last executing test programs: 10.728875467s ago: executing program 0 (id=1631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r5, 0x1d}, 0x80, &(0x7f0000000080), 0x1}, 0x4008081) 7.795257824s ago: executing program 0 (id=1637): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008005}, 0x44) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4) 7.695074027s ago: executing program 3 (id=1639): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="09000000010000", 0x7) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0) landlock_restrict_self(r3, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_vhci(0x0, 0xd) statfs(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket(0x10, 0x803, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000340)="e8", 0x1}, {0x0, 0x2000000}], 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0xfffffc01, @private2, 0x7}}, [0x6, 0x7fffffffffffffff, 0x0, 0x7ff, 0x8, 0x4, 0x83, 0x10001, 0xffffffffffffffff, 0xed0d60c, 0xe51, 0x6, 0x8, 0x0, 0x9]}, &(0x7f0000000400)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x3, 0x2, 0x5, 0x5, 0x0, 0xffffe412, 0xf9}, &(0x7f0000000500)=0x9c) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000540)={r9, 0x8, 0x80, 0xfff8, 0x10, 0x100, 0x11, 0x7, {r10, @in6={{0xa, 0x4e22, 0x7ff, @local, 0x8}}, 0x2, 0x1, 0x5, 0x6, 0x7}}, &(0x7f0000000680)=0xb0) io_submit(r7, 0x1, &(0x7f0000000080)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x7, 0xfffd, r6, 0x0}]) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r5) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r11, 0x318, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 7.58984774s ago: executing program 1 (id=1641): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noload}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x45e, &(0x7f0000000dc0)="$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") openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x3, 0x0, &(0x7f0000000040)) 7.574788031s ago: executing program 0 (id=1642): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x21e, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0xfffffffd, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x1, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x74, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xfffffffc, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x3, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) 7.479685114s ago: executing program 2 (id=1643): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd6000fcdbdf25021f00", @ANYRES32=r2, @ANYBLOB="080001004000000008000100ac1e000108000200e00000020800080002010000080009000300000008000900"], 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 7.351164038s ago: executing program 4 (id=1644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000020000000000020100004c000480480001800a0001006d61746368000000380002800e000100"], 0xa0}}, 0x0) 6.452109788s ago: executing program 2 (id=1645): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001c005ff6", 0x8) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 6.315950962s ago: executing program 1 (id=1646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x24000040) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000"], 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 6.216288176s ago: executing program 4 (id=1647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r5, 0x1d}, 0x80, &(0x7f0000000080), 0x1}, 0x4008081) 6.140461138s ago: executing program 2 (id=1648): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x8f8, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f00000006c0)='ns/time_for_children\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000032c0)={{{@in6=@initdev, @in6=@mcast2}}, {{@in6=@private2}}}, &(0x7f00000033c0)=0xe8) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) getpid() syz_open_procfs$namespace(0x0, 0x0) getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000003440)={{{@in=@broadcast, @in=@empty}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000003540)=0xe8) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, r6, 0x1, 0x3, 0x25dfdc01, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40010) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 5.568646337s ago: executing program 3 (id=1649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 3.985510178s ago: executing program 2 (id=1650): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3074, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0xef20, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8002}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x21, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x2}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 3.864470742s ago: executing program 1 (id=1651): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r1, 0x4, r1}, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) 3.864098953s ago: executing program 0 (id=1652): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008005}, 0x44) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4) 3.813476844s ago: executing program 3 (id=1653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff03006009250d698cbe512490", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 3.802934135s ago: executing program 4 (id=1654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.517038194s ago: executing program 0 (id=1655): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd6000fcdbdf25021f00", @ANYRES32=r2, @ANYBLOB="080001004000000008000100ac1e000108000200e00000020800080002010000080009000300000008000900"], 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.516409684s ago: executing program 1 (id=1656): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noload}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x45e, &(0x7f0000000dc0)="$eJzs3MtvVNUfAPDvvTN98Pq1P8UHCFpFI/HR0vJcuMFo4kITE11gXNW2EGSgSmsihCi6wKUhcW9cmvgXuNKNUVcmbnVvSIhhA5qYjLl37i3DMAMMTJnifD7Jbc+Ze2bu+c65Z+bcc3obwMCayH4kERsj4reIGGtkry0w0fh15dKZub8unZlLol5/488kL3f50pm5smj5vA2NTL1e5EfaHPfc2xGztdrCySI/tXz8vamlU6efP3p89sjCkYUTMwcO7Nm9fXjfzN6exJnFdXnrR4vbtrzy1vnX5g6df+enb7L6biz2N8fRI+smGu9uW0/1+GD9tqkpnVT7WBG6UomIrLmG8v4/FpVYt7JvLF7+tK+VA1ZVvV6vt/t+LpytA/9hSfS7BkB/lF/02fVvud2loceacPFgxPv7G/FfKbbGnmqkRZmhluvbXpqIiENn//4y22J15iEAAK7x3cGIeK7d+C+NB5vK/a9YQxmPiP9HxH0RcX9EbI6IByLysg9FxMNdHr91heT68U964bYCu0XZ+O+FYm1rZfz3Tz2PvzBeKXKb8viHksNHawu7ivdkZwyNZPnpDq+/MSK+f+nXzzsdv3n8l23Z8cuxYEN6odoyQTc/uzzbg9BzFz+J2FptiT+XRLmMMxoRWyJia1evfPUK4+gzX2/rVOrm8d9AD9aZ6l9FPN1o/7PREn8p6bg+Ob1/38zeqdGoLeyaKs+K6/38y7nXOx3/juLvgaz917ee/7mV+MeT0YilU6eP5eu1S9G6QnxT537/rOM1ze2e/8PJm3l6uHjsw9nl5ZPTEcPJq9c/PnP1uUW+2hz/zh3t4k/zz7gy2kciIjuJt0fEoxHxWFH3xyPiiYjYcYP4f3zxyXe7j/8Gs/I9lMU/f7P2j+b27z5ROfbDt93HX8raf0+e2lk8ciuff7dawTt57wAAAOBekeZzlEk6uZJO08nJxt/wb471aW1xafnZw4sfnJhvzGWOx1BaznSNNc2HThdzw2V+piW/u5g3/qKyLs9Pzi3W5vsdPAy4DR36f+aPSr9rB6w692vB4NL/YXDp/zC49H8YXPo/DK52/f/jPtQDuPt8/8Pg0v9hcOn/MLj0fxhIHe+NT+/olv+7nRiJNVGNeyAxGj16wUi7f1a1v82UdPGPIdZOorradR5pu6vfn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC98W8AAAD//4I56HI=") openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x3, 0x0, &(0x7f0000000040)) 3.468453926s ago: executing program 3 (id=1657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000020000000000020100004c000480480001800a0001006d61746368000000380002800e000100"], 0xa0}}, 0x0) 3.468210095s ago: executing program 4 (id=1658): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001c005ff6", 0x8) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 3.219611154s ago: executing program 3 (id=1659): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x50, 0x8, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) 3.212985934s ago: executing program 4 (id=1660): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x8f8, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f00000006c0)='ns/time_for_children\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000032c0)={{{@in6=@initdev, @in6=@mcast2}}, {{@in6=@private2}}}, &(0x7f00000033c0)=0xe8) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) getpid() syz_open_procfs$namespace(0x0, 0x0) getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000003440)={{{@in=@broadcast, @in=@empty}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000003540)=0xe8) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, r6, 0x1, 0x3, 0x25dfdc01, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40010) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 3.108313438s ago: executing program 0 (id=1661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x24000040) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000"], 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.03660581s ago: executing program 2 (id=1662): clock_adjtime(0x0, &(0x7f0000000100)={0x105f0827e8, 0x20000000000000ff, 0x100000000000, 0x0, 0x858, 0x6, 0x0, 0x0, 0x20000, 0xb207, 0xde1, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffc0001, 0x0, 0x6, 0x3, 0xfffffffffffffffd}) 2.637387133s ago: executing program 2 (id=1663): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x21e, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0xfffffffd, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x1, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x74, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xfffffffc, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x3, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) 2.365546442s ago: executing program 4 (id=1664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 2.152466879s ago: executing program 1 (id=1665): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008005}, 0x44) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4) 2.14034923s ago: executing program 3 (id=1666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r5, 0x1d}, 0x80, &(0x7f0000000080), 0x1}, 0x4008081) 0s ago: executing program 1 (id=1667): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r1, 0x4, r1}, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) kernel console output (not intermixed with test programs): ode [ 83.919595][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.937410][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.950518][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.963107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.974151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.983327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.991741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.001000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.010921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.020893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.029994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.057704][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.073685][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.097358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.111942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.123881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.146329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.166548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.182738][ T4284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.192483][ T4284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.208262][ T4284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.218317][ T4284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.247047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.260724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.276189][ T4272] device veth0_vlan entered promiscuous mode [ 84.290771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.303164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.315667][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 84.326231][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 84.332941][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 84.352530][ T4272] device veth1_vlan entered promiscuous mode [ 84.381206][ T4271] device veth0_macvtap entered promiscuous mode [ 84.395825][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 84.397478][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 84.441535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.457348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.478137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.487586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.496624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.505283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.514402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.523614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.547475][ T4270] device veth0_vlan entered promiscuous mode [ 84.561549][ T4271] device veth1_macvtap entered promiscuous mode [ 84.618985][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.634558][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.648923][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.662833][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.674413][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.687084][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.700383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.712210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.723117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.735429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.746655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.756507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.765327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.774504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.789856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.803482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.817970][ T4270] device veth1_vlan entered promiscuous mode [ 84.835544][ T4272] device veth0_macvtap entered promiscuous mode [ 84.848649][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.860738][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.869941][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.883910][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.894668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.907253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.945736][ T4272] device veth1_macvtap entered promiscuous mode [ 84.972862][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.034053][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.043437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.052943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.063025][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.104208][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.125300][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.138546][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.150313][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.162142][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.171902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.180886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.191364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.201845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.212114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.238694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.252495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.264812][ T4270] device veth0_macvtap entered promiscuous mode [ 85.279338][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.296971][ T4274] device veth0_vlan entered promiscuous mode [ 85.305390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.316188][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.325776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.336348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.352327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.364677][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.377420][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.389313][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.401688][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.417577][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.430886][ T4270] device veth1_macvtap entered promiscuous mode [ 85.464486][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.464662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.487085][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.495108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.507376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.517373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.531195][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.542389][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.551743][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.563272][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.605080][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.619215][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.631647][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.651300][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.664075][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.679253][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.693447][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.724178][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.739905][ T4274] device veth1_vlan entered promiscuous mode [ 85.748244][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.752557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.770726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.780831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.791716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.803586][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.820268][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.834408][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.846780][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.858046][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.872456][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.884594][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.925944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.948660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.960895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.036819][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.054025][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.065055][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.079256][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.145573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 86.165618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.175553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.195578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.211740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.223180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.231655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.239961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.248256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.256546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.322440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.343576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.405627][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 86.411808][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 86.418181][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 86.465218][ T4274] device veth0_macvtap entered promiscuous mode [ 86.496800][ T4274] device veth1_macvtap entered promiscuous mode [ 86.497013][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 86.510067][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 86.858037][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.018935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.200986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.211763][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.278998][ T14] cfg80211: failed to load regulatory.db [ 87.347135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.438544][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.478036][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.518802][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.546073][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.588825][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.629891][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.656674][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.689785][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.722899][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.755149][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.794948][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.397420][ T4367] loop0: detected capacity change from 0 to 131072 [ 88.413528][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.443359][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.454520][ T4367] F2FS-fs (loop0): invalid crc value [ 88.486550][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.530029][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.547572][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.569613][ T4367] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.582563][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.610636][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.619713][ T4367] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 88.680624][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.715009][ T4367] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 88.890038][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.121318][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.214614][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.271721][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.304529][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.335508][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.440612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.469271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.113275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.142872][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.172236][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.186356][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.216023][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.306930][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.338645][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.353214][ T4378] loop4: detected capacity change from 0 to 2048 [ 90.397174][ T4378] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 90.407815][ T4378] NILFS (loop4): mounting unchecked fs [ 90.447624][ T4378] NILFS (loop4): recovery complete [ 90.509352][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.528761][ T4380] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.928795][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.942679][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.193550][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.233949][ T4385] loop2: detected capacity change from 0 to 256 [ 91.246992][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.267135][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.299416][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.715772][ T4386] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.279546][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.494730][ T7] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 96.515422][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.552215][ T7] usb 3-1: config 0 descriptor?? [ 96.696965][ T4400] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.705137][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.810269][ T7] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 96.825750][ T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 96.834155][ T7] [drm:udl_init] *ERROR* Selecting channel failed [ 96.863636][ T7] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 96.879698][ T7] [drm] Initialized udl on minor 2 [ 96.903930][ T7] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 96.920354][ T7] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 96.965615][ T14] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 96.996712][ T7] usb 3-1: USB disconnect, device number 2 [ 97.006356][ T4322] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 97.028228][ T4322] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 97.043438][ T4322] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 97.193131][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.212580][ T14] usb 4-1: not running at top speed; connect to a high speed hub [ 97.225886][ T14] usb 4-1: config 9 has an invalid interface number: 40 but max is 0 [ 97.239281][ T14] usb 4-1: config 9 has no interface number 0 [ 97.250894][ T14] usb 4-1: config 9 interface 40 altsetting 33 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 97.262684][ T14] usb 4-1: config 9 interface 40 altsetting 33 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 97.465953][ T14] usb 4-1: config 9 interface 40 has no altsetting 0 [ 97.479161][ T14] usb 4-1: New USB device found, idVendor=1199, idProduct=6890, bcdDevice=10.21 [ 97.490795][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.499297][ T14] usb 4-1: Product: syz [ 97.504515][ T14] usb 4-1: Manufacturer: syz [ 97.509400][ T14] usb 4-1: SerialNumber: syz [ 98.253257][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.328051][ T4420] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 98.369586][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.131584][ T4400] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.152298][ T4400] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.164998][ T4400] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.182069][ T4400] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.417469][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.425735][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.481430][ T14] sierra 4-1:9.40: Sierra USB modem converter detected [ 99.546417][ T14] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 99.598760][ T14] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 99.622625][ T14] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 99.739516][ T14] usb 4-1: USB disconnect, device number 2 [ 99.839829][ T14] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 99.942225][ T14] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 100.004051][ T14] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 100.064913][ T14] sierra 4-1:9.40: device disconnected [ 100.435754][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.444419][ T4445] loop4: detected capacity change from 0 to 131072 [ 100.454844][ T4445] F2FS-fs (loop4): invalid crc value [ 100.619486][ T4445] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.665577][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 100.708442][ T4445] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 100.771431][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 100.833917][ T4445] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 100.909367][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 101.167925][ T7] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 101.315997][ T7] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 101.324332][ T7] usb 1-1: Product: syz [ 101.328748][ T7] usb 1-1: Manufacturer: syz [ 101.333394][ T7] usb 1-1: SerialNumber: syz [ 101.354990][ T7] usb 1-1: config 0 descriptor?? [ 101.851857][ T4447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.153737][ T7] usb 1-1: USB disconnect, device number 2 [ 102.778521][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.788692][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.931263][ T4319] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 103.130253][ T4319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.165948][ T4319] usb 2-1: not running at top speed; connect to a high speed hub [ 103.189453][ T4319] usb 2-1: config 9 has an invalid interface number: 40 but max is 0 [ 103.236353][ T4319] usb 2-1: config 9 has no interface number 0 [ 103.250090][ T4319] usb 2-1: config 9 interface 40 altsetting 33 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 103.280001][ T4319] usb 2-1: config 9 interface 40 altsetting 33 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 103.291641][ T4319] usb 2-1: config 9 interface 40 has no altsetting 0 [ 103.310107][ T4319] usb 2-1: New USB device found, idVendor=1199, idProduct=6890, bcdDevice=10.21 [ 103.320228][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.329134][ T4319] usb 2-1: Product: syz [ 103.333515][ T4319] usb 2-1: Manufacturer: syz [ 103.338577][ T4319] usb 2-1: SerialNumber: syz [ 103.357955][ T4487] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 104.223869][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.333539][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.030826][ T4314] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.079364][ T4475] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.089711][ T4475] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.099002][ T4475] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.109034][ T4475] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.235581][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 105.261855][ T4319] sierra 2-1:9.40: Sierra USB modem converter detected [ 105.267764][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 105.296948][ T4319] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 105.297605][ T4314] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 105.329613][ T4319] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 105.333037][ T4314] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 105.353979][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 105.363981][ T4314] usb 5-1: Product: syz [ 105.364215][ T4319] usb 2-1: Sierra USB modem converter now attached to ttyUSB2 [ 105.380740][ T4314] usb 5-1: Manufacturer: syz [ 105.389533][ T4314] usb 5-1: SerialNumber: syz [ 105.405903][ T4319] usb 2-1: USB disconnect, device number 2 [ 105.420847][ T4314] usb 5-1: config 0 descriptor?? [ 105.428947][ T4515] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 105.455916][ T4319] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 105.516127][ T4319] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 105.552918][ T4319] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 105.584136][ T4319] sierra 2-1:9.40: device disconnected [ 105.693032][ T4273] usb 5-1: USB disconnect, device number 2 [ 106.926713][ T4317] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.985726][ T4374] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 107.125636][ T4317] usb 4-1: Using ep0 maxpacket: 32 [ 107.133547][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 107.159506][ T4317] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 107.172548][ T4585] tap0: tun_chr_ioctl cmd 1074025692 [ 107.198376][ T4374] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.212880][ T4374] usb 3-1: not running at top speed; connect to a high speed hub [ 107.224505][ T4317] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 107.234948][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 107.244050][ T4374] usb 3-1: config 9 has an invalid interface number: 40 but max is 0 [ 107.253758][ T4317] usb 4-1: Product: syz [ 107.265718][ T4374] usb 3-1: config 9 has no interface number 0 [ 107.271901][ T4374] usb 3-1: config 9 interface 40 altsetting 33 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 107.283999][ T4317] usb 4-1: Manufacturer: syz [ 107.307896][ T4317] usb 4-1: SerialNumber: syz [ 107.313624][ T4374] usb 3-1: config 9 interface 40 altsetting 33 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 107.328240][ T4317] usb 4-1: config 0 descriptor?? [ 107.336376][ T4563] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.375616][ T4374] usb 3-1: config 9 interface 40 has no altsetting 0 [ 107.396779][ T4374] usb 3-1: New USB device found, idVendor=1199, idProduct=6890, bcdDevice=10.21 [ 107.416030][ T4374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.424192][ T4374] usb 3-1: Product: syz [ 107.435050][ T4374] usb 3-1: Manufacturer: syz [ 107.441025][ T4374] usb 3-1: SerialNumber: syz [ 107.457013][ T4567] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 107.579652][ T4323] usb 4-1: USB disconnect, device number 3 [ 107.751010][ T4374] sierra 3-1:9.40: Sierra USB modem converter detected [ 107.781168][ T4374] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 107.823302][ T4374] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 107.867691][ T4374] usb 3-1: Sierra USB modem converter now attached to ttyUSB2 [ 107.907341][ T4374] usb 3-1: USB disconnect, device number 3 [ 107.974197][ T4374] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 108.023290][ T4374] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 108.036285][ T4374] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 108.047291][ T4374] sierra 3-1:9.40: device disconnected [ 109.985593][ T4323] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.025664][ T4315] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.053966][ T4654] Zero length message leads to an empty skb [ 110.176920][ T4323] usb 4-1: Using ep0 maxpacket: 32 [ 110.192077][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 110.224429][ T4323] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 110.236630][ T4315] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 110.251092][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.261798][ T4323] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 110.281593][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 110.291972][ T4315] usb 2-1: config 0 descriptor?? [ 110.316317][ T4323] usb 4-1: Product: syz [ 110.320605][ T4323] usb 4-1: Manufacturer: syz [ 110.325322][ T4323] usb 4-1: SerialNumber: syz [ 110.373323][ T4323] usb 4-1: config 0 descriptor?? [ 110.382852][ T4642] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.399210][ T4663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.117'. [ 110.554847][ T4315] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 110.575943][ T4315] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 110.596428][ T4315] [drm:udl_init] *ERROR* Selecting channel failed [ 110.612524][ T4315] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 110.624163][ T4315] [drm] Initialized udl on minor 2 [ 110.646476][ T4314] usb 4-1: USB disconnect, device number 4 [ 110.653738][ T4315] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 110.683776][ T4315] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 110.709611][ T4315] usb 2-1: USB disconnect, device number 3 [ 110.719051][ T4273] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 110.730013][ T4273] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 110.739507][ T4273] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 112.235004][ T4695] syz.3.133 uses obsolete (PF_INET,SOCK_PACKET) [ 112.796408][ T4315] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.913251][ T4712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.141'. [ 113.006993][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 113.018051][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 113.037768][ T4315] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 113.073421][ T4315] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 113.090237][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 113.110424][ T4315] usb 5-1: Product: syz [ 113.138061][ T4315] usb 5-1: Manufacturer: syz [ 113.208207][ T4315] usb 5-1: SerialNumber: syz [ 113.262344][ T4315] usb 5-1: config 0 descriptor?? [ 113.277586][ T4701] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 113.504178][ T4315] usb 5-1: USB disconnect, device number 3 [ 113.882989][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 114.280783][ T4743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.288573][ T4743] IPv6: NLM_F_CREATE should be set when creating new route [ 115.021303][ T4765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 115.190713][ T4771] tc action pedit 'at' offset 6 out of bounds [ 115.509073][ T4779] device syzkaller0 entered promiscuous mode [ 115.518106][ T4782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.164'. [ 115.531895][ T4783] netlink: 76 bytes leftover after parsing attributes in process `syz.2.165'. [ 115.635621][ T4323] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.826362][ T4323] usb 2-1: Using ep0 maxpacket: 32 [ 115.839038][ T4323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 115.892351][ T4323] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 115.973580][ T4323] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 116.013474][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 116.022517][ T4323] usb 2-1: Product: syz [ 116.027303][ T4323] usb 2-1: Manufacturer: syz [ 116.032321][ T4323] usb 2-1: SerialNumber: syz [ 116.071270][ T4323] usb 2-1: config 0 descriptor?? [ 116.098020][ T4777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.326469][ T4315] usb 2-1: USB disconnect, device number 4 [ 116.724764][ T4790] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.732673][ T4790] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.249904][ T4805] "syz.1.173" (4805) uses obsolete ecb(arc4) skcipher [ 117.339385][ T4807] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 117.473547][ T4790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.529999][ T4790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.862014][ T4790] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.871370][ T4790] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.880381][ T4790] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.889873][ T4790] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.095770][ T4790] syz.2.169 (4790) used greatest stack depth: 20336 bytes left [ 118.276521][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.284134][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.621213][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 118.910667][ T4840] device syzkaller0 entered promiscuous mode [ 119.883433][ T4323] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 0/1 [ 119.968060][ T4323] hid-generic: probe of 0005:16BF:5505.0001 failed with error -22 [ 119.992290][ T4881] device syzkaller0 entered promiscuous mode [ 120.374860][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 120.532376][ T4900] netlink: 'syz.0.210': attribute type 8 has an invalid length. [ 120.931943][ T4910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 121.402913][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.409593][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.415862][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.422320][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.428750][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.435018][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.442429][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.449252][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.455381][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.461981][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.468156][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.474577][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.480880][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.487018][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.493876][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.500268][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.506391][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.512473][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.519040][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.525207][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.531773][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.538490][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.545353][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.552112][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.558248][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.564481][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.570622][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.576833][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.582920][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.590691][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.596904][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.603024][ T4934] tc action pedit 'at' offset 9 out of bounds [ 121.609359][ T4934] TC_ACT_REPEAT abuse ? [ 121.929765][ T4943] device syzkaller0 entered promiscuous mode [ 121.967983][ T4943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.226'. [ 121.981968][ T4943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.226'. [ 122.064379][ T4947] tc action pedit offset must be on 32 bit boundaries [ 122.614941][ T4973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.236'. [ 123.535498][ C0] hrtimer: interrupt took 63533 ns [ 124.064215][ T5003] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 124.472881][ T4996] loop3: detected capacity change from 0 to 32768 [ 124.643386][ T26] audit: type=1800 audit(1778779576.412:2): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.246" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 127.265624][ T5030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.255'. [ 127.495080][ T5037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'. [ 127.832345][ T5043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 128.583663][ T5079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.275'. [ 128.845130][ T5083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.287'. [ 128.866135][ T4288] Bluetooth: hci4: link tx timeout [ 128.872093][ T4288] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.169883][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 129.205145][ T5095] xt_hashlimit: size too large, truncated to 1048576 [ 129.265295][ T5101] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.816618][ T5114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.291'. [ 130.955831][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 131.376597][ T5156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.302'. [ 131.395691][ T5154] loop3: detected capacity change from 0 to 32768 [ 131.410567][ T5154] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.301 (5154) [ 131.445522][ T5154] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 131.457358][ T5154] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 131.466415][ T5154] BTRFS info (device loop3): using free space tree [ 131.743756][ T5154] BTRFS info (device loop3): enabling ssd optimizations [ 132.148171][ T4284] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.032281][ T5191] loop1: detected capacity change from 0 to 32768 [ 133.098208][ T26] audit: type=1800 audit(1778779584.872:3): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.309" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 133.271996][ T5219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.317'. [ 133.361257][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.457843][ T5221] netlink: 'syz.1.318': attribute type 29 has an invalid length. [ 133.535638][ T5221] netlink: 'syz.1.318': attribute type 29 has an invalid length. [ 133.680128][ T5221] netlink: 'syz.1.318': attribute type 29 has an invalid length. [ 133.835725][ T5227] loop0: detected capacity change from 0 to 32768 [ 133.846928][ T5227] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.321 (5227) [ 133.864475][ T5227] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.874935][ T5227] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 133.884074][ T5227] BTRFS info (device loop0): using free space tree [ 134.174822][ T5227] BTRFS info (device loop0): enabling ssd optimizations [ 134.344799][ T4271] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.678237][ T5266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.331'. [ 135.374078][ T5263] loop1: detected capacity change from 0 to 32768 [ 135.439094][ T26] audit: type=1800 audit(1778779587.212:4): pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.329" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 135.461518][ T5290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.337'. [ 135.556950][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 135.631957][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 135.734478][ T5296] netlink: 'syz.1.340': attribute type 4 has an invalid length. [ 135.879801][ T5299] netlink: 'syz.1.340': attribute type 4 has an invalid length. [ 135.964539][ T5305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.344'. [ 136.330762][ T5317] device syzkaller0 entered promiscuous mode [ 136.706135][ T5333] device syzkaller0 entered promiscuous mode [ 136.889531][ T5341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.359'. [ 136.992392][ T5338] loop1: detected capacity change from 0 to 32768 [ 137.001281][ T5338] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.358 (5338) [ 137.019935][ T5338] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.031026][ T5338] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 137.040634][ T5338] BTRFS info (device loop1): using free space tree [ 137.114809][ T5338] BTRFS info (device loop1): enabling ssd optimizations [ 137.291865][ T4274] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.944713][ T4355] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (4355) [ 138.174121][ T5392] device syzkaller0 entered promiscuous mode [ 138.886324][ T5404] loop4: detected capacity change from 0 to 32768 [ 138.905363][ T5404] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 139.016138][ T4525] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.427431][ T5442] loop0: detected capacity change from 0 to 32768 [ 140.440803][ T5442] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 140.808730][ T5451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.393'. [ 140.858269][ T5458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.392'. [ 141.934061][ T5475] netlink: 'syz.3.399': attribute type 1 has an invalid length. [ 141.970967][ T5475] device bond1 entered promiscuous mode [ 141.986008][ T5475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.101721][ T5478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.125926][ T5478] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 142.136888][ T129] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 142.177866][ T5478] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 142.221817][ T5478] bond1: (slave ip6gre1): making interface the new active one [ 142.262769][ T5478] device ip6gre1 entered promiscuous mode [ 142.277074][ T5478] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 142.334923][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 142.360362][ T129] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 142.399726][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.456646][ T129] usb 1-1: config 0 descriptor?? [ 142.690858][ T129] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 142.711649][ T129] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 142.741853][ T129] [drm:udl_init] *ERROR* Selecting channel failed [ 142.757811][ T129] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 142.778294][ T129] [drm] Initialized udl on minor 2 [ 142.790397][ T129] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 142.803554][ T5485] device syzkaller0 entered promiscuous mode [ 142.812246][ T129] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 142.830878][ T129] usb 1-1: USB disconnect, device number 3 [ 142.837604][ T22] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 142.852248][ T22] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 142.860581][ T22] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 142.871622][ T5427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.287432][ T5489] loop1: detected capacity change from 0 to 32768 [ 143.329690][ T5489] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 143.340363][ T5489] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 143.349450][ T5489] BTRFS info (device loop1): using free space tree [ 143.638716][ T5489] BTRFS info (device loop1): enabling ssd optimizations [ 143.802738][ T4274] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.345633][ T5382] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 147.584337][ T5382] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 147.593661][ T5382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.611309][ T5382] usb 2-1: config 0 descriptor?? [ 147.829874][ T5382] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 147.848752][ T5382] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 147.864105][ T5382] [drm:udl_init] *ERROR* Selecting channel failed [ 147.902530][ T5382] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 147.911150][ T5382] [drm] Initialized udl on minor 2 [ 147.955760][ T5382] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 147.976087][ T5382] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 148.016778][ T5382] usb 2-1: USB disconnect, device number 5 [ 148.059100][ T5379] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 148.086720][ T5379] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 148.095292][ T5379] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 149.598539][ T5524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.411'. [ 149.608382][ T5532] netlink: 'syz.0.413': attribute type 8 has an invalid length. [ 153.502956][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.535516][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.555571][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.575507][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.597394][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.611320][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.622888][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.635687][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.783578][ T5581] device syzkaller0 entered promiscuous mode [ 159.148214][ T5612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.434'. [ 159.398174][ T5651] netlink: 'syz.0.438': attribute type 8 has an invalid length. [ 159.527066][ T5657] Cannot find set identified by id 0 to match [ 159.851883][ T5672] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 159.935696][ T5671] device syzkaller0 entered promiscuous mode [ 160.121337][ T5686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 160.254699][ T5691] netlink: 'syz.3.452': attribute type 17 has an invalid length. [ 160.272203][ T5690] netlink: 'syz.2.453': attribute type 8 has an invalid length. [ 160.290667][ T5691] netlink: 224 bytes leftover after parsing attributes in process `syz.3.452'. [ 160.418957][ T5693] device h entered promiscuous mode [ 160.468183][ T5696] tipc: Started in network mode [ 160.485797][ T5696] tipc: Node identity 724ad6be0d23, cluster identity 4711 [ 160.509917][ T5696] tipc: Enabled bearer , priority 0 [ 160.617461][ T5703] device syzkaller0 entered promiscuous mode [ 160.676291][ T5703] tipc: Resetting bearer [ 160.749301][ T5695] tipc: Resetting bearer [ 160.932680][ T5715] ipt_CLUSTERIP: Please specify destination IP [ 161.295326][ T5698] loop0: detected capacity change from 0 to 32768 [ 163.364172][ T5695] tipc: Disabling bearer [ 163.385789][ T5379] tipc: Node number set to 2137642686 [ 163.400134][ T5755] netlink: 'syz.1.464': attribute type 8 has an invalid length. [ 163.540554][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 163.750329][ T5769] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 164.905603][ T5204] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.974174][ T5795] netlink: 'syz.3.476': attribute type 8 has an invalid length. [ 165.117179][ T5204] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 165.139644][ T5204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.168745][ T5204] usb 2-1: config 0 descriptor?? [ 165.395580][ T5204] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 165.414518][ T5204] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 165.432866][ T5204] [drm:udl_init] *ERROR* Selecting channel failed [ 165.479846][ T5204] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 165.496098][ T5204] [drm] Initialized udl on minor 2 [ 165.507542][ T5204] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 165.528172][ T5204] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 165.540745][ T5808] netlink: 51 bytes leftover after parsing attributes in process `syz.3.481'. [ 165.558588][ T5204] usb 2-1: USB disconnect, device number 6 [ 165.580678][ T129] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 165.601573][ T129] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 165.619005][ T129] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 165.716144][ T5794] loop4: detected capacity change from 0 to 32768 [ 166.020736][ T5818] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 166.059324][ T5824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 166.794785][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 167.603924][ T5863] netlink: 'syz.2.503': attribute type 8 has an invalid length. [ 167.788773][ T5847] loop4: detected capacity change from 0 to 32768 [ 168.235800][ T5877] netlink: 196 bytes leftover after parsing attributes in process `syz.1.494'. [ 168.305785][ T5877] netlink: 196 bytes leftover after parsing attributes in process `syz.1.494'. [ 168.373932][ T5877] netlink: 19 bytes leftover after parsing attributes in process `syz.1.494'. [ 168.865323][ T5903] netlink: 'syz.0.514': attribute type 29 has an invalid length. [ 168.940641][ T5903] netlink: 'syz.0.514': attribute type 29 has an invalid length. [ 169.031911][ T5910] netlink: 'syz.2.516': attribute type 8 has an invalid length. [ 169.051202][ T5908] netlink: 'syz.0.514': attribute type 29 has an invalid length. [ 169.076385][ T5903] netlink: 'syz.0.514': attribute type 29 has an invalid length. [ 169.978233][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.527'. [ 170.132094][ T5950] netlink: 'syz.2.528': attribute type 8 has an invalid length. [ 170.481516][ T5957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.533'. [ 170.541035][ T5957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.533'. [ 170.567909][ T5958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.533'. [ 171.106845][ T5976] netlink: 'syz.3.538': attribute type 29 has an invalid length. [ 171.176074][ T5976] netlink: 'syz.3.538': attribute type 29 has an invalid length. [ 171.211381][ T5978] netlink: 'syz.3.538': attribute type 29 has an invalid length. [ 171.846945][ T5989] ¨à'©ÿˆ: renamed from hsr0 [ 172.165315][ T5998] netlink: 'syz.4.545': attribute type 8 has an invalid length. [ 173.039137][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.558'. [ 173.510583][ T6042] device bond1 left promiscuous mode [ 173.522736][ T6042] device ip6gre1 left promiscuous mode [ 173.560074][ T6042] device h left promiscuous mode [ 173.687210][ T6047] device syzkaller0 entered promiscuous mode [ 175.071804][ T6075] loop3: detected capacity change from 0 to 32768 [ 176.855845][ T6060] netlink: 'syz.1.562': attribute type 8 has an invalid length. [ 176.873950][ T6096] netlink: 43 bytes leftover after parsing attributes in process `syz.3.565'. [ 177.034433][ T6103] ======================================================= [ 177.034433][ T6103] WARNING: The mand mount option has been deprecated and [ 177.034433][ T6103] and is ignored by this kernel. Remove the mand [ 177.034433][ T6103] option from the mount to silence this warning. [ 177.034433][ T6103] ======================================================= [ 177.106393][ T9] tipc: Subscription rejected, illegal request [ 177.129359][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 177.685859][ T6127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.574'. [ 177.744042][ T6133] netlink: 60 bytes leftover after parsing attributes in process `syz.2.575'. [ 177.827520][ T6133] unsupported nlmsg_type 40 [ 178.129662][ T6140] device syzkaller0 entered promiscuous mode [ 178.164517][ T6146] netlink: 43 bytes leftover after parsing attributes in process `syz.3.578'. [ 179.436954][ T6157] loop4: detected capacity change from 0 to 32768 [ 181.041142][ T6154] netlink: 'syz.3.580': attribute type 10 has an invalid length. [ 181.056344][ T6154] team0: Port device netdevsim0 added [ 181.791295][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 184.468378][ T6257] netlink: 51 bytes leftover after parsing attributes in process `syz.3.607'. [ 184.522067][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.606'. [ 184.853111][ T4402] tipc: Subscription rejected, illegal request [ 184.888814][ T6277] netlink: 'syz.3.614': attribute type 8 has an invalid length. [ 185.103093][ T6281] netlink: 'syz.0.617': attribute type 29 has an invalid length. [ 185.138674][ T6281] netlink: 'syz.0.617': attribute type 29 has an invalid length. [ 185.158514][ T6286] netlink: 'syz.0.617': attribute type 29 has an invalid length. [ 185.393826][ T6292] netlink: 'syz.0.621': attribute type 29 has an invalid length. [ 185.426200][ T6292] netlink: 'syz.0.621': attribute type 29 has an invalid length. [ 185.506168][ T6294] netlink: 'syz.0.621': attribute type 29 has an invalid length. [ 185.522588][ T6295] netlink: 51 bytes leftover after parsing attributes in process `syz.4.622'. [ 185.533645][ T6298] netlink: 'syz.2.623': attribute type 10 has an invalid length. [ 185.603595][ T6298] team0: Port device netdevsim0 added [ 185.618114][ T6296] netlink: 'syz.0.621': attribute type 29 has an invalid length. [ 185.641017][ T6275] loop1: detected capacity change from 0 to 32768 [ 185.735602][ T26] audit: type=1800 audit(1778779637.502:5): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.613" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 185.888884][ T6308] netlink: 'syz.2.627': attribute type 8 has an invalid length. [ 185.968276][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 186.634415][ T6331] netlink: 51 bytes leftover after parsing attributes in process `syz.3.636'. [ 187.333576][ T6352] ¨à'©ÿˆ: renamed from hsr0 [ 187.374510][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 187.780052][ T6366] netlink: 51 bytes leftover after parsing attributes in process `syz.2.648'. [ 187.883430][ T6346] loop0: detected capacity change from 0 to 32768 [ 187.971903][ T26] audit: type=1800 audit(1778779639.742:6): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.641" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 188.831071][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 189.298451][ T6411] loop4: detected capacity change from 0 to 32768 [ 189.343973][ T26] audit: type=1800 audit(1778779641.112:7): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.662" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 190.457499][ T6438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.501189][ T6438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.807141][ T6438] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.816364][ T6438] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.825925][ T6438] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.835624][ T6438] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.063104][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 191.386046][ T6465] validate_nla: 4 callbacks suppressed [ 191.386070][ T6465] netlink: 'syz.0.679': attribute type 8 has an invalid length. [ 191.518252][ T6390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.764988][ T6475] netlink: 'syz.3.684': attribute type 10 has an invalid length. [ 191.816089][ T6460] loop4: detected capacity change from 0 to 32768 [ 191.888615][ T26] audit: type=1800 audit(1778779643.662:8): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.677" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 192.085833][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 194.340725][ T6496] netlink: 'syz.1.691': attribute type 8 has an invalid length. [ 194.358745][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 194.619803][ T6519] netlink: 'syz.3.698': attribute type 10 has an invalid length. [ 194.726841][ T6530] netlink: 36 bytes leftover after parsing attributes in process `syz.4.701'. [ 194.797841][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.871408][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 194.909488][ T6540] netlink: 'syz.4.704': attribute type 8 has an invalid length. [ 195.132387][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 195.431612][ T6562] netlink: 'syz.3.712': attribute type 10 has an invalid length. [ 195.641399][ T6576] netlink: 'syz.0.717': attribute type 8 has an invalid length. [ 196.271897][ T6610] netlink: 'syz.3.730': attribute type 8 has an invalid length. [ 196.897284][ T6639] netlink: 'syz.2.741': attribute type 8 has an invalid length. [ 197.119377][ T6652] netlink: 36 bytes leftover after parsing attributes in process `syz.4.746'. [ 197.222676][ T6656] netlink: 'syz.2.749': attribute type 10 has an invalid length. [ 197.447168][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'. [ 197.487218][ T6512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.049402][ T6690] netlink: 'syz.1.760': attribute type 10 has an invalid length. [ 198.115317][ T6690] team0: Port device netdevsim0 added [ 198.451741][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.765'. [ 198.697295][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 199.080767][ T6723] netlink: 'syz.1.772': attribute type 8 has an invalid length. [ 200.025112][ T6761] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 200.173594][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888023a6d800: rx timeout, send abort [ 200.673670][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805628e000: rx timeout, send abort [ 200.685911][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888023a6d800: abort rx timeout. Force session deactivation [ 200.831092][ T6796] netlink: 'syz.1.803': attribute type 10 has an invalid length. [ 201.182426][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805628e000: abort rx timeout. Force session deactivation [ 201.219554][ T6810] netlink: 'syz.1.808': attribute type 16 has an invalid length. [ 201.232495][ T6810] netlink: 'syz.1.808': attribute type 3 has an invalid length. [ 201.243745][ T6810] netlink: 'syz.1.808': attribute type 1 has an invalid length. [ 201.259345][ T6810] netlink: 112 bytes leftover after parsing attributes in process `syz.1.808'. [ 201.995631][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 202.003578][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 202.014675][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 202.021299][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 204.003624][ T6841] device syzkaller0 entered promiscuous mode [ 204.294576][ T6857] xt_connbytes: Forcing CT accounting to be enabled [ 204.793859][ T6877] netlink: 88 bytes leftover after parsing attributes in process `syz.4.828'. [ 204.821377][ T6877] netlink: 48 bytes leftover after parsing attributes in process `syz.4.828'. [ 207.630274][ T6934] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 208.282873][ T6953] device syzkaller0 entered promiscuous mode [ 208.283549][ T6958] netlink: 'syz.1.848': attribute type 29 has an invalid length. [ 210.549561][ T6958] netlink: 'syz.1.848': attribute type 29 has an invalid length. [ 210.789671][ T6981] netlink: 'syz.1.853': attribute type 10 has an invalid length. [ 212.515661][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 212.717471][ T22] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 212.734634][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.761274][ T22] usb 4-1: config 0 descriptor?? [ 213.243252][ T22] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 213.252780][ T22] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 213.262223][ T22] [drm:udl_init] *ERROR* Selecting channel failed [ 213.283873][ T22] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 213.291915][ T22] [drm] Initialized udl on minor 2 [ 213.303561][ T22] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 213.311695][ T22] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 213.321889][ T22] usb 4-1: USB disconnect, device number 5 [ 213.340788][ T5204] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 213.357548][ T5204] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 213.368293][ T5204] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 213.694584][ T7018] netlink: 'syz.4.867': attribute type 10 has an invalid length. [ 213.709231][ T7018] team0: Port device netdevsim0 added [ 214.587598][ T7076] netlink: 'syz.0.882': attribute type 8 has an invalid length. [ 214.687119][ T7080] netlink: 'syz.0.884': attribute type 10 has an invalid length. [ 214.716459][ T7080] team0: Port device netdevsim0 added [ 215.044938][ T7092] netlink: 'syz.2.890': attribute type 29 has an invalid length. [ 216.865282][ T7092] netlink: 'syz.2.890': attribute type 29 has an invalid length. [ 216.915207][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 217.260734][ T7119] netlink: 'syz.1.894': attribute type 8 has an invalid length. [ 217.855616][ T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 218.093997][ T22] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 218.103438][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.121964][ T22] usb 4-1: config 0 descriptor?? [ 218.193892][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057a67000: rx timeout, send abort [ 218.524910][ T22] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 218.542429][ T22] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 218.552734][ T22] [drm:udl_init] *ERROR* Selecting channel failed [ 218.567911][ T22] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 218.576380][ T22] [drm] Initialized udl on minor 2 [ 218.582067][ T22] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 218.590633][ T22] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 218.608751][ T22] usb 4-1: USB disconnect, device number 6 [ 218.620300][ T5204] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 218.629696][ T5204] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 218.638340][ T5204] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 218.694132][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888077cdd000: rx timeout, send abort [ 218.704723][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057a67000: abort rx timeout. Force session deactivation [ 219.207990][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888077cdd000: abort rx timeout. Force session deactivation [ 220.047196][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 220.299803][ T7159] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 220.562771][ T7174] netlink: 'syz.1.911': attribute type 8 has an invalid length. [ 221.150560][ T7182] loop1: detected capacity change from 0 to 32768 [ 221.204356][ T26] audit: type=1800 audit(1778779672.982:9): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.915" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 223.350487][ T7162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.865801][ T5383] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 224.077203][ T5383] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 224.086686][ T5383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.103342][ T5383] usb 4-1: config 0 descriptor?? [ 224.256640][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 224.307295][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.921'. [ 224.367694][ T7224] netlink: 'syz.0.924': attribute type 29 has an invalid length. [ 224.390964][ T7224] netlink: 'syz.0.924': attribute type 29 has an invalid length. [ 224.423448][ T7226] netlink: 'syz.0.924': attribute type 29 has an invalid length. [ 224.435191][ T7224] netlink: 'syz.0.924': attribute type 29 has an invalid length. [ 224.472763][ T7227] netlink: 'syz.4.925': attribute type 8 has an invalid length. [ 224.578739][ T5383] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 224.600213][ T5383] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 224.634172][ T5383] [drm:udl_init] *ERROR* Selecting channel failed [ 224.711191][ T5383] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 224.730359][ T5383] [drm] Initialized udl on minor 2 [ 224.770453][ T5383] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 224.802370][ T5383] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 224.832700][ T5382] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 224.848767][ T5383] usb 4-1: USB disconnect, device number 7 [ 224.856367][ T5382] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 224.873873][ T5382] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 225.079962][ T7235] loop1: detected capacity change from 0 to 32768 [ 225.125236][ T26] audit: type=1800 audit(1778779676.892:10): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.927" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 226.070067][ T7271] Illegal XDP return value 4294967262 on prog (id 73) dev N/A, expect packet loss! [ 226.628501][ T7275] loop4: detected capacity change from 0 to 32768 [ 226.695344][ T26] audit: type=1800 audit(1778779678.462:11): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.943" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 227.855333][ T7241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.174284][ T7265] netlink: 'syz.0.938': attribute type 8 has an invalid length. [ 230.558246][ T7334] netlink: 'syz.0.958': attribute type 8 has an invalid length. [ 233.250774][ T7350] netlink: 156 bytes leftover after parsing attributes in process `syz.1.965'. [ 233.262474][ T7365] netlink: 'syz.3.969': attribute type 8 has an invalid length. [ 234.207505][ T7420] netlink: 64691 bytes leftover after parsing attributes in process `syz.3.983'. [ 234.337930][ T7423] netlink: 'syz.3.984': attribute type 3 has an invalid length. [ 234.345910][ T7423] netlink: 128 bytes leftover after parsing attributes in process `syz.3.984'. [ 236.731709][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'. [ 237.234782][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.996'. [ 237.266434][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 240.261624][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 240.522488][ T7515] device syzkaller0 entered promiscuous mode [ 242.984137][ T7541] netlink: 'syz.1.1021': attribute type 8 has an invalid length. [ 243.232031][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 243.694585][ T7591] device syzkaller0 entered promiscuous mode [ 243.717652][ T7592] netlink: 'syz.2.1034': attribute type 8 has an invalid length. [ 243.824164][ T7598] netlink: 'syz.0.1036': attribute type 10 has an invalid length. [ 244.312329][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'. [ 244.770437][ T7642] netlink: 'syz.3.1048': attribute type 8 has an invalid length. [ 245.002272][ T7648] netlink: 'syz.2.1049': attribute type 10 has an invalid length. [ 245.219720][ T7654] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 245.337476][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 245.841418][ T7691] netlink: 'syz.0.1062': attribute type 8 has an invalid length. [ 245.965722][ T5204] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 246.972971][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 247.005493][ T5204] usb 4-1: Using ep0 maxpacket: 8 [ 247.023371][ T5204] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.039465][ T5204] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 247.056030][ T5204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 247.068970][ T5204] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.105229][ T5204] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 247.123423][ T5204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.142097][ T5204] usb 4-1: Product: syz [ 247.156326][ T5204] usb 4-1: Manufacturer: syz [ 247.164330][ T22] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 247.183290][ T5204] usb 4-1: SerialNumber: syz [ 247.190968][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.204574][ T5204] usb 4-1: config 0 descriptor?? [ 247.216210][ T7685] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 247.227215][ T5204] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 247.237744][ T22] usb 2-1: config 0 descriptor?? [ 247.460507][ T22] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 247.496873][ T22] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 247.509076][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 247.519164][ T22] [drm:udl_init] *ERROR* Selecting channel failed [ 247.540525][ T22] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 247.568824][ T22] [drm] Initialized udl on minor 2 [ 247.580726][ T22] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 247.605988][ T22] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 247.631195][ T22] usb 2-1: USB disconnect, device number 7 [ 247.648054][ T5204] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 247.658809][ T7726] netlink: 'syz.0.1075': attribute type 8 has an invalid length. [ 247.668763][ T5204] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 247.685617][ T5204] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 248.563289][ T7759] loop1: detected capacity change from 0 to 764 [ 248.628192][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'. [ 248.672437][ T7761] loop4: detected capacity change from 0 to 64 [ 248.774405][ T7761] hfs: get root inode failed [ 248.837346][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 248.898114][ T7770] netlink: 'syz.1.1087': attribute type 8 has an invalid length. [ 249.676001][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 249.884311][ T129] usb 4-1: USB disconnect, device number 8 [ 250.062150][ T22] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 250.086010][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.102229][ T22] usb 5-1: config 0 descriptor?? [ 250.855596][ T22] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 250.864231][ T22] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 250.893222][ T22] [drm:udl_init] *ERROR* Selecting channel failed [ 250.923969][ T22] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 250.934251][ T22] [drm] Initialized udl on minor 2 [ 250.952209][ T22] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 250.975710][ T22] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 251.005968][ T22] usb 5-1: USB disconnect, device number 4 [ 251.012615][ T129] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 251.027401][ T129] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 251.055834][ T129] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 251.558826][ T129] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 251.584113][ T7825] netlink: 'syz.1.1101': attribute type 8 has an invalid length. [ 251.737328][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 251.745576][ T129] usb 4-1: Using ep0 maxpacket: 32 [ 251.753401][ T129] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 251.764792][ T129] usb 4-1: config 0 has no interface number 0 [ 251.794283][ T7832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1103'. [ 251.804480][ T129] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 251.828715][ T129] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 251.844578][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.865700][ T129] usb 4-1: Product: syz [ 251.874856][ T129] usb 4-1: Manufacturer: syz [ 251.884761][ T129] usb 4-1: SerialNumber: syz [ 251.914410][ T129] usb 4-1: config 0 descriptor?? [ 251.945917][ T7812] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.111073][ T7840] device hsr0 entered promiscuous mode [ 252.145041][ T7840] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1107'. [ 252.165755][ T129] asix: probe of 4-1:0.188 failed with error -71 [ 252.212469][ T129] usb 4-1: USB disconnect, device number 9 [ 253.003384][ T7851] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1109'. [ 253.016252][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1109'. [ 254.040277][ T7861] netlink: 'syz.1.1113': attribute type 8 has an invalid length. [ 254.093632][ T7865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1115'. [ 254.178204][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'. [ 254.805639][ T129] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 255.017104][ T129] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 255.035583][ T129] usb 2-1: config 0 has no interface number 0 [ 255.062106][ T129] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 255.129702][ T129] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.186302][ T129] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 255.202017][ T7911] device hsr0 entered promiscuous mode [ 255.208460][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.221648][ T129] usb 2-1: Product: syz [ 255.226250][ T129] usb 2-1: Manufacturer: syz [ 255.233242][ T7911] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1124'. [ 255.242739][ T129] usb 2-1: SerialNumber: syz [ 255.248731][ T7911] device hsr_slave_0 left promiscuous mode [ 255.257600][ T129] usb 2-1: config 0 descriptor?? [ 255.265179][ T7887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.276144][ T129] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 255.286972][ T7911] device hsr_slave_1 left promiscuous mode [ 255.300611][ T129] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 255.328284][ T7911] device hsr0 left promiscuous mode [ 255.345566][ T5379] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 255.483058][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 255.540491][ T7915] loop4: detected capacity change from 0 to 4096 [ 255.557744][ T5379] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 255.575266][ T5379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.576691][ T7917] netlink: 'syz.0.1127': attribute type 8 has an invalid length. [ 255.587431][ T5379] usb 3-1: config 0 descriptor?? [ 255.688475][ T5383] usb 2-1: USB disconnect, device number 8 [ 255.721304][ T7915] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 255.767772][ T5383] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 255.863882][ T5383] cyberjack 2-1:0.69: device disconnected [ 256.030929][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 256.054176][ T7913] loop3: detected capacity change from 0 to 40427 [ 256.082151][ T5379] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 256.101019][ T7913] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 256.113893][ T5379] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 256.136134][ T5379] [drm:udl_init] *ERROR* Selecting channel failed [ 256.159054][ T5379] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 256.170329][ T5379] [drm] Initialized udl on minor 2 [ 256.212453][ T5379] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 256.237822][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.238848][ T5379] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 256.335763][ T5379] usb 3-1: USB disconnect, device number 4 [ 256.362676][ T5382] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 256.380922][ T5382] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 256.398497][ T5382] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 259.250470][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 259.478508][ T7966] netlink: 'syz.0.1138': attribute type 8 has an invalid length. [ 259.492975][ T7967] loop4: detected capacity change from 0 to 512 [ 259.513521][ T7967] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 259.580047][ T7967] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 259.634193][ T7967] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 259.653319][ T7967] System zones: 1-12 [ 259.712830][ T7967] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 259.736299][ T7967] EXT4-fs (loop4): 1 truncate cleaned up [ 259.751493][ T7967] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 259.910134][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 260.237386][ T5270] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 260.437729][ T5270] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 260.451138][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.484111][ T5270] usb 2-1: config 0 descriptor?? [ 260.976649][ T5270] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 260.994398][ T5270] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 261.004018][ T5270] [drm:udl_init] *ERROR* Selecting channel failed [ 261.020161][ T5270] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 261.028962][ T5270] [drm] Initialized udl on minor 2 [ 261.034982][ T5270] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 261.043626][ T5270] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 261.061293][ T5270] usb 2-1: USB disconnect, device number 9 [ 261.074230][ T5204] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 261.086847][ T5204] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 261.101141][ T5204] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 261.722763][ T8021] usb usb5: usbfs: process 8021 (syz.1.1154) did not claim interface 0 before use [ 262.624517][ T8008] netlink: 'syz.3.1152': attribute type 8 has an invalid length. [ 262.766753][ T8030] loop3: detected capacity change from 0 to 256 [ 262.785289][ T8030] exfat: Deprecated parameter 'utf8' [ 262.791989][ T8030] exfat: Deprecated parameter 'namecase' [ 262.802298][ T8030] exfat: Deprecated parameter 'namecase' [ 262.883433][ T8030] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc3758327, utbl_chksum : 0xe619d30d) [ 263.383827][ T8054] netlink: 'syz.3.1166': attribute type 8 has an invalid length. [ 263.436115][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 263.595599][ T5204] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 263.815762][ T5204] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 263.824978][ T5204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.843818][ T5204] usb 3-1: config 0 descriptor?? [ 264.340778][ T5204] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 264.350129][ T5204] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 264.359320][ T5204] [drm:udl_init] *ERROR* Selecting channel failed [ 264.375614][ T5204] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 264.383567][ T5204] [drm] Initialized udl on minor 2 [ 264.389755][ T5204] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 264.398222][ T5204] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 264.416296][ T5204] usb 3-1: USB disconnect, device number 5 [ 264.432788][ T5270] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 264.442770][ T5270] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 264.453780][ T5270] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 264.846034][ T8024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.982606][ T8097] netlink: 'syz.1.1178': attribute type 8 has an invalid length. [ 267.455492][ T5270] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 268.282385][ T8130] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1189'. [ 268.292174][ T8130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1189'. [ 269.027377][ T5270] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 269.046971][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.085979][ T5270] usb 3-1: config 0 descriptor?? [ 269.213169][ T8139] loop3: detected capacity change from 0 to 512 [ 269.232136][ T8138] loop1: detected capacity change from 0 to 512 [ 269.274428][ T8138] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.322429][ T5270] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 269.329322][ T8139] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 269.345478][ T5270] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 269.404538][ T5270] [drm:udl_init] *ERROR* Selecting channel failed [ 269.473398][ T5270] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 269.501838][ T5270] [drm] Initialized udl on minor 2 [ 269.513231][ T5270] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 269.530478][ T5270] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 269.551979][ T5270] usb 3-1: USB disconnect, device number 6 [ 269.563843][ T129] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 269.573805][ T129] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 269.583740][ T129] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 269.642853][ T26] audit: type=1800 audit(1778779721.412:12): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1193" name="file1" dev="loop1" ino=1048596 res=0 errno=0 [ 269.646236][ T8139] EXT4-fs (loop3): 1 truncate cleaned up [ 269.715685][ T8139] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 269.954492][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'. [ 271.021904][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 272.689444][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1206'. [ 272.787228][ T8182] netlink: 'syz.4.1191': attribute type 8 has an invalid length. [ 272.855649][ T5378] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 273.012888][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 273.045778][ T8189] netlink: 'syz.4.1209': attribute type 10 has an invalid length. [ 273.112896][ T5378] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 273.133441][ T5378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.163734][ T5378] usb 3-1: config 0 descriptor?? [ 273.374776][ T5378] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 273.404123][ T5378] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 273.456021][ T5378] [drm:udl_init] *ERROR* Selecting channel failed [ 273.493838][ T5378] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 273.516570][ T5378] [drm] Initialized udl on minor 2 [ 273.526874][ T5378] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 273.535909][ T5378] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 273.578807][ T5378] usb 3-1: USB disconnect, device number 7 [ 273.622544][ T5383] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 273.666951][ T5383] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 273.674938][ T5383] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 273.751442][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1217'. [ 273.894180][ T8215] loop1: detected capacity change from 0 to 16 [ 273.946636][ T8215] erofs: (device loop1): mounted with root inode @ nid 36. [ 273.956092][ T8217] netlink: 'syz.4.1219': attribute type 8 has an invalid length. [ 274.317489][ T8234] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1225'. [ 274.793994][ T8251] netlink: 'syz.1.1232': attribute type 8 has an invalid length. [ 275.111225][ T5382] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 275.260886][ T8274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1240'. [ 275.297227][ T5382] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 275.316710][ T5382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.332191][ T5382] usb 4-1: config 0 descriptor?? [ 275.443068][ T8282] netlink: 'syz.0.1244': attribute type 8 has an invalid length. [ 275.686505][ T5382] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 275.695175][ T5382] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 275.706223][ T5382] [drm:udl_init] *ERROR* Selecting channel failed [ 275.718184][ T5382] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 275.734379][ T5382] [drm] Initialized udl on minor 2 [ 275.740400][ T5382] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.752251][ T5382] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 275.763975][ T5382] usb 4-1: USB disconnect, device number 10 [ 275.771190][ T5378] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 276.381248][ T5378] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 276.389421][ T5378] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 277.102412][ T8309] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 277.847212][ T8315] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1255'. [ 277.893700][ T8317] netlink: 'syz.3.1256': attribute type 8 has an invalid length. [ 278.176910][ T8266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 278.435522][ T129] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 278.655556][ T129] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 278.684755][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.785908][ T129] usb 4-1: config 0 descriptor?? [ 278.867420][ T8350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1266'. [ 278.995761][ T129] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 279.027974][ T129] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 279.047779][ T129] [drm:udl_init] *ERROR* Selecting channel failed [ 279.107552][ T129] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 279.134196][ T8357] netlink: 'syz.4.1267': attribute type 8 has an invalid length. [ 279.148038][ T129] [drm] Initialized udl on minor 2 [ 279.188817][ T129] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 279.219662][ T129] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 279.266869][ T129] usb 4-1: USB disconnect, device number 11 [ 279.316751][ T5270] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 279.327225][ T5270] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 279.345688][ T5270] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 279.382043][ T8359] device syzkaller0 entered promiscuous mode [ 283.421261][ T5382] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 283.453825][ T8427] loop0: detected capacity change from 0 to 32768 [ 283.489141][ T8427] [ 283.489141][ T8427] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.489141][ T8427] [ 283.522693][ T8427] [ 283.522693][ T8427] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.522693][ T8427] [ 283.534520][ T8427] [ 283.534520][ T8427] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.534520][ T8427] [ 283.545217][ T8427] [ 283.545217][ T8427] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.545217][ T8427] [ 283.570531][ T107] [ 283.570531][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.570531][ T107] [ 283.627325][ T5382] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 283.650116][ T5382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.661398][ T4271] [ 283.661398][ T4271] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.661398][ T4271] [ 283.685962][ T5382] usb 2-1: config 0 descriptor?? [ 283.693085][ T4271] [ 283.693085][ T4271] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.693085][ T4271] [ 283.915902][ T5382] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 283.924495][ T5382] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 283.952935][ T5382] [drm:udl_init] *ERROR* Selecting channel failed [ 283.984253][ T5382] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 284.002259][ T5382] [drm] Initialized udl on minor 2 [ 284.026085][ T5382] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 284.044442][ T5382] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 284.083597][ T5382] usb 2-1: USB disconnect, device number 10 [ 284.099885][ T5379] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 284.110774][ T5379] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 284.128230][ T5379] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 284.347433][ T8435] loop0: detected capacity change from 0 to 32768 [ 284.383037][ T8435] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1289 (8435) [ 284.428849][ T8435] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 284.444794][ T8435] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 284.463899][ T8435] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 284.476697][ T8435] BTRFS info (device loop0): trying to use backup root at mount time [ 284.495658][ T8435] BTRFS info (device loop0): setting nodatasum [ 284.502172][ T8435] BTRFS info (device loop0): enabling ssd optimizations [ 284.530627][ T8435] BTRFS info (device loop0): using spread ssd allocation scheme [ 284.567320][ T8435] BTRFS info (device loop0): turning on flush-on-commit [ 284.574690][ T8435] BTRFS info (device loop0): force zlib compression, level 3 [ 284.593238][ T8435] BTRFS info (device loop0): using free space tree [ 284.982191][ T26] audit: type=1800 audit(1778779736.752:13): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1289" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 286.060770][ T4271] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.630028][ T8402] netlink: 'syz.4.1280': attribute type 8 has an invalid length. [ 287.067626][ T8472] device syzkaller0 entered promiscuous mode [ 287.405646][ T5383] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 287.662048][ T5383] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 287.671901][ T5383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.799009][ T5383] usb 3-1: config 0 descriptor?? [ 288.123808][ T5383] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 288.200498][ T5383] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 288.295802][ T5383] [drm:udl_init] *ERROR* Selecting channel failed [ 288.334033][ T5383] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 288.342074][ T5383] [drm] Initialized udl on minor 2 [ 288.372654][ T5383] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 288.381266][ T5383] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 288.424728][ T5383] usb 3-1: USB disconnect, device number 8 [ 288.433553][ T7] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 288.459718][ T7] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 288.471637][ T7] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 288.583853][ T8502] loop1: detected capacity change from 0 to 32768 [ 288.600940][ T8502] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1304 (8502) [ 288.654876][ T8502] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.681475][ T8502] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 288.692653][ T8502] BTRFS info (device loop1): turning on sync discard [ 288.702508][ T8502] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 288.722601][ T8502] BTRFS info (device loop1): use zstd compression, level 3 [ 288.731342][ T8502] BTRFS info (device loop1): turning on async discard [ 288.743507][ T8502] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 288.754766][ T8502] BTRFS info (device loop1): trying to use backup root at mount time [ 288.772768][ T8502] BTRFS info (device loop1): enabling auto defrag [ 288.779613][ T8502] BTRFS info (device loop1): using free space tree [ 288.964486][ T2947] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 288.989994][ T8502] BTRFS error (device loop1): failed to load root extent [ 289.003098][ T8502] BTRFS warning (device loop1): try to load backup roots slot 1 [ 289.027239][ T2947] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 289.050166][ T8502] BTRFS warning (device loop1): couldn't read tree root [ 289.062125][ T8502] BTRFS warning (device loop1): try to load backup roots slot 2 [ 289.087094][ T8502] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 289.114445][ T8502] BTRFS warning (device loop1): couldn't read tree root [ 289.132528][ T8502] BTRFS warning (device loop1): try to load backup roots slot 3 [ 289.206949][ T8502] BTRFS info (device loop1): enabling ssd optimizations [ 289.217050][ T8502] BTRFS info (device loop1): rebuilding free space tree [ 289.314029][ T8502] BTRFS info (device loop1): checking UUID tree [ 289.965779][ T4274] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 291.827527][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1302'. [ 291.839550][ T8519] netlink: 'syz.2.1306': attribute type 8 has an invalid length. [ 293.613375][ T8570] loop2: detected capacity change from 0 to 16 [ 293.695706][ T8570] erofs: (device loop2): mounted with root inode @ nid 36. [ 293.747253][ T8570] syz.2.1318: attempt to access beyond end of device [ 293.747253][ T8570] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 