last executing test programs: 4.794652159s ago: executing program 1 (id=3930): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2a000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a070000000000000000000200000009000100737972300000000084000000030a01020000000000000000020000060900010073797a30000000005b0003c500fd02b216df8b721e23f25f47"], 0xcc}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d3672656730", @ANYBLOB], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)=',8Zz', 0x4) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="00000000000006090001545b6e1430000000000c00034000000000000000010900010073797a30000000000c00064000000000000001ff0000001e00"], 0x44}}, 0x80) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x1, 0x10, 0x1, &(0x7f00000000c0)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r4, 0x0, 0x0) 4.700467102s ago: executing program 2 (id=3932): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.470830969s ago: executing program 4 (id=3934): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffff7, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r10, {0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045080}, 0x140c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0x5, 0x3, 0xfffffff7, 0x1, 0x26d6}}}}]}, 0x4c}}, 0x0) 4.360934803s ago: executing program 2 (id=3937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, 0x0}, 0x4000880) 3.870125928s ago: executing program 2 (id=3940): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x5, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x4c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40048d1}, 0x20008820) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r0, r0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/108, 0x0, 0x40000}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1408, 0x103) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0xd}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe5c, 0x2, [@TCA_MATCHALL_ACT={0xe58, 0x2, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x7, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x1, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x6, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x7ff, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x400, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x6, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x8, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x1fe}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000081, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0xd}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x200, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x40000004, 0x1, 0x8, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3fc, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x2}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x6, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x3, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24e, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x4, 0x5, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0xc5c0, 0xfffffff7, 0x8}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x5, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x791, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x13, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe90}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$vhost_msg_v2(r3, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f0000000140)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) r9 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015082d5281b08c00901024ffa0102030109021200013daea00209"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x856}}, {0xe8, &(0x7f0000000300)=@string={0xe8, 0x3, "9c3090786e98f051eea4e06081b988a7ba60ede87e97cd7be50d3cbdbda8cb2a9966e89e9e9d3f7e38bb2c5fe866390d55cc4090d105e93305f116899dfd1624131e274dbdb093b34bbd7cd3f2e0148b42077a28388f1403bdcc01a55771d6ca6dd2f04dc86d44ff20b617584f664524848080987781aafdfcd612b8bc7358c5bfb6ac5c6341e0d5bd7f3543d0d6d486e15652207ce5f17c34d29c60f18bab91103bcfb32fd27eef69244037bd8e618f6aaa10a402cfe31c3fc0e92e1a416a629987e6562c19289f6b94adb5d1c696a56fcbb4796423e7592053906fbab387e66333d70b7b38"}}, {0x8a, &(0x7f0000000400)=@string={0x8a, 0x3, "fb3212490fd48817ad3586349a925b85a7487a62ef97356af32e189a45a45da4d526070df271a597213a6941087c04592b3b04777b0e15d47d975c91253e7d472626fb6b81ff59a6a0db91dec7dfab7d56d3eed901aba0c302c2f8c43ed958ea0f8f0a11dca74950b125ace7c81b330024535ac5974a70661a7110a881341d3908b431be15103acb"}}]}) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.806953901s ago: executing program 4 (id=3943): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xb5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4880) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000900)='l', 0x1}, {0x0}], 0x2}, 0x4) 3.530429739s ago: executing program 4 (id=3946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.413082903s ago: executing program 4 (id=3948): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 2.995977095s ago: executing program 4 (id=3951): syz_clone3(&(0x7f0000000300)={0x2f2007480, 0x0, 0x0, 0x0, {0x201e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000c40)) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002c00)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0a0006000802110000010000060066008e8800002000330078bd0900589733b902f1ffffffffffff0802110000000250be000e8006"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2000000, '\x00', 0x0, 0x0, 0xffffffff, 0x3}, 0x50) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 2.796982002s ago: executing program 3 (id=3952): r0 = syz_clone(0x80202000, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "07ec685224472d3ce62614a517a532cfa6faa7f4f33fb9fdc06c584b134c2a90b2a009126445277df563f444ba32540429912475d90df0e9844f65bf11763185", 0x2a}, 0x48, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$search(0xa, r1, &(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz', 0x0}, r2) r3 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x6}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a9c41, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000001340)={0x0, 0x6, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000200)=0x4) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) keyctl$set_timeout(0xf, r2, 0x401) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.730157905s ago: executing program 1 (id=3956): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xb5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4880) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000900)='l', 0x1}, {0x0}], 0x2}, 0x4) 1.720305135s ago: executing program 0 (id=3957): landlock_create_ruleset(&(0x7f00000001c0)={0xe020, 0x0, 0x3}, 0x18, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(0x0, 0x1) dup(r1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000400)=[{0x19, 0xa, 0x0, 0x10001}, {0x3, 0x4, 0x12, 0x9}, {0x3, 0x2, 0x6, 0x100}, {0x3, 0x35}, {0x6, 0x6, 0x7, 0x3}, {0x5, 0x9, 0x6, 0x7}]}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2103) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) connect$unix(r3, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) socket$igmp6(0xa, 0x3, 0x2) sendfile(r7, r8, 0x0, 0x20000023896) timer_settime(r6, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) shutdown(r0, 0x0) 1.647087048s ago: executing program 0 (id=3958): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.508662173s ago: executing program 0 (id=3959): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.372128217s ago: executing program 1 (id=3960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.339236038s ago: executing program 3 (id=3961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.335943078s ago: executing program 2 (id=3962): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x1e, 0x1, {0x9, 0x6, 0x9, 0xfffffffc, 0x4, {0x5, 0x2, 0xff69, 0x1, 0x7, 0xffffffff}, {0x1, 0x1, 0xb5, 0x0, 0x9, 0x1}, 0x3, 0x80, 0x6f5}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="1400128009000100766574680000000004000280"], 0x3c}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) unshare(0x2c060000) close(0x4) syz_open_procfs$namespace(0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r11, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x45) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) socket$netlink(0x10, 0x3, 0x8000000004) 1.172456333s ago: executing program 1 (id=3963): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000900)="e49dac", 0x3}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000640)='7', 0x1}], 0x1, &(0x7f0000000980)=ANY=[], 0x18}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000140)='\n_', 0xfffffffffffffe61}], 0x41}}], 0x3, 0x240048d1) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) 988.948929ms ago: executing program 1 (id=3964): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x0) timerfd_create(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x6, r0, 'id1\x00'}) read$usbfs(r1, &(0x7f0000000440)=""/201, 0xc9) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x2e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001b3eb000040e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="4884000000c0000008001d00c30000"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) writev(r2, &(0x7f0000002bc0)=[{&(0x7f0000000540)="e26dca287bc8a7bdfb601dd7baea705cb579beb3418e7c4b6f637b7f0c6a32c784e6ac65ae810a9e5abc8e00f271d39b23b72f0edea8d522602f7ea57f20d6e2a228cfe7fea0a4056d56054cc7440fe2ad8f351d1d6a3f1de5ea6b3744eda08d615dc15619f9b0bb190af3dd57372a6bd9bb8a04c7313b8848da834eddfc73194236887117ef8efc96e118d9d6d896d39619e107899d648b9302f49c72827f9969df0afe28961bd165b57426b7bd08943dbc0cd4dc4734f1abc3e02b8ecbecb8c1df51d45711355e2cac0b12fc", 0xcd}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)}, {&(0x7f0000001900)="f98b34829d5cefd8c5c31c55278ca172a08b28798382f97ac194ed4dc74e7bad26f3221320426947db0caa2ed2bc2dc1ba0ecc05", 0x34}, {&(0x7f0000001a00)="d954ddac6a87b3e64ada11ba7d0251fda4e6854d7188e646ffd363ed249cd34b6acc6e1ccb6cc8ae6b1da80ea5d3b1ddd1f228bea2f864acb2296eda19dbc804f5087be0327bed0715dd5e10d6fb731d42452e24653b2e472c932ffdbc6c26f41e5974e505ff5ae32bcafb980161a0676b530fceb92aab75d9da3b200ff9bd79542746a2ada51a27eba63c6b9032e7898f4931ce27771fc1f65330445d068e5aa27bdfd84e6f2481cc6c3ba34cd834836076ab87e918cf00e44cb324e0c3b5dc66ff9559d766", 0xc6}, {0x0}], 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x10) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, 0x0, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TIOCGSOFTCAR(r6, 