ 127.283046][ T5860] tipc: Started in network mode [ 127.309625][ T5860] tipc: Node identity 7611384c53c5, cluster identity 4711 [ 127.344011][ T5860] tipc: Enabled bearer , priority 0 [ 127.361948][ T5863] device syzkaller0 entered promiscuous mode [ 127.382963][ T5860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.506'. [ 127.416139][ T5867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.509'. [ 127.444279][ T5867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.509'. [ 127.465800][ T5860] tipc: Resetting bearer [ 127.490482][ T5859] tipc: Resetting bearer [ 127.530503][ T5859] tipc: Disabling bearer [ 127.548874][ T5869] netlink: 'syz.0.510': attribute type 21 has an invalid length. [ 127.558363][ T5869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.568102][ T5867] device syzkaller0 entered promiscuous mode [ 127.958946][ T5885] No such timeout policy "syz0" [ 127.959380][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.970078][ T4281] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 127.973653][ T5885] device gretap0 entered promiscuous mode [ 128.100529][ T5890] device syzkaller0 entered promiscuous mode [ 128.525815][ T5903] netlink: 56 bytes leftover after parsing attributes in process `syz.2.524'. [ 128.587083][ T5903] netlink: 'syz.2.524': attribute type 21 has an invalid length. [ 128.602307][ T5903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.990924][ T5917] device syzkaller0 entered promiscuous mode [ 131.113464][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 131.512115][ T5960] tipc: Enabled bearer , priority 0 [ 131.521079][ T5960] device syzkaller0 entered promiscuous mode [ 131.539792][ T5960] netlink: 44 bytes leftover after parsing attributes in process `syz.2.545'. [ 131.587362][ T5960] tipc: Resetting bearer [ 131.609397][ T5958] tipc: Resetting bearer [ 131.656639][ T5958] tipc: Disabling bearer [ 131.756902][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.548'. [ 131.785695][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.548'. [ 131.835739][ T5967] device syzkaller0 entered promiscuous mode [ 131.856500][ T5970] No such timeout policy "syz0" [ 132.726624][ T5996] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 132.772324][ T5996] netlink: 'syz.1.560': attribute type 2 has an invalid length. [ 132.858579][ T5999] No such timeout policy "syz0" [ 133.078479][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.760699][ T6029] No such timeout policy "syz0" [ 134.060645][ T6039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.580'. [ 134.079881][ T6039] netlink: 'syz.0.580': attribute type 21 has an invalid length. [ 134.089867][ T6039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.492832][ T6054] tipc: Started in network mode [ 134.514718][ T6054] tipc: Node identity 1e751ee5b159, cluster identity 4711 [ 134.528223][ T6054] tipc: Enabled bearer , priority 0 [ 134.559942][ T6061] device syzkaller0 entered promiscuous mode [ 134.610758][ T6054] netlink: 44 bytes leftover after parsing attributes in process `syz.1.587'. [ 134.658515][ T6054] tipc: Resetting bearer [ 134.682226][ T6065] No such timeout policy "syz0" [ 134.693587][ T6053] tipc: Resetting bearer [ 134.782790][ T6053] tipc: Disabling bearer [ 134.846733][ T6069] device syzkaller0 entered promiscuous mode [ 135.013027][ T6076] netlink: 40 bytes leftover after parsing attributes in process `syz.4.596'. [ 135.080076][ T6076] netlink: 'syz.4.596': attribute type 21 has an invalid length. [ 135.105593][ T6076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.449331][ T6091] netlink: 'syz.3.605': attribute type 21 has an invalid length. [ 135.467249][ T6091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.531791][ T6097] No such timeout policy "syz0" [ 135.551343][ T6099] netlink: 144 bytes leftover after parsing attributes in process `syz.2.607'. [ 136.015163][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.4.614'. [ 136.067630][ T6119] netlink: 'syz.4.614': attribute type 21 has an invalid length. [ 136.116384][ T6119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.298922][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 136.341876][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 136.373385][ T6128] netlink: 'syz.0.619': attribute type 7 has an invalid length. [ 136.415682][ T6128] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.425044][ T6128] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.434724][ T6128] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.443840][ T6128] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.517565][ T6128] netlink: 'syz.0.619': attribute type 7 has an invalid length. [ 136.768073][ T6138] __nla_validate_parse: 2 callbacks suppressed [ 136.768093][ T6138] netlink: 68 bytes leftover after parsing attributes in process `syz.0.624'. [ 137.815413][ T6161] netlink: 'syz.1.633': attribute type 21 has an invalid length. [ 137.847488][ T6161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.854922][ T6161] IPv6: NLM_F_CREATE should be set when creating new route [ 137.862210][ T6161] IPv6: NLM_F_CREATE should be set when creating new route [ 137.869576][ T6161] IPv6: NLM_F_CREATE should be set when creating new route [ 138.428554][ T6179] netlink: 68 bytes leftover after parsing attributes in process `syz.1.641'. [ 139.168198][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 139.237943][ T6190] netlink: 108 bytes leftover after parsing attributes in process `syz.4.646'. [ 139.370311][ T6197] No such timeout policy "syz0" [ 139.451582][ T6199] netlink: 'syz.0.648': attribute type 21 has an invalid length. [ 139.493453][ T6199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.053777][ T6216] netlink: 68 bytes leftover after parsing attributes in process `syz.2.655'. [ 140.258406][ T6220] tipc: Started in network mode [ 140.266793][ T6220] tipc: Node identity 8a14362ad753, cluster identity 4711 [ 140.278540][ T6220] tipc: Enabled bearer , priority 0 [ 140.376843][ T6222] device syzkaller0 entered promiscuous mode [ 140.653430][ T6226] netlink: 44 bytes leftover after parsing attributes in process `syz.4.656'. [ 140.696217][ T6229] tipc: Resetting bearer [ 140.725151][ T6219] tipc: Resetting bearer [ 140.822799][ T6219] tipc: Disabling bearer [ 141.114441][ T6245] netlink: 144 bytes leftover after parsing attributes in process `syz.4.669'. [ 141.474865][ T6253] No such timeout policy "syz0" [ 141.920018][ T6270] tipc: Enabled bearer , priority 0 [ 142.007938][ T6268] device syzkaller0 entered promiscuous mode [ 142.055524][ T6268] netlink: 44 bytes leftover after parsing attributes in process `syz.1.679'. [ 142.134469][ T6268] tipc: Resetting bearer [ 142.168582][ T6267] tipc: Resetting bearer [ 142.213101][ T6267] tipc: Disabling bearer [ 143.071548][ T6315] device syzkaller0 entered promiscuous mode [ 143.093437][ T6315] 0: reclassify loop, rule prio 0, protocol 800 [ 143.199268][ T6321] tipc: Enabled bearer , priority 0 [ 143.212793][ T6321] device syzkaller0 entered promiscuous mode [ 143.278121][ T6321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.699'. [ 143.310020][ T6321] tipc: Resetting bearer [ 143.396215][ T6320] tipc: Resetting bearer [ 143.498366][ T6320] tipc: Disabling bearer [ 143.602890][ T6333] device syzkaller0 entered promiscuous mode [ 144.018019][ T6352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.709'. [ 144.374347][ T6359] tipc: Enabled bearer , priority 0 [ 144.402901][ T6359] device syzkaller0 entered promiscuous mode [ 144.524626][ T6359] tipc: Resetting bearer [ 144.591729][ T6358] tipc: Resetting bearer [ 144.610375][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.715'. [ 144.683244][ T6358] tipc: Disabling bearer [ 145.091329][ T6385] batman_adv: batadv0: Adding interface: gretap1 [ 145.108590][ T6385] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.184749][ T6385] batman_adv: batadv0: Interface activated: gretap1 [ 145.201334][ T6390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.723'. [ 145.660450][ T6411] tipc: Enabled bearer , priority 0 [ 145.675354][ T6411] device syzkaller0 entered promiscuous mode [ 145.887354][ T6411] tipc: Resetting bearer [ 145.903985][ T6410] tipc: Resetting bearer [ 145.939353][ T6410] tipc: Disabling bearer [ 146.139724][ T6426] rdma_op ffff8880532df9f0 conn xmit_rdma 0000000000000000 [ 146.197267][ T6428] No such timeout policy "syz0" [ 146.305735][ T6432] device ipvlan2 entered promiscuous mode [ 146.381553][ T6438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.738'. [ 146.774130][ T6446] device macsec1 entered promiscuous mode [ 146.824676][ T6446] device macvlan0 entered promiscuous mode [ 146.880017][ T6446] device macvlan0 left promiscuous mode [ 146.952132][ T6452] netlink: 'syz.0.743': attribute type 21 has an invalid length. [ 146.965725][ T6452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.181207][ T6462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.746'. [ 147.224562][ T6462] netlink: 'syz.0.746': attribute type 21 has an invalid length. [ 147.232428][ T6462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.312190][ T6464] tipc: Enabled bearer , priority 0 [ 147.351999][ T6464] device syzkaller0 entered promiscuous mode [ 147.444428][ T6464] tipc: Resetting bearer [ 147.484271][ T6463] tipc: Resetting bearer [ 147.558630][ T6463] tipc: Disabling bearer [ 147.674158][ T6472] netlink: 68 bytes leftover after parsing attributes in process `syz.2.752'. [ 147.941676][ T6483] netlink: 'syz.4.756': attribute type 21 has an invalid length. [ 148.010114][ T6483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.149235][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.759'. [ 148.274827][ T6491] netlink: 'syz.3.759': attribute type 21 has an invalid length. [ 148.293254][ T6491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.724819][ T6505] No such timeout policy "syz0" [ 148.987483][ T6517] netlink: 68 bytes leftover after parsing attributes in process `syz.3.769'. [ 149.058092][ T6521] netlink: 'syz.1.771': attribute type 21 has an invalid length. [ 149.073356][ T6521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.141936][ T6526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.773'. [ 149.224879][ T6528] netlink: 'syz.0.773': attribute type 21 has an invalid length. [ 149.264262][ T6528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.522846][ T6540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.779'. [ 149.540945][ T6540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.779'. [ 149.582504][ T6540] netlink: 'syz.4.779': attribute type 3 has an invalid length. [ 150.094204][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 150.104688][ T6563] netlink: 'syz.4.789': attribute type 21 has an invalid length. [ 150.113423][ T6563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.142155][ T6560] device syzkaller0 entered promiscuous mode [ 150.160304][ T6564] netlink: 68 bytes leftover after parsing attributes in process `syz.3.787'. [ 150.331508][ T6566] tipc: Enabled bearer , priority 0 [ 150.363980][ T6566] device syzkaller0 entered promiscuous mode [ 150.441780][ T6566] tipc: Resetting bearer [ 150.481562][ T6565] tipc: Resetting bearer [ 150.536342][ T6565] tipc: Disabling bearer [ 151.117103][ T6595] device syzkaller0 entered promiscuous mode [ 151.156276][ T6598] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 151.194291][ T6598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.365911][ T6598] bond1: (slave geneve2): making interface the new active one [ 151.422433][ T6606] No such timeout policy "syz0" [ 151.446757][ T6598] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 151.474881][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 151.669135][ T6598] syz.4.805 (6598) used greatest stack depth: 20592 bytes left [ 151.739928][ T6619] netlink: 'syz.1.814': attribute type 21 has an invalid length. [ 151.779296][ T6619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.927776][ T6627] device syzkaller0 entered promiscuous mode [ 152.125597][ T6635] device syzkaller0 entered promiscuous mode [ 152.648934][ T6652] netlink: 144 bytes leftover after parsing attributes in process `syz.3.830'. [ 152.676624][ T6658] netlink: 'syz.1.831': attribute type 21 has an invalid length. [ 152.685456][ T6658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.885031][ T6661] netlink: 'syz.4.834': attribute type 21 has an invalid length. [ 152.908199][ T6661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.965031][ T6663] netlink: 5004 bytes leftover after parsing attributes in process `syz.1.833'. [ 152.996481][ T6663] netlink: 'syz.1.833': attribute type 3 has an invalid length. [ 153.448434][ T6683] No such timeout policy "syz0" [ 153.536297][ T6685] device syzkaller0 entered promiscuous mode [ 153.680998][ T6693] device ipvlan2 entered promiscuous mode [ 153.703533][ T6692] netlink: 'syz.3.848': attribute type 21 has an invalid length. [ 153.718854][ T6692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.304058][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 154.344198][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.857'. [ 154.364427][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 154.382955][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.857'. [ 