293.797633][ T8570] syz.2.1318: attempt to access beyond end of device [ 293.797633][ T8570] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 293.827358][ T8570] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 294.190930][ T26] audit: type=1800 audit(1778779745.612:14): pid=8570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1318" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 294.203275][ T8570] syz.2.1318 (8570) used greatest stack depth: 19544 bytes left [ 294.425492][ T5382] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 294.560178][ T8579] device syzkaller0 entered promiscuous mode [ 294.633241][ T5382] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 294.665504][ T5382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.724619][ T5382] usb 1-1: config 0 descriptor?? [ 294.945250][ T5382] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 294.995467][ T5382] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 295.016526][ T5382] [drm:udl_init] *ERROR* Selecting channel failed [ 295.050494][ T5382] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 295.067516][ T5382] [drm] Initialized udl on minor 2 [ 295.092769][ T5382] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 295.124286][ T5382] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 295.143940][ T5382] usb 1-1: USB disconnect, device number 4 [ 295.169930][ T5378] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 295.189436][ T5378] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 295.210412][ T5378] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 298.059225][ T8622] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.066128][ T8622] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 298.106781][ T8622] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 298.114579][ T8622] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.120822][ T8622] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 298.129551][ T8622] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 298.136920][ T8622] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.142932][ T8622] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 298.162030][ T8622] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 298.169776][ T8622] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 298.176515][ T8622] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 298.191537][ T8622] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 298.199217][ T8622] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 300.159643][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 300.159675][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 300.165922][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 300.236960][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 300.243222][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 300.425666][ T8634] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1332'. [ 300.949881][ T8658] loop3: detected capacity change from 0 to 16 [ 300.970196][ T8658] erofs: (device loop3): mounted with root inode @ nid 36. [ 300.995865][ T8658] syz.3.1342: attempt to access beyond end of device [ 300.995865][ T8658] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 301.045321][ T8658] syz.3.1342: attempt to access beyond end of device [ 301.045321][ T8658] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 301.060704][ T8658] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 301.073512][ T26] audit: type=1800 audit(1778779752.842:15): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1342" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 301.195678][ T5198] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 301.513292][ T5198] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 301.612271][ T5198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.758783][ T5198] usb 1-1: config 0 descriptor?? [ 301.773447][ T8655] device syzkaller0 entered promiscuous mode [ 301.995169][ T5198] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 302.018731][ T5198] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 302.065559][ T5198] [drm:udl_init] *ERROR* Selecting channel failed [ 302.109161][ T5198] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 302.119544][ T5198] [drm] Initialized udl on minor 2 [ 302.135630][ T5198] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 302.146194][ T5198] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 302.163255][ T5198] usb 1-1: USB disconnect, device number 5 [ 302.170069][ T129] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 302.181363][ T129] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 302.189554][ T129] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 302.235607][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 302.239721][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 302.242133][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 302.323885][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 304.420577][ T8673] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1344'. [ 305.335520][ T5270] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 305.335634][ T5378] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 305.364618][ T8712] device syzkaller0 entered promiscuous mode [ 305.529823][ T5270] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 305.547969][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.571165][ T5378] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.587099][ T5270] usb 3-1: config 0 descriptor?? [ 305.593472][ T5378] usb 4-1: config 0 has no interfaces? [ 305.621318][ T5378] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 305.638743][ T5378] usb 4-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 305.655534][ T5378] usb 4-1: Product: syz [ 305.659862][ T5378] usb 4-1: Manufacturer: syz [ 305.664530][ T5378] usb 4-1: SerialNumber: syz [ 305.671890][ T5378] usb 4-1: config 0 descriptor?? [ 305.802197][ T5270] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 305.821178][ T5270] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 305.835656][ T5270] [drm:udl_init] *ERROR* Selecting channel failed [ 305.858177][ T5270] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 305.866328][ T5270] [drm] Initialized udl on minor 2 [ 305.873264][ T5270] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 305.896254][ T5270] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 305.926715][ T5270] usb 3-1: USB disconnect, device number 9 [ 305.939210][ T129] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 305.950120][ T129] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 305.958788][ T129] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 307.253304][ T8724] loop3: detected capacity change from 0 to 16 [ 307.271154][ T8724] erofs: (device loop3): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 307.306710][ T5378] usb 4-1: USB disconnect, device number 12 [ 309.645090][ T8730] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1361'. [ 310.771244][ T8778] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1376'. [ 310.799509][ T8778] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1376'. [ 310.869607][ T8756] loop3: detected capacity change from 0 to 32768 [ 311.057609][ T8756] JBD2: no valid journal superblock found [ 311.063663][ T8756] (syz.3.1372,8756,0):ocfs2_journal_wipe:1183 ERROR: status = -22 [ 311.078532][ T8756] (syz.3.1372,8756,0):ocfs2_check_volume:2420 ERROR: status = -22 [ 311.095643][ T8756] (syz.3.1372,8756,1):ocfs2_check_volume:2489 ERROR: status = -22 [ 311.111594][ T8756] (syz.3.1372,8756,1):ocfs2_mount_volume:1821 ERROR: status = -22 [ 311.154574][ T8756] (syz.3.1372,8756,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 311.165237][ T8782] device syzkaller0 entered promiscuous mode [ 313.666882][ T8808] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1388'. [ 313.676376][ T8812] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1388'. [ 315.699485][ T8865] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1402'. [ 315.741389][ T8865] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1402'. [ 316.325744][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 316.517463][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.540963][ T7] usb 1-1: config 0 has no interfaces? [ 316.574713][ T7] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 316.609471][ T7] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 316.640766][ T7] usb 1-1: Product: syz [ 316.645077][ T7] usb 1-1: Manufacturer: syz [ 316.672691][ T7] usb 1-1: SerialNumber: syz [ 316.690846][ T7] usb 1-1: config 0 descriptor?? [ 318.004186][ T8914] loop0: detected capacity change from 0 to 16 [ 318.127854][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.145716][ T8914] erofs: (device loop0): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 318.290851][ T6719] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 318.294506][ T7] usb 1-1: USB disconnect, device number 6 [ 319.122296][ T8942] loop1: detected capacity change from 0 to 2048 [ 319.208227][ T8942] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 319.263400][ T8942] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 319.310743][ T8942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.369584][ T129] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 320.575663][ T129] usb 4-1: Using ep0 maxpacket: 16 [ 320.594102][ T129] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 320.645791][ T129] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 320.658817][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.672359][ T129] usb 4-1: Product: syz [ 320.682718][ T129] usb 4-1: Manufacturer: syz [ 320.688959][ T129] usb 4-1: SerialNumber: syz [ 320.739653][ T129] usb 4-1: config 0 descriptor?? [ 320.768603][ T129] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 320.792242][ T129] usb 4-1: Detected FT232B [ 320.975848][ T129] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 321.007537][ T129] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 321.049104][ T129] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 321.248282][ T129] usb 4-1: USB disconnect, device number 13 [ 321.261452][ T129] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 321.272120][ T129] ftdi_sio 4-1:0.0: device disconnected [ 323.855379][ C0] sched: RT throttling activated [ 325.015625][ T9044] random: crng reseeded on system resumption [ 326.068695][ T9038] syz.0.1457 (9038): drop_caches: 2 [ 326.609612][ T9073] loop2: detected capacity change from 0 to 24 [ 326.643817][ T9073] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 326.682626][ T6719] udevd[6719]: incorrect romfs checksum on /dev/loop2 [ 326.735484][ T9073] romfs: bad initial checksum on dev loop2. [ 326.789967][ T6719] udevd[6719]: incorrect romfs checksum on /dev/loop2 [ 327.661424][ T9073] loop2: detected capacity change from 0 to 4096 [ 327.771898][ T9073] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 327.951486][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 329.841309][ T129] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 329.875292][ T9118] loop3: detected capacity change from 0 to 512 [ 329.927115][ T9118] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 330.041644][ T129] usb 1-1: Using ep0 maxpacket: 8 [ 330.060252][ T129] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 330.106392][ T129] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 330.159439][ T129] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 330.223851][ T129] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 330.246220][ T129] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 331.410127][ T129] usb 1-1: config 168 interface 0 has no altsetting 0 [ 331.447452][ T129] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 331.485491][ T129] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 331.505855][ T129] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 331.527657][ T129] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 331.555096][ T129] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 331.599735][ T129] usb 1-1: config 168 interface 0 has no altsetting 0 [ 331.668610][ T129] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 331.698548][ T129] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 331.720689][ T129] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 331.832662][ T129] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 332.108894][ T129] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 332.267540][ T129] usb 1-1: config 168 interface 0 has no altsetting 0 [ 332.352722][ T129] usb 1-1: string descriptor 0 read error: -22 [ 332.405674][ T129] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 332.445479][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.527371][ T129] adutux 1-1:168.0: interrupt endpoints not found [ 332.581866][ T5383] usb 1-1: USB disconnect, device number 7 [ 339.613961][ T9228] loop1: detected capacity change from 0 to 512 [ 339.721100][ T9228] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1508: missing EA_INODE flag [ 339.776206][ T9228] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1508: error while reading EA inode 12 err=-117 [ 339.812231][ T9228] EXT4-fs (loop1): 1 orphan inode deleted [ 339.841050][ T9228] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 341.546603][ T9252] loop4: detected capacity change from 0 to 24 [ 341.564126][ T9252] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 341.579168][ T6719] udevd[6719]: incorrect romfs checksum on /dev/loop4 [ 341.605274][ T9252] romfs: bad initial checksum on dev loop4. [ 341.628157][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 341.730399][ T9252] loop4: detected capacity change from 0 to 4096 [ 341.843146][ T9252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 342.103041][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 344.162225][ T9281] Set syz1 is full, maxelem 65536 reached [ 346.351471][ T9313] loop1: detected capacity change from 0 to 256 [ 346.375336][ T9313] exfat: Unknown parameter '0x000000000000000300000000000000000000000' [ 346.749089][ T9313] capability: warning: `syz.1.1527' uses 32-bit capabilities (legacy support in use) [ 350.832762][ T9383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.868875][ T9383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.191747][ T9383] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.202150][ T9383] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.211939][ T9383] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.222684][ T9383] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.531081][ T9431] device syzkaller0 entered promiscuous mode [ 357.459057][ T9474] loop0: detected capacity change from 0 to 512 [ 357.521179][ T9474] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 357.582957][ T9474] EXT4-fs (loop0): 1 truncate cleaned up [ 357.605759][ T9474] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 358.594078][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 359.918390][ T9523] device syzkaller0 entered promiscuous mode [ 360.153240][ T9510] loop4: detected capacity change from 0 to 32768 [ 360.191375][ T26] audit: type=1800 audit(1778779811.962:16): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1573" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 360.495800][ T9478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.086351][ T9563] loop4: detected capacity change from 0 to 512 [ 363.134865][ T9563] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 363.200807][ T9567] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1586'. [ 363.208508][ T9563] EXT4-fs (loop4): 1 truncate cleaned up [ 363.269933][ T9563] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 364.246163][ T9573] netlink: 91 bytes leftover after parsing attributes in process `syz.0.1586'. [ 364.332214][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 364.571247][ T9576] loop2: detected capacity change from 0 to 32768 [ 364.604882][ T26] audit: type=1800 