0x5419, 0xffffffffffffffff) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0xa) 912.806211ms ago: executing program 0 (id=3965): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffff7, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r10, {0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045080}, 0x140c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0x5, 0x3, 0xfffffff7, 0x1, 0x26d6}}}}]}, 0x4c}}, 0x0) 787.517355ms ago: executing program 4 (id=3966): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2a000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a070000000000000000000200000009000100737972300000000084000000030a01020000000000000000020000060900010073797a30000000005b0003c500fd02b216df8b721e23f25f47"], 0xcc}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d3672656730", @ANYBLOB], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)=',8Zz', 0x4) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="00000000000006090001545b6e1430000000000c00034000000000000000010900010073797a30000000000c00064000000000000001ff0000001e00"], 0x44}}, 0x80) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x1, 0x10, 0x1, &(0x7f00000000c0)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r4, 0x0, 0x0) 719.607817ms ago: executing program 3 (id=3967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x84}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 561.129902ms ago: executing program 2 (id=3968): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) 384.152157ms ago: executing program 3 (id=3969): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 346.726009ms ago: executing program 2 (id=3970): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000100000005000100040000000500160022"], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) ioctl$int_in(r2, 0x5452, &(0x7f0000000580)=0xff) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvfrom$packet(r2, &(0x7f0000000040)=""/173, 0xad, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000f28c0)={{0x0, 0xa, 0x8, 0x7fffffffffffffff, 0x1, 0x9, 0xd022, 0x0, 0x5, 0x8000, 0x6, 0x7fffffffffffffff, 0x801, 0x6, 0x2}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=ANY=[], 0xf0}}, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000080000000000000000020", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000480)={{r3, &(0x7f0000000200)='GPL\x00', 0x2000, &(0x7f00000002c0)={@align=0x5, {0x7, 0x819c, 0x7, 0xfffffffffffffff8}}, 0xea, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x5}, {[0x72a9, 0x7, 0x183, 0x40]}, 0x1ff, 0xde, &(0x7f0000000380)=""/222}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'ip6gre0\x00', 0x10}) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c840}, 0x840) 153.031555ms ago: executing program 0 (id=3971): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 152.664435ms ago: executing program 3 (id=3972): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x100, {{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x80, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x745ed1e9aec7192d}, 0x8000000) 50.088398ms ago: executing program 0 (id=3973): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x4, [@multicast2]}]}}}], 0x18}, 0x0) 30.080629ms ago: executing program 1 (id=3974): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x800005fffffffffe}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0), 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e7736a", 0x3}], 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=3975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 8 bytes leftover after parsing attributes in process `syz.1.2883'. [ 1078.796399][ T4232] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1079.697213][ T4232] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1079.780956][ T4232] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1079.921632][ T4232] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1080.050398][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.250917][T14424] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1080.355023][T14460] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1080.430704][T14462] program syz.4.2891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1080.461466][T14465] device syzkaller0 entered promiscuous mode [ 1080.544896][T14468] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1080.783859][ T4270] usb 1-1: USB disconnect, device number 27 [ 1081.540116][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2899'. [ 1081.573399][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2899'. [ 1081.917144][T14490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1081.925371][T14490] IPv6: NLM_F_CREATE should be set when creating new route [ 1082.959543][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2903'. [ 1083.009350][T14501] device syzkaller0 entered promiscuous mode [ 1083.083366][T14504] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1083.092311][T14504] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1083.102069][T14498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2903'. [ 1083.112442][T14498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1083.152247][T14503] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1083.222217][T14509] program syz.4.2907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1083.408954][T14518] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1083.801254][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2912'. [ 1083.817522][T14526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.936591][T14526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.112192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1085.406709][T14558] program syz.3.2921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1085.457964][T14556] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1085.482414][T14560] device syzkaller0 entered promiscuous mode [ 1087.024607][T14604] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1087.048149][T14602] program syz.3.2935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1087.128634][T14608] device syzkaller0 entered promiscuous mode [ 1087.316232][T14618] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1088.162758][T14632] device syzkaller1 entered promiscuous mode [ 1089.028582][T14647] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1089.088288][T14648] program syz.0.2948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1089.394901][T14661] device syzkaller0 entered promiscuous mode [ 1089.433859][T14666] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1090.691814][T14694] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1091.269723][T14697] program syz.2.2963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1093.091378][T14709] device syzkaller0 entered promiscuous mode [ 1093.206505][ T4235] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1093.961998][ T4235] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1093.973116][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.000544][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.010479][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1094.096555][ T4235] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1094.105699][ T4235] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1094.126370][ T4235] usb 4-1: Manufacturer: syz [ 1094.147708][ T4235] usb 4-1: config 0 descriptor?? [ 1094.446836][T14745] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1094.628563][ T4235] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 1094.671810][ T4235] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 1094.846821][ T4235] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1095.493119][T14755] program syz.0.2979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1095.534015][T14760] device syzkaller0 entered promiscuous mode [ 1095.574021][ T23] usb 4-1: USB disconnect, device number 44 [ 1097.227396][ T4265] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1097.386504][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 1098.448232][ T4265] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1098.486502][ T4265] usb 5-1: not running at top speed; connect to a high speed hub [ 1098.607032][ T4265] usb 5-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1098.897088][ T4265] usb 5-1: language id specifier not provided by device, defaulting to English [ 1098.958826][T14796] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1099.082447][T14803] device syzkaller0 entered promiscuous mode [ 1099.088951][ T4265] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1099.122017][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.136502][ T4265] usb 5-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1099.200890][ T4265] usb 5-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1099.235095][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.582221][ T4265] usb 5-1: SerialNumber: syz [ 1099.600113][T14811] program syz.0.2995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1099.609570][ T4265] usb 5-1: can't set config #61, error -71 [ 1099.621825][ T4265] usb 5-1: USB disconnect, device number 36 [ 1103.253582][T14861] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1103.497156][T14872] program syz.0.3011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1104.669434][ T4352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.716829][ T4235] Bluetooth: hci5: command 0x0409 tx timeout [ 1106.431453][ T4352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.015752][ T4352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.045991][T14878] chnl_net:caif_netlink_parms(): no params data found [ 1107.101412][ T4352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.402233][T14878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.411093][T14878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.435335][T14878] device bridge_slave_0 entered promiscuous mode [ 1107.496063][T14878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.554678][T14878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.591546][T14878] device bridge_slave_1 entered promiscuous mode [ 1107.604236][ T4352] tipc: Left network mode [ 1107.609845][ T4235] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1107.733641][T14878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.802757][T14878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.963096][T14878] team0: Port device team_slave_0 added [ 1107.998597][T14878] team0: Port device team_slave_1 added [ 1108.056613][ T4235] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1108.094927][T14878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.111952][ T4235] usb 2-1: not running at top speed; connect to a high speed hub [ 1108.129448][T14878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.226597][ T4235] usb 2-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1108.235613][T14878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.276435][ T4270] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1108.322222][T14878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.333386][T14878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.379890][T14878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.440918][ T4265] Bluetooth: hci5: command 0x041b tx timeout [ 1108.447117][ T4235] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1108.456193][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.491873][ T4235] usb 2-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1108.512568][ C1] vkms_vblank_simulate: vblank timer overrun [ 1108.578718][ T4235] usb 2-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1108.612914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1108.636099][T14878] device hsr_slave_0 entered promiscuous mode [ 1108.640267][ T4235] usb 2-1: SerialNumber: syz [ 1108.685491][T14878] device hsr_slave_1 entered promiscuous mode [ 1108.724819][T14878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1108.759250][T14878] Cannot create hsr debugfs directory [ 1108.806633][ T4270] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1108.815744][ T4270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.848560][ T4270] usb 5-1: Product: syz [ 1108.852793][ T4270] usb 5-1: Manufacturer: syz [ 1108.872899][ T4270] usb 5-1: SerialNumber: syz [ 1108.902515][ T4270] usb 5-1: config 0 descriptor?? [ 1108.995726][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 1108.995742][ T26] audit: type=1800 audit(1780728125.757:51): pid=14939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3024" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1109.156740][ T4270] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1109.170218][ T4235] usb 2-1: USB disconnect, device number 16 [ 1109.374495][ T4352] IPVS: stopping backup sync thread 14294 ... [ 1110.204787][T14952] program syz.1.3027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1111.075305][ T9690] Bluetooth: hci5: command 0x040f tx timeout [ 1111.506458][ T4270] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1111.730228][ T4352] device hsr_slave_0 left promiscuous mode [ 1111.836725][ T4352] device hsr_slave_1 left promiscuous mode [ 1111.941754][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1112.072287][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.304978][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1112.441371][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.595669][ T4270] usb 5-1: USB disconnect, device number 37 [ 1112.645724][ T4352] device bridge_slave_1 left promiscuous mode [ 1112.811354][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.933535][ T4352] device bridge_slave_0 left promiscuous mode [ 1112.939871][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.977904][ T4352] device veth1_macvtap left promiscuous mode [ 1112.984706][ T4352] device veth0_macvtap left promiscuous mode [ 1112.999457][ T4352] device veth1_vlan left promiscuous mode [ 1113.005500][ T4352] device veth0_vlan left promiscuous mode [ 1113.156640][ T4235] Bluetooth: hci5: command 0x0419 tx timeout [ 1113.375076][ T4352] team0 (unregistering): Port device geneve0 removed [ 1113.495059][ T4352] team0 (unregistering): Port device team_slave_1 removed [ 1113.513239][ T4352] team0 (unregistering): Port device team_slave_0 removed [ 1113.559989][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.596658][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.876858][ T4352] bond0 (unregistering): Released all slaves [ 1113.957524][T14963] device syzkaller0 entered promiscuous mode [ 1114.374738][T14878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1115.226149][T15002] program syz.3.3040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1115.287576][T14878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1115.313916][T14878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1115.379694][T14878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1115.698983][T14878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.752010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1115.759709][ T4270] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1115.798196][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.803061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1115.804624][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.833485][T14878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.931818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1115.946851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1116.006168][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.013297][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.100850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1116.145805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1116.160430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1116.177199][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.184331][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.216448][ T4270] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1116.245564][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1116.259019][ T4270] usb 2-1: not running at top speed; connect to a high speed hub [ 1116.281590][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1116.301800][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1116.359296][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1116.376648][ T4270] usb 2-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1116.387182][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1116.407933][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1116.423418][T14878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1116.450571][T15025] program syz.0.3050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1116.472253][T14878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1116.502645][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1116.530536][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1116.564073][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1116.590283][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1116.627221][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1116.636067][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1116.649374][ T4270] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1116.667788][ T4270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.685434][ T4270] usb 2-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1116.740010][ T4270] usb 2-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1116.774208][ C0] vkms_vblank_simulate: vblank timer overrun [ 1116.782336][ T4270] usb 2-1: SerialNumber: syz [ 1116.826449][ T9690] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1117.022417][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1117.061406][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1117.091664][T14878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.133407][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1117.147160][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1117.171541][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1117.188034][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1117.196627][ T9690] usb 5-1: config 0 has no interfaces? [ 1117.202163][ T9690] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1117.214169][T14878] device veth0_vlan entered promiscuous mode [ 1117.227901][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1117.240000][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1117.246638][ T9690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.272108][ T9690] usb 5-1: config 0 descriptor?? [ 1117.280808][ T1108] usb 2-1: USB disconnect, device number 17 [ 1117.289547][T14878] device veth1_vlan entered promiscuous mode [ 1117.374478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1117.396894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1117.405362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1117.415050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1117.427245][T14878] device veth0_macvtap entered promiscuous mode [ 1117.439369][T14878] device veth1_macvtap entered promiscuous mode [ 1117.502818][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.515095][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.534028][T15032] udc-core: couldn't find an available UDC or it's busy [ 1117.559549][T15059] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1117.579791][T15032] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1117.602421][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.616781][ T4237] usb 5-1: USB disconnect, device number 38 [ 1117.645981][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.676335][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.695183][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.717173][T14878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.724604][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1117.743687][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1117.773364][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1117.809026][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1117.837740][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.869434][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.900372][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.931468][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.964063][T14878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1118.032549][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1118.053002][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1118.127321][T14878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.136086][T14878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.197349][T14878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.224270][T14878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.459060][T15099] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3053'. [ 1118.625412][T11773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.636391][T11773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.871995][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1118.898920][ T4237] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1119.063229][T11773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.114612][T11773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.143689][T15114] program syz.4.3056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1119.174207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1119.657475][ T4237] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1119.726671][ T4237] usb 1-1: not running at top speed; connect to a high speed hub [ 1119.744327][T15123] device syzkaller0 entered promiscuous mode [ 1119.816623][ T4237] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1119.944953][T15130] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1120.096695][ T4237] usb 1-1: language id specifier not provided by device, defaulting to English [ 1120.257634][ T4237] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1120.305826][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.321098][ T4237] usb 1-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1120.391931][ T4237] usb 1-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1120.432270][ T4237] usb 1-1: SerialNumber: syz [ 1120.606395][ T4265] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1120.785552][ T4237] usb 1-1: USB disconnect, device number 28 [ 1120.954408][T15144] device syzkaller0 entered promiscuous mode [ 1121.036619][ T4265] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1121.078486][ T4265] usb 2-1: not running at top speed; connect to a high speed hub [ 1121.147492][T15148] device syzkaller0 entered promiscuous mode [ 1121.166666][ T4265] usb 2-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1121.336820][ T4265] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1121.346079][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.356463][ T4265] usb 2-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1121.379567][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 1121.388979][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 1121.398128][ T4265] usb 2-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1121.443510][ T4265] usb 2-1: SerialNumber: syz [ 1121.940208][ T1108] usb 2-1: USB disconnect, device number 18 [ 1122.352306][T15168] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1122.641521][T15172] program syz.4.3070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1123.388816][T15179] device syzkaller0 entered promiscuous mode [ 1123.785473][T15183] device syzkaller0 entered promiscuous mode [ 1124.087727][T15187] device syzkaller0 entered promiscuous mode [ 1124.256414][ T4232] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1124.701885][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1124.746952][ T4232] usb 5-1: not running at top speed; connect to a high speed hub [ 1124.836652][ T4232] usb 5-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1125.005738][T15205] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1125.021393][ T4232] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1125.051861][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.101719][ T4232] usb 5-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1125.126059][T15208] device syzkaller0 entered promiscuous mode [ 1125.167804][ T4232] usb 5-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1125.202100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1125.210223][ T4232] usb 5-1: SerialNumber: syz [ 1125.494267][T15218] device syzkaller0 entered promiscuous mode [ 1125.507883][ T4232] usb 5-1: USB disconnect, device number 39 [ 1125.745902][T15222] device syzkaller0 entered promiscuous mode [ 1126.509838][T15243] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1126.567822][T15244] device syzkaller0 entered promiscuous mode [ 1126.736375][T10403] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1126.829081][T15252] device syzkaller0 entered promiscuous mode [ 1127.521818][T15258] device syzkaller0 entered promiscuous mode [ 1127.921429][T10403] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1127.952899][T10403] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1127.986754][T10403] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1128.021415][T10403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.086754][T15239] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1128.206378][ T1108] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1128.288371][T15273] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1128.494271][T15279] IPVS: stopping backup sync thread 15280 ... [ 1128.502370][T15280] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 1128.646845][ T1108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1128.716533][ T1108] usb 1-1: not running at top speed; connect to a high speed hub [ 1128.816525][ T1108] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1128.947791][T15290] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1128.999953][ T1108] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1129.019350][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.045624][ T1108] usb 1-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1129.132835][ T1108] usb 1-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1129.255188][ T1108] usb 1-1: SerialNumber: syz [ 1129.371565][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'. [ 1129.438826][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'. [ 1130.624076][ T1108] usb 1-1: USB disconnect, device number 29 [ 1130.863683][ T4237] usb 4-1: USB disconnect, device number 45 [ 1131.014322][T15311] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1132.119305][T15323] device syzkaller0 entered promiscuous mode [ 1132.265954][T15327] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1132.382442][T15330] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1133.506468][ T4265] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1133.581195][T15342] binder: 15338:15342 unknown command 1074553619 [ 1133.604895][T15342] binder: 15338:15342 ioctl c0306201 200000000480 returned -22 [ 1133.876457][ T9690] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1133.886674][ T4265] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1133.908140][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.929029][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.939781][ T4265] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1133.966363][ T4237] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1134.026599][ T4265] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1134.046347][ T4265] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1134.054678][ T4265] usb 3-1: Manufacturer: syz [ 1134.080422][ T4265] usb 3-1: config 0 descriptor?? [ 1134.086346][ T9690] usb 5-1: device descriptor read/64, error -71 [ 1134.356389][ T9690] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1134.426598][ T4237] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1134.450309][ T4237] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1134.466067][ T4237] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1134.477800][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.505307][T15350] device syzkaller0 entered promiscuous mode [ 1134.511912][T15341] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1134.556473][ T9690] usb 5-1: device descriptor read/64, error -71 [ 1134.568212][ T4265] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 1134.594606][ T4265] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 1134.655410][ T4265] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1134.676530][ T9690] usb usb5-port1: attempt power cycle [ 1135.233445][ T4237] usb 3-1: USB disconnect, device number 34 [ 1135.796480][ T9690] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1135.890014][T15363] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1135.897070][ T9690] usb 5-1: device descriptor read/8, error -71 [ 1135.968903][T15364] kvm: pic: non byte write [ 1136.166466][ T9690] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1136.208727][ T4232] usb 2-1: USB disconnect, device number 19 [ 1136.233648][T15368] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1136.266989][ T9690] usb 5-1: device descriptor read/8, error -71 [ 1136.386774][ T9690] usb usb5-port1: unable to enumerate USB device [ 1136.583893][T15378] device syzkaller0 entered promiscuous mode [ 1137.536347][ T4237] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1137.830760][T15396] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1137.917145][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.526902][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.726599][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.755524][T15388] chnl_net:caif_netlink_parms(): no params data found [ 1138.866573][ T4237] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1138.885332][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.915464][ T4237] usb 3-1: not running at top speed; connect to a high speed hub [ 1139.026674][ T4237] usb 3-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1139.064670][T15388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.092200][T15388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.110993][T15388] device bridge_slave_0 entered promiscuous mode [ 1139.178081][T15388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.195687][T15388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.206596][ T4237] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1139.217469][T15388] device bridge_slave_1 entered promiscuous mode [ 1139.225256][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.257882][T15418] device syzkaller0 entered promiscuous mode [ 1139.274505][ T4237] usb 3-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥 [ 1139.320718][ T4237] usb 3-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1139.402562][T15388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.439297][ T4237] usb 3-1: SerialNumber: syz [ 1139.466565][ T4237] usb 3-1: can't set config #61, error -71 [ 1139.491552][ T4237] usb 3-1: USB disconnect, device number 35 [ 1139.519961][T15388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.706483][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 1139.742415][ T144] tipc: Left network mode [ 1139.786075][T15388] team0: Port device team_slave_0 added [ 1140.176025][T15388] team0: Port device team_slave_1 added [ 