155.489558][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.496937][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.044318][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.082385][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.530019][ T6716] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.539457][ T6716] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.549681][ T6716] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.559143][ T6716] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.635653][ T6737] device syzkaller0 entered promiscuous mode [ 156.776789][ T6763] device syzkaller0 entered promiscuous mode [ 157.011356][ T6782] No such timeout policy "syz0" [ 157.154616][ T6785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.874'. [ 160.882990][ T6811] netlink: 'syz.1.883': attribute type 21 has an invalid length. [ 160.891012][ T6811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.194234][ T6823] netlink: 'syz.2.888': attribute type 3 has an invalid length. [ 161.609675][ T6839] netlink: 'syz.3.896': attribute type 21 has an invalid length. [ 161.635224][ T6839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.644285][ T6842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.897'. [ 161.696368][ T6843] device syzkaller0 entered promiscuous mode [ 162.136170][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 162.376404][ T6871] netlink: 'syz.2.911': attribute type 21 has an invalid length. [ 162.385563][ T6871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.692008][ T6884] device syzkaller0 entered promiscuous mode [ 162.714380][ T6884] TC_ACT_REPEAT abuse ? [ 162.727123][ T6883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.916'. [ 162.789849][ T6883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.916'. [ 162.885620][ T6883] device syzkaller0 entered promiscuous mode [ 163.312160][ T6902] netlink: 'syz.2.924': attribute type 21 has an invalid length. [ 163.349771][ T6902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.572977][ T6910] tipc: Enabled bearer , priority 0 [ 163.604090][ T6910] device syzkaller0 entered promiscuous mode [ 163.697854][ T6910] tipc: Resetting bearer [ 163.749450][ T6909] tipc: Resetting bearer [ 163.820159][ T6909] tipc: Disabling bearer [ 163.953235][ T4281] Bluetooth: hci4: command 0x0411 tx timeout [ 163.981661][ T6926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.935'. [ 163.993313][ T6926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.935'. [ 164.034390][ T6926] device syzkaller0 entered promiscuous mode [ 164.185820][ T6934] device syzkaller0 entered promiscuous mode [ 164.284440][ T6907] device syzkaller0 entered promiscuous mode [ 164.476085][ T6939] netlink: 'syz.1.940': attribute type 21 has an invalid length. [ 164.496393][ T6939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.777471][ T6954] netlink: 144 bytes leftover after parsing attributes in process `syz.3.945'. [ 165.166183][ T6965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.950'. [ 165.199035][ T6965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.950'. [ 165.240285][ T6965] device syzkaller0 entered promiscuous mode [ 165.647174][ T6978] netlink: 'syz.2.956': attribute type 21 has an invalid length. [ 165.673334][ T6978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.342285][ T7000] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 166.540008][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.966'. [ 166.576759][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.966'. [ 166.616087][ T7003] device syzkaller0 entered promiscuous mode [ 167.020081][ T7017] netlink: 'syz.3.972': attribute type 21 has an invalid length. [ 167.071518][ T7017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.228300][ T7022] netlink: 144 bytes leftover after parsing attributes in process `syz.0.974'. [ 167.399994][ T7029] device syzkaller0 entered promiscuous mode [ 167.610861][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.980'. [ 167.653383][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.980'. [ 167.721423][ T7037] device syzkaller0 entered promiscuous mode [ 168.136599][ T7048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.983'. [ 168.583880][ T7056] netlink: 'syz.3.988': attribute type 21 has an invalid length. [ 168.620166][ T7056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.984642][ T7066] device syzkaller0 entered promiscuous mode [ 169.380427][ T7074] tipc: Started in network mode [ 169.402787][ T7074] tipc: Node identity 4eab62de80b, cluster identity 4711 [ 169.446695][ T7074] tipc: Enabled bearer , priority 0 [ 169.468297][ T7080] device syzkaller0 entered promiscuous mode [ 169.529371][ T7074] tipc: Resetting bearer [ 169.558275][ T7073] tipc: Resetting bearer [ 169.645786][ T7073] tipc: Disabling bearer [ 170.478336][ T7105] device syzkaller0 entered promiscuous mode [ 170.825090][ T7112] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1008'. [ 171.095093][ T7121] netlink: 'syz.2.1013': attribute type 21 has an invalid length. [ 171.103822][ T7121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.362691][ T7129] No such timeout policy "syz0" [ 171.565317][ T7133] device syzkaller0 entered promiscuous mode [ 172.220875][ T7154] device syzkaller0 entered promiscuous mode [ 172.332613][ T7158] device team_slave_0 entered promiscuous mode [ 172.339238][ T7158] device team_slave_1 entered promiscuous mode [ 172.372994][ T7158] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 172.499517][ T7166] tipc: Enabled bearer , priority 0 [ 172.524095][ T7164] device syzkaller0 entered promiscuous mode [ 172.624958][ T7164] tipc: Resetting bearer [ 172.682573][ T7163] tipc: Resetting bearer [ 172.755607][ T7163] tipc: Disabling bearer [ 172.790315][ T7176] netlink: 'syz.0.1035': attribute type 21 has an invalid length. [ 172.800538][ T7176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.070921][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 173.969101][ T7211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1048'. [ 173.986300][ T7211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1048'. [ 174.013415][ T7211] device syzkaller0 entered promiscuous mode [ 174.129640][ T7218] tipc: Enabled bearer , priority 0 [ 174.157480][ T7215] device syzkaller0 entered promiscuous mode [ 174.265788][ T7221] device syzkaller0 entered promiscuous mode [ 174.299408][ T7215] tipc: Resetting bearer [ 174.411617][ T7214] tipc: Resetting bearer [ 174.462252][ T7214] tipc: Disabling bearer [ 175.199932][ T7225] device syzkaller0 entered promiscuous mode [ 175.407935][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1064'. [ 175.433259][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1064'. [ 175.466559][ T7254] device syzkaller0 entered promiscuous mode [ 175.579283][ T7261] device syzkaller0 entered promiscuous mode [ 176.239594][ T7283] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1076'. [ 176.277555][ T7283] netlink: 'syz.2.1076': attribute type 21 has an invalid length. [ 176.308789][ T7283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.356889][ T7288] device syzkaller0 entered promiscuous mode [ 176.489285][ T7291] device syzkaller0 entered promiscuous mode [ 176.809530][ T7297] tipc: Enabled bearer , priority 0 [ 176.840642][ T7297] device syzkaller0 entered promiscuous mode [ 176.862944][ T7299] tipc: Enabled bearer , priority 0 [ 176.883895][ T7299] device syzkaller0 entered promiscuous mode [ 176.910046][ T7297] tipc: Resetting bearer [ 176.920144][ T7301] device syzkaller0 entered promiscuous mode [ 176.990159][ T7296] tipc: Resetting bearer [ 177.039796][ T7296] tipc: Disabling bearer [ 177.084476][ T7299] tipc: Resetting bearer [ 177.105769][ T7298] tipc: Resetting bearer [ 177.154112][ T7298] tipc: Disabling bearer [ 177.291365][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 177.440589][ T7315] device syzkaller0 entered promiscuous mode [ 177.562292][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1092'. [ 177.910868][ T7325] device syzkaller0 entered promiscuous mode [ 178.158281][ T7330] device syzkaller0 entered promiscuous mode [ 178.281674][ T7340] tipc: Enabled bearer , priority 0 [ 178.319507][ T7340] device syzkaller0 entered promiscuous mode [ 178.364800][ T7340] tipc: Resetting bearer [ 180.586783][ T7339] tipc: Resetting bearer [ 180.608542][ T7339] tipc: Disabling bearer [ 180.626157][ T22] tipc: Node number set to 634665036 [ 180.852958][ T7373] device syzkaller0 entered promiscuous mode [ 180.989790][ T7375] device syzkaller0 entered promiscuous mode [ 181.346718][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1119'. [ 182.674825][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1140'. [ 182.719656][ T7450] netlink: 'syz.4.1140': attribute type 21 has an invalid length. [ 182.735258][ T7450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.742534][ T7450] IPv6: NLM_F_CREATE should be set when creating new route [ 182.749941][ T7450] IPv6: NLM_F_CREATE should be set when creating new route [ 182.757231][ T7450] IPv6: NLM_F_CREATE should be set when creating new route [ 182.868255][ T7462] tipc: Enabled bearer , priority 0 [ 182.911875][ T7456] device syzkaller0 entered promiscuous mode [ 183.030879][ T7456] tipc: Resetting bearer [ 183.075025][ T7452] tipc: Resetting bearer [ 183.130379][ T7452] tipc: Disabling bearer [ 183.408073][ T7473] device syzkaller0 entered promiscuous mode [ 183.758745][ T7489] device syzkaller0 entered promiscuous mode [ 183.969430][ T7497] tipc: Enabled bearer , priority 0 [ 184.014140][ T7497] device syzkaller0 entered promiscuous mode [ 184.100103][ T7497] tipc: Resetting bearer [ 184.130720][ T7496] tipc: Resetting bearer [ 184.210517][ T7496] tipc: Disabling bearer [ 184.359682][ T7507] device syzkaller0 entered promiscuous mode [ 184.444207][ T7516] tipc: Enabled bearer , priority 0 [ 184.490737][ T7523] No such timeout policy "syz0" [ 186.398343][ T7519] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1169'. [ 186.409321][ T7520] device syzkaller0 entered promiscuous mode [ 186.452395][ T7529] device syzkaller0 entered promiscuous mode [ 186.465656][ T7530] tipc: Resetting bearer [ 186.512124][ T7509] tipc: Resetting bearer [ 186.547381][ T7509] tipc: Disabling bearer [ 188.743397][ T4319] tipc: Node number set to 2938904293 [ 188.922930][ T7563] tipc: Enabled bearer , priority 0 [ 188.945790][ T7563] device syzkaller0 entered promiscuous mode [ 189.030752][ T7563] tipc: Resetting bearer [ 189.040739][ T7562] tipc: Resetting bearer [ 189.111559][ T7562] tipc: Disabling bearer [ 189.231434][ T7569] device syzkaller0 entered promiscuous mode [ 189.315217][ T7576] device syzkaller0 entered promiscuous mode [ 191.475046][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 191.475239][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 191.487423][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 191.487454][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 192.287695][ T7628] tipc: Enabled bearer , priority 0 [ 192.305692][ T7628] device syzkaller0 entered promiscuous mode [ 192.353953][ T7628] tipc: Resetting bearer [ 192.376545][ T7627] tipc: Resetting bearer [ 192.440932][ T7627] tipc: Disabling bearer [ 192.619885][ T7639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1202'. [ 192.633538][ T7639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1202'. [ 192.676707][ T7639] device syzkaller0 entered promiscuous mode [ 192.690925][ T7644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1204'. [ 192.712525][ T7644] netlink: 'syz.4.1204': attribute type 21 has an invalid length. [ 192.742388][ T7644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.837543][ T7648] device syzkaller0 entered promiscuous mode [ 193.058777][ T4370] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 193.077068][ T7650] tipc: Enabled bearer , priority 0 [ 193.105259][ T7650] device syzkaller0 entered promiscuous mode [ 193.116786][ T7656] No such timeout policy "syz0" [ 193.147003][ T7656] 8021q: VLANs not supported on gre0 [ 193.196257][ T7650] tipc: Resetting bearer [ 193.220038][ T7649] tipc: Resetting bearer [ 193.290567][ T7649] tipc: Disabling bearer [ 193.391053][ T7664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1215'. [ 193.771800][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1220'. [ 193.876814][ T7679] device syzkaller0 entered promiscuous mode [ 194.079600][ T7685] No such timeout policy "syz0" [ 194.274357][ T7689] device syzkaller0 entered promiscuous mode [ 194.519191][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.589038][ T7698] device syzkaller0 entered promiscuous mode [ 194.857878][ T4286] Bluetooth: hci4: link tx timeout [ 194.863618][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.986910][ T7713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1240'. [ 195.006995][ T7713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1240'. [ 195.021139][ T7711] device syzkaller0 entered promiscuous mode [ 195.045627][ T7713] device syzkaller0 entered promiscuous mode [ 195.612780][ T7733] device syzkaller0 entered promiscuous mode [ 195.687016][ T7737] tipc: Enabled bearer , priority 0 [ 195.701095][ T7737] device syzkaller0 entered promiscuous mode [ 195.750027][ T7737] tipc: Resetting bearer [ 195.758771][ T7734] tipc: Resetting bearer [ 195.851802][ T7734] tipc: Disabling bearer [ 195.871560][ T7741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1252'. [ 195.881345][ T7741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1252'. [ 195.922230][ T7741] device syzkaller0 entered promiscuous mode [ 196.180460][ T7751] device syzkaller0 entered promiscuous mode [ 196.295996][ T7753] device syzkaller0 entered promiscuous mode [ 196.379234][ T7755] device syzkaller0 entered promiscuous mode [ 196.680952][ T7765] device syzkaller0 entered promiscuous mode [ 196.864321][ T7775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1267'. [ 196.896483][ T7775] device syzkaller0 entered promiscuous mode [ 196.913378][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 197.186383][ T7785] netlink: 'syz.2.1271': attribute type 13 has an invalid length. [ 197.322336][ T7791] device syzkaller0 entered promiscuous mode [ 197.640983][ T7803] device syzkaller0 entered promiscuous mode [ 197.990491][ T7810] device syzkaller0 entered promiscuous mode [ 198.205769][ T7818] __nla_validate_parse: 2 callbacks suppressed [ 198.205797][ T7818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1282'. [ 198.225770][ T7818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1282'. [ 198.266617][ T7818] device syzkaller0 entered promiscuous mode [ 198.364092][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 198.451162][ T7828] device syzkaller0 entered promiscuous mode [ 198.597750][ T7833] device syzkaller0 entered promiscuous mode [ 198.607017][ T7837] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1290'. [ 198.904840][ T7842] device syzkaller0 entered promiscuous mode [ 198.934180][ T7849] netlink: 'syz.0.1292': attribute type 26 has an invalid length. [ 198.957074][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1292'. [ 199.069171][ T7851] No such timeout policy "syz0" [ 201.659649][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 202.313614][ T7911] No such timeout policy "syz0" [ 202.682278][ T7903] device syzkaller0 entered promiscuous mode [ 202.742209][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 202.830557][ T7925] device bridge1 entered promiscuous mode [ 202.872518][ T7925] team0: Port device bridge1 added [ 202.929388][ T7928] bridge0: port 3(team0) entered blocking state [ 202.968363][ T7928] bridge0: port 3(team0) entered disabled state [ 203.012363][ T7928] device team0 entered promiscuous mode [ 203.042331][ T7928] device team_slave_0 entered promiscuous mode [ 203.062855][ T7928] device team_slave_1 entered promiscuous mode [ 203.707120][ T7953] Bluetooth: MGMT ver 1.22 [ 203.910504][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 204.180018][ T7971] device gretap0 left promiscuous mode [ 204.193233][ C0] af_packet: tpacket_rcv: packet too big, clamped from 12 to 4294967272. macoff=96 [ 204.286816][ T7971] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.316636][ T7971] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.350682][ T7971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.387621][ T7971] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.425459][ T7971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.493787][ T7980] device bridge1 entered promiscuous mode [ 204.533936][ T7980] team0: Port device bridge1 added [ 204.569093][ T7981] bridge0: port 3(team0) entered blocking state [ 204.583451][ T7981] bridge0: port 3(team0) entered disabled state [ 205.191378][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1340'. [ 205.893832][ T8028] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.951241][ T8028] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 206.034388][ T8028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.162911][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 206.183395][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1350'. [ 206.548174][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1355'. [ 206.835192][ T8054] netlink: 'syz.1.1358': attribute type 2 has an invalid length. [ 206.877567][ T8054] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1358'. [ 206.916569][ T8062] No such timeout policy "syz0" [ 207.028226][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1362'. [ 207.078935][ T8067] device erspan0 entered promiscuous mode [ 207.133383][ T8067] device macvtap1 entered promiscuous mode [ 207.188472][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1362'. [ 207.240515][ T8069] device erspan0 left promiscuous mode [ 207.298714][ T8071] tipc: Enabled bearer , priority 0 [ 207.499467][ T8076] device syzkaller0 entered promiscuous mode [ 207.554542][ T8076] tipc: Resetting bearer [ 207.732412][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 207.747208][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 207.759300][ T8075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.800857][ T8075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.829235][ T8070] tipc: Resetting bearer [ 208.489315][ T8104] No such timeout policy "syz0" [ 210.399338][ T8070] tipc: Disabling bearer [ 210.410413][ T126] tipc: Node number set to 3457901278 [ 210.743888][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'. [ 210.910034][ T8133] device syzkaller0 entered promiscuous mode [ 210.929811][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 210.953456][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1379'. [ 211.021596][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 211.041259][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1379'. [ 211.287458][ T8147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1385'. [ 211.465509][ T8154] device syzkaller0 entered promiscuous mode [ 211.765292][ T8163] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 211.959666][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'. [ 211.990084][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1395'. [ 212.023284][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'. [ 212.032220][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1395'. [ 212.130720][ T8177] device syzkaller0 entered promiscuous mode [ 212.327877][ T8183] netlink: 'syz.0.1402': attribute type 21 has an invalid length. [ 212.343865][ T8183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.384967][ T8187] No such timeout policy "syz0" [ 212.505649][ T8189] device syzkaller0 entered promiscuous mode [ 212.543811][ T4286] Bluetooth: hci4: link tx timeout [ 212.549024][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.871742][ T8201] device syzkaller0 entered promiscuous mode [ 213.052620][ T8212] device syzkaller0 entered promiscuous mode [ 213.258667][ T8221] No such timeout policy "syz0" [ 213.264308][ T8220] device syzkaller0 entered promiscuous mode [ 214.009233][ T8246] tipc: Enabled bearer , priority 0 [ 214.055809][ T8246] device syzkaller0 entered promiscuous mode [ 214.161963][ T8245] tipc: Resetting bearer [ 214.219908][ T8245] tipc: Disabling bearer [ 214.242012][ T8249] device syzkaller0 entered promiscuous mode [ 214.408679][ T8252] device syzkaller0 entered promiscuous mode [ 214.645409][ T8261] netlink: 'syz.0.1432': attribute type 21 has an invalid length. [ 214.720280][ T8261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.824823][ T8265] device syzkaller0 entered promiscuous mode [ 215.050730][ T8275] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.060072][ T8275] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.068909][ T8275] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.077969][ T8275] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.111522][ T8277] tipc: Enabled bearer , priority 0 [ 215.151174][ T8277] tipc: Resetting bearer [ 215.229174][ T8271] tipc: Disabling bearer [ 215.426321][ T8283] device syzkaller0 entered promiscuous mode [ 215.656865][ T8300] device syzkaller0 entered promiscuous mode [ 215.930259][ T8303] __nla_validate_parse: 16 callbacks suppressed [ 215.930276][ T8303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1444'. [ 218.207089][ T8318] device syzkaller0 entered promiscuous mode [ 218.296340][ T8321] tipc: Enabled bearer , priority 0 [ 218.315688][ T8323] device syzkaller0 entered promiscuous mode [ 218.341527][ T8320] tipc: Resetting bearer [ 218.468370][ T8319] tipc: Disabling bearer [ 218.587917][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1458'. [ 218.661813][ T8329] device syzkaller0 entered promiscuous mode [ 221.435726][ T8377] device syzkaller0 entered promiscuous mode [ 221.537785][ T8383] No such timeout policy "syz0" [ 221.553007][ T8381] device syzkaller0 entered promiscuous mode [ 221.735798][ T8393] netlink: 'syz.0.1476': attribute type 21 has an invalid length. [ 221.743954][ T8393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.100212][ T8405] device syzkaller0 entered promiscuous mode [ 222.277080][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'. [ 222.339941][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1478'. [ 222.501676][ T8412] device syzkaller0 entered promiscuous mode [ 222.548406][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 222.570591][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1487'. [ 222.593599][ T8424] netlink: 'syz.4.1487': attribute type 7 has an invalid length. [ 224.089669][ T4336] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 224.679055][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 224.688630][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1487'. [ 224.698002][ T8424] netlink: 'syz.4.1487': attribute type 7 has an invalid length. [ 224.710410][ T8434] netlink: 'syz.1.1490': attribute type 21 has an invalid length. [ 224.733617][ T8434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.990410][ T8445] device syzkaller0 entered promiscuous mode [ 225.170084][ T8450] netlink: 'syz.3.1497': attribute type 1 has an invalid length. [ 225.196966][ T8453] device syzkaller0 entered promiscuous mode [ 225.393831][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 225.405890][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1501'. [ 225.417415][ T8457] netlink: 'syz.3.1501': attribute type 7 has an invalid length. [ 225.433907][ T8457] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.442770][ T8457] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.451756][ T8457] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.460588][ T8457] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.543404][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 225.552346][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1501'. [ 225.587538][ T8457] netlink: 'syz.3.1501': attribute type 7 has an invalid length. [ 225.808611][ T8468] device syzkaller0 entered promiscuous mode [ 228.443776][ T4286] Bluetooth: hci4: link tx timeout [ 228.448977][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.465879][ T4286] Bluetooth: hci4: link tx timeout [ 228.471069][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.642683][ T4286] Bluetooth: hci4: link tx timeout [ 228.648017][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.691996][ T4286] Bluetooth: hci4: link tx timeout [ 228.697942][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 229.076382][ T8527] device syzkaller0 entered promiscuous mode [ 229.497168][ T4286] Bluetooth: hci4: link tx timeout [ 229.502620][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 229.513326][ T4286] Bluetooth: hci4: link tx timeout [ 229.518520][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 230.055543][ T8567] __nla_validate_parse: 1 callbacks suppressed [ 230.055560][ T8567] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1522'. [ 230.514783][ T4286] Bluetooth: hci4: link tx timeout [ 230.519979][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 230.645562][ T4286] Bluetooth: hci4: link tx timeout [ 230.650780][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 230.750718][ T8585] device syzkaller0 entered promiscuous mode [ 230.885737][ T8593] device syzkaller0 entered promiscuous mode [ 231.224520][ T8602] device syzkaller0 entered promiscuous mode [ 231.458540][ T4286] Bluetooth: hci4: link tx timeout [ 231.464175][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 231.560166][ T4286] Bluetooth: hci4: link tx timeout [ 231.566219][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 231.926992][ T8629] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1542'. [ 231.972772][ T8623] device syzkaller0 entered promiscuous mode [ 232.220736][ T8637] No such timeout policy "syz0" [ 235.563656][ T4286] Bluetooth: hci4: link tx timeout [ 235.568888][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.294679][ T4286] Bluetooth: hci4: link tx timeout [ 236.299882][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.455817][ T8724] No such timeout policy "syz0" [ 236.503179][ T4286] Bluetooth: hci4: link tx timeout [ 236.508436][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.536143][ T8733] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 236.578835][ T8729] device syzkaller0 entered promiscuous mode [ 237.086148][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1575'. [ 237.307641][ T8756] device syzkaller0 entered promiscuous mode [ 237.380434][ T8766] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1581'. [ 237.719676][ T4316] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 238.018077][ T4286] Bluetooth: hci4: link tx timeout [ 238.023377][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 238.032277][ T4316] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.071897][ T4316] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.120834][ T4316] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 238.137189][ T4316] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 238.149087][ T4316] usb 5-1: Product: syz [ 238.154601][ T4316] usb 5-1: Manufacturer: syz [ 238.206081][ T4316] hub 5-1:4.0: USB hub found [ 238.384068][ T4316] hub 5-1:4.0: 2 ports detected [ 238.600603][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.630031][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.639969][ T8764] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1579'. [ 238.669267][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 238.678480][ T4316] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 238.689444][ T4316] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 238.767057][ T4316] usb 5-1: USB disconnect, device number 2 [ 239.569252][ T4286] Bluetooth: hci4: link tx timeout [ 239.581402][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 239.826597][ T4286] Bluetooth: hci4: link tx timeout [ 239.831808][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 240.624275][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1589'. [ 240.655173][ T8809] netlink: 'syz.0.1589': attribute type 21 has an invalid length. [ 240.675054][ T8809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.692675][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1590'. [ 240.970559][ T8824] No such timeout policy "syz0" [ 241.197575][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 241.221796][ T8831] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1598'. [ 241.704191][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1603'. [ 241.734416][ T8845] netlink: 'syz.1.1603': attribute type 21 has an invalid length. [ 241.768312][ T8845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.843116][ T4286] Bluetooth: hci4: link tx timeout [ 241.848549][ T4286] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 241.856784][ T4286] Bluetooth: hci4: link tx timeout [ 241.857049][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1606'. [ 241.861971][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 242.229982][ T8859] No such timeout policy "syz0" [ 242.830817][ T8857] device syzkaller0 entered promiscuous mode [ 243.465890][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'. [ 243.494392][ T8897] netlink: 'syz.2.1617': attribute type 21 has an invalid length. [ 243.502443][ T8897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.807001][ T8909] netlink: 'syz.2.1622': attribute type 20 has an invalid length. [ 243.867468][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'. [ 243.963496][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 244.261695][ T8923] device syzkaller0 entered promiscuous mode [ 244.762981][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1632'. [ 244.796902][ T8943] netlink: 'syz.1.1632': attribute type 21 has an invalid length. [ 244.832447][ T8943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.551562][ T8962] device syzkaller0 entered promiscuous mode [ 245.897578][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1639'. [ 246.178927][ T8979] device syzkaller0 entered promiscuous mode [ 246.200078][ T8982] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1642'. [ 246.531835][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1644'. [ 247.086014][ T4286] Bluetooth: hci4: link tx timeout [ 247.091337][ T4286] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 247.099297][ T4286] Bluetooth: hci4: link tx timeout [ 247.105898][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 247.113779][ T4286] Bluetooth: hci4: link tx timeout [ 247.119025][ T4286] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 247.127281][ T4286] Bluetooth: hci4: link tx timeout [ 247.132441][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.962439][ T8998] netlink: 'syz.4.1644': attribute type 21 has an invalid length. [ 248.971031][ T8998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.981776][ T9003] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1646'. [ 249.003552][ T9003] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1646'. [ 250.001311][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1658'. [ 250.002203][ T9047] netlink: 'syz.2.1658': attribute type 21 has an invalid length. [ 250.002334][ T9047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.046854][ T9050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1660'. [ 250.047026][ T9050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1660'. [ 250.262054][ T9054] device syzkaller0 entered promiscuous mode [ 250.269061][ T9059] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1662'. [ 253.179127][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 253.300140][ T9098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1674'. [ 253.300681][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1672'. [ 253.318654][ T9098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1674'. [ 253.341267][ T9099] netlink: 'syz.3.1672': attribute type 21 has an invalid length. [ 253.349597][ T9099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.356215][ T26] usb 1-1: device descriptor read/64, error -71 [ 253.456499][ T9105] tipc: Enabled bearer , priority 0 [ 253.468776][ T9105] tipc: Resetting bearer [ 253.492571][ T9104] tipc: Disabling bearer [ 253.593176][ T4316] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 253.631005][ T9110] loop5: detected capacity change from 0 to 7 [ 253.643204][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 253.653454][ T4538] Dev loop5: unable to read RDB block 7 [ 253.674841][ T4538] loop5: unable to read partition table [ 253.690630][ T4538] loop5: partition table beyond EOD, truncated [ 253.714539][ T9110] Dev loop5: unable to read RDB block 7 [ 253.739433][ T9110] loop5: unable to read partition table [ 253.761852][ T9110] loop5: partition table beyond EOD, truncated [ 253.775064][ T9110] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 253.783106][ T4316] usb 5-1: Using ep0 maxpacket: 8 [ 253.791783][ T4316] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 253.830294][ T4316] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.833333][ T26] usb 1-1: device descriptor read/64, error -71 [ 253.861126][ T4316] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.891591][ T4316] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 253.913899][ T4316] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.928395][ T4316] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 253.938553][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.976430][ T4316] usbtmc 5-1:16.0: bulk endpoints not found [ 253.993630][ T26] usb usb1-port1: attempt power cycle [ 254.040981][ T9118] device syzkaller0 entered promiscuous mode [ 254.406125][ T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 254.444903][ T26] usb 1-1: device descriptor read/8, error -71 [ 254.723167][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 254.776100][ T26] usb 1-1: device descriptor read/8, error -71 [ 254.910831][ T26] usb usb1-port1: unable to enumerate USB device [ 255.017753][ T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.882944][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1686'. [ 255.960492][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.358188][ T4316] usb 5-1: USB disconnect, device number 3 [ 257.448760][ T9149] netlink: 'syz.3.1686': attribute type 21 has an invalid length. [ 257.457109][ T9149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.469157][ T9153] tipc: Enabled bearer , priority 0 [ 257.494523][ T9156] tipc: Resetting bearer [ 257.520357][ T9152] tipc: Disabling bearer [ 257.939887][ T9189] process 'syz.3.1690' launched './file2' with NULL argv: empty string added [ 258.389217][ T9202] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1698'. [ 258.727289][ T9208] device syzkaller0 entered promiscuous mode [ 259.114058][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1701'. [ 260.095861][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 260.293931][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 260.322572][ T7] usb 5-1: config 0 has no interfaces? [ 260.328415][ T7] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 260.338059][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.348374][ T7] usb 5-1: config 0 descriptor?? [ 260.577741][ T26] usb 5-1: USB disconnect, device number 4 [ 262.102505][ T9219] netlink: 'syz.0.1701': attribute type 21 has an invalid length. [ 262.110635][ T9219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.122100][ T9229] tipc: Enabled bearer , priority 0 [ 262.155841][ T9233] tipc: Resetting bearer [ 262.163553][ T9228] tipc: Disabling bearer [ 262.471289][ T9263] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1711'. [ 262.621355][ T9265] netlink: 'syz.0.1713': attribute type 3 has an invalid length. [ 262.851907][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 263.056296][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1718'. [ 263.108870][ T9279] device syzkaller0 entered promiscuous mode [ 263.124342][ T9277] netlink: 'syz.0.1718': attribute type 21 has an invalid length. [ 263.143871][ T9277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.267380][ T4286] Bluetooth: hci4: link tx timeout [ 263.272612][ T4286] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 263.281157][ T4286] Bluetooth: hci4: link tx timeout [ 263.286481][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 264.135946][ T9314] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1724'. [ 265.962737][ T9290] tipc: Enabling of bearer rejected, failed to enable media [ 266.528154][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1732'. [ 266.537690][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 266.558567][ T9340] netlink: 'syz.2.1732': attribute type 21 has an invalid length. [ 266.571346][ T9340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.737387][ T26] usb 5-1: config 0 has no interfaces? [ 266.747390][ T26] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 266.779677][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.842661][ T26] usb 5-1: config 0 descriptor?? [ 266.931561][ T9348] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1735'. [ 267.068387][ T26] usb 5-1: USB disconnect, device number 5 [ 267.415969][ T9357] device syzkaller0 entered promiscuous mode [ 267.449074][ T9358] tipc: Enabled bearer , priority 0 [ 267.588790][ T9358] tipc: Resetting bearer [ 267.620600][ T9355] tipc: Disabling bearer [ 267.677841][ T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 267.857444][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1744'. [ 267.879848][ T26] usb 5-1: unable to get BOS descriptor or descriptor too short [ 267.900305][ T9370] netlink: 'syz.2.1744': attribute type 21 has an invalid length. [ 267.901528][ T26] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 267.938977][ T9370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.951516][ T26] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 268.008137][ T26] usb 5-1: string descriptor 0 read error: -22 [ 268.029464][ T26] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 268.069838][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.212754][ T9379] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1747'. [ 268.340981][ T26] usb 5-1: Can't get UAC3 power state for id 10 [ 268.962812][ T26] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 269.582095][ T26] usb 5-1: 2:0: failed to get current value for ch 1 (-32) [ 269.616975][ T9399] tipc: Enabling of bearer rejected, failed to enable media [ 269.670713][ T9403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1757'. [ 269.696302][ T9403] netlink: 'syz.3.1757': attribute type 21 has an invalid length. [ 269.777812][ T9403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.983227][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 270.008978][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 270.096209][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 270.187268][ T9420] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1759'. [ 270.205910][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 270.228373][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.279824][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 270.287633][ T26] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 270.302165][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.312223][ T26] usb 1-1: Product: syz [ 270.323259][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 270.338246][ T26] usb 1-1: Manufacturer: syz [ 270.345656][ T26] usb 1-1: SerialNumber: syz [ 270.359450][ T26] usb 1-1: config 0 descriptor?? [ 270.662856][ T9428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1762'. [ 270.691748][ T9426] input: syz1 as /devices/virtual/input/input6 [ 270.937590][ T7] usb 5-1: USB disconnect, device number 6 [ 271.398294][ T9435] device syzkaller0 entered promiscuous mode [ 272.974292][ T26] powermate: probe of 1-1:0.0 failed with error -22 [ 273.005549][ T26] usb 1-1: USB disconnect, device number 6 [ 274.008717][ T9466] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1770'. [ 274.666983][ T9470] device syzkaller0 entered promiscuous mode [ 274.837094][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1772'. [ 274.873700][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 274.903476][ T9482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1773'. [ 275.106565][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1772'. [ 275.121811][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 275.472724][ T9502] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1781'. [ 275.583171][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 275.762768][ T9513] device syzkaller0 entered promiscuous mode [ 275.773231][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 275.787393][ T26] usb 1-1: config 0 has no interfaces? [ 275.801867][ T26] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 275.816997][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.827173][ T26] usb 1-1: Product: syz [ 275.831397][ T26] usb 1-1: Manufacturer: syz [ 275.839875][ T26] usb 1-1: SerialNumber: syz [ 275.864621][ T26] usb 1-1: config 0 descriptor?? [ 275.944823][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1788'. [ 276.127865][ T9525] input: syz1 as /devices/virtual/input/input7 [ 276.407248][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 276.434143][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 276.461156][ T9535] device syzkaller0 entered promiscuous mode [ 276.474153][ T9535] TC_ACT_REPEAT abuse ? [ 276.888925][ T9547] device syzkaller0 entered promiscuous mode [ 277.222234][ T9552] device syzkaller0 entered promiscuous mode [ 277.305384][ T9554] device syzkaller0 entered promiscuous mode [ 278.071010][ T9571] device syzkaller0 entered promiscuous mode [ 278.487160][ T4320] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 278.693276][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 278.701627][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.733133][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.742976][ T4320] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 278.812821][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.840341][ T4320] usb 2-1: config 0 descriptor?? [ 278.857110][ T4320] hub 2-1:0.0: USB hub found [ 279.015701][ T7] usb 1-1: USB disconnect, device number 7 [ 279.061781][ T4320] hub 2-1:0.0: 1 port detected [ 279.227656][ T9590] device syzkaller0 entered promiscuous mode [ 279.249197][ T9589] device syzkaller0 entered promiscuous mode [ 279.269996][ T4320] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 279.281808][ T4320] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 279.308680][ T4320] usbhid 2-1:0.0: can't add hid device: -71 [ 279.321031][ T4320] usbhid: probe of 2-1:0.0 failed with error -71 [ 279.373942][ T4320] usb 2-1: USB disconnect, device number 2 [ 279.574843][ T9593] __nla_validate_parse: 5 callbacks suppressed [ 279.574862][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1815'. [ 279.672110][ T9600] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1818'. [ 279.870568][ T9603] device syzkaller0 entered promiscuous mode [ 280.417723][ T9621] device syzkaller0 entered promiscuous mode [ 280.565772][ T26] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 280.642156][ T9627] device syzkaller0 entered promiscuous mode [ 280.753872][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 280.769573][ T26] usb 5-1: config 0 has no interfaces? [ 280.790565][ T26] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 280.820822][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.839549][ T26] usb 5-1: Product: syz [ 280.859525][ T26] usb 5-1: Manufacturer: syz [ 280.879759][ T26] usb 5-1: SerialNumber: syz [ 280.919551][ T26] usb 5-1: config 0 descriptor?? [ 280.981538][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1830'. [ 281.288288][ T9637] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1831'. [ 281.470902][ T9642] device syzkaller0 entered promiscuous mode [ 282.073237][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 282.131166][ T9656] device syzkaller0 entered promiscuous mode [ 282.273268][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 282.288812][ T22] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 282.311688][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.360985][ T22] usb 3-1: Product: syz [ 282.380012][ T22] usb 3-1: Manufacturer: syz [ 282.400088][ T22] usb 3-1: SerialNumber: syz [ 282.435419][ T22] usb 3-1: config 0 descriptor?? [ 282.551155][ T9662] device syzkaller0 entered promiscuous mode [ 282.656013][ T22] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 283.087334][ T22] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 283.131252][ T22] usb 3-1: USB disconnect, device number 2 [ 283.578285][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1842'. [ 283.891410][ T9678] device syzkaller0 entered promiscuous mode [ 284.010296][ T9681] device syzkaller0 entered promiscuous mode [ 284.178836][ T9683] device syzkaller0 entered promiscuous mode [ 284.229991][ T9691] device syzkaller0 entered promiscuous mode [ 284.412479][ T126] usb 5-1: USB disconnect, device number 7 [ 284.950656][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'. [ 285.176101][ T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 285.273272][ T126] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 285.414049][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 285.423820][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.431840][ T7] usb 3-1: Product: syz [ 285.436085][ T7] usb 3-1: Manufacturer: syz [ 285.440706][ T7] usb 3-1: SerialNumber: syz [ 285.447848][ T7] usb 3-1: config 0 descriptor?? [ 285.473266][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 285.481843][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.502339][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.512651][ T126] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 285.526675][ T126] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 285.535993][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.564025][ T126] usb 5-1: config 0 descriptor?? [ 285.667068][ T7] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 286.014015][ T126] microsoft 0003:045E:07DA.0001: item fetching failed at offset 3/34 [ 286.024180][ T126] microsoft 0003:045E:07DA.0001: parse failed [ 286.030317][ T126] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 286.037862][ T4485] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.221499][ T9709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.252304][ T9709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.260865][ T4316] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 286.450269][ T4316] usb 4-1: Using ep0 maxpacket: 16 [ 286.458057][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.469372][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.479325][ T4316] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 286.489223][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.509827][ T4316] usb 4-1: config 0 descriptor?? [ 286.537815][ T26] usb 5-1: USB disconnect, device number 8 [ 286.938064][ T4316] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 286.953316][ T4316] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 286.961678][ T4316] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 286.977943][ T4316] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 286.989175][ T4316] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 287.019891][ T4316] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 287.139885][ T4316] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71). [ 287.168106][ T4316] usb 4-1: USB disconnect, device number 2 [ 287.474792][ T9725] fido_id[9725]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 287.954908][ T9736] device syzkaller0 entered promiscuous mode [ 288.218707][ T9742] device syzkaller0 entered promiscuous mode [ 288.239830][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 288.726129][ T7] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 288.765546][ T7] usb 3-1: USB disconnect, device number 3 [ 289.845707][ T9774] device syzkaller0 entered promiscuous mode [ 289.939501][ T9775] device syzkaller0 entered promiscuous mode [ 290.058958][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 290.128518][ T9777] device syzkaller0 entered promiscuous mode [ 290.253243][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 290.272938][ T7] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 290.290614][ T9783] device syzkaller0 entered promiscuous mode [ 290.302617][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.321468][ T7] usb 3-1: Product: syz [ 290.339163][ T7] usb 3-1: Manufacturer: syz [ 290.362802][ T7] usb 3-1: SerialNumber: syz [ 290.389371][ T7] usb 3-1: config 0 descriptor?? [ 290.420776][ T7] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 290.663539][ T9794] input: syz0 as /devices/virtual/input/input8 [ 291.339839][ T7] gspca_sonixj: reg_w1 err -110 [ 291.346478][ T7] sonixj: probe of 3-1:0.0 failed with error -110 [ 291.382978][ T7] usb 3-1: USB disconnect, device number 4 [ 291.787606][ T9811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1887'. [ 291.893133][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 292.048642][ T9816] device syzkaller0 entered promiscuous mode [ 292.093280][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 292.101413][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 292.142569][ T26] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 292.206077][ T26] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.244566][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.275914][ T26] usb 1-1: Product: syz [ 292.288656][ T26] usb 1-1: Manufacturer: syz [ 292.319870][ T26] usb 1-1: SerialNumber: syz [ 292.360068][ T9826] device syzkaller0 entered promiscuous mode [ 292.556255][ T9809] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 292.750293][ T9834] device syzkaller0 entered promiscuous mode [ 293.200926][ T26] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 293.213296][ T26] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 293.234325][ T26] cdc_ncm 1-1:1.0: bind() failure [ 293.257010][ T26] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 293.305495][ T26] cdc_ncm 1-1:1.1: bind() failure [ 293.366820][ T26] usb 1-1: USB disconnect, device number 8 [ 293.560262][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1899'. [ 293.604153][ T9855] binder: 9854:9855 unknown command 1074553619 [ 293.610864][ T9855] binder: 9854:9855 ioctl c0306201 200000000040 returned -22 [ 293.716061][ T9857] device syzkaller0 entered promiscuous mode [ 293.874058][ T9859] raw_sendmsg: syz.3.1902 forgot to set AF_INET. Fix it! [ 294.058908][ T9863] device syzkaller0 entered promiscuous mode [ 294.220897][ T9869] device syzkaller0 entered promiscuous mode [ 294.734056][ T9889] device syzkaller0 entered promiscuous mode [ 294.758562][ T9893] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1912'. [ 295.363202][ T4317] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 295.398457][ T9906] device syzkaller0 entered promiscuous mode [ 295.450833][ T9909] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1917'. [ 295.473254][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'. [ 295.511174][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 295.564350][ T4317] usb 2-1: Using ep0 maxpacket: 32 [ 295.574895][ T4317] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 295.626985][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.690934][ T4317] usb 2-1: config 0 descriptor?? [ 295.809208][ T4286] Bluetooth: hci4: link tx timeout [ 295.814758][ T4286] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 295.822763][ T4286] Bluetooth: hci4: link tx timeout [ 295.828928][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 295.937312][ T4317] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 295.978919][ T4317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 296.011545][ T4317] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 296.050120][ T4317] usb 2-1: media controller created [ 296.164178][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.222648][ T9914] device syzkaller0 entered promiscuous mode [ 296.322184][ T4317] az6027: usb out operation failed. (-71) [ 296.358341][ T4317] az6027: usb out operation failed. (-71) [ 296.364254][ T4317] stb0899_attach: Driver disabled by Kconfig [ 296.370289][ T4317] az6027: no front-end attached [ 296.370289][ T4317] [ 296.387029][ T4317] az6027: usb out operation failed. (-71) [ 296.392934][ T4317] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 296.421039][ T4317] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 296.446569][ T4317] dvb-usb: schedule remote query interval to 400 msecs. [ 296.484478][ T4317] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 296.541237][ T4317] usb 2-1: USB disconnect, device number 3 [ 296.604401][ T9920] device syzkaller0 entered promiscuous mode [ 296.697032][ T4317] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 296.744729][ T9924] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1924'. [ 297.158215][ T9939] device syzkaller0 entered promiscuous mode [ 297.540058][ T9950] device syzkaller0 entered promiscuous