last executing test programs: 10.953720163s ago: executing program 0 (id=2810): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x40, 0x1, 0x0, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) 10.609569604s ago: executing program 0 (id=2817): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0xfffffe49, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000080)=""/130, 0x8d}, {&(0x7f0000002d40)=""/4102, 0x1068}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000140)=""/229, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000280)) 3.052079558s ago: executing program 4 (id=2904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.721653967s ago: executing program 2 (id=2908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x401, 0xfffffffd}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x340008e0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.638332184s ago: executing program 4 (id=2910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfffa, 0xc}}, @TCA_FLOW_KEYS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.35132006s ago: executing program 2 (id=2911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0x9, 0xb}, {0xa, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x8e, 0x2, {{0x83, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x1, 0x800005, 0x4, 0x9, 0x7, 0x9, 0xd, 0x3, 0x4, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.090155344s ago: executing program 4 (id=2913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x76}}]}, {0x3}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400000000001100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 2.02634508s ago: executing program 2 (id=2914): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x4, 0xa, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}]}}}, @hopopts={{0xd8, 0x29, 0x36, {0x5e, 0x17, '\x00', [@generic={0xff, 0x22, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c3"}, @pad1, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x4c, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b"}, @generic={0x1, 0x6, "2bdb86d1ce6a"}]}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1c8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.010111931s ago: executing program 0 (id=2915): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff0}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.843998636s ago: executing program 0 (id=2916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x5}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="9de9c166c9bd5cc616c3a50266000000", 0x10}], 0x1}, 0x0) 1.778174311s ago: executing program 1 (id=2917): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000100039042abd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="13005b24346000003400128008000100736974002800028006000e006200000014000b00ff02000000000000000000000000000108000300ffffff"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) 1.57123424s ago: executing program 1 (id=2918): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.496946746s ago: executing program 4 (id=2919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.411967114s ago: executing program 0 (id=2920): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000880)}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.409003564s ago: executing program 1 (id=2921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x401, 0xfffffffd}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x340008e0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.364262078s ago: executing program 4 (id=2922): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c821}, 0x20008844) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff, 0xfff2}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.079061764s ago: executing program 1 (id=2924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0x9, 0xb}, {0xa, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x8e, 0x2, {{0x83, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x1, 0x800005, 0x4, 0x9, 0x7, 0x9, 0xd, 0x3, 0x4, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 932.159796ms ago: executing program 2 (id=2925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) 931.942237ms ago: executing program 3 (id=2926): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff0}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 823.452707ms ago: executing program 4 (id=2927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "d579f7bf7a8547e5", "d388000000000300", "7eb09414", "976f2a244e5025c9"}, 0x28) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) 756.062133ms ago: executing program 3 (id=2928): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000100039042abd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="13005b24346000003400128008000100736974002800028006000e006200000014000b00ff02000000000000000000000000000108000300ffffff"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) 671.71644ms ago: executing program 1 (id=2929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x76}}]}, {0x3}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400000000001100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 586.906318ms ago: executing program 3 (id=2930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x22, 0x1, 0x5}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 481.699617ms ago: executing program 2 (id=2931): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 332.272331ms ago: executing program 3 (id=2932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 331.38582ms ago: executing program 0 (id=2933): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) 208.052791ms ago: executing program 2 (id=2934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x401, 0xfffffffd}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x340008e0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) 160.445366ms ago: executing program 3 (id=2935): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r3, 0x2) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) 60.797454ms ago: executing program 1 (id=2936): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x2000c041) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x100}, {0x0, 0x8, 0x3, 0x1, 0x4, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x0) 0s ago: executing program 3 (id=2937): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c821}, 0x20008844) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff, 0xfff2}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) kernel console output (not intermixed with test programs): rocess `syz.3.1392'. [ 210.233167][ T4331] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 210.243414][ C0] net_ratelimit: 10 callbacks suppressed [ 210.243431][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.281543][ T8667] device syzkaller0 entered promiscuous mode [ 210.323200][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.423172][ T4331] usb 2-1: Using ep0 maxpacket: 8 [ 210.429951][ T4331] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 210.440034][ T8671] tipc: Enabling of bearer rejected, failed to enable media [ 210.459401][ T4331] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 210.483199][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.500624][ T4331] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.558796][ T4331] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 210.573316][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.594621][ T4331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.640364][ T4331] usbtmc 2-1:16.0: bulk endpoints not found [ 210.641598][ T4279] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 211.293226][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.373241][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.533175][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.603301][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 212.362279][ T4279] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 212.365721][ T8728] device syzkaller0 entered promiscuous mode [ 212.413232][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 212.563222][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 212.568599][ T8738] binder: BINDER_SET_CONTEXT_MGR already set [ 212.575577][ T8740] fuse: Unknown parameter 'grou00000000000000000000' [ 212.604127][ T8738] binder: 8737:8738 ioctl 4018620d 200000004a80 returned -16 [ 212.740302][ T8750] device syzkaller0 entered promiscuous mode [ 213.023803][ T4317] usb 2-1: USB disconnect, device number 11 [ 213.096515][ T4324] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 213.166792][ T4279] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 213.294911][ T4324] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.332983][ T4324] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 213.353161][ T4324] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 213.382810][ T4324] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 213.406834][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.422801][ T8754] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 213.431816][ T4324] hub 4-1:1.0: bad descriptor, ignoring hub [ 213.443472][ T4324] hub: probe of 4-1:1.0 failed with error -5 [ 213.453906][ T4324] cdc_wdm 4-1:1.0: skipping garbage [ 213.459202][ T4324] cdc_wdm 4-1:1.0: skipping garbage [ 213.491212][ T4324] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 213.498650][ T4324] cdc_wdm 4-1:1.0: Unknown control protocol [ 213.578131][ T8780] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 213.605142][ T8780] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1445'. [ 213.637579][ T8780] .`: renamed from bond0 [ 213.667104][ T8782] device syzkaller0 entered promiscuous mode [ 213.737016][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 213.744297][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 213.751006][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 213.757646][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 213.895211][ T4331] usb 4-1: USB disconnect, device number 12 [ 213.912948][ T4279] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 213.953179][ T4324] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 214.173232][ T4324] usb 3-1: Using ep0 maxpacket: 8 [ 214.179952][ T4324] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 214.188737][ T4324] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 214.199365][ T4324] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.212584][ T4324] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 214.221737][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.234169][ T4324] usbtmc 3-1:16.0: bulk endpoints not found [ 214.458499][ T4279] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 215.024789][ T4279] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 215.523208][ C0] net_ratelimit: 7 callbacks suppressed [ 215.523225][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 215.683159][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 215.763328][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.017016][ T8870] netlink: 'syz.0.1475': attribute type 4 has an invalid length. [ 216.187095][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 216.280722][ T8882] device syzkaller0 entered promiscuous mode [ 216.354395][ T8886] tipc: Enabled bearer , priority 0 [ 216.381631][ T8885] tipc: Disabling bearer [ 216.563265][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.669298][ T8898] tipc: Enabled bearer , priority 0 [ 216.697435][ T8898] tipc: Resetting bearer [ 216.715063][ T4279] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 216.723171][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.741186][ T8895] tipc: Disabling bearer [ 216.750074][ T4346] usb 3-1: USB disconnect, device number 24 [ 216.803409][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.922729][ T8910] tipc: Enabling of bearer rejected, failed to enable media [ 217.015754][ T8917] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1491'. [ 217.318371][ T8925] device syzkaller0 entered promiscuous mode [ 217.603280][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.763203][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.843272][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.853306][ T4346] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 217.860942][ T4317] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 217.919882][ T8950] tipc: Enabled bearer , priority 0 [ 217.940655][ T8950] device syzkaller0 entered promiscuous mode [ 217.996873][ T8950] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1507'. [ 218.013561][ T8949] tipc: Resetting bearer [ 218.050210][ T8949] tipc: Disabling bearer [ 218.063274][ T4317] usb 5-1: Using ep0 maxpacket: 8 [ 218.070527][ T4346] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.084260][ T4346] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 218.095221][ T4317] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 218.113131][ T4346] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 218.127778][ T4317] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 218.138599][ T4346] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 218.147928][ T4317] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.157832][ T4346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.166342][ T4317] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.178997][ T4317] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 218.197997][ T8935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 218.200982][ T8961] device syzkaller0 entered promiscuous mode [ 218.206494][ T4346] hub 3-1:1.0: bad descriptor, ignoring hub [ 218.217711][ T4317] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 218.226858][ T4346] hub: probe of 3-1:1.0 failed with error -5 [ 218.233009][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.241895][ T4346] cdc_wdm 3-1:1.0: skipping garbage [ 218.247886][ T4346] cdc_wdm 3-1:1.0: skipping garbage [ 218.264744][ T4317] usbtmc 5-1:16.0: bulk endpoints not found [ 218.273711][ T4346] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 218.290366][ T4346] cdc_wdm 3-1:1.0: Unknown control protocol [ 218.475387][ T4279] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 218.507828][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 218.521710][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 218.528404][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 218.535044][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 218.541195][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 218.583554][ T4345] usb 3-1: USB disconnect, device number 25 [ 218.643213][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.001056][ T8988] tipc: Enabled bearer , priority 0 [ 219.009317][ T8988] device syzkaller0 entered promiscuous mode [ 219.040716][ T8988] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1521'. [ 219.058316][ T8987] tipc: Resetting bearer [ 219.100028][ T8987] tipc: Disabling bearer [ 219.271417][ T8993] device syzkaller0 entered promiscuous mode [ 219.543242][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1526'. [ 219.761841][ T9009] device syzkaller0 entered promiscuous mode [ 220.057464][ T9019] overlayfs: failed to clone upperpath [ 220.633990][ T4324] usb 5-1: USB disconnect, device number 8 [ 220.723407][ C0] net_ratelimit: 5 callbacks suppressed [ 220.723434][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.893159][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.973297][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 221.773285][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 221.933227][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.003331][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.031423][ T9035] tipc: Enabling of bearer rejected, failed to enable media [ 222.490549][ T9074] overlayfs: failed to clone upperpath [ 222.603270][ T4324] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 222.753418][ T127] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 222.778796][ T9092] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1557'. [ 222.795800][ T9090] tipc: Enabled bearer , priority 0 [ 222.806334][ T9090] device syzkaller0 entered promiscuous mode [ 222.813265][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.821569][ T9090] tipc: Resetting bearer [ 222.827155][ T4324] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 222.835858][ T4324] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 222.846053][ T4324] usb 3-1: config 0 interface 0 has no altsetting 0 [ 222.859069][ T9089] tipc: Resetting bearer [ 222.860550][ T4324] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 222.874494][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 222.882897][ T4324] usb 3-1: Product: syz [ 222.887326][ T4324] usb 3-1: Manufacturer: syz [ 222.891983][ T4324] usb 3-1: SerialNumber: syz [ 222.909252][ T4324] usb 3-1: config 0 descriptor?? [ 222.917571][ T9089] tipc: Disabling bearer [ 222.918567][ T4324] hub 3-1:0.0: bad descriptor, ignoring hub [ 222.929613][ T4324] hub: probe of 3-1:0.0 failed with error -5 [ 222.953379][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 222.960135][ T127] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 222.961804][ T4324] usb 3-1: selecting invalid altsetting 0 [ 222.974459][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.979320][ T127] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 223.043430][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 223.048117][ T127] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.068474][ T9095] fuse: Unknown parameter 'group_id00000000000000000000' [ 223.079269][ T127] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.124416][ T127] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.158133][ T127] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.198271][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.230986][ T4279] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 223.249224][ T127] usbtmc 4-1:16.0: bulk endpoints not found [ 223.279518][ T9097] device syzkaller0 entered promiscuous mode [ 223.484189][ T4279] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 223.606052][ T9115] overlayfs: failed to clone upperpath [ 223.847538][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 225.120870][ T9125] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1568'. [ 225.313912][ T9134] tipc: Enabling of bearer rejected, failed to enable media [ 225.503762][ T4279] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 225.571502][ T4345] usb 4-1: USB disconnect, device number 13 [ 225.923259][ C0] net_ratelimit: 5 callbacks suppressed [ 225.923279][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.093190][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.156757][ T9170] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1580'. [ 226.166039][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.461191][ T9179] device syzkaller0 entered promiscuous mode [ 226.808448][ T4317] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 226.964386][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.994547][ T4317] usb 4-1: Using ep0 maxpacket: 8 [ 227.010482][ T4317] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 227.019033][ T4317] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 227.029587][ T4317] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.039747][ T4317] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.050005][ T4317] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 227.063267][ T4317] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.072416][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.101737][ T4317] usbtmc 4-1:16.0: bulk endpoints not found [ 227.133974][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 227.213339][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 227.479688][ T4324] usb 3-1: USB disconnect, device number 26 [ 228.003246][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 228.173174][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 228.254419][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 229.053231][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 229.540628][ T4324] usb 4-1: USB disconnect, device number 14 [ 229.630335][ T4279] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 229.743244][ T9203] netlink: 'syz.2.1589': attribute type 4 has an invalid length. [ 229.813301][ T9215] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1592'. [ 229.942589][ T9218] device syzkaller0 entered promiscuous mode [ 230.029258][ T9224] fuse: Bad value for 'user_id' [ 230.049463][ T9225] netlink: 'syz.1.1595': attribute type 4 has an invalid length. [ 230.066540][ T9225] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1595'. [ 230.244613][ T9232] netlink: 'syz.2.1600': attribute type 29 has an invalid length. [ 230.253739][ T9232] netlink: 'syz.2.1600': attribute type 29 has an invalid length. [ 230.264989][ T9232] netlink: 'syz.2.1600': attribute type 29 has an invalid length. [ 230.513217][ T4317] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 230.652154][ T9244] device syzkaller0 entered promiscuous mode [ 230.707151][ T4317] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 230.720833][ T4317] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 230.744187][ T4317] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.765629][ T4317] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.783256][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.791704][ T4317] usb 5-1: Product: syz [ 230.798785][ T4317] usb 5-1: Manufacturer: syz [ 230.806699][ T4317] usb 5-1: SerialNumber: syz [ 230.816896][ T4317] usb 5-1: config 0 descriptor?? [ 230.827348][ T4317] hub 5-1:0.0: bad descriptor, ignoring hub [ 230.838465][ T4317] hub: probe of 5-1:0.0 failed with error -5 [ 230.850931][ T4317] usb 5-1: selecting invalid altsetting 0 [ 231.094306][ T9252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.109314][ T9252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.126253][ C0] net_ratelimit: 5 callbacks suppressed [ 231.126272][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.173486][ T4345] usb 5-1: USB disconnect, device number 9 [ 231.289063][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.365762][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.769217][ T9258] fuse: Bad value for 'user_id' [ 232.173239][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 232.323857][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 232.348951][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 232.403275][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.208631][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.303191][ T4345] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 233.369877][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.449063][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.496650][ T4345] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.513149][ T4345] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 233.532352][ T4345] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 233.543692][ T4345] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 233.552776][ T4345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.571788][ T9276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 233.588275][ T4345] hub 5-1:1.0: bad descriptor, ignoring hub [ 233.594744][ T4345] hub: probe of 5-1:1.0 failed with error -5 [ 233.601210][ T4345] cdc_wdm 5-1:1.0: skipping garbage [ 233.611907][ T4345] cdc_wdm 5-1:1.0: skipping garbage [ 233.620554][ T4345] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 233.631890][ T4345] cdc_wdm 5-1:1.0: Unknown control protocol [ 233.833450][ T9251] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1607'. [ 233.896000][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 233.902662][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 234.182012][ T9292] fuse: Bad value for 'user_id' [ 234.187576][ T4324] usb 5-1: USB disconnect, device number 10 [ 234.253212][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.283226][ T4317] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 234.493191][ T4317] usb 3-1: Using ep0 maxpacket: 8 [ 234.500731][ T4317] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 234.509069][ T4317] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.519001][ T4317] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.529301][ T4317] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 234.540004][ T4317] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.553220][ T4317] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.562291][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.574794][ T4317] usbtmc 3-1:16.0: bulk endpoints not found [ 234.692805][ T9302] device syzkaller0 entered promiscuous mode [ 235.253952][ T9316] device syzkaller0 entered promiscuous mode [ 236.203561][ T9324] fuse: Bad value for 'fd' [ 236.333200][ C0] net_ratelimit: 5 callbacks suppressed [ 236.333216][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.493169][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.573310][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.643790][ T4345] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 236.853389][ T4345] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 236.861563][ T4345] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 236.871549][ T4345] usb 4-1: config 0 interface 0 has no altsetting 0 [ 236.882128][ T4345] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 236.891398][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 236.899906][ T4345] usb 4-1: Product: syz [ 236.904162][ T4345] usb 4-1: Manufacturer: syz [ 236.908908][ T4345] usb 4-1: SerialNumber: syz [ 236.924118][ T4345] usb 4-1: config 0 descriptor?? [ 236.932597][ T4345] hub 4-1:0.0: bad descriptor, ignoring hub [ 236.938801][ T4345] hub: probe of 4-1:0.0 failed with error -5 [ 236.947433][ T4345] usb 4-1: selecting invalid altsetting 0 [ 236.953312][ T9280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.097106][ T127] usb 3-1: USB disconnect, device number 27 [ 237.211296][ T9334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.236783][ T9334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.298910][ T4324] usb 4-1: USB disconnect, device number 15 [ 237.363179][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 237.523418][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 237.613270][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 237.919768][ T4279] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 238.183303][ T4345] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 238.212722][ T9368] tipc: Enabled bearer , priority 0 [ 238.242183][ T9368] device syzkaller0 entered promiscuous mode [ 238.267979][ T9372] fuse: Bad value for 'fd' [ 238.267985][ T9368] tipc: Resetting bearer [ 238.278547][ T9367] tipc: Resetting bearer [ 238.321784][ T9367] tipc: Disabling bearer [ 238.353391][ T4345] usb 4-1: device descriptor read/64, error -71 [ 238.359875][ T127] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 238.403273][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 238.543318][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 238.550813][ T127] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 238.563252][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 238.570273][ T127] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.590864][ T127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.601457][ T127] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 238.612436][ T127] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.625753][ T127] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 238.643125][ T4345] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 238.643340][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 238.661852][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.674005][ T127] usbtmc 5-1:16.0: bulk endpoints not found [ 238.772509][ T9384] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1652'. [ 238.793135][ T4345] usb 4-1: device descriptor read/64, error -71 [ 238.913301][ T4345] usb usb4-port1: attempt power cycle [ 238.933250][ T4386] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 239.130134][ T4386] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.161093][ T4386] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.195925][ T4386] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 239.222770][ T4386] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 239.252461][ T4386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.304052][ T9378] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 239.313893][ T4386] hub 2-1:1.0: bad descriptor, ignoring hub [ 239.319854][ T4386] hub: probe of 2-1:1.0 failed with error -5 [ 239.326238][ T4345] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 239.335066][ T4386] cdc_wdm 2-1:1.0: skipping garbage [ 239.340384][ T4386] cdc_wdm 2-1:1.0: skipping garbage [ 239.351477][ T4386] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 239.357534][ T4386] cdc_wdm 2-1:1.0: Unknown control protocol [ 239.365187][ T4345] usb 4-1: device descriptor read/8, error -71 [ 239.400488][ T4279] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 239.443240][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 239.623913][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 239.630579][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 239.637516][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 239.644155][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 239.658098][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 239.664759][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 239.671079][ T4345] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 239.681402][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 239.684756][ T9424] fuse: Bad value for 'fd' [ 239.688204][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 239.714456][ T4345] usb 4-1: device descriptor read/8, error -71 [ 239.828512][ T4386] usb 2-1: USB disconnect, device number 12 [ 239.843540][ T4345] usb usb4-port1: unable to enumerate USB device [ 239.876682][ T9429] tipc: Enabling of bearer rejected, failed to enable media [ 241.029473][ T4279] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 241.162498][ T4386] usb 5-1: USB disconnect, device number 11 [ 241.299165][ T9460] fuse: Bad value for 'fd' [ 241.519516][ T9462] tipc: Enabled bearer , priority 0 [ 241.523195][ C0] net_ratelimit: 5 callbacks suppressed [ 241.523210][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.577485][ T9467] device syzkaller0 entered promiscuous mode [ 241.597022][ T9464] tipc: Enabled bearer , priority 0 [ 241.613309][ T9462] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1670'. [ 241.623648][ T9464] device syzkaller0 entered promiscuous mode [ 241.643606][ T9462] tipc: Resetting bearer [ 241.656040][ T9464] tipc: Resetting bearer [ 241.678588][ T9461] tipc: Resetting bearer [ 241.693149][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.715224][ T9461] tipc: Disabling bearer [ 241.738732][ T9463] tipc: Resetting bearer [ 241.763380][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.797100][ T9463] tipc: Disabling bearer [ 242.116021][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 242.134233][ T9488] fuse: Bad