1140.890067][T15388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.081031][T15388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.500658][T15388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.596994][T15388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.614267][T15388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.686056][T15388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.736999][T15470] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1141.787578][ T9690] Bluetooth: hci1: command 0x041b tx timeout [ 1141.833903][T15388] device hsr_slave_0 entered promiscuous mode [ 1141.864588][T15388] device hsr_slave_1 entered promiscuous mode [ 1141.878077][T15388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1141.895841][T15388] Cannot create hsr debugfs directory [ 1141.988782][T15478] kvm: pic: non byte write [ 1142.171386][T15482] device syzkaller0 entered promiscuous mode [ 1142.224162][T15487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3162'. [ 1143.737391][ T144] device hsr_slave_0 left promiscuous mode [ 1143.754818][ T144] device hsr_slave_1 left promiscuous mode [ 1143.774537][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1143.784907][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.824774][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1143.836161][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1143.860321][ T144] device bridge_slave_1 left promiscuous mode [ 1143.868300][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.886979][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 1143.895982][ T144] device bridge_slave_0 left promiscuous mode [ 1143.907946][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.915981][T15530] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1143.946896][ T144] device veth1_macvtap left promiscuous mode [ 1143.968394][ T144] device veth0_macvtap left promiscuous mode [ 1143.979018][ T144] device veth1_vlan left promiscuous mode [ 1144.001912][ T144] device veth0_vlan left promiscuous mode [ 1144.286634][ T144] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1144.309722][ T144] bond2 (unregistering): Released all slaves [ 1144.329947][ T144] bond1 (unregistering): Released all slaves [ 1144.462337][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1144.489938][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1144.528655][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1144.767482][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.505217][ T144] bond0 (unregistering): Released all slaves [ 1145.814974][T15547] kvm: pic: non byte write [ 1145.898670][T15550] device syzkaller0 entered promiscuous mode [ 1145.924270][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3176'. [ 1145.946422][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 1146.092191][T15388] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1146.193830][T15388] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1146.238330][T15388] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1146.336677][T15388] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1147.101631][T15577] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1147.214627][T15388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.294486][T15388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.353736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1147.381595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1147.512299][T15388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1147.550018][T15388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1147.598836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1147.617148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1147.674071][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.681304][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.109195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1148.357115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1148.436930][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.444077][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.543688][T15610] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1148.572101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1148.601625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1148.613352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1148.626239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1148.637818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1148.653511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1148.673663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1148.705225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1148.732148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1148.754530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1148.796732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1148.867392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1148.897914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1149.056557][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1149.086641][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1149.112649][T15388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.136247][T15629] device syzkaller0 entered promiscuous mode [ 1149.547314][T15653] netlink: 'syz.2.3193': attribute type 13 has an invalid length. [ 1149.588617][T15653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1149.619972][T15653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1149.637856][T15653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1149.809754][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3193'. [ 1150.027023][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1150.050261][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1150.147678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1150.178840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1150.216792][T15388] device veth0_vlan entered promiscuous mode [ 1150.257670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1150.271113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1150.313156][T15388] device veth1_vlan entered promiscuous mode [ 1150.377681][T15687] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1150.459859][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1150.485992][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1150.520014][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1150.574612][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1150.627650][T15388] device veth0_macvtap entered promiscuous mode [ 1150.674307][T15694] device syzkaller0 entered promiscuous mode [ 1150.703666][T15388] device veth1_macvtap entered promiscuous mode [ 1150.795875][T15388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.849949][T15388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.895222][T15388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.945417][T15388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.983231][T15388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.029489][T15388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.083045][T15388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.187323][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1151.208248][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1151.222983][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1151.236138][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1151.285018][T15388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.296650][T15388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.307244][T15388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.335779][T15388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.362182][T15388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.423108][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1151.446709][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1151.491815][T15388] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.522998][T15388] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.543170][T15388] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.569846][T15388] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.650974][T15711] netlink: 'syz.3.3204': attribute type 1 has an invalid length. [ 1151.909191][T15711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1152.033251][T15712] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 1152.109437][T15728] netlink: 'syz.2.3207': attribute type 13 has an invalid length. [ 1152.130598][T15728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1152.178837][T15728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1152.207015][T15728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1152.268755][T15722] device syzkaller0 entered promiscuous mode [ 1152.286930][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1152.308591][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3208'. [ 1152.321262][T15731] syz_tun: Device is already in use. [ 1152.327588][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3207'. [ 1152.464296][T13065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.509462][T13065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.570723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1152.591687][T13065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.603802][T13065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.612607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1152.704479][T15746] device syzkaller0 entered promiscuous mode [ 1152.804207][T15750] device syzkaller0 entered promiscuous mode [ 1153.076540][ T4287] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1153.387157][ T4287] usb 5-1: Using ep0 maxpacket: 32 [ 1153.707003][ T4287] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1153.723442][ T4287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.741817][ T4287] usb 5-1: Product: syz [ 1153.754002][ T4287] usb 5-1: Manufacturer: syz [ 1153.759301][ T4287] usb 5-1: SerialNumber: syz [ 1153.793314][ T4287] usb 5-1: config 0 descriptor?? [ 1153.849836][ T4287] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1153.869339][ T4287] dvb-usb: bulk message failed: -22 (4/0) [ 1153.923349][ T4287] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1153.998921][ T4287] dvb-usb: bulk message failed: -22 (5/0) [ 1154.027014][ T4287] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1154.108537][ T4287] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1154.203287][ T4287] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1154.222485][ T4287] usb 5-1: media controller created [ 