last executing test programs: 4.00091787s ago: executing program 4 (id=3521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="7fe1b33315b1fd8cd2523811f49a284c7da2c2dab8d7a3562386f41e36be53b97c6eb951e4cd864a0d49c5251ea819d1fb396061defd1768694a459ea9b8e4c53f8b742f21f50ec2a79795f2e2f94bf0da0d30ad6eac955cedbf65b0838294e2bcea1cbd94f308f0774bd9f4b60e9d6a1cf16cf7e6f45924e9d285da684857411a5b3d53f20d6832d37683ab1b1f2a8221086025", 0x94}, {&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d6188ce88368c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951ac76e2deb4f3e8cd737a4f232eb5554096503e38701", 0xc0}, {&(0x7f0000000400)="03362a247861461b950daf81800a038f1ee4d89769187dcd3a5f3b23aaab61614df7ed7e9300c2cbd640ee12e7d98ef42c23e9f77543d8561a06ae5dca898dbcf6c4696e3a49a32599699c258a5766784886810a9a80505a31031800d541c3057f00f988f68cac40b9ff64906e2a4d611b85625dcc2e6ea9891e12b1a9fda5d3a53c6a5fffaddefda1e252bdfa858a25788978e89d8af722c2ee51b5beb204a6df21832f98d6774b8c876e8c42177e5f515e5b0852ed9ecbdcdb4f8b04991d3dc9afe709190f8b22dbd6af44730a68d599c3e3e2137bcc57e3044c962e27d0358fff26441cc47d00ac9734080efeea934d381735a24ddd5a1e88bd286012dc9d4288a26bc76b37073c7bb4e013d4ce3bf6f7d15370f50409f54ee552d7a490f7ae55a32b51e586361e1f2dc16eb8f426876ba006508e3a232cb43d057a5023d493d5dccebcb5cf4d863cfcbd20722023aed8bdb55f1456d3d3071532817816cb28cb0915ed566a6c17c5f621f04c8d9dfa360e96f3137e18389ff4bdb558fcd33c83cdb99fe789acfc7b2b7be37d74297fc05c94e220b63f2317b6137b110248923988a312ac165e66b636b933d2a4db91cf18522ddac19a142e3394c97a9f29639f1f743cf109839a2d35eadc2453ceb05f699bb8068085994c699ff9a49cfdbc70db70ca96e492b33d2da56faf310c6010f926cda4398ffd8ce8c550f589a40cd7a286bbb63220ba98f9110a7fb572a790416eac12d7789368b4668e8bbcc257b46e3c4c13db9a292f83f19de3b90f448742a719a517b0edfa39c3f14bc503b37aa69f70e5a901915aa08d4307285b788608c72411be35516ac3fd3922562359d9fc3616a52fece08389963c840735b00162722d6a23a5cc52e9a1cc52aeda95e7b4a297b5de545926b2db97434d29f7267b42fd773da4b3aad9f60471396aede82f96dd85464fa8bf3d406ae28a4acf14432224620647617eb70cfaf7d823dc8a580fdfda1b7a9a78bfa2be16dcbaaec5fdeba3ab9a92a2addedee882f7f80a1abf694997042267eb0a632584ca1587345879fac1b9a68005f3ec587455112ee44091fc45f0c5176b192adccf55db0267dff5745a810ffb0a23feaa27bc7e228f995b7e3735b24e43ad2771f66156853b9781b8196bbf9f75c6b2186d18490f6bcb5f6b96a5c348210347c1dbde123ccab049ed4e40c7894f83009f20a46ae31bf1cf325b18fab0064ad7d2085d4d1b2a2c6d2b1baf253ac6d5603acd7cb68b532cb458b4a042c4f9145759c178354535ee0530d2d80b09962c2c2bba18e0fed3f438f7ccc5c4e0b068f9682594e842aa9d8eab34581a57bef1bfb881adb216d82a30798fcf1e0d58a0a8588794d259eb214b225df2531a8e3675fabbe9183e7b7f9cd32d58960ecd29c25b5cab77b967afa18affd6273a1dff867527cc5d4e0fd86b25111f1f5db7be27befc50e7e146376d6cbde005f44affe2a57cf8b87b22dc1ce77dde1c3c30f40023fef56dde8b2a5262febdcefeb7e3a6cb0ef41dc661ac61189cac1ffdcd1a36614a7a795908919904a426a25030e7543d4b7febeadf516bff206efb5f83618d7f54934bfa25899ee109d4ac63646dd9628ecbb5028967788107b6d855beb77344f4dcc13dcdfa45596f658e3dfdbc05a31fc42cb0ebd55fead9d46a65a923703354169166069a1949b501162ea4ada11cbf49eec13fe0b434db20399de0542e43c0b75db3784b589b9c349b71f6fa6cfa07622aba0e8db90101b24c7acd6acdb947e4e03fbabe7d1410d10c41e7c32d3395c79860e9fd8d26d14f7fe7775e6968ff729c719231fdce2c58819d14c3b91e971f2c723955164788387a7eb4edbef98136a67e780e80c8810f80ca1b0fdd821af700879df573e9662124ba081b082a95237b521fdaa623d1432c24f0b972aab65ca85d999a8edff56a3d0e695ac42393268253cad4c5c58130690583820cb53cd2b5da938007d617bb22f0108cdecfc3e451f1990b1f92ecc7554d1c70d0e15d3dec2c092d66dcfe33adb040457ee1813201f66034c2ad2ba15dbae8a9c390d8bef9ac58d6cd7562b0b21d787b80aa790c6419edac0cd0e3005bff73418ffbc07642b0e02ca30c3bdff995854e532d733da75fa813be8bda0cbbe2a6f99688d128e3b434f2b549d9d4b2bca9e02c53c87d0943fe78a9c17feba73dd93617eb16b288749bc3aa8c9e4a66da3ebd1c41b3697917938478743adb5309b429e77ae39a7522fd14e1ad20181d4df3dd6b3a2e92b167373e7f73bf8e5b42ba8f9030f7f3718b2a8bffb842f0a0e4e317786ffa9d3eef9407064cbffa5f880e4c00401c4ba1a430e6bb42a39e6c9afa83a50baba9b14105e5e20693e5badad3b758ecc4e0abb29dfb23bc3f0cc4236852d11b5cd696f4bea2310b02a184dd979483ca606d1de047cc34e31c2600e11b7529172424b81f35f7b8d7490e14178a51de0e752f0fee80662e1486bb5619b7e78583d881b410ab26861372ca1df6528bf173f29fed933408fe985f44716406162dea9e628fea4f4d3b6b4bf003576a4bfceb9db63f4924b3ac84e1b8898792077ad8a3736601bff35e47c03abb5cd4aab723a3dd2387a44d8579268656207481e22e5ec4d92fe07b29f17f2d59051121110001c6f29b65c46551c23f76d3a123f790a2936404bd28592c11c48eb4a89d360f8e26107745ab4f8f843a781375cc468277c3ca1ab2b0af3d52236887a9d706c002ac314e3779cf4928b7a0c3f6dce2ee103f33ca8d441ef5ff6c31b4dddbfd88780534308e4d8226753fb0ee385bb816f0e3c0e7b50d91b613852b8464272b65ead9ff4c9f3dcdcf936cfe25a36821a2f3c720a8f9a0f91adbdb09728988c8e2c0c4aebd3d120284461f7a5d3cd06c73a5f4954ec8f7b62939bdfe590ec9a706a8980ee8c01cc29e1cfd0d7cd2eaf676f802d02cf5318390853db8fcc921023a4fe524462e63009a27bacf40ab28d82a604b3dcc9a62d85f85e269fc1a0a09b45742780e2296c403c632e903e53d75d97e0b09f0130f85e43c697c4f09b90f0d422b0800c768b4f776779ecc72c5deea79073ea4fcbd1f8a6ad8442d3d5c462a1cece5c82f935ecf5570715c6515113452b414688db7ec8fd883fa5a52870cd9e182cb5e558dfc61e59f5014cc554af826b6f4c93795994121d5c8be3a389cd4629287f0ce71503554802025080932d60e9b1b0432824460b54d47d2ddfb55e5839e79bda31d5c3827a0ff72c45ba424b956b86d606f1d0526cafd12f2bf9acce0c2d4dd1afddad2503a9f1acf37e1cb2b61b744df79f40bac311498ceb1f86ca607f050922445094cdb5670e34ea4dabc03f6d06db476726444b021cb9c9bcbca4edf71d599fa38a4f647701348f4a816e62dc85b5e0210f3c989534fe2291290bd542da4c093679dc5f10f568391b281a82cc8f426b0753231d4737729e982c89d8fe2f182364610c0f8b8ae208ba5eef61cc5435885ddfdaf75837d761612fb454f792cf208aece4e569c7e4a17ae6d45868886afb90d257454f9b10265d91e362e397486241d7c99e93d8b81ba13972cad3aa17daea259bd08c9fc0fca35823fea527d01cb6c1856113daebfe96525b6680701c2125ca45854dc4ec1e31c29ed8647bae2959345d6b8356eaad68bb0a1aa8aeaacb3ee587bbe0341fb9ccca52aad5682ac488778ab57b800ef53eb33c6b0eaf08b3e21e5564ee0f8ac31659e6bc034e26f39bd92dfa2edf2380f40bf609ca8688bc233f6a3505539bb4e9c4025ceede51efc1f0e01455c3e4559211460e94a5e275019a455c2ba3058bee098a6ef5b2bf4c0d72f01727f9b505449ce056a2a44cae2bc297abd13c2b8d4e2e867043e5c085b4c10e6b35bc0f250941e04366389b2d644184b9d60558e5859da75464ef03aa72f84c441c6be90ecdfe05dda2af794108ff6c0c6269ad2abd7ff7df5dcceff4d0413ca196ddf0e431de996a877096a91a4f012b063c4ba99cae7f014be94fe23f8fcf56c203298b909d31eb7bedc5324b6680d94f36d0a7f381e389178fb3ae1086e78a1c70d74d1ab68c02fe0d9c60cfdd5bf7d34b356d5d68aad8354084dc466c1e4c8133b9dd1eabb56d820a3ff755f888ff194ad8d05f003943db6a5435e136d95bd208d1b8679fdf76aad67d92aa8512299140d37b1ff2805b17c6ea4309cf5fbc6a609d5337be48e765c0fa167251ce0223e1b361b1e98ad773fc33f0387b270ead15bb660ebc91530609c5f184f169a3a023eea05e1527232da231d19740a095af4e4e740d902063d3a74a1b0d9615837b9f0a713b47c703fcbac2ddb2150ef78754726789ace1c43383554dd4ab4894d97e4f5213e623910d46911185ff247af2faddc6906106e799a6e4e0b496d50ee1e239772d83f01582c450171a050514b2075281d1765cb7232f5a9dd3ac577429ed6d7a954ea5213ade2a5332453e6fc2cf49dbbfa8cf3b485161aa968be16c016d51fb9fad8429e93033992ba3540c4603f8318b591ad1e28625831b68e2c99ff1b29e72ca4ab4eec5aaf60a254a8db9a036123e5c5d8f0a108adc616f243dbbe523a3ad1e6a4c259cc485ff904bfcd15762a77db7e3455dfcb8673f92a03c5248caa53a0119703157e987e26515cf67848970b19423cbd91017336bec9cdc38b4da3c8d980f261682e3479dfdad4d7d20a44f1e1bae69a84968fe9049c0e023b2d1b096002d35a9f4091a0ed3067e40e89358a3f43999c9a87405630aa90a705be0636437c57bc6ad5157d900daf17adaf107753351a2b4fc0569067611778e5f221ff1d945ba8413242aef004dee521ac1af493eb92c91d17734923370449c1e68d68a3eba0b149833912a55d2b37f2af8f288d198f017ae627f0fbc7ca34326abfbc37ed232519634460a02f2ff3a674edd44fecd48b27b366ad3561d1dd8ef0d837ad92492cf8efcc1388fabb57175c2325f628bfc5665941a8e788f6537ba27b1b7b6fbcebfb232999e08fe8245240132450987b456aeea841cf49ea7004affa97331ff3b82b3632102cba8f73cc60801eac67f74e710a955995bffd12f30925628a8f31265dc399169c7486df5ef18d07d2753233f7fe59e0b6876b6a23f88f16dcb27673bfb7a1b4613905848cedfedf384ab991300b85eedfe945680755c2c4f3c375e6d87d9c78e157d98cbf0c6abbce39d793de950f8c62795276c917ce5856cdfc67332f30d33b6ae734f79d50947812653a20978f8280f64c495a8a2267688e71bb477b58c8414c13eaa95b88d6220360561bc3417e261771cec97d1e42bfa200816ecde68b011b5efdd12bacd3c3a046cf43129935d19ebad22c36151efe39c652c99fecfcdd284c5693febb30ac288e", 0xeef}], 0x3}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d172229c58deb7f2d95c793aee3365bd04cc81c838294ad5237c74cd19b3ea8431a190ea1caf0524e623f56791d2d55bf1a24c7c7b42198afd133af01bbbd167d04159bceb80648e2e740f1d58b762d50ed842933815a8f167dc01363284d8f27e69a83509fd9f1dd0cdeca61ffdb9524f408d698154fbb2ff5381369933e1815ed1703e58405478629df4311893798ead4acd67bc6ab48", 0xc7}, {&(0x7f0000001540)="2aba9e4cc9b55274aa3a5dbd35f30d62249f7226e2ffa535df463037a323c732a94981bd91b9d134d79106da4929ddf57f26696b8911da0e8126ca4c7a6f10192c1ef6dc0191c8a10b6526df22206120b8767c1a1ec3be23fe90f3e3c0092aca4116e03096593f7964ac3c077036e624ff82f8348afba5254a1105", 0x7b}, {0x0}, {&(0x7f0000002980)="c61fc952e32af9d06ed135ef945ba121afc7dcbb95e00a15a1aebe2c9d63854ab7d8f30b55ce072b49867372e0c57347c9f93f5d57bbf8ab12ae426441b805834fd2c17e1de7d5e36d8fc36254b673a7ca8be8800bfd25196e325a8beb921abd1654c40b52cd19a01844", 0x6a}, {&(0x7f0000001700)="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", 0xfe}], 0x5}}, {{&(0x7f0000001880)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f00000019c0)}}], 0x3, 0x40) close(r3) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) write(r4, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f00000015c0)={0x6, 'wg1\x00', {0x392}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ba000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 2.965690438s ago: executing program 4 (id=3533): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880) socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xb1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) 2.780587123s ago: executing program 0 (id=3535): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x0) unshare(0x400) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 2.500257811s ago: executing program 2 (id=3538): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x11e, 0x1, 0x0, &(0x7f0000000000)) 2.438673223s ago: executing program 0 (id=3539): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 2.269582247s ago: executing program 2 (id=3541): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x4008010) 2.15880513s ago: executing program 1 (id=3542): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac0300000000000085000000330000009500000000000014b6c3"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.033427254s ago: executing program 2 (id=3543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63c2406d0787cf6be3e98285812e", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.001950154s ago: executing program 4 (id=3544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4894) 1.889381968s ago: executing program 1 (id=3545): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(0xffffffffffffffff) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x30, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000800df000000000000000d0000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xd, 0x45, &(0x7f0000000200)=""/69, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3000000, 0x5, 0x2, 0x1ff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000300), &(0x7f0000000340)=[{0x0, 0x5, 0x6, 0x3}, {0x2, 0x4, 0xb, 0x2}, {0x1, 0x4, 0xc, 0xb}, {0x5, 0x4, 0x6, 0x7}, {0x1, 0x5}], 0x10, 0x7}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f00000000c0)=0x80020001, 0x4) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) 1.888835678s ago: executing program 0 (id=3546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) 1.654755964s ago: executing program 0 (id=3547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000010000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008040000000000000001000000000000004400050000000000000000000000000000000000fffffffc3c000000020000000000000000000000000000000000000006"], 0xfc}}, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.611656156s ago: executing program 3 (id=3548): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 1.531115447s ago: executing program 0 (id=3549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0xa}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 1.414564461s ago: executing program 3 (id=3550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 956.549133ms ago: executing program 4 (id=3551): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x11e, 0x1, 0x0, &(0x7f0000000000)) 948.586464ms ago: executing program 2 (id=3552): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffce1, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xc, 0xb}, {0x8, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000ec0)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, 0x0}, 0x0) 878.736606ms ago: executing program 1 (id=3553): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) 842.817726ms ago: executing program 3 (id=3554): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) listen(r2, 0x3) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$inet6(r1, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)}], 0x1}, 0x40085) write(r0, &(0x7f0000000000)="0c000000010001", 0x7) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) 832.137577ms ago: executing program 0 (id=3555): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'bond_slave_1\x00', 0x2000}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 678.773791ms ago: executing program 4 (id=3556): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c002c0f1400020000000000000006e1f000000089090000000283fcf91a82963d2bd4b836954268e611", 0x2c}, {&(0x7f0000000240)="7cdb015fbb1990080000006a837b6487d32d2fb46cbd1523147f0741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b4a6efb03d0a69ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe98ba01cb61fdd3c53bdba305901d7103513c9c2b71ea428a38f832416f3ca22ccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68ddff0edf9f2d21b53644c04dee00e429612b41cd862603e9abc6533e101497f9c870000ccc84a51ff1f965d390a4d51d9353d0d2717fa6ff8ee2132fa71c2cfc5db5e8cdf2f", 0xf0}, {&(0x7f0000001b40)="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", 0xe2b}], 0x3}, 0x2004408d) 640.813392ms ago: executing program 1 (id=3557): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) 538.745685ms ago: executing program 3 (id=3558): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newrule={0x30, 0x20, 0x800, 0x70bd2b, 0x25dfdbff, {0x2, 0x14, 0x10, 0x6, 0x4, 0x0, 0x0, 0x7, 0x10}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xee}, @FRA_FLOW={0x8, 0xb, 0x8000}]}, 0x30}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@hopopts_2292={{0x88, 0x29, 0x36, {0x3b, 0xd, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6c, 0x8, [0x2, 0xfffffffffffffff7, 0x6, 0x7fff, 0x6, 0x7]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn]}}}, @hopopts={{0x78, 0x29, 0x36, {0x5e, 0xb, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1, 0x3, "2bdb86"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0x118}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xa11, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 446.709947ms ago: executing program 4 (id=3559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103200009080709050203"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_ep_read(r3, 0x2, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380), &(0x7f00000000c0), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_usb_ep_write(r3, 0x81, 0xc, &(0x7f0000000080)="116b41319ef13386d7fd40ac") 446.465967ms ago: executing program 1 (id=3560): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000010000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008040000000000000001000000000000004400050000000000000000000000000000000000fffffffc3c000000020000000000000000000000000000000000000006000000"], 0xfc}}, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 413.375988ms ago: executing program 2 (id=3561): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x288201, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close(0x3) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754", 0xbb}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0x10, 0x2, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB, @ANYRES16=r1], 0x44}}, 0x8000) 230.817223ms ago: executing program 3 (id=3562): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000120001002abd700000000000e0000002000000000000000000000000000004d81200000014000d007f000001000000000000004000000000ca9ab93add7c7c23ca4b28d069242b68366bb0009c8732071da8ad3053a60ec9b3c0ca1a49d5610f8ca5fc82605d040000"], 0x3c}}, 0x0) 212.945604ms ago: executing program 2 (id=3563): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 171.844935ms ago: executing program 1 (id=3564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 0s ago: executing program 3 (id=3565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0xa}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) kernel console output (not intermixed with test programs): point with address 0x2, skipping [ 626.023140][ T4316] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 626.035033][ T4316] usb 2-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 626.050252][ T4316] usb 2-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 626.061814][ T4316] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 626.073277][ T4316] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 626.084705][ T4316] usb 2-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 626.096053][ T4316] usb 2-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 626.107274][ T4316] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 626.118535][ T4316] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 626.129994][ T4316] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 626.141967][ T4316] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 626.153951][ T4316] usb 2-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 626.169085][ T4316] usb 2-1: config 7 interface 106 has no altsetting 0 [ 626.176018][ T4316] usb 2-1: config 7 interface 182 has no altsetting 0 [ 626.183388][ T4316] usb 2-1: config 7 interface 148 has no altsetting 0 [ 626.214440][ T4316] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 626.233552][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.242740][ T4316] usb 2-1: Product: syz [ 626.247000][ T4316] usb 2-1: Manufacturer: syz [ 626.252201][ T4316] usb 2-1: SerialNumber: syz [ 626.552740][ T4316] usb 2-1: USB disconnect, device number 126 [ 628.935589][T12725] device veth0_to_batadv entered promiscuous mode [ 628.959333][T12725] device macvlan4 entered promiscuous mode [ 628.984964][T12725] device veth0_to_batadv left promiscuous mode [ 629.205404][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'. [ 629.229074][ T4456] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 629.418978][ T4456] usb 3-1: Using ep0 maxpacket: 8 [ 629.426295][ T4456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 629.462013][ T4456] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 629.487254][ T4456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.503374][ T4456] usb 3-1: config 0 descriptor?? [ 629.722106][ T4456] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 629.936922][T12750] device syzkaller0 entered promiscuous mode [ 630.134260][ T14] usb 3-1: USB disconnect, device number 16 [ 634.422884][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2841'. [ 634.574040][T12793] lo: Caught tx_queue_len zero misconfig [ 634.729107][ T14] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 634.929237][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 634.937174][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 634.956491][ T14] usb 1-1: config 7 has an invalid interface number: 106 but max is 3 [ 634.969172][ T8895] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 634.975097][ T14] usb 1-1: config 7 has an invalid interface number: 182 but max is 3 [ 634.996304][ T14] usb 1-1: config 7 has an invalid interface number: 148 but max is 3 [ 635.014749][ T14] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 635.030058][ T14] usb 1-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 635.039602][ T14] usb 1-1: config 7 has no interface number 0 [ 635.046533][ T14] usb 1-1: config 7 has no interface number 1 [ 635.059923][ T14] usb 1-1: config 7 has no interface number 2 [ 635.066403][ T14] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 635.078193][ T14] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 635.089665][ T14] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 635.101865][ T14] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 635.113500][ T14] usb 1-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 635.127378][ T14] usb 1-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 635.151252][ T14] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 635.169297][ T8895] usb 4-1: Using ep0 maxpacket: 8 [ 635.176499][ T8895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 635.208054][ T14] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 635.218689][ T8895] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 635.229643][ T14] usb 1-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 635.239102][ T8895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.261474][ T14] usb 1-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 635.273408][ T8895] usb 4-1: config 0 descriptor?? [ 635.289541][ T14] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 635.305961][ T14] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 635.327347][ T14] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 635.343962][ T14] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 635.357076][ T14] usb 1-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 635.372174][ T14] usb 1-1: config 7 interface 106 has no altsetting 0 [ 635.388044][ T14] usb 1-1: config 7 interface 182 has no altsetting 0 [ 635.397250][ T14] usb 1-1: config 7 interface 148 has no altsetting 0 [ 635.443938][ T14] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 635.462435][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.471501][ T14] usb 1-1: Product: syz [ 635.475773][ T14] usb 1-1: Manufacturer: syz [ 635.483046][ T14] usb 1-1: SerialNumber: syz [ 635.488407][ T8895] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 635.514421][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2849'. [ 635.559279][ T4317] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 635.749204][ T4317] usb 5-1: Using ep0 maxpacket: 32 [ 635.756966][ T4317] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 635.791354][ T14] usb 1-1: USB disconnect, device number 29 [ 635.800179][ T4317] usb 5-1: config 0 has no interface number 0 [ 635.849447][ T4317] usb 5-1: config 0 interface 12 has no altsetting 0 [ 635.873661][T12811] device syzkaller0 entered promiscuous mode [ 635.885206][ T4317] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 635.952459][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.972467][ T4317] usb 5-1: Product: syz [ 635.976854][ T4317] usb 5-1: Manufacturer: syz [ 635.982935][ T4317] usb 5-1: SerialNumber: syz [ 636.000879][ T4317] usb 5-1: config 0 descriptor?? [ 636.127903][ T4321] usb 4-1: USB disconnect, device number 11 [ 638.306844][ T4317] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 638.326163][ T4317] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 638.334013][ T4317] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 638.342980][ T4317] f81534: probe of 5-1:0.12 failed with error -71 [ 638.363506][ T4317] usb 5-1: USB disconnect, device number 10 [ 639.433781][T12822] dummy0: Caught tx_queue_len zero misconfig [ 639.462374][T12824] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2852'. [ 639.962536][T12848] device syzkaller0 entered promiscuous mode [ 640.499078][ T8895] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 640.689033][ T8895] usb 5-1: Using ep0 maxpacket: 8 [ 640.696435][ T8895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 640.709012][ T8895] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 640.718376][ T8895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.753542][ T8895] usb 5-1: config 0 descriptor?? [ 640.965256][ T8895] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 641.322783][ T3598] usb 5-1: USB disconnect, device number 11 [ 641.426616][T12873] device syzkaller0 entered promiscuous mode [ 641.459800][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2867'. [ 641.481038][T12877] device veth1_macvtap left promiscuous mode [ 644.350836][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2870'. [ 644.619781][T12893] device bridge_slave_1 left promiscuous mode [ 644.636349][T12893] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.646663][T12893] device veth0_to_bond left promiscuous mode [ 644.654145][T12893] bridge9: port 1(veth0_to_bond) entered disabled state [ 644.665182][T12893] bond0: (slave bond_slave_0): Releasing backup interface [ 644.680018][T12893] bond0: (slave bond_slave_1): Releasing backup interface [ 644.708795][T12893] team0: Port device team_slave_0 removed [ 644.730764][T12893] team0: Port device team_slave_1 removed [ 644.736889][T12893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.760399][T12893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.791445][T12893] device veth5 left promiscuous mode [ 644.796977][T12893] bridge1: port 1(veth5) entered disabled state [ 644.858111][T12893] device veth7 left promiscuous mode [ 644.869210][T12893] bridge1: port 2(veth7) entered disabled state [ 644.879398][ T3598] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 644.918209][T12893] device veth15 left promiscuous mode [ 644.935641][T12893] bridge10: port 1(veth15) entered disabled state [ 644.968438][T12893] device veth17 left promiscuous mode [ 644.988333][T12893] bridge11: port 1(veth17) entered disabled state [ 645.060701][T12893] device veth19 left promiscuous mode [ 645.066330][T12893] bridge12: port 1(veth19) entered disabled state [ 645.093063][T12893] device macvlan2 left promiscuous mode [ 645.110015][ T3598] usb 3-1: Using ep0 maxpacket: 32 [ 645.117252][ T3598] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 645.129317][T12893] bridge0: port 1(macvlan2) entered disabled state [ 645.147483][ T3598] usb 3-1: config 0 has no interface number 0 [ 645.169146][ T3598] usb 3-1: config 0 interface 184 has no altsetting 0 [ 645.221114][ T3598] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 645.260931][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.288950][ T3598] usb 3-1: Product: syz [ 645.303573][ T3598] usb 3-1: Manufacturer: syz [ 645.308285][ T3598] usb 3-1: SerialNumber: syz [ 645.344941][ T3598] usb 3-1: config 0 descriptor?? [ 645.366663][ T3598] smsc75xx v1.0.0 [ 645.405945][T12907] device syzkaller0 entered promiscuous mode [ 645.549138][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2877'. [ 645.760627][T12924] device gretap0 entered promiscuous mode [ 645.773280][ T3598] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 645.804884][ T3598] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 645.848381][ T3598] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 645.914450][ T3598] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 646.282627][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2883'. [ 646.299050][ T4317] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 646.489041][ T4317] usb 1-1: Using ep0 maxpacket: 8 [ 646.496237][ T4317] usb 1-1: config index 0 descriptor too short (expected 18482, got 36) [ 646.520598][ T4317] usb 1-1: config 255 has an invalid descriptor of length 72, skipping remainder of the config [ 646.532692][ T4317] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 13 [ 646.547937][ T4317] usb 1-1: config index 1 descriptor too short (expected 18482, got 36) [ 646.579118][ T4317] usb 1-1: config 255 has an invalid descriptor of length 72, skipping remainder of the config [ 646.601204][ T4317] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 13 [ 646.624321][ T4317] usb 1-1: config index 2 descriptor too short (expected 18482, got 36) [ 646.660252][ T4317] usb 1-1: config 255 has an invalid descriptor of length 72, skipping remainder of the config [ 646.672344][ T4275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 646.685010][ T4275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 646.685019][ T4317] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 13 [ 646.697631][ T4317] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 646.712344][T12948] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 646.722479][T12948] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 646.730393][T12948] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 646.739868][T12948] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 646.765893][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.794119][ T4317] usb 1-1: Product: syz [ 646.798580][ T4317] usb 1-1: Manufacturer: syz [ 646.803912][ T4317] usb 1-1: SerialNumber: syz [ 647.023205][T12927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.042383][T12927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.072713][T12927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.091553][T12927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.114080][ T4273] syz-executor (4273) used greatest stack depth: 20368 bytes left [ 647.128868][ T4317] usb 1-1: USB disconnect, device number 30 [ 647.139115][ T3598] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 647.239814][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.265492][T12945] chnl_net:caif_netlink_parms(): no params data found [ 647.339168][ T3598] usb 5-1: Using ep0 maxpacket: 16 [ 647.347034][ T3598] usb 5-1: unable to get BOS descriptor or descriptor too short [ 647.367719][ T3598] usb 5-1: config 7 has an invalid interface number: 106 but max is 3 [ 647.381207][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.394220][ T3598] usb 5-1: config 7 has an invalid interface number: 182 but max is 3 [ 647.420763][ T3598] usb 5-1: config 7 has an invalid interface number: 148 but max is 3 [ 647.440396][ T3598] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 647.452340][ T3598] usb 5-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 647.461741][ T3598] usb 5-1: config 7 has no interface number 0 [ 647.467960][ T3598] usb 5-1: config 7 has no interface number 1 [ 647.474560][ T3598] usb 5-1: config 7 has no interface number 2 [ 647.480923][ T3598] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 647.492246][ T3598] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 647.503349][ T3598] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 647.515681][ T3598] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 647.526999][ T3598] usb 5-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 647.541281][ T3598] usb 5-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 647.553208][ T3598] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 647.564466][ T3598] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 647.575693][ T3598] usb 5-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 647.597235][ T3598] usb 5-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 647.599819][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.617950][ T3598] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 647.643068][ T3598] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 647.665103][ T3598] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 647.723715][ T4317] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 647.744905][ T3598] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 647.779066][ T3598] usb 5-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 647.792997][ T3598] usb 5-1: config 7 interface 106 has no altsetting 0 [ 647.800123][ T3598] usb 5-1: config 7 interface 182 has no altsetting 0 [ 647.807083][ T3598] usb 5-1: config 7 interface 148 has no altsetting 0 [ 647.816257][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.829615][ T3598] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 647.841475][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.850230][ T3598] usb 5-1: Product: syz [ 647.854498][ T3598] usb 5-1: Manufacturer: syz [ 647.859245][ T3598] usb 5-1: SerialNumber: syz [ 647.865358][ T4320] usb 3-1: USB disconnect, device number 17 [ 647.920993][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 647.957168][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 192, setting to 8 [ 647.973926][T12945] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.000618][T12945] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.002750][ T4317] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.025730][T12945] device bridge_slave_0 entered promiscuous mode [ 648.051714][T12945] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.059821][ T4317] usb 1-1: New USB device found, idVendor=15c2, idProduct=033b, bcdDevice= 0.00 [ 648.074800][T12945] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.082462][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.111781][ T4317] usb 1-1: config 0 descriptor?? [ 648.122829][T12945] device bridge_slave_1 entered promiscuous mode [ 648.143455][ T4317] usbhid 1-1:0.0: can't add hid device: -22 [ 648.169705][ T4317] usbhid: probe of 1-1:0.0 failed with error -22 [ 648.202426][ T3598] usb 5-1: USB disconnect, device number 12 [ 648.277423][T12945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.340868][T12945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.344551][ T4317] usb 1-1: USB disconnect, device number 31 [ 648.445046][T12945] team0: Port device team_slave_0 added [ 648.488614][T12945] team0: Port device team_slave_1 added [ 648.569772][ T46] tipc: Left network mode [ 648.598652][T12945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.650347][T12945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.717927][T12945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.759935][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 649.102064][ T46] bridge0: port 3(macvlan2) entered disabled state [ 649.188142][ T46] device macvlan2 left promiscuous mode [ 649.213820][ T46] bridge0: port 3(macvlan2) entered disabled state [ 649.285029][T12945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.294450][T12945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.355946][T12945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.529222][ T3598] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 649.658407][T12945] device hsr_slave_0 entered promiscuous mode [ 649.692620][T12945] device hsr_slave_1 entered promiscuous mode [ 649.705708][T12945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.719314][T12945] Cannot create hsr debugfs directory [ 649.750894][ T3598] usb 2-1: Using ep0 maxpacket: 32 [ 649.758007][ T3598] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 649.797313][ T3598] usb 2-1: config 0 has no interface number 0 [ 649.816967][ T3598] usb 2-1: config 0 interface 184 has no altsetting 0 [ 649.845577][ T3598] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 649.872623][ T3598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.891746][ T3598] usb 2-1: Product: syz [ 649.910272][ T3598] usb 2-1: Manufacturer: syz [ 649.921962][ T3598] usb 2-1: SerialNumber: syz [ 649.945954][ T3598] usb 2-1: config 0 descriptor?? [ 649.962081][ T3598] smsc75xx v1.0.0 [ 650.363883][ T3598] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 650.390322][ T3598] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 650.423821][ T3598] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 650.457800][ T3598] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 650.647114][T13027] device syzkaller0 entered promiscuous mode [ 650.850336][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 651.019240][ T3598] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 651.229937][ T3598] usb 1-1: Using ep0 maxpacket: 32 [ 651.237132][ T3598] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 651.300251][ T3598] usb 1-1: config 0 interface 0 has no altsetting 0 [ 651.307253][ T3598] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 651.363187][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.403992][ T3598] usb 1-1: config 0 descriptor?? [ 651.413800][ T46] device veth25 left promiscuous mode [ 651.421775][ T46] bridge13: port 1(veth25) entered disabled state [ 651.470179][ T46] device veth23 left promiscuous mode [ 651.509732][ T46] bridge12: port 1(veth23) entered disabled state [ 651.547285][ T46] device veth21 left promiscuous mode [ 651.581259][ T46] bridge11: port 1(veth21) entered disabled state [ 651.602036][ T46] device veth19 left promiscuous mode [ 651.608272][ T46] bridge10: port 1(veth19) entered disabled state [ 651.662995][ T46] device veth17 left promiscuous mode [ 651.668691][ T46] bridge9: port 1(veth17) entered disabled state [ 651.702072][ T46] device veth15 left promiscuous mode [ 651.718100][ T46] bridge8: port 1(veth15) entered disabled state [ 651.762219][ T46] device veth3 left promiscuous mode [ 651.767847][ T46] bridge1: port 1(veth3) entered disabled state [ 651.816174][ T46] device hsr_slave_0 left promiscuous mode [ 651.830163][ T46] device hsr_slave_1 left promiscuous mode [ 651.851096][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.877407][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.898491][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.916686][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.938485][ T46] device bridge_slave_1 left promiscuous mode [ 651.949377][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.982133][ T46] device bridge_slave_0 left promiscuous mode [ 652.011126][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.101260][ T46] device veth0_macvtap left promiscuous mode [ 652.124445][ T46] device veth1_vlan left promiscuous mode [ 652.130899][ T46] device veth0_vlan left promiscuous mode [ 652.198337][ T3598] corsair-cpro 0003:1B1C:0C10.0023: unknown main item tag 0x0 [ 652.217863][ T3598] corsair-cpro 0003:1B1C:0C10.0023: unknown main item tag 0x0 [ 652.238109][ T3598] corsair-cpro 0003:1B1C:0C10.0023: item fetching failed at offset 3/5 [ 652.249887][ T3598] corsair-cpro: probe of 0003:1B1C:0C10.0023 failed with error -22 [ 652.398069][ T4357] usb 2-1: USB disconnect, device number 127 [ 652.919298][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 653.721142][ T4357] usb 1-1: USB disconnect, device number 32 [ 654.681553][ T46] team0 (unregistering): Port device team_slave_1 removed [ 654.732611][ T46] team0 (unregistering): Port device team_slave_0 removed [ 654.787859][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.846206][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.001884][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 655.297728][ T46] bond0 (unregistering): Released all slaves [ 655.429038][T13085] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2915'. [ 655.453133][T13095] device syzkaller0 entered promiscuous mode [ 655.821605][T12945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 655.921110][T12945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 655.974854][T12945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 656.010927][T12945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 656.379760][T12945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.499688][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 656.508402][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 656.541844][T12945] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.723889][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 656.751618][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 656.809593][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.818064][ T9557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.880095][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 656.929228][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 656.959866][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 657.016676][T10207] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.023905][T10207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.110361][T13138] device syzkaller0 entered promiscuous mode [ 657.124105][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 657.164863][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 657.216473][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 657.256510][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 657.286227][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 657.317835][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 657.367439][T13161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2937'. [ 657.387995][T13161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.419225][T13161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.434970][T13161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.455999][T13161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.563157][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 657.582444][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 657.598585][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 657.608111][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 657.617766][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 657.630759][T12945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 658.879816][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 658.887438][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 658.965296][T12945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.989451][T13211] device syzkaller0 entered promiscuous mode [ 659.157883][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 659.188115][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 659.308519][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 659.364237][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 659.407182][T12945] device veth0_vlan entered promiscuous mode [ 659.456839][T13221] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2954'. [ 659.510121][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 659.519664][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 659.563780][T13220] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 659.620952][T13220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 659.667677][T13220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 659.731053][T13220] device bridge_slave_0 left promiscuous mode [ 659.747586][T13220] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.784130][T13220] device bridge_slave_1 left promiscuous mode [ 659.794369][T13220] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.824953][T13220] device ip6gretap0 entered promiscuous mode [ 659.848573][T13220] device macvlan2 left promiscuous mode [ 659.880558][T13220] device veth0_to_bond left promiscuous mode [ 659.893846][T13220] bridge8: port 1(veth0_to_bond) entered disabled state [ 660.007821][T13220] bond0: (slave bond_slave_0): Releasing backup interface [ 660.053432][T13220] bond0: (slave bond_slave_1): Releasing backup interface [ 660.154882][T13220] team0: Port device team_slave_0 removed [ 660.198070][T13220] team0: Port device team_slave_1 removed [ 660.276857][T13220] bond1: (slave geneve2): Releasing backup interface [ 660.311131][T13220] device veth7 left promiscuous mode [ 660.316830][T13220] bridge9: port 1(veth7) entered disabled state [ 660.333583][T13220] device ip6gretap0 left promiscuous mode [ 660.355859][T13220] bridge0: port 3(macvlan2) entered disabled state [ 660.388359][T13220] device veth9 left promiscuous mode [ 660.401006][T13220] bridge10: port 1(veth9) entered disabled state [ 660.501753][T12945] device veth1_vlan entered promiscuous mode [ 660.917560][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 660.942659][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 661.082635][T12945] device veth0_macvtap entered promiscuous mode [ 661.111703][T13257] device syzkaller0 entered promiscuous mode [ 661.267275][T12945] device veth1_macvtap entered promiscuous mode [ 661.364628][T12945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.405939][T12945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.490090][T12945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.499228][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 661.518121][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 661.575154][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 661.606282][T13266] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2965'. [ 661.618454][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 661.657206][T12945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.697723][T12945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.763919][T12945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.783512][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 661.820282][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 661.835568][T12945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.844989][T12945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.853972][T12945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.863642][T12945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.037264][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.059997][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.104494][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 662.256451][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.271477][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.315460][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 663.369067][ T4317] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 663.559078][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 663.568414][ T4317] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 663.617436][ T4317] usb 1-1: config 0 interface 0 has no altsetting 0 [ 663.671481][ T4317] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 663.721525][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.773332][ T4317] usb 1-1: config 0 descriptor?? [ 664.577131][ T4317] corsair-cpro 0003:1B1C:0C10.0024: unknown main item tag 0x0 [ 664.609046][ T4317] corsair-cpro 0003:1B1C:0C10.0024: item fetching failed at offset 3/5 [ 664.644773][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 664.652283][ T4317] corsair-cpro: probe of 0003:1B1C:0C10.0024 failed with error -22 [ 664.672669][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 664.681556][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 664.691010][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 664.699301][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 664.706735][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 665.484534][ T29] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.551953][T13342] chnl_net:caif_netlink_parms(): no params data found [ 665.720598][ T29] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.892495][ T29] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.990230][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'. [ 666.075323][T12809] usb 1-1: USB disconnect, device number 33 [ 666.152754][ T29] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.259627][T13342] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.267150][T13342] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.278768][T13342] device bridge_slave_0 entered promiscuous mode [ 666.304440][T13342] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.323935][T13342] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.333242][T13342] device bridge_slave_1 entered promiscuous mode [ 666.363449][T13389] device syzkaller0 entered promiscuous mode [ 666.545602][T13342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.578357][T13342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.758683][T13342] team0: Port device team_slave_0 added [ 666.769595][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 666.890761][T13342] team0: Port device team_slave_1 added [ 666.927215][ T29] tipc: Left network mode [ 667.152320][T13342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.178417][T13342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.285261][T13342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.398261][T13342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.410179][T13342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.492161][T13342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.728630][T13342] device hsr_slave_0 entered promiscuous mode [ 667.752462][T13342] device hsr_slave_1 entered promiscuous mode [ 667.775422][T13342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.817305][T13342] Cannot create hsr debugfs directory [ 668.475182][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3001'. [ 668.839302][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 669.588515][ T29] device veth11 left promiscuous mode [ 669.607908][ T29] bridge9: port 1(veth11) entered disabled