value for 'fd' [ 242.156300][ T9484] ksmbd: Unknown IPC event: 0, ignore. [ 242.253306][ T127] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 242.413722][ T127] usb 4-1: device descriptor read/64, error -71 [ 242.563289][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.683203][ T127] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 242.723151][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.803371][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.833750][ T9511] device syzkaller0 entered promiscuous mode [ 242.843449][ T127] usb 4-1: device descriptor read/64, error -71 [ 242.973747][ T127] usb usb4-port1: attempt power cycle [ 242.989046][ T9517] fuse: Invalid rootmode [ 243.383221][ T127] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 243.435893][ T127] usb 4-1: device descriptor read/8, error -71 [ 243.603380][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 243.713313][ T127] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 243.753913][ T127] usb 4-1: device descriptor read/8, error -71 [ 243.763226][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 243.782101][ T4279] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 243.843357][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 243.865185][ T9544] fuse: Invalid rootmode [ 243.887313][ T127] usb usb4-port1: unable to enumerate USB device [ 244.057543][ T9548] tipc: Enabled bearer , priority 0 [ 244.088386][ T9548] device syzkaller0 entered promiscuous mode [ 244.117866][ T9548] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1704'. [ 244.158725][ T9548] tipc: Resetting bearer [ 244.180080][ T9547] tipc: Resetting bearer [ 244.201334][ T9547] tipc: Disabling bearer [ 244.240059][ T9554] Cannot find set identified by id 0 to match [ 244.584451][ T4346] syzkaller0: tun_net_xmit 76 [ 244.589314][ T4346] syzkaller0: tun_net_xmit 48 [ 244.643372][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.769030][ T9568] fuse: Invalid rootmode [ 246.725824][ C0] net_ratelimit: 5 callbacks suppressed [ 246.725837][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.894390][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.964212][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 247.108308][ T9587] device syzkaller0 entered promiscuous mode [ 247.115697][ T9602] tipc: Enabling of bearer rejected, failed to enable media [ 247.126346][ T9606] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1720'. [ 247.763222][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 247.923210][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 247.933359][ T127] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 248.003358][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 248.068912][ T9637] tipc: Enabling of bearer rejected, failed to enable media [ 248.086523][ T9637] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1732'. [ 248.093244][ T127] usb 5-1: device descriptor read/64, error -71 [ 248.363195][ T127] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 248.547397][ T127] usb 5-1: device descriptor read/64, error -71 [ 248.673316][ T127] usb usb5-port1: attempt power cycle [ 248.803253][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 248.939420][ T9671] tipc: Enabling of bearer rejected, failed to enable media [ 248.950754][ T9671] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1743'. [ 248.963219][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.043342][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.085292][ T127] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 249.126439][ T127] usb 5-1: device descriptor read/8, error -71 [ 249.403197][ T127] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 249.443650][ T127] usb 5-1: device descriptor read/8, error -71 [ 249.563393][ T127] usb usb5-port1: unable to enumerate USB device [ 249.680958][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1752'. [ 249.699388][ T9695] ksmbd: Unknown IPC event: 0, ignore. [ 249.820968][ T9699] device syzkaller0 entered promiscuous mode [ 249.853224][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.984137][ T9704] fuse: Unknown parameter 'use00000000000000000000' [ 251.262121][ T9748] device syzkaller0 entered promiscuous mode [ 251.268623][ T9750] fuse: Unknown parameter 'use00000000000000000000' [ 251.283242][ T9752] netlink: 'syz.0.1769': attribute type 4 has an invalid length. [ 251.465942][ T9754] tipc: Enabled bearer , priority 0 [ 251.517968][ T9754] device syzkaller0 entered promiscuous mode [ 251.554846][ T9754] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1770'. [ 251.578307][ T9754] tipc: Resetting bearer [ 251.594388][ T9753] tipc: Resetting bearer [ 251.601814][ T9764] Cannot find set identified by id 0 to match [ 251.626569][ T9753] tipc: Disabling bearer [ 251.873308][ T127] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 251.923220][ C0] net_ratelimit: 5 callbacks suppressed [ 251.923235][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.973146][ T4324] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 251.997173][ T9781] device syzkaller0 entered promiscuous mode [ 252.066864][ T127] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.078883][ T127] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.089870][ T127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 252.093197][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.102891][ T127] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 252.119942][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.133183][ T4324] usb 3-1: device descriptor read/64, error -71 [ 252.148257][ T9763] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 252.163422][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.173341][ T127] hub 5-1:1.0: bad descriptor, ignoring hub [ 252.179347][ T127] hub: probe of 5-1:1.0 failed with error -5 [ 252.191568][ T127] cdc_wdm 5-1:1.0: skipping garbage [ 252.197646][ T127] cdc_wdm 5-1:1.0: skipping garbage [ 252.201844][ T9786] fuse: Unknown parameter 'use00000000000000000000' [ 252.209718][ T127] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 252.216372][ T127] cdc_wdm 5-1:1.0: Unknown control protocol [ 252.314246][ T9788] device syzkaller0 entered promiscuous mode [ 252.413580][ T4324] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 252.474023][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 252.480795][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 252.613133][ T4324] usb 3-1: device descriptor read/64, error -71 [ 252.698896][ T4386] usb 5-1: USB disconnect, device number 16 [ 252.733419][ T4324] usb usb3-port1: attempt power cycle [ 252.875767][ T9810] device syzkaller0 entered promiscuous mode [ 252.963164][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.992348][ T9813] Cannot find set identified by id 0 to match [ 253.123131][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 253.143248][ T4324] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 253.162111][ T9817] device syzkaller0 entered promiscuous mode [ 253.173782][ T4324] usb 3-1: device descriptor read/8, error -71 [ 253.203334][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 253.303163][ T4386] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 253.453202][ T4324] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 253.463393][ T4386] usb 4-1: device descriptor read/64, error -71 [ 253.498633][ T4324] usb 3-1: device descriptor read/8, error -71 [ 253.623410][ T4324] usb usb3-port1: unable to enumerate USB device [ 253.682522][ T9825] Cannot find set identified by id 0 to match [ 253.733121][ T4386] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 253.893145][ T4386] usb 4-1: device descriptor read/64, error -71 [ 254.003298][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 254.013674][ T4386] usb usb4-port1: attempt power cycle [ 254.173172][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 254.253257][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 254.423274][ T4386] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 254.463607][ T4386] usb 4-1: device descriptor read/8, error -71 [ 254.605946][ T9848] device syzkaller0 entered promiscuous mode [ 254.733274][ T4386] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 254.788162][ T4386] usb 4-1: device descriptor read/8, error -71 [ 254.913288][ T4386] usb usb4-port1: unable to enumerate USB device [ 254.980693][ T9861] device syzkaller0 entered promiscuous mode [ 255.043215][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.052650][ T9865] tipc: Enabled bearer , priority 0 [ 255.060940][ T9865] device syzkaller0 entered promiscuous mode [ 255.098038][ T9865] tipc: Resetting bearer [ 255.107807][ T9864] tipc: Resetting bearer [ 255.160990][ T9864] tipc: Disabling bearer [ 255.273654][ T9872] device syzkaller0 entered promiscuous mode [ 255.387578][ T9881] fuse: Unknown parameter 'user_i00000000000000000000' [ 255.494318][ T9883] device syzkaller0 entered promiscuous mode [ 255.605248][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.612060][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.645676][ T9889] device syzkaller0 entered promiscuous mode [ 255.852507][ T127] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 256.013308][ T127] usb 3-1: device descriptor read/64, error -71 [ 256.237081][ T9911] tipc: Enabled bearer , priority 0 [ 256.283215][ T127] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 256.283847][ T9911] device syzkaller0 entered promiscuous mode [ 256.404296][ T9911] tipc: Resetting bearer [ 256.429470][ T9921] device syzkaller0 entered promiscuous mode [ 256.443456][ T127] usb 3-1: device descriptor read/64, error -71 [ 256.450570][ T9910] tipc: Resetting bearer [ 256.476689][ T9910] tipc: Disabling bearer [ 256.563901][ T127] usb usb3-port1: attempt power cycle [ 256.983395][ T127] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 257.027222][ T127] usb 3-1: device descriptor read/8, error -71 [ 257.123282][ C0] net_ratelimit: 5 callbacks suppressed [ 257.123301][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 257.283195][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 257.303209][ T127] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 257.345780][ T9952] device syzkaller0 entered promiscuous mode [ 257.353869][ T127] usb 3-1: device descriptor read/8, error -71 [ 257.363324][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 257.473272][ T127] usb usb3-port1: unable to enumerate USB device [ 257.657185][ T9962] device syzkaller0 entered promiscuous mode [ 257.675184][ T4279] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 257.741478][ T9969] device syzkaller0 entered promiscuous mode [ 258.173332][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 258.323193][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 258.403317][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 258.779799][ T9999] device syzkaller0 entered promiscuous mode [ 259.203187][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.363142][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.393351][ T4324] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 259.443340][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.563328][ T4324] usb 2-1: device descriptor read/64, error -71 [ 259.853304][ T4324] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 260.013231][ T4324] usb 2-1: device descriptor read/64, error -71 [ 260.133317][ T4324] usb usb2-port1: attempt power cycle [ 260.243229][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.543169][ T4324] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 260.573899][ T4324] usb 2-1: device descriptor read/8, error -71 [ 260.843153][ T4324] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 260.883788][ T4324] usb 2-1: device descriptor read/8, error -71 [ 260.982076][ T9976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.003293][ T4324] usb usb2-port1: unable to enumerate USB device [ 262.231774][T10100] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1881'. [ 262.252434][T10100] device syzkaller1 entered promiscuous mode [ 262.323271][ C0] net_ratelimit: 5 callbacks suppressed [ 262.323289][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 262.483163][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 262.523151][T10108] device syzkaller0 entered promiscuous mode [ 262.563400][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.023210][ T4317] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 263.204944][ T4317] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.215425][ T4317] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 263.224545][ T4317] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.234696][ T4317] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 263.243844][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.256426][ T4317] hub 5-1:1.0: bad descriptor, ignoring hub [ 263.262753][ T4317] hub: probe of 5-1:1.0 failed with error -5 [ 263.269439][ T4317] cdc_wdm 5-1:1.0: skipping garbage [ 263.274740][ T4317] cdc_wdm 5-1:1.0: skipping garbage [ 263.279995][ T4317] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 263.363224][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.523154][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.603337][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.613842][ T127] usb 5-1: USB disconnect, device number 17 [ 263.887650][ T4317] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 264.041266][T10135] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 264.051307][T10135] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 264.059857][ T4317] usb 2-1: device descriptor read/64, error -71 [ 264.169881][T10141] device syzkaller0 entered promiscuous mode [ 264.343334][ T4317] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 264.403255][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.493208][ T4317] usb 2-1: device descriptor read/64, error -71 [ 264.563459][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.613438][ T4317] usb usb2-port1: attempt power cycle [ 264.643313][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.734983][T10076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.848392][ T4279] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 264.989558][T10147] device syzkaller0 entered promiscuous mode [ 265.023142][ T4317] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 265.063855][ T4317] usb 2-1: device descriptor read/8, error -71 [ 265.150334][T10157] device syzkaller0 entered promiscuous mode [ 265.172055][T10159] fuse: Unknown parameter '0x0000000000000003' [ 265.343168][ T4317] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 265.403797][ T4317] usb 2-1: device descriptor read/8, error -71 [ 265.439238][T10166] tipc: Enabled bearer , priority 0 [ 265.443246][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.491948][T10164] tipc: Disabling bearer [ 265.523283][ T4317] usb usb2-port1: unable to enumerate USB device [ 265.561119][T10175] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1909'. [ 265.597280][T10175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.093292][ T4345] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 266.294792][ T4345] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.311872][ T4345] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 266.331431][ T4345] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.378634][ T4345] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 266.418375][ T4345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.458577][ T4345] hub 5-1:1.0: bad descriptor, ignoring hub [ 266.464866][ T4345] hub: probe of 5-1:1.0 failed with error -5 [ 266.471332][ T4345] cdc_wdm 5-1:1.0: skipping