1154.292182][ T4287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1154.311364][ T4287] usb 5-1: selecting invalid altsetting 3 [ 1154.321004][ T4287] ttusb2: set interface to alts=3 failed [ 1154.481155][T15783] device syzkaller0 entered promiscuous mode [ 1154.500140][T15768] chnl_net:caif_netlink_parms(): no params data found [ 1154.528077][ T4287] DVB: Unable to find symbol tda10086_attach() [ 1154.536545][ T4287] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1154.601307][ T4287] dvb-usb: bulk message failed: -22 (4/0) [ 1154.612620][ T4287] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1154.623063][ T4287] dvb-usb: bulk message failed: -22 (5/0) [ 1154.629596][ T4287] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1154.643998][ T4287] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1154.691040][ T4287] usb 5-1: USB disconnect, device number 44 [ 1154.712913][ T4287] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1154.828433][T15768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.847828][T15768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.856152][T15768] device bridge_slave_0 entered promiscuous mode [ 1154.866981][T15798] ip6gre0: Caught tx_queue_len zero misconfig [ 1154.873105][T15798] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1154.881875][T15768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.891259][T15768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.899898][T15768] device bridge_slave_1 entered promiscuous mode [ 1154.968478][T15768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.981064][T15768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.027389][T15768] team0: Port device team_slave_0 added [ 1155.041014][T15768] team0: Port device team_slave_1 added [ 1155.085418][T15768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.100236][T15768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.164424][T15768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.199538][T15804] netlink: 'syz.4.3233': attribute type 13 has an invalid length. [ 1155.258898][T15804] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1155.311496][T15804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1155.355741][T15804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1155.431563][T15768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.440986][T15768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.490640][T15768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.502687][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3233'. [ 1155.604458][T15768] device hsr_slave_0 entered promiscuous mode [ 1155.617438][T15768] device hsr_slave_1 entered promiscuous mode [ 1155.632291][T15768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1155.650359][T15768] Cannot create hsr debugfs directory [ 1155.786804][ T9690] Bluetooth: hci2: command 0x0409 tx timeout [ 1155.919807][T15768] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.062738][T15768] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.199839][T15768] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.368621][T15768] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.541792][T15834] lo speed is unknown, defaulting to 1000 [ 1156.562797][T15834] lo speed is unknown, defaulting to 1000 [ 1156.573693][T15834] lo speed is unknown, defaulting to 1000 [ 1156.724771][T15768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1156.763045][T15768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1156.783511][T15768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1156.802823][T15768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1156.973993][T15768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.016852][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1157.030793][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1157.075085][T15768] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.105635][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1157.144743][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1157.230008][T10740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.237222][T10740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.276524][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1157.311513][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1157.339205][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1157.361016][T10740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.368218][T10740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.400862][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1157.440578][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1157.465015][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1157.502325][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1157.541772][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1157.581629][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1157.629318][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1157.656797][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1157.687881][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1157.725626][T15768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1157.766907][T15768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1157.788631][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1157.807870][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1157.855276][T15834] infiniband syz0: set active [ 1157.864002][ T4235] lo speed is unknown, defaulting to 1000 [ 1157.873543][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 1157.887602][T15834] infiniband syz0: added lo [ 1157.973468][T15834] infiniband syz0: Couldn't open port 1 [ 1158.182922][T15834] RDS/IB: syz0: added [ 1158.228522][T15834] smc: adding ib device syz0 with port count 1 [ 1158.263393][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1158.279816][T15834] smc: ib device syz0 port 1 has pnetid [ 1158.286195][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1158.320611][T15768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.357874][T10325] lo speed is unknown, defaulting to 1000 [ 1158.400457][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1158.417184][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1158.446745][T15834] lo speed is unknown, defaulting to 1000 [ 1158.472851][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1158.493356][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1158.538209][T15768] device veth0_vlan entered promiscuous mode [ 1158.556972][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1158.570818][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1158.603529][T15768] device veth1_vlan entered promiscuous mode [ 1158.711324][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1158.730473][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1158.760450][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1158.810205][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1158.857618][T15768] device veth0_macvtap entered promiscuous mode [ 1158.898352][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1158.928741][T15768] device veth1_macvtap entered promiscuous mode [ 1159.026988][T15768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.073746][T15768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.103764][T15768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.151511][T15768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.186974][T15768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.207677][T15768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.231651][T15768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.252496][T15768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.292576][T15768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.332134][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1159.353087][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1159.414886][T15768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.453186][T15768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.500511][T15768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.551864][T15768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.581659][T15768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.631742][T15768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.773460][T15768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.784772][T15834] lo speed is unknown, defaulting to 1000 [ 1159.797571][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1159.815141][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1160.628450][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 1160.697671][T15768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.723582][T15768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.740441][T15768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.752031][T15768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.984719][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.005571][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.065850][T15911] Illegal XDP return value 4294967294, expect packet loss! [ 1161.074869][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1161.134733][T10740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.144537][T10740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.168894][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1161.430191][T15834] lo speed is unknown, defaulting to 1000 [ 1161.827505][ T4237] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1161.989002][T15834] lo speed is unknown, defaulting to 1000 [ 1162.152337][ T4195] bond2: (slave syz_tun): Removing an active aggregator [ 1162.160676][ T4195] bond2: (slave syz_tun): Releasing backup interface [ 1162.278091][ T4237] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1162.301070][ T4304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.343059][ T4237] usb 1-1: not running at top speed; connect to a high speed hub [ 1162.377994][ T4304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.446952][ T4237] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1162.594524][ T4304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.646692][ T4237] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1162.666761][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 1162.677094][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.736587][ T4237] usb 1-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1162.774917][ T4304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.865759][ T4237] usb 