state [ 669.687093][ T29] device hsr_slave_0 left promiscuous mode [ 669.723879][ T29] device hsr_slave_1 left promiscuous mode [ 669.793931][ T29] device veth1_macvtap left promiscuous mode [ 669.807911][ T29] device veth0_macvtap left promiscuous mode [ 669.863991][ T29] device veth1_vlan left promiscuous mode [ 669.907505][ T29] device veth0_vlan left promiscuous mode [ 670.919408][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 672.588222][ T29] bond0 (unregistering): Released all slaves [ 672.712237][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3013'. [ 672.721859][T13506] veth0: Caught tx_queue_len zero misconfig [ 672.999191][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 673.175624][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3015'. [ 673.303730][T13342] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 673.412309][T13342] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 673.475680][T13342] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 673.492651][T13342] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 673.553271][T13544] device syzkaller0 entered promiscuous mode [ 674.047053][T13342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.102888][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 674.121361][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 674.161851][T13342] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.225892][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 674.246057][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 674.272973][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.280302][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.320003][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 674.344724][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 674.375705][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 674.402753][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.410064][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.448758][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 674.487617][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 674.561337][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 674.596893][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 674.659928][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 674.715303][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 674.778815][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 674.814958][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 674.842436][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 674.894741][T13342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 674.958422][T13342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 675.014014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 675.023880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 675.217946][T13585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3027'. [ 675.704288][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3033'. [ 675.738378][T13603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.770294][T13601] device syzkaller0 entered promiscuous mode [ 676.232276][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 676.249266][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 676.291379][T13342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.340223][ T4320] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 676.410737][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3039'. [ 676.528986][ T4320] usb 4-1: Using ep0 maxpacket: 32 [ 676.536155][ T4320] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 676.583076][ T4320] usb 4-1: config 0 interface 0 has no altsetting 0 [ 676.603340][ T4320] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 676.650006][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.686305][ T4320] usb 4-1: config 0 descriptor?? [ 676.807413][T13634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 677.475242][ T4320] corsair-cpro 0003:1B1C:0C10.0025: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 677.884971][ T4320] corsair-cpro: probe of 0003:1B1C:0C10.0025 failed with error -71 [ 677.938822][ T4320] usb 4-1: USB disconnect, device number 12 [ 678.018199][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 678.041240][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 678.129195][ T8895] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 678.153536][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 678.173661][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 678.214371][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 678.244472][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 678.277558][T13342] device veth0_vlan entered promiscuous mode [ 678.329076][ T8895] usb 2-1: Using ep0 maxpacket: 32 [ 678.336595][ T8895] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 678.364097][ T8895] usb 2-1: config 0 has no interface number 0 [ 678.364696][T13342] device veth1_vlan entered promiscuous mode [ 678.385803][T13675] fido_id[13675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 678.405346][ T8895] usb 2-1: config 0 interface 184 has no altsetting 0 [ 678.427076][ T8895] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 678.452149][ T8895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.470642][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 678.482604][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 678.505040][ T8895] usb 2-1: Product: syz [ 678.537475][ T8895] usb 2-1: Manufacturer: syz [ 678.547355][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 678.558478][ T8895] usb 2-1: SerialNumber: syz [ 678.581083][ T8895] usb 2-1: config 0 descriptor?? [ 678.594743][ T8895] smsc75xx v1.0.0 [ 678.602535][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 678.657048][T13342] device veth0_macvtap entered promiscuous mode [ 678.692934][T13342] device veth1_macvtap entered promiscuous mode [ 678.751447][T13682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3053'. [ 678.771122][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3053'. [ 678.803659][T13342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.855310][T13342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.889047][T13342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.909001][T13342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.961762][T13342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.984518][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 678.997300][ T8895] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 679.026394][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 679.036683][ T8895] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 679.057719][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 679.092204][ T8895] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 679.103203][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 679.123330][ T8895] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 679.125065][T13342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.169229][T13342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.209160][T13342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.258965][T13342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.289021][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 679.295779][T13342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.344926][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 679.387707][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 679.424304][T13342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.435658][T13342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.468996][T13342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.478014][T13342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.479721][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 679.507920][ T14] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 679.535151][ T14] usb 4-1: config 0 has no interface number 0 [ 679.559727][ T14] usb 4-1: config 0 interface 12 has no altsetting 0 [ 679.585066][ T14] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 679.651171][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.669973][ T14] usb 4-1: Product: syz [ 679.674238][ T14] usb 4-1: Manufacturer: syz [ 679.684559][ T14] usb 4-1: SerialNumber: syz [ 679.700210][ T14] usb 4-1: config 0 descriptor?? [ 679.792118][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3056'. [ 679.809740][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.817668][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.859772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 679.919659][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.927580][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.955452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 680.439181][T13716] device syzkaller0 entered promiscuous mode [ 680.890912][ T4317] usb 2-1: USB disconnect, device number 2 [ 681.145304][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.172245][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.258367][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 681.269584][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 681.278779][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 681.290785][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 681.301131][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 681.308542][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 681.363695][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.389091][ T4317] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 681.391075][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.423815][T13728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3064'. [ 681.433702][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3064'. [ 681.549885][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.565620][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.579215][ T4317] usb 2-1: Using ep0 maxpacket: 8 [ 681.586996][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 681.605230][ T4317] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 681.615188][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.628061][ T4317] usb 2-1: config 0 descriptor?? [ 681.680120][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.691057][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.842659][ T4317] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 682.107829][ T9] tipc: Left network mode [ 682.221555][ T14] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 682.243016][ T14] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 682.281829][ T14] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 682.326926][ T14] f81534: probe of 4-1:0.12 failed with error -71 [ 682.398183][ T14] usb 4-1: USB disconnect, device number 13 [ 682.417216][T13725] chnl_net:caif_netlink_parms(): no params data found [ 682.459750][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'. [ 683.216412][T13725] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.249175][T13725] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.308711][T13725] device bridge_slave_0 entered promiscuous mode [ 683.399285][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 683.485245][T13725] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.505625][T13725] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.533851][ T4316] usb 2-1: USB disconnect, device number 3 [ 683.571166][T13725] device bridge_slave_1 entered promiscuous mode [ 683.821479][T13725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.860672][T13725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.340950][T13725] team0: Port device team_slave_0 added [ 684.356818][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3076'. [ 684.392148][T13725] team0: Port device team_slave_1 added [ 684.744522][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3079'. [ 684.877303][T13794] device syzkaller0 entered promiscuous mode [ 684.889191][ T4316] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 684.956158][T13725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.965962][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.996114][T13725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.099197][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 685.107018][ T4316] usb 1-1: unable to get BOS descriptor or descriptor too short [ 685.131367][T13799] sctp: [Deprecated]: syz.3.3082 (pid 13799) Use of int in maxseg socket option. [ 685.131367][T13799] Use struct sctp_assoc_value instead [ 685.141268][ T4316] usb 1-1: config 7 has an invalid interface number: 106 but max is 3 [ 685.170456][ T4316] usb 1-1: config 7 has an invalid interface number: 182 but max is 3 [ 685.190008][ T4316] usb 1-1: config 7 has an invalid interface number: 148 but max is 3 [ 685.198293][ T4316] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 685.228918][ T4316] usb 1-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 685.248277][ T4316] usb 1-1: config 7 has no interface number 0 [ 685.258394][ T4316] usb 1-1: config 7 has no interface number 1 [ 685.278645][ T4316] usb 1-1: config 7 has no interface number 2 [ 685.285144][ T4316] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 685.301306][ T4317] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 685.306645][ T4316] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 685.344997][ T4316] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 685.366528][ T4316] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 685.396064][ T4316] usb 1-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 685.419275][ T4316] usb 1-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 685.437164][ T4316] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 685.448750][ T4316] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 685.460136][ T4316] usb 1-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 685.472506][ T4316] usb 1-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 685.484129][ T4316] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 685.495569][ T4316] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 685.507130][ T4316] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 685.510837][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 685.519909][ T4316] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 685.525473][ T4317] usb 5-1: Using ep0 maxpacket: 8 [ 685.551655][ T4316] usb 1-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 685.560778][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 685.576138][ T4317] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 685.585452][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.596167][ T4317] usb 5-1: config 0 descriptor?? [ 685.605463][ T4316] usb 1-1: config 7 interface 106 has no altsetting 0 [ 685.612752][ T4316] usb 1-1: config 7 interface 182 has no altsetting 0 [ 685.620114][ T4316] usb 1-1: config 7 interface 148 has no altsetting 0 [ 685.643030][ T4316] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 685.669135][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.677227][ T4316] usb 1-1: Product: syz [ 685.682595][ T4316] usb 1-1: Manufacturer: syz [ 685.687261][ T4316] usb 1-1: SerialNumber: syz [ 685.813345][ T4317] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 685.890665][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.897131][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.008334][ T4316] usb 1-1: USB disconnect, device number 34 [ 686.303486][ T4316] usb 5-1: USB disconnect, device number 13 [ 687.218948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 687.228969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 687.238945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 687.248951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 687.268944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 687.559266][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 689.567794][T13725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.589212][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.620254][T13725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.639644][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 689.743816][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3082'. [ 689.870478][ T9] device veth19 left promiscuous mode [ 689.876253][ T9] bridge11: port 1(veth19) entered disabled state [ 689.885901][ T9] device veth17 left promiscuous mode [ 689.891867][ T9] bridge10: port 1(veth17) entered disabled state [ 689.901416][ T9] device veth15 left promiscuous mode [ 689.907128][ T9] bridge9: port 1(veth15) entered disabled state [ 689.934698][ T9] device veth13 left promiscuous mode [ 689.964864][ T9] bridge8: port 1(veth13) entered disabled state [ 689.991191][ T9] device veth0_to_bond left promiscuous mode [ 690.023174][ T9] bridge7: port 1(veth0_to_bond) entered disabled state [ 690.111413][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3089'. [ 690.120818][ T9] device hsr_slave_0 left promiscuous mode [ 690.136467][ T9] device hsr_slave_1 left promiscuous mode [ 690.147448][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.167646][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.209306][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.216842][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.247735][ T9] device bridge_slave_1 left promiscuous mode [ 690.269212][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.320835][ T9] device bridge_slave_0 left promiscuous mode [ 690.331686][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.362803][ T9] device veth1_macvtap left promiscuous mode [ 690.369599][ T9] device veth0_macvtap left promiscuous mode [ 690.376128][ T9] device veth1_vlan left promiscuous mode [ 690.383000][ T9] device veth0_vlan left promiscuous mode [ 690.569231][ T8895] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 690.779193][ T8895] usb 4-1: Using ep0 maxpacket: 8 [ 690.788496][ T8895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 690.819028][ T8895] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 690.828228][ T8895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.864333][ T8895] usb 4-1: config 0 descriptor?? [ 691.084923][ T8895] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 691.360717][ T4344] usb 4-1: USB disconnect, device number 14 [ 692.602802][ T9] team0 (unregistering): Port device team_slave_1 removed [ 692.653797][ T9] team0 (unregistering): Port device team_slave_0 removed [ 692.751981][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.837647][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.395531][ T9] bond0 (unregistering): Released all slaves [ 693.581050][T13839] device syzkaller0 entered promiscuous mode [ 693.590515][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3090'. [ 693.737478][T13725] device hsr_slave_0 entered promiscuous mode [ 693.761241][T13725] device hsr_slave_1 entered promiscuous mode [ 693.779994][T13725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 693.798019][T13725] Cannot create hsr debugfs directory [ 693.866121][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3100'. [ 694.045386][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 694.549147][ T14] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 694.769063][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 694.776590][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 694.835618][ T14] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 694.894442][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.955321][ T14] usb 1-1: config 0 descriptor?? [ 695.179117][ T14] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 695.361920][T13725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 695.409675][T13725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 695.480635][T13725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 695.562409][T13725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 695.701654][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3109'. [ 695.815610][T13926] tipc: Enabling of bearer rejected, failed to enable media [ 696.027340][T13725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.112741][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 696.136722][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 696.159238][ T3598] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 696.191122][T13725] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.302020][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 696.322656][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 696.378654][ T4452] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.385953][ T4452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.389276][ T3598] usb 5-1: Using ep0 maxpacket: 16 [ 696.401107][ T3598] usb 5-1: unable to get BOS descriptor or descriptor too short [ 696.440699][ T3598] usb 5-1: config 7 has an invalid interface number: 106 but max is 3 [ 696.488917][ T3598] usb 5-1: config 7 has an invalid interface number: 182 but max is 3 [ 696.539145][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 696.558637][ T3598] usb 5-1: config 7 has an invalid interface number: 148 but max is 3 [ 696.568170][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 696.607491][ T3598] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 696.629233][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 696.662058][ T3598] usb 5-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 696.680743][ T4452] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.687978][ T4452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.718441][ T3598] usb 5-1: config 7 has no interface number 0 [ 696.756708][ T3598] usb 5-1: config 7 has no interface number 1 [ 696.771338][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 696.796605][ T3598] usb 5-1: config 7 has no interface number 2 [ 696.819125][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 696.831562][ T3598] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 696.874109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 696.898467][ T3598] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 696.919766][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 696.959034][ T3598] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 696.981478][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 697.040011][ T3598] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 697.042049][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 697.107989][ T3598] usb 5-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 697.127114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 697.162077][ T3598] usb 5-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 697.214199][ T3598] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 697.236446][ T3598] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 697.259814][ T3598] usb 5-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 697.277862][ T3598] usb 5-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 697.312561][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 697.332467][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 697.354007][ T3598] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 697.371475][T13725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 697.404793][T13725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 697.405990][ T3598] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 697.426842][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 697.446847][ T3598] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 697.462666][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 697.502356][ T3598] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 697.548333][ T3598] usb 5-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 697.619263][ T3598] usb 5-1: config 7 interface 106 has no altsetting 0 [ 697.656201][ T3598] usb 5-1: config 7 interface 182 has no altsetting 0 [ 697.694128][ T3598] usb 5-1: config 7 interface 148 has no altsetting 0 [ 697.744217][ T3598] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 697.791423][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.824215][ T3598] usb 5-1: Product: syz [ 697.842896][ T3598] usb 5-1: Manufacturer: syz [ 697.860865][ T3598] usb 5-1: SerialNumber: syz [ 697.897216][ T8895] usb 1-1: USB disconnect, device number 35 [ 698.207018][ T3598] usb 5-1: USB disconnect, device number 14 [ 698.550672][T13987] veth: renamed from vlan0 [ 698.818169][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 698.829317][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 698.877670][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3124'. [ 698.919701][T13725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.975070][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 699.002036][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 699.072227][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 699.099857][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 699.126798][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 699.149206][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 699.149465][ T3598] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 699.172752][T13725] device veth0_vlan entered promiscuous mode [ 699.187765][T14005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3126'. [ 699.237314][T13725] device veth1_vlan entered promiscuous mode [ 699.359243][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 699.379261][ T3598] usb 4-1: Using ep0 maxpacket: 8 [ 699.385351][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 699.390133][ T3598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 699.414907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 699.439506][ T3598] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 699.459587][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 699.469067][ T3598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.500120][T13725] device veth0_macvtap entered promiscuous mode [ 699.527294][ T3598] usb 4-1: config 0 descriptor?? [ 699.536351][T13725] device veth1_macvtap entered promiscuous mode [ 699.684594][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.711333][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.739144][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.756216][ T3598] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 699.809849][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.830771][T13725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.845846][T11402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 699.860920][T11402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 699.893637][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.920229][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.938973][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.020933][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.100995][T13725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.160865][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 700.182683][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 700.231036][T13725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.261618][T13725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.312080][T13725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.361981][T13725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.783073][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.824196][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.870227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 700.988003][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3132'. [ 701.056351][ T4317] usb 4-1: USB disconnect, device number 15 [ 701.065068][T10207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.087200][T10207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.122650][T11402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 701.399531][T14059] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3060'. [ 701.550014][T14066] device syzkaller0 entered promiscuous mode [ 702.029030][ T4318] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 702.249171][ T4318] usb 3-1: Using ep0 maxpacket: 32 [ 702.256320][ T4318] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 702.305565][ T4318] usb 3-1: config 0 has no interface number 0 [ 702.332510][ T4318] usb 3-1: config 0 interface 12 has no altsetting 0 [ 702.424513][ T4318] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 702.464339][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.504991][ T4318] usb 3-1: Product: syz [ 702.531175][ T4318] usb 3-1: Manufacturer: syz [ 702.561505][ T4318] usb 3-1: SerialNumber: syz [ 702.597852][ T4318] usb 3-1: config 0 descriptor?? [ 702.603480][T14096] device syzkaller0 entered promiscuous mode [ 703.370309][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 703.380590][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 703.389229][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 703.397301][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 703.405335][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 703.415245][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 703.527992][T14116] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3149'. [ 703.739346][T14125] xt_hashlimit: size too large, truncated to 1048576 [ 703.849228][ T4316] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 704.059228][ T4316] usb 5-1: Using ep0 maxpacket: 8 [ 704.081071][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 704.164169][ T4316] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 704.210037][T14133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3152'. [ 704.221593][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.253582][ T1110] tipc: Left network mode [ 704.270777][ T4316] usb 5-1: config 0 descriptor?? [ 704.288297][T14108] chnl_net:caif_netlink_parms(): no params data found [ 704.506363][ T4316] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 704.626612][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3153'. [ 704.711273][ T4316] usb 5-1: USB disconnect, device number 15 [ 704.827826][T14108] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.835341][T14108] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.844704][T14108] device bridge_slave_0 entered promiscuous mode [ 704.855234][T14108] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.863895][T14108] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.874654][T14108] device bridge_slave_1 entered promiscuous mode [ 705.001567][T14108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.060163][ T4318] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 705.074660][ T4318] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 705.090308][T14108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.103824][ T4318] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 705.126473][ T4318] f81534: probe of 3-1:0.12 failed with error -71 [ 705.171211][ T4318] usb 3-1: USB disconnect, device number 18 [ 705.307025][T14108] team0: Port device team_slave_0 added [ 705.360709][T14108] team0: Port device team_slave_1 added [ 705.480036][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 705.555420][T14108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.593338][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.727812][T14108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.815997][T14108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.828965][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.906167][T14108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.229395][T14165] device syzkaller0 entered promiscuous mode [ 706.304763][T14180] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3160'. [ 706.332649][T14108] device hsr_slave_0 entered promiscuous mode [ 706.372325][T14108] device hsr_slave_1 entered promiscuous mode [ 706.425530][T14108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 706.453287][T14108] Cannot create hsr debugfs directory [ 707.249220][ T4344] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 707.439241][ T4344] usb 4-1: Using ep0 maxpacket: 8 [ 707.446230][ T4344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.477669][ T4344] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 707.487753][ T4344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.529779][ T4344] usb 4-1: config 0 descriptor?? [ 707.561024][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 707.752468][ T4344] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 708.366278][ T4276] usb 4-1: USB disconnect, device number 16 [ 709.644088][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 