garbage [ 266.490547][ T4345] cdc_wdm 5-1:1.0: skipping garbage [ 266.496510][ T4345] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 266.737751][T10221] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1920'. [ 266.833596][ T4346] usb 5-1: USB disconnect, device number 18 [ 267.523229][ C0] net_ratelimit: 5 callbacks suppressed [ 267.523246][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.683122][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.763416][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.383842][ T4279] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 268.388970][T10167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.563181][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.593110][T10244] device syzkaller0 entered promiscuous mode [ 268.723172][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.803267][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 269.537437][T10272] netlink: 'syz.1.1940': attribute type 4 has an invalid length. [ 269.603260][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 269.609846][T10274] device syzkaller0 entered promiscuous mode [ 269.662085][T10274] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1941'. [ 269.763242][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 269.843370][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 269.977804][T10294] overlayfs: missing 'workdir' [ 270.100521][T10298] device syzkaller0 entered promiscuous mode [ 270.353968][ T4279] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 270.373245][ T4386] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 270.543133][ T4386] usb 5-1: device descriptor read/64, error -71 [ 270.653334][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 270.823132][ T4386] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 270.983107][ T4386] usb 5-1: device descriptor read/64, error -71 [ 271.103430][ T4386] usb usb5-port1: attempt power cycle [ 271.513370][ T4386] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 271.531506][T10328] overlayfs: missing 'workdir' [ 271.543760][ T4386] usb 5-1: device descriptor read/8, error -71 [ 271.616796][T10332] device syzkaller0 entered promiscuous mode [ 271.813220][ T4386] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 271.855642][ T4386] usb 5-1: device descriptor read/8, error -71 [ 271.975188][ T4386] usb usb5-port1: unable to enumerate USB device [ 272.209674][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.231566][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.240979][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.254133][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.261720][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.279034][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.620656][T10345] chnl_net:caif_netlink_parms(): no params data found [ 272.691249][T10278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.723174][ C0] net_ratelimit: 5 callbacks suppressed [ 272.723187][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.836287][T10345] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.843552][T10345] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.851685][T10345] device bridge_slave_0 entered promiscuous mode [ 272.876560][T10345] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.883712][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.910574][T10345] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.919155][T10345] device bridge_slave_1 entered promiscuous mode [ 272.962081][T10345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.971328][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.985970][T10345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.016534][T10356] device syzkaller0 entered promiscuous mode [ 273.041117][T10345] team0: Port device team_slave_0 added [ 273.051050][T10345] team0: Port device team_slave_1 added [ 273.210011][T10345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.232481][T10345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.266382][T10345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.288128][T10345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.295611][T10345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.328159][T10367] overlayfs: missing 'workdir' [ 273.363255][T10345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.399900][T10364] netlink: 'syz.4.1971': attribute type 4 has an invalid length. [ 273.511622][T10372] device syzkaller0 entered promiscuous mode [ 273.664861][T10345] device hsr_slave_0 entered promiscuous mode [ 273.682504][T10345] device hsr_slave_1 entered promiscuous mode [ 273.710044][T10345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.725193][T10345] Cannot create hsr debugfs directory [ 273.763365][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 273.933179][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 274.012871][ T4353] tipc: Disabling bearer [ 274.013293][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 274.029184][ T4353] tipc: Left network mode [ 274.094527][ T8292] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 274.269446][ T8292] usb 4-1: device descriptor read/64, error -71 [ 274.323323][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 274.338491][T10396] 0: reclassify loop, rule prio 0, protocol 700 [ 274.553144][ T8292] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 274.614567][T10400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1984'. [ 274.623910][T10400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1984'. [ 274.647957][T10400] device syzkaller0 entered promiscuous mode [ 274.656127][T10400] 0: reclassify loop, rule prio 0, protocol 800 [ 274.703212][ T8292] usb 4-1: device descriptor read/64, error -71 [ 274.813395][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 274.829493][ T8292] usb usb4-port1: attempt power cycle [ 274.930276][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 274.939742][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1985'. [ 274.963955][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.004160][ T4353] device hsr_slave_0 left promiscuous mode [ 275.010780][ T4353] device hsr_slave_1 left promiscuous mode [ 275.017914][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.026103][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.038464][ T4353] device bridge_slave_1 left promiscuous mode [ 275.046041][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.056768][ T4353] device bridge_slave_0 left promiscuous mode [ 275.062954][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.293303][ T8292] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 275.333788][ T8292] usb 4-1: device descriptor read/8, error -71 [ 275.439499][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 275.475394][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 275.513270][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.554239][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.603331][ T8292] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 275.656230][ T8292] usb 4-1: device descriptor read/8, error -71 [ 275.784636][ T8292] usb usb4-port1: unable to enumerate USB device [ 275.799222][ T4353] bond0 (unregistering): Released all slaves [ 276.403215][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 276.664979][T10380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.689657][T10345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.732830][T10345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.790864][T10345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.860241][T10345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.083846][T10426] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1992'. [ 277.198952][T10345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.252150][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.305984][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.332547][T10345] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.370740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.390579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.427297][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.434507][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.479336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.489122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.511388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.564288][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.571458][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.600603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.669838][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.679798][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.712628][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.792704][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.815103][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.835653][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.855052][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.874421][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.907322][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.923284][ C0] net_ratelimit: 7 callbacks suppressed [ 277.923299][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.930479][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.976004][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.083120][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.113152][ T8292] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 278.163322][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.273391][ T8292] usb 3-1: device descriptor read/64, error -71 [ 278.493637][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 278.543275][ T8292] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 278.587489][T10475] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 278.716086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.723251][ T8292] usb 3-1: device descriptor read/64, error -71 [ 278.747696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.782081][T10345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.843707][ T8292] usb usb3-port1: attempt power cycle [ 278.852765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.903907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.957301][T10486] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2009'. [ 278.963228][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.999800][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.019339][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.038999][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.060689][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.083827][T10345] device veth0_vlan entered promiscuous mode [ 279.118092][T10345] device veth1_vlan entered promiscuous mode [ 279.124282][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.198800][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.206695][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.241174][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.263466][ T8292] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 279.271989][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.300015][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.316113][ T8292] usb 3-1: device descriptor read/8, error -71 [ 279.325376][T10345] device veth0_macvtap entered promiscuous mode [ 279.364281][T10345] device veth1_macvtap entered promiscuous mode [ 279.470935][T10345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.487578][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.507606][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.538501][T10345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.556479][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.574035][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.583230][ T8292] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 279.606515][T10345] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.623292][T10345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.632852][ T8292] usb 3-1: device descriptor read/8, error -71 [ 279.639201][T10345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.650384][T10345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.770482][ T8292] usb usb3-port1: unable to enumerate USB device [ 279.849067][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.859396][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.873251][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.933496][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.952608][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.971142][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.003287][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.163237][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.178954][T10524] tipc: Enabled bearer , priority 0 [ 280.211775][T10524] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2018'. [ 280.255900][T10524] tipc: Resetting bearer [ 280.291921][T10523] tipc: Disabling bearer [ 280.494115][T10531] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2021'. [ 280.565284][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 280.875181][T10541] device syzkaller0 entered promiscuous mode [ 281.043324][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 281.435516][T10564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2032'. [ 281.444848][T10564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2032'. [ 281.458318][T10564] device bridge0 entered promiscuous mode [ 281.466602][T10564] device erspan0 entered promiscuous mode [ 281.505828][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 282.368010][T10593] tipc: Started in network mode [ 282.380470][T10593] tipc: Node identity c6e8fbec641f, cluster identity 4711 [ 282.389625][T10593] tipc: Enabled bearer , priority 0 [ 282.407344][T10593] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2042'. [ 282.431111][T10593] tipc: Resetting bearer [ 282.508403][T10592] tipc: Disabling bearer [ 282.812944][ T4283] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 282.919015][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 282.954481][T10614] ksmbd: Unknown IPC event: 0, ignore. [ 283.123224][ C0] net_ratelimit: 3 callbacks suppressed [ 283.123240][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 283.283174][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 283.360750][T10626] device syzkaller0 entered promiscuous mode [ 283.933740][T10650] tipc: Enabling of bearer rejected, failed to enable media [ 284.076213][T10653] device syzkaller0 entered promiscuous mode [ 284.163247][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.323164][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.569785][T10666] device syzkaller0 entered promiscuous mode [ 284.601572][T10668] tipc: Enabled bearer , priority 0 [ 284.615334][T10668] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2069'. [ 284.632698][T10668] tipc: Resetting bearer [ 284.762215][T10667] tipc: Disabling bearer [ 284.809933][ T4283] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 285.159357][T10693] device syzkaller0 entered promiscuous mode [ 285.205263][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.363194][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.538348][T10707] device syzkaller0 entered promiscuous mode [ 286.170660][ T4283] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 286.228270][T10731] device syzkaller0 entered promiscuous mode [ 286.243238][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 286.403181][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 286.609152][T10738] device syzkaller0 entered