mode [ 300.203247][ T9975] device syzkaller0 entered promiscuous mode [ 300.469512][ T9991] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 300.533699][ T9991] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 300.863146][ T4317] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 301.053280][ T4317] usb 3-1: Using ep0 maxpacket: 8 [ 301.062942][ T4317] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 301.079020][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.158568][ T4317] pvrusb2: Hardware description: Terratec Grabster AV400 [ 301.166094][ T4317] pvrusb2: ********** [ 301.170501][ T4317] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 301.182351][ T4317] pvrusb2: Important functionality might not be entirely working. [ 301.190780][ T4317] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 301.213096][ T4317] pvrusb2: ********** [ 301.347070][ T2310] pvrusb2: Invalid write control endpoint [ 301.589647][ T2310] pvrusb2: Invalid write control endpoint [ 301.618728][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 301.651690][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 301.699879][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 301.828521][ T2310] pvrusb2: Device being rendered inoperable [ 301.856573][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 301.912143][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 301.998712][T10023] trusted_key: encrypted_key: insufficient parameters specified [ 302.010117][ T2310] pvrusb2: Attached sub-driver cx25840 [ 302.085935][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 302.092859][T10025] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1938'. [ 302.105771][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 304.682799][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 304.694029][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 304.748925][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.796418][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.816456][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.870678][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.005094][T10038] device syzkaller0 entered promiscuous mode [ 305.025353][ T7] usb 3-1: USB disconnect, device number 5 [ 305.283346][ T4320] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 305.342707][T10055] tipc: Enabled bearer , priority 0 [ 305.513964][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.547568][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.571413][T10055] device syzkaller0 entered promiscuous mode [ 305.592800][ T4320] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.608025][T10055] tipc: Resetting bearer [ 305.651689][ T4320] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.667654][T10053] tipc: Resetting bearer [ 305.686099][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.715800][ T4320] usb 5-1: config 0 descriptor?? [ 306.168964][T10040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.179718][T10040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.649645][ T4320] usbhid 5-1:0.0: can't add hid device: -71 [ 309.670519][ T4320] usbhid: probe of 5-1:0.0 failed with error -71 [ 309.689962][ T4320] usb 5-1: USB disconnect, device number 9 [ 310.353430][T10053] tipc: Disabling bearer [ 310.472558][T10103] device syzkaller0 entered promiscuous mode [ 313.600312][T10130] device syzkaller0 entered promiscuous mode [ 313.922871][T10178] input: syz0 as /devices/virtual/input/input11 [ 315.521056][T10213] loop5: detected capacity change from 0 to 4096 [ 315.565835][ C0] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 315.603037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #292!!! [ 315.622520][ C0] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.632167][ C0] Buffer I/O error on dev loop5, logical block 496, async page read [ 315.662440][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 125 prio class 2 [ 315.683030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 315.701678][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.710872][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 315.713017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 315.733044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 317.069515][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 317.398722][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.114105][T10238] device syzkaller0 entered promiscuous mode [ 318.478067][T10251] input: syz0 as /devices/virtual/input/input12 [ 319.152945][T10274] device syzkaller0 entered promiscuous mode [ 319.942725][T10299] device syzkaller0 entered promiscuous mode [ 320.823121][ T126] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 320.907703][T10324] input: syz0 as /devices/virtual/input/input13 [ 321.015663][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.043093][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.094043][ T126] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.143087][ T126] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.192880][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.224339][ T126] usb 2-1: config 0 descriptor?? [ 321.530655][T10339] device syzkaller0 entered promiscuous mode [ 321.646231][T10313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.656719][T10313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.665079][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 321.863329][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 321.874551][ T22] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.968221][ T22] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.219282][ T22] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 322.262655][ T22] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 322.291023][ T22] usb 3-1: Product: syz [ 322.300264][ T22] usb 3-1: Manufacturer: syz [ 322.328137][ T22] hub 3-1:4.0: USB hub found [ 322.538224][ T22] hub 3-1:4.0: 2 ports detected [ 323.294130][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2007'. [ 323.756512][ T22] hub 3-1:4.0: activate --> -90 [ 323.960344][ T22] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 323.967867][ T26] usb 3-1: USB disconnect, device number 6 [ 325.205482][ T126] usbhid 2-1:0.0: can't add hid device: -71 [ 325.213806][ T126] usbhid: probe of 2-1:0.0 failed with error -71 [ 325.252835][ T126] usb 2-1: USB disconnect, device number 4 [ 325.358441][T10389] device syzkaller0 entered promiscuous mode [ 325.975333][T10408] No such timeout policy "syz0" [ 326.413410][ T26] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 326.625011][ T26] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 326.643183][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.704037][ T26] usb 5-1: config 0 has no interface number 0 [ 326.731074][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 326.772016][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.816788][ T26] usb 5-1: Product: syz [ 326.842243][ T26] usb 5-1: Manufacturer: syz [ 326.867548][ T26] usb 5-1: SerialNumber: syz [ 326.908450][ T26] usb 5-1: config 0 descriptor?? [ 326.921970][T10442] device syzkaller0 entered promiscuous mode [ 326.941127][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2026'. [ 326.973473][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 327.076530][T10444] netlink: 'syz.2.2026': attribute type 21 has an invalid length. [ 327.098676][T10444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.173096][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 327.182757][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 327.218148][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.248305][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.273131][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 327.308787][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 327.328034][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 327.339532][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.365447][ T7] usb 4-1: config 0 descriptor?? [ 327.387048][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 327.400136][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 327.443820][T10414] netlink: 'syz.4.2019': attribute type 1 has an invalid length. [ 327.451639][T10414] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2019'. [ 327.460189][ T4286] Bluetooth: hci5: urb ffff88805888c900 submission failed (90) [ 327.519624][T10460] No such timeout policy "syz0" [ 327.580727][ T4317] usb 5-1: USB disconnect, device number 10 [ 327.597824][ T7] usb 4-1: USB disconnect, device number 3 [ 328.722762][T10467] device syzkaller0 entered promiscuous mode [ 329.051076][T10492] device syzkaller0 entered promiscuous mode [ 329.145633][T10496] No such timeout policy "syz0" [ 329.390516][T10500] device syzkaller0 entered promiscuous mode [ 329.853108][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 330.013102][ T4317] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 330.035741][ T7] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 330.050538][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.067057][ T7] usb 2-1: config 0 descriptor?? [ 330.084488][ T7] cp210x 2-1:0.0: cp210x converter detected [ 330.207844][ T4317] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 330.224529][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.242244][ T4317] usb 1-1: Product: syz [ 330.247064][ T4317] usb 1-1: Manufacturer: syz [ 330.259031][ T4317] usb 1-1: SerialNumber: syz [ 330.271977][ T4317] r8152-cfgselector 1-1: config 0 descriptor?? [ 330.488759][ T7] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 330.711408][ T7] usb 2-1: cp210x converter now attached to ttyUSB0 [ 330.904041][ T7] usb 2-1: USB disconnect, device number 5 [ 330.950074][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 331.030874][ T7] cp210x 2-1:0.0: device disconnected [ 331.899311][T10538] device syzkaller0 entered promiscuous mode [ 331.940470][T10540] No such timeout policy "syz0" [ 332.181352][T10546] device syzkaller0 entered promiscuous mode [ 332.630489][ T4317] r8152-cfgselector 1-1: Unknown version 0x0000 [ 332.643426][ T4317] r8152-cfgselector 1-1: bad CDC descriptors [ 332.694074][ T4317] r8152-cfgselector 1-1: Unknown version 0x0000 [ 332.721519][ T4317] r8152-cfgselector 1-1: USB disconnect, device number 9 [ 333.671271][T10590] netlink: 'syz.4.2068': attribute type 153 has an invalid length. [ 334.142329][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2070'. [ 334.240816][T10603] netlink: 'syz.3.2070': attribute type 21 has an invalid length. [ 334.313163][T10603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.376350][T10605] device syzkaller0 entered promiscuous mode [ 334.393983][T10611] device syzkaller0 entered promiscuous mode [ 336.213270][ T4317] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 336.415061][ T4317] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 336.429813][ T4317] usb 3-1: config 0 has no interface number 0 [ 336.436474][ T4317] usb 3-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.453716][ T4317] usb 3-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.468777][ T4317] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 336.479223][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.511818][ T4317] usb 3-1: config 0 descriptor?? [ 337.013166][T10636] binder_alloc: 10635: binder_alloc_buf, no vma [ 337.696231][ T4317] usbhid 3-1:0.17: can't add hid device: -71 [ 337.703750][ T4317] usbhid: probe of 3-1:0.17 failed with error -71 [ 337.736331][ T4317] usb 3-1: USB disconnect, device number 7 [ 338.183205][ T26] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 338.363300][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 338.377950][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 338.380696][T10653] device syzkaller0 entered promiscuous mode [ 338.408065][ T26] usb 2-1: not running at top speed; connect to a high speed hub [ 338.419977][ T26] usb 2-1: config 6 has an invalid interface number: 193 but max is 2 [ 338.438388][ T26] usb 2-1: config 6 has an invalid interface number: 193 but max is 2 [ 338.450808][ T26] usb 2-1: config 6 has an invalid interface number: 233 but max is 2 [ 338.461790][ T26] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 338.478259][ T26] usb 2-1: config 6 has no interface number 0 [ 338.486177][ T26] usb 2-1: config 6 has no interface number 1 [ 338.492381][ T26] usb 2-1: config 6 interface 193 has no altsetting 0 [ 338.505823][ T26] usb 2-1: config 6 interface 193 has no altsetting 1 [ 338.522496][ T26] usb 2-1: New USB device found, idVendor=050d, idProduct=0103, bcdDevice=ff.74 [ 338.538274][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.547041][ T26] usb 2-1: Product: syz [ 338.552382][ T26] usb 2-1: Manufacturer: syz [ 338.563561][ T26] usb 2-1: SerialNumber: syz [ 338.568243][ T7] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 338.568278][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.613833][ T7] usb 4-1: Product: syz [ 338.623920][ T7] usb 4-1: Manufacturer: syz [ 338.633249][ T7] usb 4-1: SerialNumber: syz [ 338.759272][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2084'. [ 338.825618][ T26] belkin_sa 2-1:6.193: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 338.894043][ T26] usb 2-1: bcdDevice: ff74, bfc: 0 [ 338.918014][ T26] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 338.993828][ T26] belkin_sa 2-1:6.233: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 339.046072][ T26] usb 2-1: bcdDevice: ff74, bfc: 0 [ 339.075172][ T26] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 339.086666][ T7] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 339.193226][ T26] usb 2-1: USB disconnect, device number 6 [ 339.221714][ T26] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 339.265186][ T26] belkin_sa 2-1:6.193: device disconnected [ 339.302764][ T26] belkin ttyUSB1: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB1 [ 339.345767][ T26] belkin_sa 2-1:6.233: device disconnected [ 340.353857][ T7] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 340.381232][ T7] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 340.410554][ T7] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 340.453606][ T7] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 340.502064][ T7] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 340.547521][ T7] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 340.599011][ T7] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 340.623511][ T7] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 340.673518][ T7] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 340.702388][ T7] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 340.733984][ T7] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 340.766778][ T7] lan78xx: probe of 4-1:1.0 failed with error -71 [ 340.813476][ T7] usb 4-1: USB disconnect, device number 4 [ 342.389503][T10660] netlink: 'syz.4.2084': attribute type 21 has an invalid length. [ 342.401120][T10660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 342.758647][T10700] device syzkaller0 entered promiscuous mode [ 346.264972][T10741] device syzkaller0 entered promiscuous mode [ 347.413186][ T4347] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 347.536560][T10786] device syzkaller0 entered promiscuous mode [ 347.625193][ T4347] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 347.650564][ T4347] usb 5-1: config 0 has no interface number 0 [ 347.666274][ T4347] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.709375][ T4347] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.749455][ T4347] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 347.769724][ T4347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.809480][ T4347] usb 5-1: config 0 descriptor?? [ 347.837553][T10790] vivid-002: disconnect [ 347.953988][T10790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2117'. [ 347.997231][ T40] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 348.252054][T10774] binder_alloc: 10773: binder_alloc_buf, no vma [ 348.362368][ T4347] usbhid 5-1:0.17: can't add hid device: -71 [ 348.386051][ T4347] usbhid: probe of 5-1:0.17 failed with error -71 [ 348.433485][ T4347] usb 5-1: USB disconnect, device number 11 [ 348.600643][T10787] vivid-002: reconnect [ 348.752162][T10803] tipc: Enabling of bearer rejected, failed to enable media [ 349.640065][T10821] device syzkaller0 entered promiscuous mode [ 350.152683][T10829] binder: 10824:10829 ioctl c0306201 0 returned -14 [ 350.194999][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2133'. [ 350.217820][T10843] tipc: Enabling of bearer rejected, failed to enable media [ 351.025339][T10829] syz.3.2130 (10829): drop_caches: 2 [ 351.649925][T10869] device syzkaller0 entered promiscuous mode [ 351.739269][T10872] device syzkaller0 entered promiscuous mode [ 354.743381][T10876] netlink: 'syz.1.2144': attribute type 153 has an invalid length. [ 354.803647][T10898] device syzkaller0 entered promiscuous mode [ 355.079620][T10914] tipc: Enabling of bearer rejected, failed to enable media [ 355.279014][T10924] device syzkaller0 entered promiscuous mode [ 355.735811][T10938] No such timeout policy "syz0" [ 355.800443][T10941] device syzkaller0 entered promiscuous mode [ 355.994511][T10945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2157'. [ 356.023493][ T4347] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 356.049009][T10944] device syzkaller0 entered promiscuous mode [ 356.256825][ T4347] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 356.288878][ T4347] usb 4-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 356.323837][ T4347] usb 4-1: Product: syz [ 356.328345][ T4347] usb 4-1: SerialNumber: syz [ 356.333400][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 356.373690][ T4347] usb 4-1: config 0 descriptor?? [ 356.503470][ T7] usb 3-1: device descriptor read/64, error -71 [ 356.793187][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 356.963189][ T7] usb 3-1: device descriptor read/64, error -71 [ 357.093425][ T7] usb usb3-port1: attempt power cycle [ 357.363017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 357.503174][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 357.543980][ T7] usb 3-1: device descriptor read/8, error -71 [ 357.835059][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 357.876108][ T7] usb 3-1: device descriptor read/8, error -71 [ 358.004013][ T7] usb usb3-port1: unable to enumerate USB device [ 358.700595][ T4347] ldusb 4-1:0.0: Interrupt in endpoint not found [ 358.739768][ T4347] usb 4-1: USB disconnect, device number 5 [ 360.010298][T10961] netlink: 'syz.0.2162': attribute type 153 has an invalid length. [ 360.039813][T10964] device syzkaller0 entered promiscuous mode [ 360.423180][T10991] No such timeout policy "syz0" [ 360.614179][ T4286] Bluetooth: hci4: link tx timeout [ 360.619822][ T4286] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 360.627676][ T4286] Bluetooth: hci4: link tx timeout [ 360.632921][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.384340][T11018] netlink: 'syz.2.2176': attribute type 153 has an invalid length. [ 363.566286][T11025] device syzkaller0 entered promiscuous mode [ 363.680861][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2180'. [ 363.695834][T11030] netlink: 'syz.4.2179': attribute type 3 has an invalid length. [ 364.104394][T11036] No such timeout policy "syz0" [ 365.964337][T11032] netlink: 'syz.3.2180': attribute type 21 has an invalid length. [ 365.972450][T11032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.284322][T11049] device syzkaller0 entered promiscuous mode [ 366.319378][T11052] device syzkaller0 entered promiscuous mode [ 366.429943][T11055] device syzkaller0 entered promiscuous mode [ 367.139789][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2196'. [ 367.178322][T11081] netlink: 'syz.3.2196': attribute type 21 has an invalid length. [ 367.188853][T11081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.254279][T11084] device syzkaller0 entered promiscuous mode [ 371.961359][T11125] device syzkaller0 entered promiscuous mode [ 372.205038][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2208'. [ 372.628640][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2212'. [ 375.045170][T11175] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2216'. [ 375.655688][T11136] netlink: 'syz.3.2208': attribute type 21 has an invalid length. [ 375.664294][T11136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.684389][T11143] device syzkaller0 entered promiscuous mode [ 375.723753][T11179] device syzkaller0 entered promiscuous mode [ 375.841172][T11189] device syzkaller0 entered promiscuous mode [ 376.177107][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 376.240219][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2224'. [ 376.304950][T11200] device bridge_slave_1 left promiscuous mode [ 376.339394][T11200] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.663193][ T4317] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 376.848043][ T4317] usb 4-1: config 0 has no interfaces? [ 376.855497][ T4317] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 376.878226][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.894548][T11217] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2227'. [ 376.909636][ T4317] usb 4-1: config 0 descriptor?? [ 377.121049][ T4317] usb 4-1: USB disconnect, device number 6 [ 377.323203][ T126] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 377.519283][ T126] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 377.602616][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.723144][ T4317] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 377.858790][ T126] usb 2-1: Product: syz [ 377.883239][ T126] usb 2-1: Manufacturer: syz [ 377.904626][ T126] usb 2-1: SerialNumber: syz [ 377.915959][ T4317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 377.937895][ T4317] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 377.969639][ T126] usb 2-1: config 0 descriptor?? [ 377.997803][ T4317] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 378.050303][ T4317] usb 4-1: string descriptor 0 read error: -22 [ 378.078054][ T4317] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 378.110704][T11221] device syzkaller0 entered promiscuous mode [ 378.127513][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.207900][ T126] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 378.381030][ T4317] usb 4-1: Can't get UAC3 power state for id 10 [ 378.836564][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.016973][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 379.028626][ T4317] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 380.407182][ T4317] usb 4-1: USB disconnect, device number 7 [ 381.329402][ T126] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 381.355699][ T126] usb 2-1: USB disconnect, device number 7 [ 382.911172][T11250] device syzkaller0 entered promiscuous mode [ 384.081714][ T4317] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 384.283185][ T4317] usb 4-1: Using ep0 maxpacket: 32 [ 384.290536][ T4317] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 384.303678][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.319419][ T4317] usb 4-1: config 0 descriptor?? [ 384.366626][ T4317] as10x_usb: device has been detected [ 384.372801][ T4317] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 384.428006][ T4317] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 384.585384][ T4317] as10x_usb: error during firmware upload part1 [ 384.592210][ T4317] Registered device nBox DVB-T Dongle [ 386.306595][T11258] device syzkaller0 entered promiscuous mode [ 386.765822][T11307] device syzkaller0 entered promiscuous mode [ 386.783162][ T126] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 386.973471][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 387.067677][ T126] usb 1-1: config 139 has an invalid interface number: 49 but max is 0 [ 387.137996][ T126] usb 1-1: config 139 has no interface number 0 [ 387.144578][ T126] usb 1-1: config 139 interface 49 has no altsetting 0 [ 387.169512][ T126] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 387.192595][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.204971][ T126] usb 1-1: Product: syz [ 387.210114][ T126] usb 1-1: Manufacturer: syz [ 387.215649][ T126] usb 1-1: SerialNumber: syz [ 387.506233][ T4347] usb 4-1: USB disconnect, device number 8 [ 387.552183][ T4347] Unregistered device nBox DVB-T Dongle [ 387.616786][ T4347] as10x_usb: device has been disconnected [ 387.668967][ T126] radio-usb-si4713 1-1:139.49: Si4713 development board discovered: (10C4:8244) [ 387.717575][ T126] radio-usb-si4713: probe of 1-1:139.49 failed with error -71 [ 387.737236][ T126] usbhid 1-1:139.49: couldn't find an input interrupt endpoint [ 387.763126][ T126] usb 1-1: USB disconnect, device number 10 [ 391.884666][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2250'. [ 392.250636][T11348] device syzkaller0 entered promiscuous mode [ 392.910863][T11370] device syzkaller0 entered promiscuous mode [ 397.345659][T11416] tipc: Enabled bearer , priority 0 [ 397.450323][T11416] device syzkaller0 entered promiscuous mode [ 397.483706][T11416] tipc: Resetting bearer [ 397.575576][T11421] device syzkaller0 entered promiscuous mode [ 397.588736][T11413] tipc: Resetting bearer [ 397.608598][T11432] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2275'. [ 401.980305][T11413] tipc: Disabling bearer [ 402.172698][T11463] input: syz0 as /devices/virtual/input/input20 [ 405.206564][T11487] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2288'. [ 405.237574][T11493] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2290'. [ 405.730361][T11515] device syzkaller0 entered promiscuous mode [ 407.307550][T11549] device syzkaller0 entered promiscuous mode [ 410.048432][ T4370] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 410.953072][ T4317] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 411.144964][ T4317] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 411.159040][ T4317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.182652][ T4317] usb 1-1: config 0 has no interface number 0 [ 411.204906][ T4317] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 411.229799][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.250679][ T4317] usb 1-1: Product: syz [ 411.260762][ T4317] usb 1-1: Manufacturer: syz [ 411.270131][ T4317] usb 1-1: SerialNumber: syz [ 411.290928][ T4317] usb 1-1: config 0 descriptor?? [ 411.793098][ T4347] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 