710.474206][T14193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3162'. [ 710.919506][ T1110] device hsr_slave_0 left promiscuous mode [ 710.954782][ T1110] device hsr_slave_1 left promiscuous mode [ 711.361269][ T1110] bond2 (unregistering): Released all slaves [ 711.718956][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 711.903714][ T1110] bond1 (unregistering): Released all slaves [ 713.916240][ T1110] bond0 (unregistering): Released all slaves [ 714.035674][T14223] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3170'. [ 714.046199][T14226] tipc: Enabling of bearer rejected, failed to enable media [ 714.436783][T14264] device syzkaller0 entered promiscuous mode [ 714.729912][T14268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3177'. [ 715.278422][T14293] tipc: Enabling of bearer rejected, failed to enable media [ 715.441511][T14108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 715.490112][T14108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 715.553145][T14108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 715.626565][T14301] device veth0_to_batadv entered promiscuous mode [ 715.663253][T14301] device macvlan4 entered promiscuous mode [ 715.681456][T14108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 715.744208][T14307] device syzkaller0 entered promiscuous mode [ 716.087932][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3189'. [ 716.202226][T14108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.274526][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 716.300296][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 716.374427][T14108] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.429886][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 716.463879][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 716.491062][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.498278][ T9557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.574750][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 716.629602][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 716.666587][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 716.708500][ T9557] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.715781][ T9557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.754913][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 716.774323][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 716.812172][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 716.840023][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 716.899556][T14333] tipc: Enabling of bearer rejected, failed to enable media [ 716.912018][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 716.932966][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 716.980608][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 717.052424][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 717.099853][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 717.148064][T14108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 717.191632][T14108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 717.240825][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 717.260502][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 717.311209][T14345] device veth0_to_batadv entered promiscuous mode [ 717.359533][T14345] device macvlan2 entered promiscuous mode [ 717.480580][T14352] device syzkaller0 entered promiscuous mode [ 717.662504][T14355] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3204'. [ 717.986359][T14370] tipc: Enabling of bearer rejected, failed to enable media [ 718.049401][ T4316] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 718.269091][ T4316] usb 4-1: Using ep0 maxpacket: 16 [ 718.276707][ T4316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 718.320327][ T4316] usb 4-1: config 7 has an invalid interface number: 106 but max is 3 [ 718.328604][ T4316] usb 4-1: config 7 has an invalid interface number: 182 but max is 3 [ 718.399658][ T4316] usb 4-1: config 7 has an invalid interface number: 148 but max is 3 [ 718.425064][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 718.432746][ T4316] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 718.464509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 718.472343][ T4316] usb 4-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 718.494258][T14108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.501586][ T4316] usb 4-1: config 7 has no interface number 0 [ 718.528241][ T4316] usb 4-1: config 7 has no interface number 1 [ 718.561834][ T4316] usb 4-1: config 7 has no interface number 2 [ 718.568142][ T4316] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 718.588265][T14388] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 718.600322][ T4316] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 718.627279][ T4316] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 718.655092][ T4316] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 718.672043][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 718.699125][ T4316] usb 4-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 718.715038][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 718.743831][ T4316] usb 4-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 718.785531][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 718.805815][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 718.851578][ T4316] usb 4-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 718.863683][T14108] device veth0_vlan entered promiscuous mode [ 718.886365][ T4316] usb 4-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 718.900270][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 718.909378][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 718.928477][ T4316] usb 4-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 718.953951][T14108] device veth1_vlan entered promiscuous mode [ 718.969210][ T4316] usb 4-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 718.982495][T14397] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3216'. [ 718.999179][ T4316] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 719.051553][ T4316] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 719.063364][T11402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 719.072889][T11402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 719.093327][T11402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 719.109112][ T4316] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 719.114394][T11402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 719.155969][ T4316] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 719.170705][T14108] device veth0_macvtap entered promiscuous mode [ 719.176081][ T4316] usb 4-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 719.197510][ T4316] usb 4-1: config 7 interface 106 has no altsetting 0 [ 719.205002][ T4316] usb 4-1: config 7 interface 182 has no altsetting 0 [ 719.212178][ T4316] usb 4-1: config 7 interface 148 has no altsetting 0 [ 719.240905][ T4316] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 719.263242][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.279000][ T4316] usb 4-1: Product: syz [ 719.283258][ T4316] usb 4-1: Manufacturer: syz [ 719.307347][ T4316] usb 4-1: SerialNumber: syz [ 719.361130][T14108] device veth1_macvtap entered promiscuous mode [ 719.392314][T11402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 719.410118][T11402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 719.446289][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.519681][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.581558][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.624923][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.663869][ T4316] usb 4-1: USB disconnect, device number 17 [ 719.687267][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.714214][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.766870][T14108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.778649][T14407] tipc: Enabling of bearer rejected, failed to enable media [ 719.820558][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 719.860407][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 719.899264][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.930715][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.982026][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.023335][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.085530][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.135949][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.171180][T14108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.184492][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 720.214345][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 720.267340][T14108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.292884][T14108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.311822][T14108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.331084][T14108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.357029][T14430] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3227'. [ 720.402059][T14424] device syzkaller0 entered promiscuous mode [ 720.825165][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.849126][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.931838][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 720.971895][T14454] tipc: Enabling of bearer rejected, failed to enable media [ 721.002475][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.018975][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.044818][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 721.363327][T14465] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3238'. [ 721.604123][T14470] device syzkaller0 entered promiscuous mode [ 722.570405][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 722.583354][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 722.591953][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 722.604846][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 722.613827][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 722.621701][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 722.622589][T14501] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3251'. [ 722.691402][T14503] Illegal XDP return value 4294967274 on prog (id 113) dev N/A, expect packet loss! [ 722.855040][T14507] device syzkaller0 entered promiscuous mode [ 723.588806][T14497] chnl_net:caif_netlink_parms(): no params data found [ 723.778265][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.815502][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 723.910928][T14539] device syzkaller0 entered promiscuous mode [ 723.925499][T14542] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3265'. [ 724.679269][T12948] Bluetooth: hci0: command 0x0409 tx timeout [ 726.773996][T12948] Bluetooth: hci0: command 0x041b tx timeout [ 727.220773][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.259558][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 727.360276][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.372213][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 727.570011][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.623136][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 727.699444][T14497] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.707392][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.731806][T14497] device bridge_slave_0 entered promiscuous mode [ 727.796997][T14497] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.821446][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.858298][T14497] device bridge_slave_1 entered promiscuous mode [ 728.002329][T14497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.029257][T14606] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3276'. [ 728.094515][T14497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.139940][T14604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3277'. [ 728.216790][T14497] team0: Port device team_slave_0 added [ 728.229010][ T4276] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 728.287844][T14497] team0: Port device team_slave_1 added [ 728.429154][ T4276] usb 1-1: Using ep0 maxpacket: 32 [ 728.446393][ T4276] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 728.492301][ T4276] usb 1-1: config 0 has no interface number 0 [ 728.518632][T14611] device syzkaller0 entered promiscuous mode [ 728.528939][ T4276] usb 1-1: config 0 interface 184 has no altsetting 0 [ 728.560481][ T4276] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 728.587352][ T4276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.611410][ T11] tipc: Left network mode [ 728.616043][ T4276] usb 1-1: Product: syz [ 728.629127][ T4276] usb 1-1: Manufacturer: syz [ 728.639348][ T4276] usb 1-1: SerialNumber: syz [ 728.669864][ T4276] usb 1-1: config 0 descriptor?? [ 728.686726][ T4276] smsc75xx v1.0.0 [ 728.839559][T12948] Bluetooth: hci0: command 0x040f tx timeout [ 729.284709][ T4276] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 729.315924][ T4276] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 729.352026][ T4276] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 729.386567][ T4276] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 729.439678][ T4276] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 729.462819][ T4276] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 729.502740][ T4276] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 730.920018][T12948] Bluetooth: hci0: command 0x0419 tx timeout [ 730.960338][ T14] usb 1-1: USB disconnect, device number 36 [ 733.038685][T14497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.048945][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.075151][T14497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.258149][T14630] device syzkaller0 entered promiscuous mode [ 733.289850][T14669] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3287'. [ 735.710436][T14497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.719049][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.745680][T14497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.895138][T14497] device hsr_slave_0 entered promiscuous mode [ 735.935190][T14497] device hsr_slave_1 entered promiscuous mode [ 736.692251][T14697] device syzkaller0 entered promiscuous mode [ 739.939542][T14707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.486505][T14724] device syzkaller0 entered promiscuous mode [ 740.637686][T14739] device syzkaller0 entered promiscuous mode [ 743.795009][ T11] device hsr_slave_0 left promiscuous mode [ 743.801841][ T11] device hsr_slave_1 left promiscuous mode [ 743.818264][ T11] device veth0_to_batadv left promiscuous mode [ 743.827076][ T11] device veth1_macvtap left promiscuous mode [ 743.852088][ T11] device veth0_macvtap left promiscuous mode [ 743.858322][ T11] device veth1_vlan left promiscuous mode [ 743.889057][ T11] device veth0_vlan left promiscuous mode [ 745.020177][ T11] bond1 (unregistering): Released all slaves [ 746.036636][ T11] bond0 (unregistering): Released all slaves [ 746.162300][T14745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3310'. [ 747.323297][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.341683][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.417813][T14497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 748.524990][T14497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 748.593211][T14497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 748.767432][T14793] xt_nfacct: accounting object `syz0' does not exist [ 748.857896][T14790] netlink: 'syz.4.3318': attribute type 10 has an invalid length. [ 748.910626][T14790] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.940727][T14790] bond0: (slave team0): Enslaving as an active interface with an up link [ 749.008452][T14497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 749.324464][T14497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.377102][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 749.408576][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 749.453558][T14497] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.533855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 749.549998][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 