promiscuous mode [ 287.012175][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2104'. [ 287.202996][T10760] device syzkaller0 entered promiscuous mode [ 287.227026][T10758] tipc: Enabled bearer , priority 0 [ 287.241522][T10758] device syzkaller0 entered promiscuous mode [ 287.264237][T10760] tipc: Enabled bearer , priority 0 [ 287.283260][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.315571][T10759] tipc: Resetting bearer [ 287.352549][T10759] tipc: Disabling bearer [ 287.365341][T10758] tipc: Resetting bearer [ 287.380586][T10757] tipc: Resetting bearer [ 287.402976][T10757] tipc: Disabling bearer [ 287.443215][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.708750][T10773] device syzkaller0 entered promiscuous mode [ 288.323162][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 288.432525][T10806] device syzkaller0 entered promiscuous mode [ 288.483298][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 289.363218][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 289.398842][T10847] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2141'. [ 289.423783][T10846] device syzkaller0 entered promiscuous mode [ 289.524357][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 290.408829][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 290.563163][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 290.719700][ T4283] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 291.449518][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 291.605564][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.483239][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.643128][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.735030][ T7] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 292.923247][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 292.942132][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.975339][ T7] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 293.011699][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.028452][ T7] usb 3-1: Product: syz [ 293.035150][ T7] usb 3-1: Manufacturer: syz [ 293.035370][ T4283] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 293.039769][ T7] usb 3-1: SerialNumber: syz [ 293.074087][ T7] usb 3-1: config 0 descriptor?? [ 293.265407][T10901] device syzkaller0 entered promiscuous mode [ 293.527881][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.685820][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 294.567513][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 294.727988][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 295.222382][T10930] tipc: Enabling of bearer rejected, failed to enable media [ 295.298230][ T4283] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 295.332755][T10933] device syzkaller0 entered promiscuous mode [ 295.551519][ T4324] usb 3-1: USB disconnect, device number 40 [ 295.603219][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 295.730949][T10946] device syzkaller0 entered promiscuous mode [ 295.763159][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 296.064224][T10959] device syzkaller0 entered promiscuous mode [ 296.650629][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 296.807328][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.684679][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.843194][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 298.068592][T10975] device syzkaller0 entered promiscuous mode [ 298.543242][ T7] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 298.723157][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 298.733309][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 298.740197][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.756011][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 298.772983][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.781895][ T7] usb 2-1: Product: syz [ 298.789519][ T7] usb 2-1: Manufacturer: syz [ 298.794824][ T7] usb 2-1: SerialNumber: syz [ 298.801262][ T7] usb 2-1: config 0 descriptor?? [ 298.888007][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 299.764689][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 299.924010][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 300.140023][T11000] tipc: Enabled bearer , priority 0 [ 300.150762][T11002] device syzkaller0 entered promiscuous mode [ 300.241738][T11009] tipc: Resetting bearer [ 300.278440][T11009] tipc: Disabling bearer [ 300.300119][T11017] device syzkaller0 entered promiscuous mode [ 300.404002][ T127] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 300.573213][ T127] usb 5-1: device descriptor read/64, error -71 [ 300.745234][T11034] device syzkaller0 entered promiscuous mode [ 300.803203][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 300.859414][ T127] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 300.963190][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 301.037325][ T127] usb 5-1: device descriptor read/64, error -71 [ 301.167617][ T127] usb usb5-port1: attempt power cycle [ 301.351849][ T7104] usb 2-1: USB disconnect, device number 21 [ 301.583207][ T127] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 301.627820][ T127] usb 5-1: device descriptor read/8, error -71 [ 301.846894][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 301.927173][ T127] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 301.968201][ T127] usb 5-1: device descriptor read/8, error -71 [ 302.005962][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.098803][ T127] usb usb5-port1: unable to enumerate USB device [ 302.884895][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 303.048473][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 303.426277][T11084] tipc: Enabled bearer , priority 0 [ 303.455786][T11084] device syzkaller0 entered promiscuous mode [ 303.522025][T11084] tipc: Resetting bearer [ 303.545431][T11083] tipc: Resetting bearer [ 303.572395][T11083] tipc: Disabling bearer [ 303.653554][ T7104] syzkaller0: tun_net_xmit 76 [ 303.748003][ T7104] syzkaller0: tun_net_xmit 76 [ 303.933144][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 304.006960][ T127] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 304.088494][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 304.195026][ T127] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.205971][ T127] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 304.215420][ T127] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.229117][ T127] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 304.238550][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.261393][ T127] hub 5-1:1.0: bad descriptor, ignoring hub [ 304.268678][ T127] hub: probe of 5-1:1.0 failed with error -5 [ 304.284964][ T127] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 304.658094][ T127] usb 5-1: USB disconnect, device number 27 [ 304.963147][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 305.135998][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 306.005592][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 306.173484][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 306.819908][T11168] device syzkaller0 entered promiscuous mode [ 307.043173][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 307.203111][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 307.458316][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2240'. [ 307.467528][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2240'. [ 307.503571][ T127] syzkaller0: tun_net_xmit 76 [ 308.084792][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 308.253174][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 309.125148][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 309.287548][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 309.811183][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2242'. [ 310.134002][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.141467][T11193] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.173159][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 310.323188][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 310.455333][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.491043][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.779308][T11193] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.788552][T11193] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.797481][T11193] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.806821][T11193] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.132740][T11242] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.2246'. [ 311.150340][T11242] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.2246'. [ 311.150392][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2247'. [ 311.203214][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 311.360233][T11251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2251'. [ 311.373197][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 311.390185][T11251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2251'. [ 311.584067][T11267] device syzkaller0 entered promiscuous mode [ 312.126705][T11279] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.2262'. [ 312.141813][T11279] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.2262'. [ 312.243195][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 312.403172][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 312.603287][T11301] __nla_validate_parse: 3 callbacks suppressed [ 312.603303][T11301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2270'. [ 312.655392][T11301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2270'. [ 312.730520][T11310] tipc: Enabling of bearer rejected, failed to enable media [ 312.851430][T11316] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2274'. [ 312.894665][T11320] device syzkaller0 entered promiscuous mode [ 312.915567][T11320] tipc: Enabled bearer , priority 0 [ 312.931837][T11317] tipc: Resetting bearer [ 312.938080][ T4345] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 312.989853][T11317] tipc: Disabling bearer [ 313.123359][ T4345] usb 2-1: Using ep0 maxpacket: 16 [ 313.132843][ T4345] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 313.136733][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2277'. [ 313.151485][ T4345] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 313.159662][T11327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2278'. [ 313.161813][ T4345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.183633][T11327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2278'. [ 313.183941][ T4345] usb 2-1: Product: syz [ 313.197163][ T4345] usb 2-1: Manufacturer: syz [ 313.202065][ T4345] usb 2-1: SerialNumber: syz [ 313.219533][ T4345] usb 2-1: config 0 descriptor?? [ 313.293280][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 313.616643][T11347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2286'. [ 313.626300][T11347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2286'. [ 313.759524][T11351] device syzkaller0 entered promiscuous mode [ 313.774486][T11351] tipc: Enabled bearer , priority 0 [ 313.782360][T11350] tipc: Resetting bearer [ 313.812720][T11350] tipc: Disabling bearer [ 313.950171][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2290'. [ 313.959695][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2290'. [ 314.063126][ T4346] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 314.275022][ T4346] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 314.283361][ T4346] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.293858][ T4346] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 314.307271][ T4346] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.316657][ T4346] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 314.325956][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 314.338048][ T4346] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 314.346923][ T4346] usb 4-1: Product: syz [ 314.351117][ T4346] usb 4-1: Manufacturer: syz [ 314.359621][ T4346] usb 4-1: SerialNumber: syz [ 314.365729][ T4346] usb 4-1: config 0 descriptor?? [ 314.371908][ T4346] hub 4-1:0.0: bad descriptor, ignoring hub [ 314.380994][ T4346] hub: probe of 4-1:0.0 failed with error -5 [ 314.397467][ T4346] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 314.432680][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.654897][T11377] device syzkaller0 entered promiscuous mode [ 314.733343][ T4346] usb 4-1: USB disconnect, device number 32 [ 314.863481][T11380] tipc: Enabled bearer , priority 0 [ 314.870996][T11380] device syzkaller0 entered promiscuous mode [ 314.885871][T11380] tipc: Resetting bearer [ 314.894371][T11379] tipc: Resetting bearer [ 314.913793][T11379] tipc: Disabling bearer [ 315.071364][T11383] device syzkaller1 entered promiscuous mode [ 315.077804][ T4346] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 315.271452][ T4346] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 315.280001][ T4346] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.296974][ T4346] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.312725][ T4346] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.322525][ T4346] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 315.332232][ T4346] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 315.340875][ T4346] usb 4-1: Product: syz [ 315.345575][ T4346] usb 4-1: Manufacturer: syz [ 315.350367][ T4346] usb 4-1: SerialNumber: syz [ 315.358103][ T4346] usb 4-1: config 0 descriptor?? [ 315.363336][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 315.380308][T11386] device syzkaller0 entered promiscuous mode [ 315.383339][ T4346] hub 4-1:0.0: bad descriptor, ignoring hub [ 315.392573][ T4346] hub: probe of 4-1:0.0 failed with error -5 [ 315.418865][ T4346] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 315.474340][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.730830][ T127] usb 2-1: USB disconnect, device number 22 [ 315.803148][ T4346] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 315.985375][ T4346] usb 1-1: Using ep0 maxpacket: 8 [ 315.999980][ T4346] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 316.008793][ T4346] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.019036][ T4346] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 316.030834][ T4346] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 316.041163][ T4346] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.083279][ T4346] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 316.092393][ T4346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.352472][ T4346] usb 1-1: usb_control_msg returned -32 [ 316.359351][ T4346] usbtmc 1-1:16.0: can't read capabilities [ 316.403222][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 316.945715][ T127] usb 4-1: USB disconnect, device number 33 [ 317.060876][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.067526][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.149798][T11421] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 317.349345][ T127] usb 1-1: USB disconnect, device number 5 [ 317.443918][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 317.948372][T11433] wg1 speed is unknown, defaulting to 1000 [ 317.977181][T11433] wg1 speed is unknown, defaulting to 1000 [ 318.003320][T11433] wg1 speed is unknown, defaulting to 1000 [ 318.023842][T11440] __nla_validate_parse: 1 callbacks suppressed [ 318.023855][T11440] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2312'. [ 318.045762][T11433] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 318.057014][T11440] device syzkaller1 entered promiscuous mode [ 318.094723][T11433] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 