audit(1778779816.372:17): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1588" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 365.240726][ T9608] device syzkaller0 entered promiscuous mode [ 365.453398][ T9625] loop4: detected capacity change from 0 to 512 [ 365.508565][ T9625] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 365.547099][ T9625] EXT4-fs (loop4): 1 truncate cleaned up [ 365.562283][ T9625] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 366.577516][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 366.906912][ T9639] loop4: detected capacity change from 0 to 32768 [ 366.951520][ T26] audit: type=1800 audit(1778779818.722:18): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1601" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 368.685509][ T9629] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1600'. [ 368.701075][ T9634] netlink: 91 bytes leftover after parsing attributes in process `syz.2.1600'. [ 371.223694][ T9688] loop4: detected capacity change from 0 to 512 [ 371.294881][ T9688] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 371.378844][ T9689] device syzkaller0 entered promiscuous mode [ 371.400192][ T9688] EXT4-fs (loop4): 1 truncate cleaned up [ 371.406955][ T9692] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1615'. [ 371.423732][ T9688] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 372.338239][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 375.067463][ T9692] netlink: 91 bytes leftover after parsing attributes in process `syz.2.1615'. [ 376.499086][ T9757] loop3: detected capacity change from 0 to 512 [ 376.574857][ T9757] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 376.676833][ T9757] EXT4-fs (loop3): 1 truncate cleaned up [ 376.696684][ T9757] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 377.674518][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 377.914202][ T9780] device syzkaller0 entered promiscuous mode [ 377.920642][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1626'. [ 377.931477][ T9783] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1630'. [ 377.941210][ T9788] netlink: 91 bytes leftover after parsing attributes in process `syz.3.1630'. [ 378.098319][ T9793] loop3: detected capacity change from 0 to 2048 [ 378.179164][ T9793] loop3: p2 < > p4 [ 378.199603][ T9793] loop3: p4 size 8192 extends beyond EOD, truncated [ 378.239109][ T3638] loop3: p2 < > p4 [ 378.256410][ T3638] loop3: p4 size 8192 extends beyond EOD, truncated [ 378.260461][ T9737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.719281][ T8147] udevd[8147]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 378.754676][ T6719] udevd[6719]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 378.790971][ T6719] udevd[6719]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 378.802122][ T8147] udevd[8147]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 379.127444][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.701252][ T9817] netlink: 'syz.1.1636': attribute type 10 has an invalid length. [ 380.856272][ T9823] Bluetooth: MGMT ver 1.22 [ 380.916120][ T9827] loop1: detected capacity change from 0 to 512 [ 380.966553][ T9827] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 380.975281][ T26] audit: type=1326 audit(1778779832.742:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.3.1639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119f9ce59 code=0x7ffc0000 [ 381.011718][ T9832] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1643'. [ 381.012814][ T26] audit: type=1326 audit(1778779832.752:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.3.1639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3119f5d68e code=0x7ffc0000 [ 381.052021][ T9827] EXT4-fs (loop1): 1 truncate cleaned up [ 381.058338][ T9827] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 381.127448][ T9832] netlink: 91 bytes leftover after parsing attributes in process `syz.2.1643'. [ 381.144460][ T26] audit: type=1326 audit(1778779832.752:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.3.1639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119f9ce59 code=0x7ffc0000 [ 381.303370][ T26] audit: type=1326 audit(1778779832.752:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.3.1639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f3119f9ce59 code=0x7ffc0000 [ 381.450708][ T9840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1644'. [ 381.995783][ T26] audit: type=1326 audit(1778779832.752:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.3.1639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119f9ce59 code=0x7ffc0000 [ 382.069006][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 382.202971][ T26] audit: type=1326 audit(1778779832.752:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.3.1639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3119f9ce59 code=0x7ffc0000 [ 382.321986][ T26] audit: type=1326 audit(1778779833.012:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.3.1639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119f9ce59 code=0x7ffc0000 [ 382.353486][ T26] audit: type=1326 audit(1778779833.012:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.3.1639" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3119f9ce59 code=0x7ffc0000 [ 384.701472][ T9888] netlink: 'syz.1.1651': attribute type 10 has an invalid length. [ 385.045228][ T9899] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1655'. [ 385.066614][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1657'. [ 385.106531][ T9900] loop1: detected capacity change from 0 to 512 [ 385.113490][ T9899] netlink: 91 bytes leftover after parsing attributes in process `syz.0.1655'. [ 385.181142][ T9900] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 385.269164][ T9900] EXT4-fs (loop1): 1 truncate cleaned up [ 385.288818][ T9900] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 386.271902][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 388.385123][ T9924] ------------[ cut here ]------------ [ 388.391175][ T9924] WARNING: CPU: 0 PID: 9924 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x139/0x160 [ 388.401470][ T9924] Modules linked in: [ 388.405449][ T9924] CPU: 0 PID: 9924 Comm: syz.4.1664 Not tainted syzkaller #0 [ 388.412853][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.423219][ T9924] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 388.429382][ T9924] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2c ed 6f f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 57 e0 1e f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 388.449104][ T9924] RSP: 0018:ffffc90003536d68 EFLAGS: 00010287 [ 388.455225][ T9924] RAX: ffffffff886394f9 RBX: ffffc90003536e78 RCX: 0000000000080000 [ 388.463309][ T9924] RDX: ffffc9000e413000 RSI: 00000000000062d6 RDI: 00000000000062d7 [ 388.471372][ T9924] RBP: 0000000000000002 R08: ffffffff90af93f7 R09: 1ffffffff215f27e [ 388.479456][ T9924] R10: dffffc0000000000 R11: fffffbfff215f27f R12: 18afa84a5c820acd [ 388.488581][ T9924] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.496816][ T9924] FS: 00007f91a603e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 388.505829][ T9924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.512447][ T9924] CR2: 00007fac4d4dcf50 CR3: 000000005493c000 CR4: 00000000003506f0 [ 388.520501][ T9924] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.528538][ T9924] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 388.536603][ T9924] Call Trace: [ 388.539966][ T9924] [ 388.542915][ T9924] taprio_change+0x40d9/0x5490 [ 388.547763][ T9924] ? taprio_destroy+0x4b0/0x4b0 [ 388.552645][ T9924] ? qdisc_create+0x7eb/0x10b0 [ 388.557487][ T9924] ? ____sys_sendmsg+0x5be/0x970 [ 388.562460][ T9924] ? memset+0x1e/0x40 [ 388.566500][ T9924] ? fifo_init+0x3f6/0x6d0 [ 388.570951][ T9924] ? qdisc_peek_head+0x40/0x40 [ 388.575784][ T9924] ? qdisc_alloc+0x77a/0xa50 [ 388.580406][ T9924] ? rcu_is_watching+0x11/0xa0 [ 388.585206][ T9924] ? taprio_peek+0x590/0x590 [ 388.589881][ T9924] qdisc_create+0x7eb/0x10b0 [ 388.594522][ T9924] ? qdisc_notify+0x370/0x370 [ 388.599298][ T9924] ? lockdep_rtnl_is_held+0x22/0x30 [ 388.604536][ T9924] ? qdisc_lookup+0x366/0x6c0 [ 388.609293][ T9924] tc_modify_qdisc+0xb5f/0x1d10 [ 388.614224][ T9924] ? qdisc_offload_query_caps+0x150/0x150 [ 388.620092][ T9924] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 388.625254][ T9924] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 388.630480][ T9924] ? qdisc_offload_query_caps+0x150/0x150 [ 388.636364][ T9924] rtnetlink_rcv_msg+0x87c/0xfc0 [ 388.641455][ T9924] ? rtnetlink_bind+0x80/0x80 [ 388.646248][ T9924] ? mark_lock+0x94/0x320 [ 388.650633][ T9924] ? __lock_acquire+0x12f4/0x7d10 [ 388.656117][ T9924] ? verify_lock_unused+0x140/0x140 [ 388.661367][ T9924] ? netlink_sendmsg+0x654/0xbd0 [ 388.666416][ T9924] ? verify_lock_unused+0x140/0x140 [ 388.671874][ T9924] netlink_rcv_skb+0x1fb/0x450 [ 388.677168][ T9924] ? rtnetlink_bind+0x80/0x80 [ 388.682242][ T9924] ? netlink_ack+0x1170/0x1170 [ 388.687571][ T9924] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.694131][ T9924] netlink_unicast+0x74d/0x8d0 [ 388.699605][ T9924] netlink_sendmsg+0x8ad/0xbd0 [ 388.705791][ T9924] ? netlink_getsockopt+0x550/0x550 [ 388.711320][ T9924] ? aa_sock_msg_perm+0x94/0x150 [ 388.716515][ T9924] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 388.721866][ T9924] ? security_socket_sendmsg+0x7c/0xa0 [ 388.727399][ T9924] ? netlink_getsockopt+0x550/0x550 [ 388.732821][ T9924] ____sys_sendmsg+0x5be/0x970 [ 388.737965][ T9924] ? __sys_sendmsg_sock+0x30/0x30 [ 388.743291][ T9924] ? __import_iovec+0x315/0x500 [ 388.748240][ T9924] ? import_iovec+0x6f/0xa0 [ 388.752826][ T9924] ___sys_sendmsg+0x2a2/0x360 [ 388.757608][ T9924] ? try_to_wake_up+0x6ae/0x1080 [ 388.762597][ T9924] ? __sys_sendmsg+0x290/0x290 [ 388.768040][ T9924] __se_sys_sendmsg+0x1bb/0x2a0 [ 388.772933][ T9924] ? __x64_sys_sendmsg+0x80/0x80 [ 388.777922][ T9924] ? lockdep_hardirqs_on+0x94/0x140 [ 388.783134][ T9924] do_syscall_64+0x4c/0xa0 [ 388.787798][ T9924] ? clear_bhb_loop+0x60/0xb0 [ 388.792516][ T9924] ? clear_bhb_loop+0x60/0xb0 [ 388.797289][ T9924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.803225][ T9924] RIP: 0033:0x7f91a519ce59 [ 388.807737][ T9924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.827513][ T9924] RSP: 002b:00007f91a603e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.836051][ T9924] RAX: ffffffffffffffda RBX: 00007f91a5415fa0 RCX: 00007f91a519ce59 [ 388.844338][ T9924] RDX: 0000000000008010 RSI: 00002000000012c0 RDI: 0000000000000006 [ 388.852427][ T9924] RBP: 00007f91a5232d6f R08: 0000000000000000 R09: 0000000000000000 [ 388.860481][ T9924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.868522][ T9924] R13: 00007f91a5416038 R14: 00007f91a5415fa0 R15: 00007ffd040a4828 [ 388.878273][ T9924] [ 388.882655][ T9924] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 388.891397][ T9924] CPU: 0 PID: 9924 Comm: syz.4.1664 Not tainted syzkaller #0 [ 388.899989][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.911498][ T9924] Call Trace: [ 388.915695][ T9924] [ 388.919624][ T9924] dump_stack_lvl+0x188/0x24e [ 388.925299][ T9924] ? memcpy+0x3c/0x60 [ 388.930229][ T9924] ? show_regs_print_info+0x12/0x12 [ 388.935567][ T9924] ? load_image+0x400/0x400 [ 388.940407][ T9924] panic+0x2e5/0x730 [ 388.945446][ T9924] ? bpf_jit_dump+0xd0/0xd0 [ 388.950124][ T9924] __warn+0x2f8/0x4f0 [ 388.954308][ T9924] ? taprio_get_start_time+0x139/0x160 [ 388.960762][ T9924] ? taprio_get_start_time+0x139/0x160 [ 388.966270][ T9924] report_bug+0x2ba/0x4f0 [ 388.970657][ T9924] ? taprio_get_start_time+0x139/0x160 [ 388.976144][ T9924] handle_bug+0x3a/0x70 [ 388.981027][ T9924] exc_invalid_op+0x16/0x40 [ 388.985826][ T9924] asm_exc_invalid_op+0x16/0x20 [ 388.991481][ T9924] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 388.997861][ T9924] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2c ed 6f f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 57 e0 1e f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 389.019408][ T9924] RSP: 0018:ffffc90003536d68 EFLAGS: 00010287 [ 389.026037][ T9924] RAX: ffffffff886394f9 RBX: ffffc90003536e78 RCX: 0000000000080000 [ 389.034037][ T9924] RDX: ffffc9000e413000 RSI: 00000000000062d6 RDI: 00000000000062d7 [ 389.042461][ T9924] RBP: 0000000000000002 R08: ffffffff90af93f7 R09: 1ffffffff215f27e [ 389.050664][ T9924] R10: dffffc0000000000 R11: fffffbfff215f27f R12: 18afa84a5c820acd [ 389.059184][ T9924] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.068153][ T9924] ? taprio_get_start_time+0x139/0x160 [ 389.074398][ T9924] ? taprio_get_start_time+0x139/0x160 [ 389.079983][ T9924] taprio_change+0x40d9/0x5490 [ 389.084811][ T9924] ? taprio_destroy+0x4b0/0x4b0 [ 389.090318][ T9924] ? qdisc_create+0x7eb/0x10b0 [ 389.095212][ T9924] ? ____sys_sendmsg+0x5be/0x970 [ 389.100564][ T9924] ? memset+0x1e/0x40 [ 389.104675][ T9924] ? fifo_init+0x3f6/0x6d0 [ 389.109359][ T9924] ? qdisc_peek_head+0x40/0x40 [ 389.114981][ T9924] ? qdisc_alloc+0x77a/0xa50 [ 389.119617][ T9924] ? rcu_is_watching+0x11/0xa0 [ 389.124846][ T9924] ? taprio_peek+0x590/0x590 [ 389.129646][ T9924] qdisc_create+0x7eb/0x10b0 [ 389.134664][ T9924] ? qdisc_notify+0x370/0x370 [ 389.140089][ T9924] ? lockdep_rtnl_is_held+0x22/0x30 [ 389.145710][ T9924] ? qdisc_lookup+0x366/0x6c0 [ 389.151037][ T9924] tc_modify_qdisc+0xb5f/0x1d10 [ 389.159344][ T9924] ? qdisc_offload_query_caps+0x150/0x150 [ 389.165937][ T9924] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 389.171656][ T9924] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 389.177247][ T9924] ? qdisc_offload_query_caps+0x150/0x150 [ 389.183483][ T9924] rtnetlink_rcv_msg+0x87c/0xfc0 [ 389.189295][ T9924] ? rtnetlink_bind+0x80/0x80 [ 389.194712][ T9924] ? mark_lock+0x94/0x320 [ 389.199076][ T9924] ? __lock_acquire+0x12f4/0x7d10 [ 389.204332][ T9924] ? verify_lock_unused+0x140/0x140 [ 389.209594][ T9924] ? netlink_sendmsg+0x654/0xbd0 [ 389.214602][ T9924] ? verify_lock_unused+0x140/0x140 [ 389.219857][ T9924] netlink_rcv_skb+0x1fb/0x450 [ 389.224753][ T9924] ? rtnetlink_bind+0x80/0x80 [ 389.230348][ T9924] ? netlink_ack+0x1170/0x1170 [ 389.235264][ T9924] ? netlink_deliver_tap+0x2e/0x1b0 [ 389.241404][ T9924] netlink_unicast+0x74d/0x8d0 [ 389.246378][ T9924] netlink_sendmsg+0x8ad/0xbd0 [ 389.251820][ T9924] ? netlink_getsockopt+0x550/0x550 [ 389.258133][ T9924] ? aa_sock_msg_perm+0x94/0x150 [ 389.263462][ T9924] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 389.268799][ T9924] ? security_socket_sendmsg+0x7c/0xa0 [ 389.274591][ T9924] ? netlink_getsockopt+0x550/0x550 [ 389.280017][ T9924] ____sys_sendmsg+0x5be/0x970 [ 389.286372][ T9924] ? __sys_sendmsg_sock+0x30/0x30 [ 389.292274][ T9924] ? __import_iovec+0x315/0x500 [ 389.297523][ T9924] ? import_iovec+0x6f/0xa0 [ 389.302500][ T9924] ___sys_sendmsg+0x2a2/0x360 [ 389.307205][ T9924] ? try_to_wake_up+0x6ae/0x1080 [ 389.312257][ T9924] ? __sys_sendmsg+0x290/0x290 [ 389.317340][ T9924] __se_sys_sendmsg+0x1bb/0x2a0 [ 389.322574][ T9924] ? __x64_sys_sendmsg+0x80/0x80 [ 389.328681][ T9924] ? lockdep_hardirqs_on+0x94/0x140 [ 389.334437][ T9924] do_syscall_64+0x4c/0xa0 [ 389.339537][ T9924] ? clear_bhb_loop+0x60/0xb0 [ 389.345124][ T9924] ? clear_bhb_loop+0x60/0xb0 [ 389.349929][ T9924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.356126][ T9924] RIP: 0033:0x7f91a519ce59 [ 389.361012][ T9924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.381612][ T9924] RSP: 002b:00007f91a603e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.392078][ T9924] RAX: ffffffffffffffda RBX: 00007f91a5415fa0 RCX: 00007f91a519ce59 [ 389.400437][ T9924] RDX: 0000000000008010 RSI: 00002000000012c0 RDI: 0000000000000006 [ 389.408524][ T9924] RBP: 00007f91a5232d6f R08: 0000000000000000 R09: 0000000000000000 [ 389.416701][ T9924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.425195][ T9924] R13: 00007f91a5416038 R14: 00007f91a5415fa0 R15: 00007ffd040a4828 [ 389.433822][ T9924] [ 389.437578][ T9924] Kernel Offset: disabled [ 389.442596][ T9924] Rebooting in 86400 seconds..