749.558655][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.565843][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.625106][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 749.639784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 749.679417][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.686606][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.751955][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 749.768690][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 749.796199][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 749.935286][T14814] device syzkaller0 entered promiscuous mode [ 749.961620][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 749.980381][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 749.989526][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 750.005896][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 752.878699][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 753.010843][T14840] device syzkaller0 entered promiscuous mode [ 753.019769][T14851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3329'. [ 755.804640][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 755.816312][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 755.922249][T14882] device syzkaller0 entered promiscuous mode [ 755.939061][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 755.947974][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 755.959968][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 758.491047][T14908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3341'. [ 758.554479][T14909] device syzkaller0 entered promiscuous mode [ 761.133043][T14931] netlink: 'syz.0.3346': attribute type 9 has an invalid length. [ 761.488372][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 761.496241][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 761.605678][T14497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.695348][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 761.717099][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 761.821656][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 761.860336][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 761.920043][T14497] device veth0_vlan entered promiscuous mode [ 761.944825][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 761.962816][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 761.996015][T14497] device veth1_vlan entered promiscuous mode [ 762.044766][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 762.076931][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 762.156676][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 762.189997][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 762.227701][T14497] device veth0_macvtap entered promiscuous mode [ 762.254765][T14497] device veth1_macvtap entered promiscuous mode [ 762.277240][T14968] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3353'. [ 762.301332][T14497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.315425][T14497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.328082][T14497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.343545][T14497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.355742][T14497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.372850][T14497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.385426][T14497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.403431][T14497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.415526][T14497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.426756][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 762.436949][T10207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 762.454919][T14497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.471313][T14497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.483317][T14497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.501686][T14497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.512225][T14497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.523628][T14497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.534542][T14497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.552357][T14497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.568423][T14497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.589256][T14497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.598300][T14497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.608806][T14497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.617909][T14497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.632694][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 762.642007][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 762.660745][T14969] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.3353'. [ 763.033385][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.057241][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.180897][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 763.315080][T14979] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3357'. [ 763.601950][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.634382][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.786619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 764.054389][T14999] device syzkaller0 entered promiscuous mode [ 764.538987][ T4316] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 764.728941][ T4316] usb 4-1: Using ep0 maxpacket: 32 [ 764.736807][ T4316] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 764.803757][ T4316] usb 4-1: config 0 interface 0 has no altsetting 0 [ 764.818275][ T4316] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 764.855280][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.901625][ T4316] usb 4-1: config 0 descriptor?? [ 765.053499][T15029] netlink: 'syz.4.3376': attribute type 13 has an invalid length. [ 765.152365][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 765.260451][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 765.290047][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 765.559578][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3376'. [ 765.668261][T15044] device syzkaller0 entered promiscuous mode [ 765.710488][T15049] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3384'. [ 765.744434][ T4316] corsair-cpro 0003:1B1C:0C10.0026: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 766.141569][ T4316] corsair-cpro: probe of 0003:1B1C:0C10.0026 failed with error -110 [ 766.182186][ T4316] usb 4-1: USB disconnect, device number 18 [ 766.491187][T15072] fido_id[15072]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 766.779390][T15084] netlink: 'syz.2.3396': attribute type 13 has an invalid length. [ 766.847332][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 766.879860][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 766.901616][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 767.064584][T15089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3396'. [ 767.091667][ T4456] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 767.138538][T15097] device syzkaller0 entered promiscuous mode [ 767.279890][ T4456] usb 1-1: Using ep0 maxpacket: 8 [ 767.294220][ T4456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 767.323830][ T4456] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 767.358044][ T4456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.400531][ T4456] usb 1-1: config 0 descriptor?? [ 767.626483][ T4456] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 767.834212][T15118] device syzkaller0 entered promiscuous mode [ 767.922201][T15120] device syzkaller0 entered promiscuous mode [ 768.127435][T15122] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3410'. [ 768.343515][T15128] netlink: 'syz.1.3413': attribute type 13 has an invalid length. [ 768.499553][T15128] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 768.509940][ T4316] usb 1-1: USB disconnect, device number 37 [ 768.575773][T15128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 768.615710][T15128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 768.851758][T15134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'. [ 769.226284][T15148] device syzkaller0 entered promiscuous mode [ 769.379535][T15167] device syzkaller0 entered promiscuous mode [ 769.526969][T15169] device syzkaller0 entered promiscuous mode [ 769.894351][ T4290] Bluetooth: hci5: command 0x0406 tx timeout [ 769.913429][T15179] device syzkaller0 entered promiscuous mode [ 769.921476][T15182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3429'. [ 770.059206][ T4316] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 770.254598][ T4316] usb 1-1: Using ep0 maxpacket: 8 [ 770.290318][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 770.310446][ T4316] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 770.324588][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.338226][ T4316] usb 1-1: config 0 descriptor?? [ 770.589057][ T4316] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 771.133958][ T4316] usb 1-1: USB disconnect, device number 38 [ 773.059290][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3428'. [ 773.077601][T15188] netlink: 'syz.4.3430': attribute type 13 has an invalid length. [ 773.090581][T15188] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 773.100702][T15188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 773.108397][T15188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 773.187772][T15211] device syzkaller0 entered promiscuous mode [ 773.365862][T15218] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.373739][T15218] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.478429][T15223] device syzkaller0 entered promiscuous mode [ 774.237316][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3443'. [ 774.289660][T15244] device syzkaller0 entered promiscuous mode [ 774.344243][ T14] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 774.427566][T15247] xt_hashlimit: size too large, truncated to 1048576 [ 774.559014][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 774.560534][T15251] netlink: 'syz.1.3447': attribute type 13 has an invalid length. [ 774.576301][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 774.605738][T15251] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 774.636001][ T14] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 774.650824][T15251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 774.664638][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.689868][T15251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 774.720600][ T14] usb 1-1: config 0 descriptor?? [ 774.782525][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3447'. [ 774.944905][ T14] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 775.015023][T15261] device syzkaller0 entered promiscuous mode [ 775.778583][ T14] usb 1-1: USB disconnect, device number 39 [ 776.585211][T15299] device syzkaller0 entered promiscuous mode [ 776.981255][T15311] netlink: 'syz.4.3463': attribute type 13 has an invalid length. [ 777.008158][T15311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 777.054177][T15311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 777.091550][T15311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 777.182954][T15313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3463'. [ 777.265354][T15315] device syzkaller0 entered promiscuous mode [ 777.882357][T15334] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3471'. [ 777.892655][ T4320] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 777.989106][T14614] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 778.079220][ T4320] usb 5-1: Using ep0 maxpacket: 8 [ 778.086944][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 778.133400][ T4320] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 778.153111][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.179010][T14614] usb 1-1: Using ep0 maxpacket: 16 [ 778.186806][T14614] usb 1-1: unable to get BOS descriptor or descriptor too short [ 778.198025][ T4320] usb 5-1: config 0 descriptor?? [ 778.222082][T14614] usb 1-1: config 7 has an invalid interface number: 106 but max is 3 [ 778.248210][T14614] usb 1-1: config 7 has an invalid interface number: 182 but max is 3 [ 778.275501][T14614] usb 1-1: config 7 has an invalid interface number: 148 but max is 3 [ 778.298360][T14614] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 778.319839][T14614] usb 1-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 778.341607][T14614] usb 1-1: config 7 has no interface number 0 [ 778.354487][T14614] usb 1-1: config 7 has no interface number 1 [ 778.373563][T14614] usb 1-1: config 7 has no interface number 2 [ 778.386672][T14614] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 778.413120][T14614] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 778.428605][ T4320] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 778.438330][T14614] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 778.472834][T14614] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 778.486028][T14614] usb 1-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 778.513216][T14614] usb 1-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 778.525073][T14614] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 778.536433][T14614] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 778.548015][T14614] usb 1-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 778.559397][T14614] usb 1-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 778.571212][T14614] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 778.582369][T14614] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 778.594260][T14614] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 778.607938][T14614] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 778.619724][T14614] usb 1-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 778.657224][T14614] usb 1-1: config 7 interface 106 has no altsetting 0 [ 778.673561][T14614] usb 1-1: config 7 interface 182 has no altsetting 0 [ 778.693863][T14614] usb 1-1: config 7 interface 148 has no altsetting 0 [ 778.703809][ T14] usb 5-1: USB disconnect, device number 16 [ 778.715263][T14614] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 778.744771][T14614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.753454][T14614] usb 1-1: Product: syz [ 778.757742][T14614] usb 1-1: Manufacturer: syz [ 778.763117][T14614] usb 1-1: SerialNumber: syz [ 779.107470][T14614] usb 1-1: USB disconnect, device number 40 [ 779.775905][T15371] netlink: 'syz.0.3477': attribute type 13 has an invalid length. [ 779.854704][T15371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 779.908296][T15371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 779.949846][T15371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 780.151703][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3477'. [ 780.166582][T15392] device syzkaller0 entered promiscuous mode [ 780.414298][T15394] tipc: Started in network mode [ 780.422076][T15394] tipc: Node identity 4242937fe6f, cluster identity 4711 [ 780.440956][T15394] tipc: Enabled bearer , priority 0 [ 780.504725][T15394] device syzkaller0 entered promiscuous mode [ 780.529530][T15394] tipc: Resetting bearer [ 780.669088][T14614] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 780.768801][ T9557] tipc: Resetting bearer [ 780.789573][T15393] tipc: Resetting bearer [ 780.859051][T14614] usb 1-1: Using ep0 maxpacket: 8 [ 780.866876][T14614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 780.902611][T14614] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 780.929500][T14614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.950243][T14614] usb 1-1: config 0 descriptor?? [ 781.190805][T14614] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 781.481475][ T4357] usb 1-1: USB disconnect, device number 41 [ 783.376582][T15393] tipc: Disabling bearer [ 783.409175][T14614] tipc: Node number set to 2763166591 [ 783.678964][T15439] netlink: 'syz.4.3493': attribute type 13 has an invalid length. [ 783.703661][T15439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 783.729925][T15439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 783.753793][T15439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 783.783546][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3493'. [ 783.811815][T15442] device syzkaller0 entered promiscuous mode [ 