318.161207][T11433] wg1 speed is unknown, defaulting to 1000 [ 318.178016][T11433] wg1 speed is unknown, defaulting to 1000 [ 318.188437][T11433] wg1 speed is unknown, defaulting to 1000 [ 318.209911][T11433] wg1 speed is unknown, defaulting to 1000 [ 318.217143][T11433] wg1 speed is unknown, defaulting to 1000 [ 318.483268][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 318.713276][ T4346] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 318.810560][T11462] device syzkaller0 entered promiscuous mode [ 318.904704][ T4346] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 318.923582][ T4346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.941210][ T4346] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.974388][ T4346] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.998218][ T4346] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 319.019616][ T4346] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 319.029302][ T4346] usb 2-1: Product: syz [ 319.039492][ T4346] usb 2-1: Manufacturer: syz [ 319.048917][ T4346] usb 2-1: SerialNumber: syz [ 319.062483][ T4346] usb 2-1: config 0 descriptor?? [ 319.077106][ T4346] hub 2-1:0.0: bad descriptor, ignoring hub [ 319.090059][ T4346] hub: probe of 2-1:0.0 failed with error -5 [ 319.130437][ T4346] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 319.215583][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.423346][ T4346] usb 2-1: USB disconnect, device number 23 [ 319.526372][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.783276][ T4345] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 319.995676][ T4345] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 320.009717][ T4345] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.020621][ T4345] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.034713][ T4345] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.045960][ T4345] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 320.055298][ T4345] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 320.064044][ T4345] usb 2-1: Product: syz [ 320.068272][ T4345] usb 2-1: Manufacturer: syz [ 320.072889][ T4345] usb 2-1: SerialNumber: syz [ 320.085629][ T4345] usb 2-1: config 0 descriptor?? [ 320.095361][ T4345] hub 2-1:0.0: bad descriptor, ignoring hub [ 320.101458][ T4345] hub: probe of 2-1:0.0 failed with error -5 [ 320.196828][ T4345] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 320.210178][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.566279][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 321.009997][T11487] tipc: Enabling of bearer rejected, failed to enable media [ 321.019507][T11492] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2326'. [ 321.090194][T11497] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2327'. [ 321.125570][T11497] device syzkaller1 entered promiscuous mode [ 321.234307][T11501] device syzkaller0 entered promiscuous mode [ 321.310878][T11505] device syzkaller0 entered promiscuous mode [ 321.603919][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 321.630004][ T4345] usb 2-1: USB disconnect, device number 24 [ 322.643166][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 323.688282][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 324.418679][T11551] tipc: Enabled bearer , priority 0 [ 324.441676][T11554] device syzkaller0 entered promiscuous mode [ 324.464197][T11560] tipc: Resetting bearer [ 324.470749][T11568] device syzkaller0 entered promiscuous mode [ 324.478284][T11574] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2340'. [ 324.726704][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 325.765198][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 326.179221][T11545] tipc: Resetting bearer [ 326.199030][T11545] tipc: Disabling bearer [ 326.291835][T11589] device syzkaller0 entered promiscuous mode [ 326.683176][ T127] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 326.748497][ T4283] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 326.769086][T11608] device syzkaller0 entered promiscuous mode [ 326.813222][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 326.876292][ T127] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 326.887229][ T127] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.917891][ T127] usb 3-1: config 0 interface 0 has no altsetting 0 [ 326.934640][ T127] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 326.953149][ T127] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 326.967973][ T127] usb 3-1: Product: syz [ 326.972285][ T127] usb 3-1: Manufacturer: syz [ 326.977429][ T127] usb 3-1: SerialNumber: syz [ 327.001146][ T127] usb 3-1: config 0 descriptor?? [ 327.021402][ T127] hub 3-1:0.0: bad descriptor, ignoring hub [ 327.027929][ T127] hub: probe of 3-1:0.0 failed with error -5 [ 327.092727][ T127] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 327.116713][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.343353][ T127] usb 3-1: USB disconnect, device number 41 [ 327.716019][ T127] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 327.843467][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 327.936853][ T127] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 327.960381][ T127] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.023179][ T127] usb 3-1: config 0 interface 0 has no altsetting 0 [ 328.045690][ T127] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 328.080204][ T127] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 328.119526][ T127] usb 3-1: Product: syz [ 328.137952][ T127] usb 3-1: Manufacturer: syz [ 328.149513][ T127] usb 3-1: SerialNumber: syz [ 328.177723][ T127] usb 3-1: config 0 descriptor?? [ 328.202051][ T127] hub 3-1:0.0: bad descriptor, ignoring hub [ 328.220486][ T127] hub: probe of 3-1:0.0 failed with error -5 [ 328.270381][ T127] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 328.322729][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.888380][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 329.555046][T11666] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2361'. [ 329.557354][ T127] usb 3-1: USB disconnect, device number 42 [ 329.862625][T11633] tipc: Enabled bearer , priority 0 [ 329.911306][T11634] device syzkaller0 entered promiscuous mode [ 329.923292][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 329.952073][T11642] tipc: Resetting bearer [ 330.965492][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 331.660952][T11630] tipc: Resetting bearer [ 331.680843][T11630] tipc: Disabling bearer [ 331.907803][T11692] device syzkaller0 entered promiscuous mode [ 332.003224][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 332.063093][ T4345] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 332.274856][ T4345] usb 3-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 332.305742][ T4345] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 332.339476][ T4345] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.404447][ T4345] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 332.420653][ T4345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.450849][ T4345] hub 3-1:1.0: bad descriptor, ignoring hub [ 332.463193][ T4345] hub: probe of 3-1:1.0 failed with error -5 [ 332.490542][T11719] device syzkaller0 entered promiscuous mode [ 332.501558][ T4345] cdc_wdm 3-1:1.0: skipping garbage [ 332.513132][ T4345] cdc_wdm 3-1:1.0: skipping garbage [ 332.518436][ T4345] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 332.598636][T11723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2379'. [ 332.610355][T11723] tipc: Enabled bearer , priority 10 [ 332.618514][T11722] tipc: Enabled bearer , priority 0 [ 332.631366][T11722] device syzkaller0 entered promiscuous mode [ 332.675401][T11722] tipc: Resetting bearer [ 332.740073][T11720] tipc: Resetting bearer [ 332.824110][T11720] tipc: Disabling bearer [ 332.833304][ T4345] usb 3-1: USB disconnect, device number 43 [ 332.882555][T11732] device syzkaller0 entered promiscuous mode [ 332.911167][T11732] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2383'. [ 333.053209][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 333.220405][T11745] device syzkaller0 entered promiscuous mode [ 334.083129][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 334.588108][ T4283] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 335.133182][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 335.833193][T11765] tipc: Enabling of bearer rejected, failed to enable media [ 335.870890][T11791] device vlan2 entered promiscuous mode [ 335.877951][T11791] device syz_tun entered promiscuous mode [ 336.037881][T11793] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2400'. [ 336.074327][T11793] device syzkaller1 entered promiscuous mode [ 336.163192][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 336.168677][T11797] device syzkaller0 entered promiscuous mode [ 336.472057][T11814] device syzkaller0 entered promiscuous mode [ 336.572460][ T7] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 336.790700][ T7] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 336.813045][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 336.821957][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.863113][ T7] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 336.879470][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.892122][ T7] hub 5-1:1.0: bad descriptor, ignoring hub [ 336.913082][ T7] hub: probe of 5-1:1.0 failed with error -5 [ 336.921693][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 336.929312][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 336.934882][ T7] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 337.203288][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 337.276748][ T7] usb 5-1: USB disconnect, device number 28 [ 337.728534][ T4283] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 338.254017][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 338.979784][T11827] tipc: Enabling of bearer rejected, failed to enable media [ 339.195325][T11845] device syzkaller0 entered promiscuous mode [ 339.227867][T11845] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2416'. [ 339.283184][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 339.643762][T11866] device syzkaller0 entered promiscuous mode [ 339.940390][ T4283] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 340.333186][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 341.373145][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 342.413145][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 342.846401][T11890] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2428'. [ 342.856562][T11893] device syzkaller1 entered promiscuous mode [ 343.021718][T11909] device syzkaller0 entered promiscuous mode [ 343.443326][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 343.573798][T11937] device syzkaller0 entered promiscuous mode [ 343.595426][T11937] 0: reclassify loop, rule prio 0, protocol 800 [ 343.942374][T11951] device syzkaller0 entered promiscuous mode [ 344.007190][T11955] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2444'. [ 344.019762][T11955] device syzkaller1 entered promiscuous mode [ 344.090343][T11958] device syzkaller0 entered promiscuous mode [ 344.315097][T11964] device syzkaller0 entered promiscuous mode [ 344.433298][ T4386] syzkaller0: tun_net_xmit 76 [ 344.486350][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 345.371441][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2457'. [ 345.529291][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 346.566927][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 347.187719][T12035] tipc: Enabled bearer , priority 0 [ 347.199416][T12035] device syzkaller0 entered promiscuous mode [ 347.320395][T12035] tipc: Resetting bearer [ 347.359459][T12034] tipc: Resetting bearer [ 347.407278][T12034] tipc: Disabling bearer [ 347.483481][ T127] syzkaller0: tun_net_xmit 76 [ 347.603312][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 347.622918][T12051] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.2473'. [ 347.632621][T12051] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.2473'. [ 348.643304][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 349.683212][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 349.708315][T12054] device syzkaller0 entered promiscuous mode [ 349.861620][T12081] device syzkaller0 entered promiscuous mode [ 350.723238][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 351.763178][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 352.232683][T12135] tipc: Enabled bearer , priority 0 [ 352.283649][T12124] device syzkaller0 entered promiscuous mode [ 352.321460][T12131] device syzkaller0 entered promiscuous mode [ 352.339522][T12108] tipc: Resetting bearer [ 352.407205][T12108] tipc: Disabling bearer [ 352.803197][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 353.843170][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 354.648802][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2489'. [ 354.883191][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 354.901414][T12198] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2497'. [ 355.923279][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 356.963937][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 357.081749][T12196] wg1 speed is unknown, defaulting to 1000 [ 357.083216][T12197] tipc: Enabling of bearer rejected, failed to enable media [ 357.417555][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2505'. [ 357.438012][T12243] device syzkaller0 entered promiscuous mode [ 357.539109][T12247] tipc: Enabled bearer , priority 0 [ 357.590634][T12242] tipc: Resetting bearer [ 357.667110][T12242] tipc: Disabling bearer [ 357.759050][T12254] device syzkaller0 entered promiscuous mode [ 358.003211][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 359.043261][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 359.867303][T12284] tipc: Enabled bearer , priority 0 [ 359.892068][T12287] device syzkaller0 entered promiscuous mode [ 359.961638][T12281] device syzkaller0 entered promiscuous mode [ 359.972968][T12295] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.2515'. [ 359.992141][T12291] tipc: Resetting bearer [ 360.000923][T12295] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.2515'. [ 360.083356][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 361.124504][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 361.950880][T12279] tipc: Resetting bearer [ 361.970356][T12279] tipc: Disabling bearer [ 362.163196][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 362.248897][T12326] device syzkaller0 entered promiscuous mode [ 362.270761][T12326] tipc: Enabled bearer , priority 0 [ 362.282176][T12327] device syzkaller0 entered promiscuous mode [ 362.291914][T12325] tipc: Resetting bearer [ 362.328906][T12325] tipc: Disabling bearer [ 362.738158][T12350] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2528'. [ 362.769773][T12349] device syzkaller0 entered promiscuous mode [ 363.052882][T12363] device syzkaller0 entered promiscuous mode [ 363.203192][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 363.222310][T12370] device syzkaller0 entered promiscuous mode [ 363.239592][T12373] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2534'. [ 363.252473][T12373] device syzkaller1 entered promiscuous mode [ 363.297027][T12370] tipc: Enabled bearer , priority 0 [ 363.348026][T12368] tipc: Resetting bearer [ 363.387694][T12368] tipc: Disabling bearer [ 363.419288][T12376] device syzkaller0 entered promiscuous mode [ 363.457140][ T4279] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 