411.829248][T11629] device syzkaller0 entered promiscuous mode [ 411.985351][ T4347] usb 2-1: Using ep0 maxpacket: 32 [ 411.999269][ T4347] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 412.054599][ T4347] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 412.075891][ T4347] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 412.104510][ T4347] usb 2-1: Product: syz [ 412.113378][ T4347] usb 2-1: Manufacturer: syz [ 412.118138][ T4347] usb 2-1: SerialNumber: syz [ 412.172518][ T4347] usb 2-1: config 0 descriptor?? [ 412.209798][T11619] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 412.530663][ T126] usb 2-1: USB disconnect, device number 8 [ 413.719064][ T4317] usb 1-1: USB disconnect, device number 11 [ 415.729476][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2336'. [ 415.953213][ T4320] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 416.001079][T11706] device syzkaller0 entered promiscuous mode [ 416.192358][ T4320] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 416.211306][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.228505][ T4320] usb 4-1: config 0 has no interface number 0 [ 416.272622][ T4320] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 416.282015][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.290915][ T4320] usb 4-1: Product: syz [ 416.295794][ T4320] usb 4-1: Manufacturer: syz [ 416.300440][ T4320] usb 4-1: SerialNumber: syz [ 416.319505][ T4320] usb 4-1: config 0 descriptor?? [ 416.815907][ T126] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 417.007623][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 417.055890][ T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.066320][ T126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 417.075503][ T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 417.086725][ T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 417.098006][ T126] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 417.107111][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.128549][ T126] hub 5-1:1.0: bad descriptor, ignoring hub [ 417.134621][ T126] hub: probe of 5-1:1.0 failed with error -5 [ 417.140976][ T126] cdc_wdm 5-1:1.0: skipping garbage [ 417.146438][ T126] cdc_wdm 5-1:1.0: skipping garbage [ 417.155868][ T126] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 417.161832][ T126] cdc_wdm 5-1:1.0: Unknown control protocol [ 417.430153][ T4320] usb 5-1: USB disconnect, device number 12 [ 417.437305][T11724] cdc_wdm 5-1:1.0: Error autopm - -16 [ 417.987257][ T4320] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 418.203194][ T4320] usb 5-1: Using ep0 maxpacket: 8 [ 418.211243][ T4320] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.227344][ T4320] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 418.243299][ T4320] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 418.259680][ T4320] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 418.271147][ T4320] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 418.282072][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.327091][ T4320] hub 5-1:1.0: bad descriptor, ignoring hub [ 418.333478][ T4320] hub: probe of 5-1:1.0 failed with error -5 [ 418.340775][ T4320] cdc_wdm 5-1:1.0: skipping garbage [ 418.346326][ T4320] cdc_wdm 5-1:1.0: skipping garbage [ 418.366115][ T4320] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 418.372199][ T4320] cdc_wdm 5-1:1.0: Unknown control protocol [ 418.626317][ T4320] usb 5-1: USB disconnect, device number 13 [ 418.682388][ T4317] usb 4-1: USB disconnect, device number 9 [ 418.795702][T11714] device syzkaller0 entered promiscuous mode [ 419.160553][T11732] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 419.331083][T11743] device syzkaller0 entered promiscuous mode [ 419.347095][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2352'. [ 419.352323][T11743] ------------[ cut here ]------------ [ 419.361880][T11743] WARNING: CPU: 0 PID: 11743 at include/linux/skbuff.h:2876 em_nbyte_match+0x2cc/0x3e0 [ 419.371775][T11743] Modules linked in: [ 419.375718][T11743] CPU: 0 PID: 11743 Comm: syz.4.2350 Not tainted syzkaller #0 [ 419.384247][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.394421][T11743] RIP: 0010:em_nbyte_match+0x2cc/0x3e0 [ 419.399977][T11743] Code: c0 eb 07 e8 26 53 1a f9 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 53 1a f9 0f 0b e9 e5 fe ff ff e8 04 53 1a f9 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 419.419759][T11743] RSP: 0018:ffffc9000d9ef118 EFLAGS: 00010287 [ 419.426043][T11743] RAX: ffffffff8868218c RBX: ffff888020ba7640 RCX: 0000000000080000 [ 419.434095][T11743] RDX: ffffc9000e392000 RSI: 00000000000003d7 RDI: 00000000000003d8 [ 419.442077][T11743] RBP: 000000000000ffff R08: ffff888024bc8000 R09: 0000000000000003 [ 419.450081][T11743] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 419.458098][T11743] R13: 1ffff11004174ede R14: ffff888054d7bc58 R15: 1ffff1100a9af78b [ 419.466214][T11743] FS: 00007f3816bca6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 419.475185][T11743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.481770][T11743] CR2: 00002000000d9030 CR3: 0000000075450000 CR4: 00000000003526f0 [ 419.489775][T11743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 419.497767][T11743] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 419.505779][T11743] Call Trace: [ 419.509058][T11743] [ 419.511992][T11743] __tcf_em_tree_match+0x1cb/0x7a0 [ 419.517156][T11743] ? tcf_em_tree_dump+0x900/0x900 [ 419.522205][T11743] ? rcu_read_lock_held+0x40/0x40 [ 419.527255][T11743] ? __lock_acquire+0x12f4/0x7d10 [ 419.532291][T11743] basic_classify+0x111/0x2c0 [ 419.537002][T11743] tcf_classify+0x331/0xbf0 [ 419.541608][T11743] multiq_enqueue+0xfb/0x4b0 [ 419.546333][T11743] ? sch_tree_unlock+0x1b0/0x1b0 [ 419.551283][T11743] ? do_raw_spin_lock+0x128/0x2f0 [ 419.556337][T11743] ? __rwlock_init+0x140/0x140 [ 419.561192][T11743] dev_qdisc_enqueue+0x4c/0x2b0 [ 419.566075][T11743] __dev_queue_xmit+0xfdc/0x37c0 [ 419.571023][T11743] ? __dev_queue_xmit+0x26b/0x37c0 [ 419.576164][T11743] ? netdev_core_pick_tx+0x340/0x340 [ 419.581486][T11743] ? packet_parse_headers+0x84b/0xab0 [ 419.586885][T11743] ? __virt_addr_valid+0x188/0x540 [ 419.592003][T11743] ? __check_object_size+0x500/0xa40 [ 419.597345][T11743] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 419.602971][T11743] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 419.609070][T11743] ? skb_put+0x117/0x210 [ 419.613398][T11743] packet_sendmsg+0x3bc3/0x4e60 [ 419.618273][T11743] ? __schedule+0x119d/0x40e0 [ 419.622998][T11743] ? __might_sleep+0xd0/0xd0 [ 419.627598][T11743] ? verify_lock_unused+0x140/0x140 [ 419.632807][T11743] ? aa_sk_perm+0x81f/0x950 [ 419.637357][T11743] ? packet_getsockopt+0x9a0/0x9a0 [ 419.643140][T11743] ? aa_sock_msg_perm+0x94/0x150 [ 419.648164][T11743] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 419.653502][T11743] ? security_socket_sendmsg+0x7c/0xa0 [ 419.658986][T11743] ? packet_getsockopt+0x9a0/0x9a0 [ 419.664147][T11743] ____sys_sendmsg+0x5be/0x970 [ 419.668942][T11743] ? __sys_sendmsg_sock+0x30/0x30 [ 419.674037][T11743] ? __import_iovec+0x315/0x500 [ 419.678923][T11743] ? import_iovec+0x6f/0xa0 [ 419.683477][T11743] ___sys_sendmsg+0x2a2/0x360 [ 419.688167][T11743] ? try_to_wake_up+0x6ae/0x1080 [ 419.693154][T11743] ? __sys_sendmsg+0x290/0x290 [ 419.697953][T11743] ? put_user_ifreq+0x81/0xb0 [ 419.702663][T11743] __se_sys_sendmsg+0x1bb/0x2a0 [ 419.707542][T11743] ? __x64_sys_sendmsg+0x80/0x80 [ 419.712494][T11743] ? lockdep_hardirqs_on+0x94/0x140 [ 419.717725][T11743] do_syscall_64+0x4c/0xa0 [ 419.722252][T11743] ? clear_bhb_loop+0x60/0xb0 [ 419.727072][T11743] ? clear_bhb_loop+0x60/0xb0 [ 419.731755][T11743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.737676][T11743] RIP: 0033:0x7f3815d9c819 [ 419.742095][T11743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.761812][T11743] RSP: 002b:00007f3816bca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.770346][T11743] RAX: ffffffffffffffda RBX: 00007f3816015fa0 RCX: 00007f3815d9c819 [ 419.778354][T11743] RDX: 000000000004c00c RSI: 00002000000000c0 RDI: 0000000000000007 [ 419.786608][T11743] RBP: 00007f3815e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 419.794632][T11743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.802700][T11743] R13: 00007f3816016038 R14: 00007f3816015fa0 R15: 00007ffce01001e8 [ 419.810703][T11743] [ 419.813827][T11743] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 419.821103][T11743] CPU: 0 PID: 11743 Comm: syz.4.2350 Not tainted syzkaller #0 [ 419.828552][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.838604][T11743] Call Trace: [ 419.841902][T11743] [ 419.844932][T11743] dump_stack_lvl+0x188/0x24e [ 419.849650][T11743] ? memcpy+0x3c/0x60 [ 419.853657][T11743] ? show_regs_print_info+0x12/0x12 [ 419.858869][T11743] ? load_image+0x400/0x400 [ 419.863383][T11743] panic+0x2e5/0x730 [ 419.867284][T11743] ? bpf_jit_dump+0xd0/0xd0 [ 419.871812][T11743] __warn+0x2f8/0x4f0 [ 419.875879][T11743] ? em_nbyte_match+0x2cc/0x3e0 [ 419.880759][T11743] ? em_nbyte_match+0x2cc/0x3e0 [ 419.886678][T11743] report_bug+0x2ba/0x4f0 [ 419.891774][T11743] ? em_nbyte_match+0x2cc/0x3e0 [ 419.897717][T11743] handle_bug+0x3a/0x70 [ 419.904348][T11743] exc_invalid_op+0x16/0x40 [ 419.908898][T11743] asm_exc_invalid_op+0x16/0x20 [ 419.913957][T11743] RIP: 0010:em_nbyte_match+0x2cc/0x3e0 [ 419.919507][T11743] Code: c0 eb 07 e8 26 53 1a f9 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 53 1a f9 0f 0b e9 e5 fe ff ff e8 04 53 1a f9 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 419.939385][T11743] RSP: 0018:ffffc9000d9ef118 EFLAGS: 00010287 [ 419.945511][T11743] RAX: ffffffff8868218c RBX: ffff888020ba7640 RCX: 0000000000080000 [ 419.953487][T11743] RDX: ffffc9000e392000 RSI: 00000000000003d7 RDI: 00000000000003d8 [ 419.961455][T11743] RBP: 000000000000ffff R08: ffff888024bc8000 R09: 0000000000000003 [ 419.969449][T11743] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 419.977453][T11743] R13: 1ffff11004174ede R14: ffff888054d7bc58 R15: 1ffff1100a9af78b [ 419.985479][T11743] ? em_nbyte_match+0x2cc/0x3e0 [ 419.990435][T11743] ? em_nbyte_match+0x2cc/0x3e0 [ 419.995289][T11743] __tcf_em_tree_match+0x1cb/0x7a0 [ 420.000515][T11743] ? tcf_em_tree_dump+0x900/0x900 [ 420.005557][T11743] ? rcu_read_lock_held+0x40/0x40 [ 420.010680][T11743] ? __lock_acquire+0x12f4/0x7d10 [ 420.015713][T11743] basic_classify+0x111/0x2c0 [ 420.020485][T11743] tcf_classify+0x331/0xbf0 [ 420.024999][T11743] multiq_enqueue+0xfb/0x4b0 [ 420.029618][T11743] ? sch_tree_unlock+0x1b0/0x1b0 [ 420.034566][T11743] ? do_raw_spin_lock+0x128/0x2f0 [ 420.039674][T11743] ? __rwlock_init+0x140/0x140 [ 420.044438][T11743] dev_qdisc_enqueue+0x4c/0x2b0 [ 420.049380][T11743] __dev_queue_xmit+0xfdc/0x37c0 [ 420.054320][T11743] ? __dev_queue_xmit+0x26b/0x37c0 [ 420.059450][T11743] ? netdev_core_pick_tx+0x340/0x340 [ 420.064842][T11743] ? packet_parse_headers+0x84b/0xab0 [ 420.070231][T11743] ? __virt_addr_valid+0x188/0x540 [ 420.075434][T11743] ? __check_object_size+0x500/0xa40 [ 420.080736][T11743] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 420.086483][T11743] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 420.092643][T11743] ? skb_put+0x117/0x210 [ 420.096891][T11743] packet_sendmsg+0x3bc3/0x4e60 [ 420.102024][T11743] ? __schedule+0x119d/0x40e0 [ 420.106703][T11743] ? __might_sleep+0xd0/0xd0 [ 420.111351][T11743] ? verify_lock_unused+0x140/0x140 [ 420.116651][T11743] ? aa_sk_perm+0x81f/0x950 [ 420.121155][T11743] ? packet_getsockopt+0x9a0/0x9a0 [ 420.126303][T11743] ? aa_sock_msg_perm+0x94/0x150 [ 420.131237][T11743] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 420.136518][T11743] ? security_socket_sendmsg+0x7c/0xa0 [ 420.141989][T11743] ? packet_getsockopt+0x9a0/0x9a0 [ 420.147637][T11743] ____sys_sendmsg+0x5be/0x970 [ 420.152522][T11743] ? __sys_sendmsg_sock+0x30/0x30 [ 420.157565][T11743] ? __import_iovec+0x315/0x500 [ 420.162510][T11743] ? import_iovec+0x6f/0xa0 [ 420.167014][T11743] ___sys_sendmsg+0x2a2/0x360 [ 420.171709][T11743] ? try_to_wake_up+0x6ae/0x1080 [ 420.176764][T11743] ? __sys_sendmsg+0x290/0x290 [ 420.181561][T11743] ? put_user_ifreq+0x81/0xb0 [ 420.186252][T11743] __se_sys_sendmsg+0x1bb/0x2a0 [ 420.191113][T11743] ? __x64_sys_sendmsg+0x80/0x80 [ 420.196068][T11743] ? lockdep_hardirqs_on+0x94/0x140 [ 420.201280][T11743] do_syscall_64+0x4c/0xa0 [ 420.205712][T11743] ? clear_bhb_loop+0x60/0xb0 [ 420.210399][T11743] ? clear_bhb_loop+0x60/0xb0 [ 420.215101][T11743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.221010][T11743] RIP: 0033:0x7f3815d9c819 [ 420.225445][T11743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.245148][T11743] RSP: 002b:00007f3816bca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.253577][T11743] RAX: ffffffffffffffda RBX: 00007f3816015fa0 RCX: 00007f3815d9c819 [ 420.261560][T11743] RDX: 000000000004c00c RSI: 00002000000000c0 RDI: 0000000000000007 [ 420.269539][T11743] RBP: 00007f3815e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 420.277517][T11743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.285492][T11743] R13: 00007f3816016038 R14: 00007f3816015fa0 R15: 00007ffce01001e8 [ 420.293483][T11743] [ 420.296882][T11743] Kernel Offset: disabled [ 420.301294][T11743] Rebooting in 86400 seconds..