784.147400][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3501'. [ 784.222177][T15459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 784.241159][T15459] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 784.332360][T15461] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 784.382577][T15461] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 784.468756][T15466] tipc: Started in network mode [ 784.474208][T15466] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 784.491659][T15466] tipc: Enabled bearer , priority 10 [ 784.778944][T14614] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 784.844377][T15484] netlink: 'syz.3.3511': attribute type 13 has an invalid length. [ 784.896545][T15484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 784.923162][T15484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 784.970153][T14614] usb 2-1: Using ep0 maxpacket: 16 [ 784.981056][T14614] usb 2-1: unable to get BOS descriptor or descriptor too short [ 784.991997][T14614] usb 2-1: config 7 has an invalid interface number: 106 but max is 3 [ 785.002312][T14614] usb 2-1: config 7 has an invalid interface number: 182 but max is 3 [ 785.016332][T14614] usb 2-1: config 7 has an invalid interface number: 148 but max is 3 [ 785.027189][T14614] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 785.052198][T14614] usb 2-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 785.095429][T14614] usb 2-1: config 7 has no interface number 0 [ 785.125163][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3511'. [ 785.143424][T14614] usb 2-1: config 7 has no interface number 1 [ 785.146980][T15497] qfq: no options [ 785.155506][T15488] device syzkaller0 entered promiscuous mode [ 785.164899][T14614] usb 2-1: config 7 has no interface number 2 [ 785.202336][T14614] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 785.239009][T14614] usb 2-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 785.290007][T14614] usb 2-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 785.331339][T14614] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 785.366687][T14614] usb 2-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 785.396828][T14614] usb 2-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 785.408358][T14614] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 785.421917][T14614] usb 2-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 785.433039][T14614] usb 2-1: config 7 interface 182 altsetting 248 has an invalid endpoint with address 0x80, skipping [ 785.467451][T14614] usb 2-1: config 7 interface 148 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 785.478310][T14614] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 785.489493][T14614] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 785.500423][T14614] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 785.511386][T14614] usb 2-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 785.522329][T14614] usb 2-1: config 7 interface 148 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 785.535696][T14614] usb 2-1: config 7 interface 106 has no altsetting 0 [ 785.542639][T14614] usb 2-1: config 7 interface 182 has no altsetting 0 [ 785.549605][T14614] usb 2-1: config 7 interface 148 has no altsetting 0 [ 785.564698][T14614] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 785.589438][T14614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.597565][T14614] usb 2-1: Product: syz [ 785.625102][T14614] usb 2-1: Manufacturer: syz [ 785.629892][T14614] usb 2-1: SerialNumber: syz [ 785.675389][T15502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3515'. [ 785.694538][ T4320] tipc: Node number set to 1 [ 785.961559][T14614] usb 2-1: USB disconnect, device number 4 [ 786.268197][T15523] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.543268][T15536] netlink: 'syz.1.3527': attribute type 13 has an invalid length. [ 786.555628][T15536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 786.566620][T15536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 786.576293][T15536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 786.666149][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3527'. [ 786.698686][T15542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3528'. [ 786.712229][T15536] qfq: no options [ 787.810156][T15578] netlink: 'syz.0.3539': attribute type 13 has an invalid length. [ 787.865484][T15578] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 787.898288][T15578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 787.917017][T15578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 787.947093][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3539'. [ 787.967182][T15583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3540'. [ 788.006293][T15578] qfq: no options [ 789.079143][T12948] Bluetooth: hci1: command 0x0401 tx timeout [ 789.326331][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3553'. [ 789.371945][T15621] device syzkaller0 entered promiscuous mode [ 789.379175][T15624] Bluetooth: MGMT ver 1.22 [ 789.803975][T15638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3561'. [ 790.020070][T15644] xt_hashlimit: size too large, truncated to 1048576 [ 790.118956][T14614] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 790.163839][T15649] ------------[ cut here ]------------ [ 790.169889][T15649] WARNING: CPU: 0 PID: 15649 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x139/0x160 [ 790.180328][T15649] Modules linked in: [ 790.184306][T15649] CPU: 0 PID: 15649 Comm: syz.1.3564 Not tainted syzkaller #0 [ 790.191874][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 790.202147][T15649] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 790.208288][T15649] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2c ed 6f f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 57 e0 1e f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 790.228030][T15649] RSP: 0018:ffffc90006286d68 EFLAGS: 00010283 [ 790.234237][T15649] RAX: ffffffff886394f9 RBX: ffffc90006286e78 RCX: 0000000000080000 [ 790.242324][T15649] RDX: ffffc900171ca000 RSI: 00000000000076b8 RDI: 00000000000076b9 [ 790.250392][T15649] RBP: 0000000000000000 R08: ffffffff90af93ff R09: 1ffffffff215f27f [ 790.258425][T15649] R10: dffffc0000000000 R11: fffffbfff215f280 R12: 18ab7c0b8d212a89 [ 790.266547][T15649] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 790.274640][T15649] FS: 00007ff35a5296c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 790.283715][T15649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.290423][T15649] CR2: 00007ff35a528ff8 CR3: 000000005da10000 CR4: 00000000003526f0 [ 790.298468][T15649] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 790.306558][T15649] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 790.314641][T15649] Call Trace: [ 790.317995][T15649] [ 790.321045][T15649] taprio_change+0x40d9/0x5490 [ 790.325916][T15649] ? taprio_destroy+0x4b0/0x4b0 [ 790.330901][T15649] ? qdisc_create+0x7eb/0x10b0 [ 790.335743][T15649] ? ____sys_sendmsg+0x5be/0x970 [ 790.340842][T15649] ? memset+0x1e/0x40 [ 790.344886][T15649] ? fifo_init+0x3f6/0x6d0 [ 790.349433][T15649] ? qdisc_peek_head+0x40/0x40 [ 790.354265][T15649] ? qdisc_alloc+0x77a/0xa50 [ 790.359003][T15649] ? rcu_is_watching+0x11/0xa0 [ 790.363980][T15649] ? taprio_peek+0x590/0x590 [ 790.368640][T15649] qdisc_create+0x7eb/0x10b0 [ 790.373359][T15649] ? qdisc_notify+0x370/0x370 [ 790.378114][T15649] ? lockdep_rtnl_is_held+0x22/0x30 [ 790.383442][T15649] ? qdisc_lookup+0x366/0x6c0 [ 790.388193][T15649] tc_modify_qdisc+0xb5f/0x1d10 [ 790.393186][T15649] ? qdisc_offload_query_caps+0x150/0x150 [ 790.399037][T15649] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 790.404248][T15649] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 790.409471][T15649] ? qdisc_offload_query_caps+0x150/0x150 [ 790.415262][T15649] rtnetlink_rcv_msg+0x87c/0xfc0 [ 790.420323][T15649] ? rtnetlink_bind+0x80/0x80 [ 790.425080][T15649] ? __local_bh_enable_ip+0x136/0x1c0 [ 790.430563][T15649] ? lockdep_hardirqs_on+0x94/0x140 [ 790.435834][T15649] ? __local_bh_enable_ip+0x136/0x1c0 [ 790.441318][T15649] ? _local_bh_enable+0xa0/0xa0 [ 790.446235][T15649] ? __dev_queue_xmit+0x26b/0x37c0 [ 790.451447][T15649] ? __dev_queue_xmit+0x26b/0x37c0 [ 790.456622][T15649] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 790.461946][T15649] ? __dev_queue_xmit+0x26b/0x37c0 [ 790.467145][T15649] ? ref_tracker_free+0x68c/0x840 [ 790.472294][T15649] ? __copy_skb_header+0x3ba/0x4f0 [ 790.477475][T15649] ? refcount_inc+0x70/0x70 [ 790.482110][T15649] ? memcpy+0x3c/0x60 [ 790.486164][T15649] ? __copy_skb_header+0x3ba/0x4f0 [ 790.491393][T15649] ? __skb_clone+0x480/0x790 [ 790.496062][T15649] netlink_rcv_skb+0x1fb/0x450 [ 790.500956][T15649] ? rtnetlink_bind+0x80/0x80 [ 790.505704][T15649] ? netlink_ack+0x1170/0x1170 [ 790.510598][T15649] ? netlink_deliver_tap+0x2e/0x1b0 [ 790.515871][T15649] netlink_unicast+0x74d/0x8d0 [ 790.520771][T15649] netlink_sendmsg+0x8ad/0xbd0 [ 790.525611][T15649] ? netlink_getsockopt+0x550/0x550 [ 790.530926][T15649] ? aa_sock_msg_perm+0x94/0x150 [ 790.535923][T15649] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 790.541315][T15649] ? security_socket_sendmsg+0x7c/0xa0 [ 790.546895][T15649] ? netlink_getsockopt+0x550/0x550 [ 790.552244][T15649] ____sys_sendmsg+0x5be/0x970 [ 790.557102][T15649] ? __sys_sendmsg_sock+0x30/0x30 [ 790.562276][T15649] ? __import_iovec+0x315/0x500 [ 790.567214][T15649] ? import_iovec+0x6f/0xa0 [ 790.571839][T15649] ___sys_sendmsg+0x2a2/0x360 [ 790.576595][T15649] ? try_to_wake_up+0x67c/0x1080 [ 790.581664][T15649] ? __sys_sendmsg+0x290/0x290 [ 790.586564][T15649] __se_sys_sendmsg+0x1bb/0x2a0 [ 790.591558][T15649] ? __x64_sys_sendmsg+0x80/0x80 [ 790.596595][T15649] ? lockdep_hardirqs_on+0x94/0x140 [ 790.601920][T15649] do_syscall_64+0x4c/0xa0 [ 790.606421][T15649] ? clear_bhb_loop+0x60/0xb0 [ 790.611228][T15649] ? clear_bhb_loop+0x60/0xb0 [ 790.615992][T15649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 790.622033][T15649] RIP: 0033:0x7ff35959cdd9 [ 790.626506][T15649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.646265][T15649] RSP: 002b:00007ff35a529028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.654800][T15649] RAX: ffffffffffffffda RBX: 00007ff359816090 RCX: 00007ff35959cdd9 [ 790.662905][T15649] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000008 [ 790.670988][T15649] RBP: 00007ff359632d69 R08: 0000000000000000 R09: 0000000000000000 [ 790.679326][T15649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.687363][T15649] R13: 00007ff359816128 R14: 00007ff359816090 R15: 00007ffcad754e08 [ 790.695466][T15649] [ 790.698536][T15649] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 790.705849][T15649] CPU: 0 PID: 15649 Comm: syz.1.3564 Not tainted syzkaller #0 [ 790.713335][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 790.723422][T15649] Call Trace: [ 790.726817][T15649] [ 790.729811][T15649] dump_stack_lvl+0x188/0x24e [ 790.734554][T15649] ? memcpy+0x3c/0x60 [ 790.738565][T15649] ? show_regs_print_info+0x12/0x12 [ 790.743796][T15649] ? load_image+0x400/0x400 [ 790.748339][T15649] panic+0x2e5/0x730 [ 790.752296][T15649] ? bpf_jit_dump+0xd0/0xd0 [ 790.756864][T15649] __warn+0x2f8/0x4f0 [ 790.760885][T15649] ? taprio_get_start_time+0x139/0x160 [ 790.766382][T15649] ? taprio_get_start_time+0x139/0x160 [ 790.771874][T15649] report_bug+0x2ba/0x4f0 [ 790.776245][T15649] ? taprio_get_start_time+0x139/0x160 [ 790.781785][T15649] handle_bug+0x3a/0x70 [ 790.785979][T15649] exc_invalid_op+0x16/0x40 [ 790.790524][T15649] asm_exc_invalid_op+0x16/0x20 [ 790.795415][T15649] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 790.801523][T15649] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2c ed 6f f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 57 e0 1e f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 790.821169][T15649] RSP: 0018:ffffc90006286d68 EFLAGS: 00010283 [ 790.827271][T15649] RAX: ffffffff886394f9 RBX: ffffc90006286e78 RCX: 0000000000080000 [ 790.835271][T15649] RDX: ffffc900171ca000 RSI: 00000000000076b8 RDI: 00000000000076b9 [ 790.843272][T15649] RBP: 0000000000000000 R08: ffffffff90af93ff R09: 1ffffffff215f27f [ 790.851318][T15649] R10: dffffc0000000000 R11: fffffbfff215f280 R12: 18ab7c0b8d212a89 [ 790.859345][T15649] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 790.867365][T15649] ? taprio_get_start_time+0x139/0x160 [ 790.872890][T15649] ? taprio_get_start_time+0x139/0x160 [ 790.878390][T15649] taprio_change+0x40d9/0x5490 [ 790.883211][T15649] ? taprio_destroy+0x4b0/0x4b0 [ 790.888097][T15649] ? qdisc_create+0x7eb/0x10b0 [ 790.892901][T15649] ? ____sys_sendmsg+0x5be/0x970 [ 790.897888][T15649] ? memset+0x1e/0x40 [ 790.901906][T15649] ? fifo_init+0x3f6/0x6d0 [ 790.906364][T15649] ? qdisc_peek_head+0x40/0x40 [ 790.911171][T15649] ? qdisc_alloc+0x77a/0xa50 [ 790.915818][T15649] ? rcu_is_watching+0x11/0xa0 [ 790.920663][T15649] ? taprio_peek+0x590/0x590 [ 790.925305][T15649] qdisc_create+0x7eb/0x10b0 [ 790.929966][T15649] ? qdisc_notify+0x370/0x370 [ 790.934708][T15649] ? lockdep_rtnl_is_held+0x22/0x30 [ 790.939959][T15649] ? qdisc_lookup+0x366/0x6c0 [ 790.944689][T15649] tc_modify_qdisc+0xb5f/0x1d10 [ 790.949595][T15649] ? qdisc_offload_query_caps+0x150/0x150 [ 790.955369][T15649] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 790.960545][T15649] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 790.965690][T15649] ? qdisc_offload_query_caps+0x150/0x150 [ 790.971444][T15649] rtnetlink_rcv_msg+0x87c/0xfc0 [ 790.976425][T15649] ? rtnetlink_bind+0x80/0x80 [ 790.981138][T15649] ? __local_bh_enable_ip+0x136/0x1c0 [ 790.986535][T15649] ? lockdep_hardirqs_on+0x94/0x140 [ 790.991767][T15649] ? __local_bh_enable_ip+0x136/0x1c0 [ 790.997164][T15649] ? _local_bh_enable+0xa0/0xa0 [ 791.002048][T15649] ? __dev_queue_xmit+0x26b/0x37c0 [ 791.007188][T15649] ? __dev_queue_xmit+0x26b/0x37c0 [ 791.012424][T15649] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 791.017755][T15649] ? __dev_queue_xmit+0x26b/0x37c0 [ 791.022905][T15649] ? ref_tracker_free+0x68c/0x840 [ 791.027967][T15649] ? __copy_skb_header+0x3ba/0x4f0 [ 791.033127][T15649] ? refcount_inc+0x70/0x70 [ 791.037682][T15649] ? memcpy+0x3c/0x60 [ 791.041712][T15649] ? __copy_skb_header+0x3ba/0x4f0 [ 791.046967][T15649] ? __skb_clone+0x480/0x790 [ 791.051919][T15649] netlink_rcv_skb+0x1fb/0x450 [ 791.056829][T15649] ? rtnetlink_bind+0x80/0x80 [ 791.061564][T15649] ? netlink_ack+0x1170/0x1170 [ 791.066381][T15649] ? netlink_deliver_tap+0x2e/0x1b0 [ 791.071642][T15649] netlink_unicast+0x74d/0x8d0 [ 791.076471][T15649] netlink_sendmsg+0x8ad/0xbd0 [ 791.081288][T15649] ? netlink_getsockopt+0x550/0x550 [ 791.086534][T15649] ? aa_sock_msg_perm+0x94/0x150 [ 791.091588][T15649] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 791.096909][T15649] ? security_socket_sendmsg+0x7c/0xa0 [ 791.102407][T15649] ? netlink_getsockopt+0x550/0x550 [ 791.107678][T15649] ____sys_sendmsg+0x5be/0x970 [ 791.112503][T15649] ? __sys_sendmsg_sock+0x30/0x30 [ 791.117576][T15649] ? __import_iovec+0x315/0x500 [ 791.122467][T15649] ? import_iovec+0x6f/0xa0 [ 791.127011][T15649] ___sys_sendmsg+0x2a2/0x360 [ 791.131733][T15649] ? try_to_wake_up+0x67c/0x1080 [ 791.136751][T15649] ? __sys_sendmsg+0x290/0x290 [ 791.141590][T15649] __se_sys_sendmsg+0x1bb/0x2a0 [ 791.146495][T15649] ? __x64_sys_sendmsg+0x80/0x80 [ 791.151492][T15649] ? lockdep_hardirqs_on+0x94/0x140 [ 791.156724][T15649] do_syscall_64+0x4c/0xa0 [ 791.161177][T15649] ? clear_bhb_loop+0x60/0xb0 [ 791.165890][T15649] ? clear_bhb_loop+0x60/0xb0 [ 791.170626][T15649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.176584][T15649] RIP: 0033:0x7ff35959cdd9 [ 791.181047][T15649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.200707][T15649] RSP: 002b:00007ff35a529028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.209165][T15649] RAX: ffffffffffffffda RBX: 00007ff359816090 RCX: 00007ff35959cdd9 [ 791.217167][T15649] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000008 [ 791.225166][T15649] RBP: 00007ff359632d69 R08: 0000000000000000 R09: 0000000000000000 [ 791.233258][T15649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.241283][T15649] R13: 00007ff359816128 R14: 00007ff359816090 R15: 00007ffcad754e08 [ 791.249303][T15649] [ 791.252947][T15649] Kernel Offset: disabled [ 791.257412][T15649] Rebooting in 86400 seconds..