363.582626][T12387] device syzkaller0 entered promiscuous mode [ 363.979023][T12395] device syzkaller0 entered promiscuous mode [ 363.999984][T12397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2544'. [ 364.025527][T12397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2544'. [ 364.045380][T12397] device syzkaller0 entered promiscuous mode [ 364.243192][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 364.265336][T12401] device syzkaller0 entered promiscuous mode [ 364.603218][ T4345] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 364.805650][ T4345] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.833307][ T4345] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 364.842326][ T4345] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 364.863292][ T4345] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 364.872378][ T4345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.927816][T12411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 364.944279][ T4345] hub 2-1:1.0: bad descriptor, ignoring hub [ 364.950246][ T4345] hub: probe of 2-1:1.0 failed with error -5 [ 364.964888][ T4345] cdc_wdm 2-1:1.0: skipping garbage [ 364.970217][ T4345] cdc_wdm 2-1:1.0: skipping garbage [ 364.998608][ T4345] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 365.212362][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 365.283220][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 365.347254][ T7] usb 2-1: USB disconnect, device number 25 [ 366.323472][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 366.699415][T12414] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2549'. [ 366.720232][T12436] tipc: Enabling of bearer rejected, failed to enable media [ 366.972698][T12459] device syzkaller0 entered promiscuous mode [ 367.051319][T12461] device syzkaller0 entered promiscuous mode [ 367.124201][T12464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2559'. [ 367.145452][T12464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2559'. [ 367.363199][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 367.370929][T12473] device syzkaller0 entered promiscuous mode [ 367.578364][T12488] tipc: Enabled bearer , priority 0 [ 367.598893][T12488] device syzkaller0 entered promiscuous mode [ 367.660962][T12488] tipc: Resetting bearer [ 367.673252][T12490] device syzkaller0 entered promiscuous mode [ 367.685382][T12487] tipc: Resetting bearer [ 367.713605][T12487] tipc: Disabling bearer [ 367.753726][T12490] tipc: Enabled bearer , priority 0 [ 367.775597][T12489] tipc: Resetting bearer [ 367.815366][T12489] tipc: Disabling bearer [ 367.825464][T12492] device syzkaller0 entered promiscuous mode [ 368.102018][T12507] device syzkaller0 entered promiscuous mode [ 368.226083][T12514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2577'. [ 368.235807][T12514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2577'. [ 368.288786][T12514] device syzkaller0 entered promiscuous mode [ 368.296672][T12517] device syzkaller0 entered promiscuous mode [ 368.322531][T12517] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2578'. [ 368.398047][T12521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2580'. [ 368.403195][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 368.417534][T12521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2580'. [ 368.428516][T12521] device syzkaller0 entered promiscuous mode [ 368.571582][T12526] device syzkaller0 entered promiscuous mode [ 368.582359][T12526] tipc: Enabled bearer , priority 0 [ 368.603051][T12525] tipc: Resetting bearer [ 368.674622][T12525] tipc: Disabling bearer [ 368.875788][T12538] device syzkaller0 entered promiscuous mode [ 368.972669][T12544] device syzkaller0 entered promiscuous mode [ 369.054986][T12547] device syzkaller0 entered promiscuous mode [ 369.152843][T12549] netlink: 'syz.4.2591': attribute type 13 has an invalid length. [ 369.227470][T12549] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 369.256441][T12549] device syzkaller0 entered promiscuous mode [ 369.276828][T12551] device syzkaller0 entered promiscuous mode [ 369.443187][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 370.489165][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 371.298603][T12559] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2593'. [ 371.368811][T12572] device syzkaller0 entered promiscuous mode [ 371.523179][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 372.563210][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 373.569384][T12591] tipc: Enabling of bearer rejected, failed to enable media [ 373.603272][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 373.704662][T12612] device syzkaller0 entered promiscuous mode [ 374.080441][T12640] device syzkaller0 entered promiscuous mode [ 374.120238][T12635] tipc: Enabled bearer , priority 0 [ 374.222482][T12624] tipc: Resetting bearer [ 374.236053][ T4279] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 374.270828][T12622] tipc: Resetting bearer [ 374.358733][T12622] tipc: Disabling bearer [ 374.488770][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2611'. [ 374.498205][T12651] ksmbd: Unknown IPC event: 0, ignore. [ 374.599885][T12656] device syzkaller0 entered promiscuous mode [ 374.624358][T12656] tipc: Enabled bearer , priority 0 [ 374.632579][T12654] tipc: Resetting bearer [ 374.643165][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 374.714597][T12654] tipc: Disabling bearer [ 374.843574][T12661] tipc: Enabled bearer , priority 0 [ 374.852107][T12661] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 374.888388][T12661] tipc: Resetting bearer [ 374.913986][T12660] tipc: Disabling bearer [ 374.934627][T12667] device syzkaller0 entered promiscuous mode [ 375.033319][ T127] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 375.140509][ T4279] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 375.224973][ T127] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 375.251553][ T127] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 375.272641][ T127] usb 2-1: config 0 interface 0 has no altsetting 0 [ 375.289465][ T127] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 375.308877][ T127] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 375.330532][ T127] usb 2-1: Product: syz [ 375.339197][T12675] device syzkaller1 entered promiscuous mode [ 375.349521][ T127] usb 2-1: Manufacturer: syz [ 375.357403][ T127] usb 2-1: SerialNumber: syz [ 375.390555][ T127] usb 2-1: config 0 descriptor?? [ 375.399018][ T127] hub 2-1:0.0: bad descriptor, ignoring hub [ 375.407477][ T127] hub: probe of 2-1:0.0 failed with error -5 [ 375.416307][ T127] usb 2-1: selecting invalid altsetting 0 [ 375.573652][T12687] lo: Caught tx_queue_len zero misconfig [ 375.683269][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 376.021507][T12700] device syzkaller0 entered promiscuous mode [ 376.048180][T12700] tipc: Enabled bearer , priority 0 [ 376.057289][T12697] tipc: Resetting bearer [ 376.092515][T12697] tipc: Disabling bearer [ 376.160912][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 376.280824][T12708] tipc: Enabled bearer , priority 0 [ 376.298102][T12708] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 376.309506][T12708] tipc: Resetting bearer [ 376.317797][T12710] device syzkaller0 entered promiscuous mode [ 376.329925][T12707] tipc: Disabling bearer [ 376.723172][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 376.798074][T12730] device syzkaller0 entered promiscuous mode [ 377.287944][T12740] device syzkaller0 entered promiscuous mode [ 377.329182][T12740] tipc: Enabled bearer , priority 0 [ 377.348263][T12739] tipc: Resetting bearer [ 377.432284][T12739] tipc: Disabling bearer [ 377.454459][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'. [ 377.476348][T12748] device bridge1 entered promiscuous mode [ 377.600190][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2645'. [ 377.763219][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 377.880336][T12762] device syzkaller0 entered promiscuous mode [ 378.393488][T12786] device syzkaller0 entered promiscuous mode [ 378.415422][T12786] tipc: Enabled bearer , priority 0 [ 378.427504][T12783] tipc: Resetting bearer [ 378.461299][T12783] tipc: Disabling bearer [ 378.470589][T12789] netlink: 1216 bytes leftover after parsing attributes in process `syz.4.2659'. [ 378.482845][T12789] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.2659'. [ 378.496125][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.502507][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.091489][T12807] device syzkaller0 entered promiscuous mode [ 379.172067][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'. [ 379.396139][T12819] device syzkaller0 entered promiscuous mode [ 379.410897][T12819] tipc: Enabled bearer , priority 0 [ 379.430132][T12817] tipc: Resetting bearer [ 379.515444][T12817] tipc: Disabling bearer [ 379.988673][ T8292] usb 2-1: USB disconnect, device number 26 [ 380.152347][T12844] device syzkaller0 entered promiscuous mode [ 380.237119][T12851] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.2683'. [ 380.261008][T12851] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.2683'. [ 380.375368][T12854] device syzkaller0 entered promiscuous mode [ 380.599223][T12869] netlink: 'syz.1.2687': attribute type 1 has an invalid length. [ 380.630723][T12860] netlink: 'syz.1.2687': attribute type 1 has an invalid length. [ 380.988113][ T4386] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 381.174917][ T4386] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 381.185481][ T4386] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 381.195896][ T4386] usb 5-1: config 0 interface 0 has no altsetting 0 [ 381.206053][ T4386] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 381.215733][ T4386] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 381.218975][T12899] wg1 speed is unknown, defaulting to 1000 [ 381.225245][ T4386] usb 5-1: Product: syz [ 381.235484][ T4386] usb 5-1: Manufacturer: syz [ 381.240315][ T4386] usb 5-1: SerialNumber: syz [ 381.252769][ T4386] usb 5-1: config 0 descriptor?? [ 381.266243][ T4386] hub 5-1:0.0: bad descriptor, ignoring hub [ 381.272376][ T4386] hub: probe of 5-1:0.0 failed with error -5 [ 381.286303][ T4386] usb 5-1: selecting invalid altsetting 0 [ 381.426291][T12902] device syzkaller0 entered promiscuous mode [ 381.676156][T12905] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.2699'. [ 381.686160][T12905] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.2699'. [ 381.878916][T12908] device syzkaller0 entered promiscuous mode [ 382.242319][T12924] device syzkaller0 entered promiscuous mode [ 382.638302][ T4279] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 382.640209][T12932] device syzkaller0 entered promiscuous mode [ 382.966465][T12942] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.2713'. [ 382.983442][T12942] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.2713'. [ 383.212932][T12948] tipc: Enabled bearer , priority 0 [ 383.227540][T12948] device syzkaller0 entered promiscuous mode [ 383.269889][T12948] tipc: Resetting bearer [ 383.286452][T12947] tipc: Resetting bearer [ 383.310723][T12947] tipc: Disabling bearer [ 383.441793][T12951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2717'. [ 383.453693][T12951] tipc: Enabling of bearer rejected, already enabled [ 383.615230][T12956] device syzkaller0 entered promiscuous mode [ 384.098842][T12968] device syzkaller0 entered promiscuous mode [ 384.136861][T12970] device syzkaller0 entered promiscuous mode [ 384.244573][T12972] device ipvlan2 entered promiscuous mode [ 384.258885][T12972] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 384.728770][ T4279] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 385.454370][T12994] device syzkaller0 entered promiscuous mode [ 385.725608][T13000] tipc: Enabled bearer , priority 0 [ 385.743454][T13000] device syzkaller0 entered promiscuous mode [ 385.755223][ T127] usb 5-1: USB disconnect, device number 29 [ 385.786272][T13000] tipc: Resetting bearer [ 385.813410][T12999] tipc: Resetting bearer [ 385.875306][T12999] tipc: Disabling bearer [ 385.909186][T13003] device syzkaller0 entered promiscuous mode [ 386.014066][T13009] device syzkaller0 entered promiscuous mode [ 386.596863][T13030] device syzkaller0 entered promiscuous mode [ 386.684326][T13033] device syzkaller0 entered promiscuous mode [ 386.799313][T13040] device syzkaller0 entered promiscuous mode [ 387.142461][T13056] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.2756'. [ 387.167698][T13056] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.2756'. [ 387.526833][T13068] device syzkaller0 entered promiscuous mode [ 387.737473][T13073] wg1 speed is unknown, defaulting to 1000 [ 387.808141][T13072] device syzkaller0 entered promiscuous mode [ 387.867974][T13080] device syzkaller0 entered promiscuous mode [ 388.265962][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2769'. [ 388.284366][T13103] ksmbd: Unknown IPC event: 0, ignore. [ 390.129494][ T4279] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 390.690375][T13126] device syzkaller0 entered promiscuous mode [ 391.092210][T13132] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 391.111491][T13132] device syzkaller0 entered promiscuous mode [ 391.158343][T13130] device syzkaller0 entered promiscuous mode [ 391.233158][T13136] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.2781'. [ 391.254774][T13136] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.2781'. [ 391.517733][T13148] netlink: 'syz.2.2785': attribute type 1 has an invalid length. [ 391.537584][T13148] netlink: 'syz.2.2785': attribute type 1 has an invalid length. [ 391.571126][T13155] tipc: Enabled bearer , priority 0 [ 391.651924][T13155] device syzkaller0 entered promiscuous mode [ 391.678848][T13155] tipc: Resetting bearer [ 391.707293][T13159] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 391.717536][T13153] tipc: Resetting bearer [ 391.740516][T13153] tipc: Disabling bearer [ 391.780445][T13162] tipc: Enabled bearer , priority 0 [ 391.790138][T13164] device syzkaller0 entered promiscuous mode [ 391.884877][T13164] tipc: Resetting bearer [ 391.929442][T13160] tipc: Resetting bearer [ 391.962103][ T4279] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 391.963525][T13160] tipc: Disabling bearer [ 392.093174][T13176] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.2793'. [ 392.110899][T13176] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.2793'. [ 392.161520][T13180] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 392.184962][T13180] device syzkaller0 entered promiscuous mode [ 392.262087][T13182] device syzkaller0 entered promiscuous mode [ 392.711908][T13194] netlink: 'syz.0.2799': attribute type 1 has an invalid length. [ 392.756479][T13194] netlink: 'syz.0.2799': attribute type 1 has an invalid length. [ 392.846063][T13199] tipc: Enabled bearer , priority 0 [ 392.879257][T13199] device syzkaller0 entered promiscuous mode [ 392.912780][T13199] tipc: Resetting bearer [ 392.943481][T13198] tipc: Resetting bearer [ 393.003738][T13198] tipc: Disabling bearer [ 393.052486][T13203] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 393.197630][T13215] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 393.214175][T13215] device syzkaller0 entered promiscuous mode [ 393.275650][T13217] device syzkaller0 entered promiscuous mode [ 393.275819][T13219] netlink: 1216 bytes leftover after parsing attributes in process `syz.4.2808'. [ 393.297559][T13219] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.2808'. [ 393.529390][T13234] netlink: 'syz.2.2813': attribute type 1 has an invalid length. [ 393.545185][T13234] netlink: 'syz.2.2813': attribute type 1 has an invalid length. [ 393.783252][T13246] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 393.834132][T13249] tipc: Enabled bearer , priority 0 [ 393.841853][T13249] device syzkaller0 entered promiscuous mode [ 393.867452][T13249] tipc: Resetting bearer [ 393.880578][T13248] tipc: Resetting bearer [ 393.909064][T13248] tipc: Disabling bearer [ 393.946754][T13251] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 393.963847][T13251] device syzkaller0 entered promiscuous mode [ 394.228179][T13257] device syzkaller0 entered promiscuous mode [ 395.124176][T13290] tipc: Enabled bearer , priority 0 [ 395.134141][T13290] device syzkaller0 entered promiscuous mode [ 395.142607][T13292] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 395.160084][T13290] tipc: Resetting bearer [ 395.189010][T13292] device syzkaller0 entered promiscuous mode [ 395.224750][T13289] tipc: Resetting bearer [ 395.267434][T13289] tipc: Disabling bearer [ 395.487780][T13301] tipc: Enabled bearer , priority 0 [ 395.505631][T13301] device syzkaller0 entered promiscuous mode [ 395.526460][T13296] device syzkaller1 entered promiscuous mode [ 395.549219][T13301] tipc: Resetting bearer [ 395.592856][T13300] tipc: Resetting bearer [ 395.623993][T13300] tipc: Disabling bearer [ 395.635547][T13305] tipc: Enabled bearer , priority 0 [ 395.645897][T13305] device syzkaller0 entered promiscuous mode [ 395.668872][T13305] tipc: Resetting bearer [ 395.678988][T13304] tipc: Resetting bearer [ 395.720079][T13304] tipc: Disabling bearer [ 395.942760][T13316] netlink: 'syz.2.2843': attribute type 1 has an invalid length. [ 395.974529][T13316] netlink: 'syz.2.2843': attribute type 1 has an invalid length. [ 396.273291][T13325] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 396.299117][T13325] device syzkaller0 entered promiscuous mode [ 396.544122][T13336] tipc: Enabled bearer , priority 0 [ 396.552098][T13336] device syzkaller0 entered promiscuous mode [ 396.584835][T13336] tipc: Resetting bearer [ 396.592747][T13335] tipc: Resetting bearer [ 396.614862][T13335] tipc: Disabling bearer [ 396.731708][T13340] device syzkaller0 entered promiscuous mode [ 396.891551][T13344] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.2856'. [ 396.911238][T13344] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.2856'. [ 397.057862][T13346] netlink: 'syz.4.2857': attribute type 1 has an invalid length. [ 397.494919][T13359] device syzkaller0 entered promiscuous mode [ 397.549418][T13359] tipc: Enabled bearer , priority 0 [ 397.568727][T13363] tipc: Enabled bearer , priority 0 [ 397.603581][T13358] tipc: Resetting bearer [ 397.657918][T13358] tipc: Disabling bearer [ 397.677611][T13363] device syzkaller0 entered promiscuous mode [ 397.706314][T13363] tipc: Resetting bearer [ 397.712377][T13367] tipc: Enabled bearer , priority 0 [ 397.741741][T13362] tipc: Resetting bearer [ 397.793726][T13362] tipc: Disabling bearer [ 397.817948][T13370] device syzkaller0 entered promiscuous mode [ 397.846038][T13367] tipc: Resetting bearer [ 397.864966][T13376] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.2868'. [ 397.884509][T13366] tipc: Resetting bearer [ 397.912408][T13376] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.2868'. [ 397.961921][T13366] tipc: Disabling bearer [ 398.079616][T13383] tipc: Enabling of bearer rejected, failed to enable media [ 398.141693][T13384] device syzkaller0 entered promiscuous mode [ 398.218746][T13384] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2869'. [ 398.247890][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2871'. [ 398.634369][T13401] netlink: 'syz.2.2876': attribute type 1 has an invalid length. [ 398.649386][T13401] netlink: 'syz.2.2876': attribute type 1 has an invalid length. [ 398.958734][T13414] tipc: Enabled bearer , priority 0 [ 398.967507][T13414] device syzkaller0 entered promiscuous mode [ 398.998779][T13414] tipc: Resetting bearer [ 399.022100][T13413] tipc: Resetting bearer [ 399.122849][T13413] tipc: Disabling bearer [ 399.584432][T13436] tipc: Enabled bearer , priority 0 [ 399.605387][T13436] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 399.638851][T13436] tipc: Resetting bearer [ 399.668763][T13435] tipc: Disabling bearer [ 399.996951][T13451] netlink: 'syz.4.2891': attribute type 1 has an invalid length. [ 400.029484][T13451] netlink: 'syz.4.2891': attribute type 1 has an invalid length. [ 400.088327][T13454] device syzkaller0 entered promiscuous mode [ 401.202149][T13494] tipc: Enabled bearer , priority 0 [ 401.231302][T13494] device syzkaller0 entered promiscuous mode [ 401.336851][T13494] tipc: Resetting bearer [ 401.364995][T13497] tipc: Enabled bearer , priority 0 [ 401.389189][T13491] tipc: Resetting bearer [ 401.440508][T13491] tipc: Disabling bearer [ 401.468999][T13501] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 401.492536][T13497] tipc: Resetting bearer [ 401.534617][T13496] tipc: Disabling bearer [ 401.720797][T13508] device syzkaller0 entered promiscuous mode [ 402.055011][T13525] tipc: Enabling of bearer rejected, failed to enable media [ 402.069944][T13525] device syzkaller0 entered promiscuous mode [ 402.109491][T13525] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2911'. [ 402.321859][ T4279] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 402.569259][T13545] device syzkaller0 entered promiscuous mode [ 402.938874][T13555] device syzkaller0 entered promiscuous mode [ 403.342376][T13570] tipc: Enabling of bearer rejected, failed to enable media [ 403.378821][T13570] device syzkaller0 entered promiscuous mode [ 403.446659][T13570] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2924'. [ 403.489981][T13574] tipc: Enabled bearer , priority 0 [ 403.567450][T13574] device syzkaller0 entered promiscuous mode [ 403.600609][T13573] tipc: Resetting bearer [ 403.674399][T13573] tipc: Disabling bearer [ 404.181846][T13599] device syzkaller0 entered promiscuous mode [ 404.293702][T13603] device syzkaller0 entered promiscuous mode [ 404.303667][T13603] ------------[ cut here ]------------ [ 404.309626][T13603] WARNING: CPU: 0 PID: 13603 at include/linux/skbuff.h:2844 em_cmp_match+0x56a/0x7b0 [ 404.319261][T13603] Modules linked in: [ 404.323255][T13603] CPU: 0 PID: 13603 Comm: syz.1.2936 Not tainted syzkaller #0 [ 404.330754][T13603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.340977][T13603] RIP: 0010:em_cmp_match+0x56a/0x7b0 [ 404.346376][T13603] Code: e8 cb 04 1b f9 39 dd 0f 94 c0 e9 40 fe ff ff e8 5c 03 1b f9 e9 34 fe ff ff e8 52 03 1b f9 0f 0b e9 97 fc ff ff e8 46 03 1b f9 <0f> 0b e9 79 fb ff ff 89 d9 80 e1 07 fe c1 38 c1 0f 8c e5 fa ff ff [ 404.366192][T13603] RSP: 0018:ffffc9000e0b7118 EFLAGS: 00010287 [ 404.372307][T13603] RAX: ffffffff8867706a RBX: ffff88807dad970a RCX: 0000000000080000 [ 404.380389][T13603] RDX: ffffc900059f9000 RSI: 00000000000003c8 RDI: 00000000000003c9 [ 404.388483][T13603] RBP: 000000000000ffff R08: ffff888061671dc0 R09: 0000000000000003 [ 404.396555][T13603] R10: 0000000000000002 R11: 0000000000000002 R12: 1ffff1100fb5b2e1 [ 404.404607][T13603] R13: 1ffff110046dea66 R14: ffff8880236f5280 R15: ffff8880236f5336 [ 404.412617][T13603] FS: 00007fcf91a9f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 404.421617][T13603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.428262][T13603] CR2: 000000110c39ff90 CR3: 000000007d45a000 CR4: 00000000003506f0 [ 404.436308][T13603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 404.444344][T13603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 404.452341][T13603] Call Trace: [ 404.455698][T13603] [ 404.458660][T13603] __tcf_em_tree_match+0x1cb/0x7a0 [ 404.463868][T13603] ? tcf_em_tree_dump+0x900/0x900 [ 404.468938][T13603] ? rcu_read_lock_held+0x40/0x40 [ 404.474056][T13603] ? __lock_acquire+0x12f4/0x7d10 [ 404.479212][T13603] basic_classify+0x111/0x2c0 [ 404.483976][T13603] tcf_classify+0x331/0xbf0 [ 404.488524][T13603] multiq_enqueue+0xfb/0x4b0 [ 404.493195][T13603] ? sch_tree_unlock+0x1b0/0x1b0 [ 404.498144][T13603] ? do_raw_spin_lock+0x128/0x2f0 [ 404.503235][T13603] ? __rwlock_init+0x140/0x140 [ 404.508089][T13603] dev_qdisc_enqueue+0x4c/0x2b0 [ 404.513042][T13603] __dev_queue_xmit+0xfdc/0x37f0 [ 404.518023][T13603] ? __dev_queue_xmit+0x26b/0x37f0 [ 404.523228][T13603] ? netdev_core_pick_tx+0x340/0x340 [ 404.528585][T13603] ? packet_parse_headers+0x7b8/0xab0 [ 404.534048][T13603] ? packet_parse_headers+0x84b/0xab0 [ 404.539460][T13603] ? __virt_addr_valid+0x188/0x540 [ 404.544652][T13603] ? __check_object_size+0x500/0xa40 [ 404.549955][T13603] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 404.555553][T13603] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 404.561555][T13603] ? skb_put+0x117/0x210 [ 404.565889][T13603] packet_sendmsg+0x3bc3/0x4e60 [ 404.570779][T13603] ? __schedule+0x119d/0x40e0 [ 404.575541][T13603] ? __might_sleep+0xd0/0xd0 [ 404.580147][T13603] ? verify_lock_unused+0x140/0x140 [ 404.585422][T13603] ? aa_sk_perm+0x81f/0x950 [ 404.589950][T13603] ? packet_getsockopt+0x9a0/0x9a0 [ 404.595134][T13603] ? aa_sock_msg_perm+0x94/0x150 [ 404.600107][T13603] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 404.605490][T13603] ? security_socket_sendmsg+0x7c/0xa0 [ 404.611008][T13603] ? packet_getsockopt+0x9a0/0x9a0 [ 404.616216][T13603] ____sys_sendmsg+0x5be/0x970 [ 404.621030][T13603] ? __sys_sendmsg_sock+0x30/0x30 [ 404.626155][T13603] ? __import_iovec+0x315/0x500 [ 404.631042][T13603] ? import_iovec+0x6f/0xa0 [ 404.635775][T13603] ___sys_sendmsg+0x2a2/0x360 [ 404.640512][T13603] ? try_to_wake_up+0x6ae/0x1080 [ 404.645557][T13603] ? __sys_sendmsg+0x290/0x290 [ 404.650384][T13603] ? put_user_ifreq+0x81/0xb0 [ 404.655343][T13603] __se_sys_sendmsg+0x1bb/0x2a0 [ 404.660245][T13603] ? __x64_sys_sendmsg+0x80/0x80 [ 404.665362][T13603] ? lockdep_hardirqs_on+0x94/0x140 [ 404.670593][T13603] do_syscall_64+0x4c/0xa0 [ 404.675089][T13603] ? clear_bhb_loop+0x60/0xb0 [ 404.679797][T13603] ? clear_bhb_loop+0x60/0xb0 [ 404.684570][T13603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.690492][T13603] RIP: 0033:0x7fcf90b9c629 [ 404.695012][T13603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.714861][T13603] RSP: 002b:00007fcf91a9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.723357][T13603] RAX: ffffffffffffffda RBX: 00007fcf90e15fa0 RCX: 00007fcf90b9c629 [ 404.731359][T13603] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 404.739851][T13603] RBP: 00007fcf90c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 404.747882][T13603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.755931][T13603] R13: 00007fcf90e16038 R14: 00007fcf90e15fa0 R15: 00007fffded72688 [ 404.763985][T13603] [ 404.767043][T13603] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 404.774340][T13603] CPU: 0 PID: 13603 Comm: syz.1.2936 Not tainted syzkaller #0 [ 404.781826][T13603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.791992][T13603] Call Trace: [ 404.795289][T13603] [ 404.798254][T13603] dump_stack_lvl+0x188/0x24e [ 404.802957][T13603] ? memcpy+0x3c/0x60 [ 404.806954][T13603] ? show_regs_print_info+0x12/0x12 [ 404.812177][T13603] ? load_image+0x400/0x400 [ 404.816709][T13603] panic+0x2e5/0x730 [ 404.820628][T13603] ? bpf_jit_dump+0xd0/0xd0 [ 404.825247][T13603] __warn+0x2f8/0x4f0 [ 404.829248][T13603] ? em_cmp_match+0x56a/0x7b0 [ 404.833948][T13603] ? em_cmp_match+0x56a/0x7b0 [ 404.838658][T13603] report_bug+0x2ba/0x4f0 [ 404.843020][T13603] ? em_cmp_match+0x56a/0x7b0 [ 404.847816][T13603] handle_bug+0x3a/0x70 [ 404.852014][T13603] exc_invalid_op+0x16/0x40 [ 404.856551][T13603] asm_exc_invalid_op+0x16/0x20 [ 404.861427][T13603] RIP: 0010:em_cmp_match+0x56a/0x7b0 [ 404.866734][T13603] Code: e8 cb 04 1b f9 39 dd 0f 94 c0 e9 40 fe ff ff e8 5c 03 1b f9 e9 34 fe ff ff e8 52 03 1b f9 0f 0b e9 97 fc ff ff e8 46 03 1b f9 <0f> 0b e9 79 fb ff ff 89 d9 80 e1 07 fe c1 38 c1 0f 8c e5 fa ff ff [ 404.886363][T13603] RSP: 0018:ffffc9000e0b7118 EFLAGS: 00010287 [ 404.892456][T13603] RAX: ffffffff8867706a RBX: ffff88807dad970a RCX: 0000000000080000 [ 404.900454][T13603] RDX: ffffc900059f9000 RSI: 00000000000003c8 RDI: 00000000000003c9 [ 404.908458][T13603] RBP: 000000000000ffff R08: ffff888061671dc0 R09: 0000000000000003 [ 404.916456][T13603] R10: 0000000000000002 R11: 0000000000000002 R12: 1ffff1100fb5b2e1 [ 404.924544][T13603] R13: 1ffff110046dea66 R14: ffff8880236f5280 R15: ffff8880236f5336 [ 404.932555][T13603] ? em_cmp_match+0x56a/0x7b0 [ 404.937267][T13603] ? em_cmp_match+0x56a/0x7b0 [ 404.941982][T13603] __tcf_em_tree_match+0x1cb/0x7a0 [ 404.947137][T13603] ? tcf_em_tree_dump+0x900/0x900 [ 404.952285][T13603] ? rcu_read_lock_held+0x40/0x40 [ 404.957358][T13603] ? __lock_acquire+0x12f4/0x7d10 [ 404.962425][T13603] basic_classify+0x111/0x2c0 [ 404.967145][T13603] tcf_classify+0x331/0xbf0 [ 404.971689][T13603] multiq_enqueue+0xfb/0x4b0 [ 404.976313][T13603] ? sch_tree_unlock+0x1b0/0x1b0 [ 404.981284][T13603] ? do_raw_spin_lock+0x128/0x2f0 [ 404.986341][T13603] ? __rwlock_init+0x140/0x140 [ 404.991135][T13603] dev_qdisc_enqueue+0x4c/0x2b0 [ 404.996032][T13603] __dev_queue_xmit+0xfdc/0x37f0 [ 405.001013][T13603] ? __dev_queue_xmit+0x26b/0x37f0 [ 405.006155][T13603] ? netdev_core_pick_tx+0x340/0x340 [ 405.011477][T13603] ? packet_parse_headers+0x7b8/0xab0 [ 405.016875][T13603] ? packet_parse_headers+0x84b/0xab0 [ 405.022272][T13603] ? __virt_addr_valid+0x188/0x540 [ 405.027441][T13603] ? __check_object_size+0x500/0xa40 [ 405.032758][T13603] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 405.038328][T13603] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 405.044341][T13603] ? skb_put+0x117/0x210 [ 405.048623][T13603] packet_sendmsg+0x3bc3/0x4e60 [ 405.053528][T13603] ? __schedule+0x119d/0x40e0 [ 405.058258][T13603] ? __might_sleep+0xd0/0xd0 [ 405.062879][T13603] ? verify_lock_unused+0x140/0x140 [ 405.068129][T13603] ? aa_sk_perm+0x81f/0x950 [ 405.072676][T13603] ? packet_getsockopt+0x9a0/0x9a0 [ 405.077837][T13603] ? aa_sock_msg_perm+0x94/0x150 [ 405.082816][T13603] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 405.088129][T13603] ? security_socket_sendmsg+0x7c/0xa0 [ 405.093625][T13603] ? packet_getsockopt+0x9a0/0x9a0 [ 405.098773][T13603] ____sys_sendmsg+0x5be/0x970 [ 405.103583][T13603] ? __sys_sendmsg_sock+0x30/0x30 [ 405.108734][T13603] ? __import_iovec+0x315/0x500 [ 405.113620][T13603] ? import_iovec+0x6f/0xa0 [ 405.118157][T13603] ___sys_sendmsg+0x2a2/0x360 [ 405.122871][T13603] ? try_to_wake_up+0x6ae/0x1080 [ 405.127840][T13603] ? __sys_sendmsg+0x290/0x290 [ 405.132667][T13603] ? put_user_ifreq+0x81/0xb0 [ 405.137419][T13603] __se_sys_sendmsg+0x1bb/0x2a0 [ 405.142311][T13603] ? __x64_sys_sendmsg+0x80/0x80 [ 405.147303][T13603] ? lockdep_hardirqs_on+0x94/0x140 [ 405.152555][T13603] do_syscall_64+0x4c/0xa0 [ 405.157006][T13603] ? clear_bhb_loop+0x60/0xb0 [ 405.161707][T13603] ? clear_bhb_loop+0x60/0xb0 [ 405.166418][T13603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.172345][T13603] RIP: 0033:0x7fcf90b9c629 [ 405.176870][T13603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.196584][T13603] RSP: 002b:00007fcf91a9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.204996][T13603] RAX: ffffffffffffffda RBX: 00007fcf90e15fa0 RCX: 00007fcf90b9c629 [ 405.212962][T13603] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 405.220931][T13603] RBP: 00007fcf90c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 405.228906][T13603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.236871][T13603] R13: 00007fcf90e16038 R14: 00007fcf90e15fa0 R15: 00007fffded72688 [ 405.244847][T13603] [ 405.248192][T13603] Kernel Offset: disabled [ 405.252579][T13603] Rebooting in 86400 seconds..