1-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1162.918244][T15927] lo speed is unknown, defaulting to 1000 [ 1163.008460][ T4237] usb 1-1: SerialNumber: syz [ 1163.217819][ T4304] tipc: Left network mode [ 1163.427222][T15834] lo speed is unknown, defaulting to 1000 [ 1163.535605][ T4237] usb 1-1: USB disconnect, device number 30 [ 1163.739836][T15927] chnl_net:caif_netlink_parms(): no params data found [ 1163.902075][ T4304] bond1: (slave gretap1): Releasing active interface [ 1163.981844][T15834] lo speed is unknown, defaulting to 1000 [ 1164.078321][T15927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.085469][T15927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.106620][ T4265] Bluetooth: hci3: command 0x0409 tx timeout [ 1164.148146][T15927] device bridge_slave_0 entered promiscuous mode [ 1164.185590][T15927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.213858][T15927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.223461][T15927] device bridge_slave_1 entered promiscuous mode [ 1164.304043][T15927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.391877][T15927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.558975][T15927] team0: Port device team_slave_0 added [ 1164.615968][T15927] team0: Port device team_slave_1 added [ 1164.694025][T15927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.736442][T15927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.762431][ C1] vkms_vblank_simulate: vblank timer overrun [ 1164.769651][ T4265] Bluetooth: hci2: command 0x0407 tx timeout [ 1164.842488][T15927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.884748][T15927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.901364][T15927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.927434][ C1] vkms_vblank_simulate: vblank timer overrun [ 1164.946016][T15927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.983934][ T4304] device hsr_slave_0 left promiscuous mode [ 1164.991883][ T4304] device hsr_slave_1 left promiscuous mode [ 1165.026676][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.036441][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.055273][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.080937][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.103550][ T4304] device bridge_slave_1 left promiscuous mode [ 1165.115598][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.134770][ T4304] device bridge_slave_0 left promiscuous mode [ 1165.141214][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.175083][ T4304] device veth1_macvtap left promiscuous mode [ 1165.186641][ T4304] device veth0_macvtap left promiscuous mode [ 1165.203150][ T4304] device veth1_vlan left promiscuous mode [ 1165.211162][ T4304] device veth0_vlan left promiscuous mode [ 1165.391992][ T4304] bond2 (unregistering): Released all slaves [ 1165.413929][ T4304] bond1 (unregistering): Released all slaves [ 1165.712963][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 1165.730917][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 1165.746612][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.776626][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.960032][ T4304] bond0 (unregistering): Released all slaves [ 1166.151941][T15927] device hsr_slave_0 entered promiscuous mode [ 1166.181767][T15927] device hsr_slave_1 entered promiscuous mode [ 1166.187888][ T4265] Bluetooth: hci3: command 0x041b tx timeout [ 1167.278610][T16047] IPv6: NLM_F_CREATE should be specified when creating new route [ 1167.532031][T15927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1167.577166][T15927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1167.628362][T15927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1167.654453][T15927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1167.982031][T15927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.027820][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1168.065906][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1168.133777][T15927] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.163486][T16077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3293'. [ 1168.269640][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 1168.285806][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1168.305757][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1168.332895][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.340079][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.365085][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1168.429146][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1168.470969][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1168.532693][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.539854][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.562144][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1168.571315][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1168.603370][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1168.631628][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1168.680751][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1168.712219][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1168.740892][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1168.777526][T16105] netlink: 'syz.4.3299': attribute type 13 has an invalid length. [ 1168.781430][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1168.783462][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1168.783595][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1168.855196][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1168.855859][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1168.859712][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1168.866641][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1168.897730][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3299'. [ 1168.902267][T15927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1169.342097][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1169.342234][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1169.374853][T15927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.437897][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1169.438545][T11773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1169.523789][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1169.524478][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1169.525267][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1169.525790][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1169.539719][T15927] device veth0_vlan entered promiscuous mode [ 1169.574566][T15927] device veth1_vlan entered promiscuous mode [ 1169.653384][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1169.654098][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1169.654731][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1169.655366][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1169.658552][T15927] device veth0_macvtap entered promiscuous mode [ 1169.694968][T15927] device veth1_macvtap entered promiscuous mode [ 1169.732685][T15927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1169.732779][T15927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.732793][T15927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1169.732808][T15927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.732820][T15927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1169.732833][T15927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.732845][T15927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1169.732859][T15927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.744446][T15927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1169.744600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1169.745248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1169.745671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1169.746101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1169.756201][T15927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.756220][T15927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.756231][T15927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.756242][T15927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.756678][T15927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.756694][T15927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.766601][T15927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1169.774943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1169.775634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1169.778648][T15927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.778686][T15927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.778717][T15927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.778754][T15927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.814383][T16141] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1170.139594][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.139668][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.139864][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1170.237259][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.237282][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.237606][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1170.347278][ T9690] Bluetooth: hci3: command 0x0419 tx timeout [ 1171.050092][T16188] netlink: 'syz.2.3319': attribute type 13 has an invalid length. [ 1171.050433][T16188] infiniband syz0: set active [ 1171.054101][T16188] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1171.056042][T16188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1171.056172][T16188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1171.216060][ T4232] lo speed is unknown, defaulting to 1000 [ 1171.592314][T16215] netlink: 'syz.2.3322': attribute type 11 has an invalid length. [ 1171.780709][T16219] device wlan0 entered promiscuous mode [ 1171.822171][T16218] infiniband syz0: set active [ 1171.825655][T16218] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1171.949294][T16218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1171.999371][T16226] program syz.4.3324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1173.777664][ T4287] lo speed is unknown, defaulting to 1000 [ 1174.959154][T16268] netlink: 'syz.3.3332': attribute type 13 has an invalid length. [ 1174.997938][T16268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1175.032059][T16268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1175.034033][T16268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1175.046348][ T7015] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1175.455681][T16287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.476699][ T7015] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1175.512589][ T7015] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1175.544191][ T7015] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1175.587362][ T7015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.656793][T16263] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1175.743017][T16293] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1175.847549][T16293] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1175.889360][T16293] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1175.942248][T16295] device syzkaller0 entered promiscuous mode [ 1176.061654][ T7015] usb 5-1: USB disconnect, device number 45 [ 1176.222327][T16308] netlink: 'syz.0.3335': attribute type 10 has an invalid length. [ 1176.296129][T16308] device syz_tun entered promiscuous mode [ 1176.359373][T16308] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1176.970267][T16334] lo: Caught tx_queue_len zero misconfig [ 1177.147328][ T9690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.228520][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.234898][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.244676][ T7015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.799496][T16367] device syzkaller0 entered promiscuous mode [ 1177.992187][T16376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3352'. [ 1178.055840][T16380] bond_slave_1: Caught tx_queue_len zero misconfig [ 1178.246653][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.401139][T16389] lo: Caught tx_queue_len zero misconfig [ 1178.453370][T16397] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3357'. [ 1178.518562][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.527655][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.546979][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.555859][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.593058][ T4270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.606604][T10325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.678437][T16402] netlink: 'syz.1.3359': attribute type 13 has an invalid length. [ 1178.853717][T16416] kvm: pic: non byte write [ 1178.977143][T16421] device syzkaller0 entered promiscuous mode [ 1179.149086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.219653][ T4235] Bluetooth: hci3: command 0x0411 tx timeout [ 1181.681707][T16486] netlink: 'syz.3.3384': attribute type 1 has an invalid length. [ 1181.872958][T16489] lo: Caught tx_queue_len zero misconfig [ 1182.811698][ T4265] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1183.229795][ T4265] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1183.289535][ T4265] usb 1-1: not running at top speed; connect to a high speed hub [ 1183.386542][ T4265] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1183.556401][ T4265] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1183.568980][ T4265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.607770][ T4265] usb 1-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1183.683807][ T4265] usb 1-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1183.717936][ C1] vkms_vblank_simulate: vblank timer overrun [ 1183.782780][ T4265] usb 1-1: SerialNumber: syz [ 1184.002760][T16557] lo speed is unknown, defaulting to 1000 [ 1184.109517][ T4265] usb 1-1: USB disconnect, device number 31 [ 1184.744255][T16569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3413'. [ 1185.644040][T16609] device syzkaller0 entered promiscuous mode [ 1186.353285][T16633] device syzkaller0 entered promiscuous mode [ 1187.524768][T16656] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1187.876533][ T7015] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1189.956355][ T7015] usb 3-1: Using ep0 maxpacket: 32 [ 1190.636390][ T7015] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1190.654221][ T7015] usb 3-1: can't read configurations, error -71 [ 1190.680394][T16677] netlink: 'syz.4.3448': attribute type 3 has an invalid length. [ 1190.691202][T16680] device syzkaller0 entered promiscuous mode [ 1190.853899][T16688] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1190.864235][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 1190.892851][T16689] lo speed is unknown, defaulting to 1000 [ 1191.874656][T16715] kvm: pic: non byte write [ 1192.039773][T16720] device syzkaller0 entered promiscuous mode [ 1192.203774][T16724] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1192.606759][ T4304] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3 [ 1192.719290][T16745] netlink: 'syz.0.3473': attribute type 1 has an invalid length. [ 1192.854911][T16745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1192.945447][T16749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1192.971276][T16749] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1193.028663][T16749] bond1: (slave gre1): Error -95 calling set_mac_address [ 1193.088430][T16752] IPv6: NLM_F_CREATE should be specified when creating new route [ 1193.104625][T16754] device gretap1 entered promiscuous mode [ 1193.164987][T16754] bond1: (slave gretap1): making interface the new active one [ 1193.211037][T16754] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1193.274178][T16763] binder: BINDER_SET_CONTEXT_MGR already set [ 1193.306433][T16763] binder: 16762:16763 ioctl 4018620d 200000000040 returned -16 [ 1193.440249][T16774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3482'. [ 1193.466400][ T4232] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1193.478727][T16774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3482'. [ 1193.629359][T16779] device syzkaller0 entered promiscuous mode [ 1193.881848][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1193.926472][ T4232] usb 2-1: not running at top speed; connect to a high speed hub [ 1193.966550][ T9690] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1194.016495][ T4232] usb 2-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1194.186921][ T4232] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1194.196143][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.231318][ T4232] usb 2-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1194.286505][ T4232] usb 2-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1194.320685][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.342926][ T4232] usb 2-1: SerialNumber: syz [ 1194.416658][ T9690] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1194.428627][T16813] sctp: [Deprecated]: syz.3.3495 (pid 16813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1194.428627][T16813] Use struct sctp_sack_info instead [ 1194.476543][ T9690] usb 3-1: not running at top speed; connect to a high speed hub [ 1194.514525][T16816] kvm: pic: non byte write [ 1194.556760][ T9690] usb 3-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1194.590455][T16818] device syzkaller0 entered promiscuous mode [ 1194.644570][ T4232] usb 2-1: USB disconnect, device number 20 [ 1194.716559][ T9690] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1194.735899][ T9690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.756138][ T9690] usb 3-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1194.777151][T16821] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1194.803913][ T9690] usb 3-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1194.843404][T16823] device syzkaller0 entered promiscuous mode [ 1194.873207][ T9690] usb 3-1: SerialNumber: syz [ 1194.896324][T16820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3498'. [ 1195.313568][T16846] netlink: 'syz.0.3505': attribute type 13 has an invalid length. [ 1195.338301][T16849] kvm: pic: non byte write [ 1195.362227][T16846] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1195.374584][ T4232] usb 3-1: USB disconnect, device number 38 [ 1195.412462][T16846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1195.456816][T16846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1195.735001][T16859] device syzkaller0 entered promiscuous mode [ 1195.963388][T16866] device syzkaller0 entered promiscuous mode [ 1196.143432][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3517'. [ 1199.532326][T16901] device syzkaller0 entered promiscuous mode [ 1200.026364][ T9690] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1200.037085][T16932] kvm: pic: non byte write [ 1200.427334][ T9690] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1200.497961][ T9690] usb 2-1: not running at top speed; connect to a high speed hub [ 1200.636704][ T9690] usb 2-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1200.829712][ T9690] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1200.872915][ T9690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.979513][ T9690] usb 2-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1201.208945][ T9690] usb 2-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1201.631762][ T9690] usb 2-1: SerialNumber: syz [ 1201.826170][T16946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3542'. [ 1201.926896][T16947] device syzkaller0 entered promiscuous mode [ 1202.442315][ T9690] usb 2-1: USB disconnect, device number 21 [ 1203.162904][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3543'. [ 1203.289902][T16950] netlink: 'syz.3.3544': attribute type 13 has an invalid length. [ 1203.346061][T16950] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1203.387282][T16950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1203.431794][T16950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1203.822363][T16974] device syzkaller0 entered promiscuous mode [ 1203.907480][T16985] device syzkaller0 entered promiscuous mode [ 1204.103082][T16982] device syzkaller0 entered promiscuous mode [ 1207.036712][T16999] tap0: tun_chr_ioctl cmd 1074025677 [ 1207.062606][T16999] tap0: linktype set to 805 [ 1207.176714][T17006] netlink: 'syz.2.3560': attribute type 1 has an invalid length. [ 1207.277918][T17006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1207.336380][T17012] netlink: 'syz.4.3561': attribute type 13 has an invalid length. [ 1207.431569][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1207.433762][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1207.433920][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1207.535975][T17013] bond1: (slave geneve2): making interface the new active one [ 1207.540403][T17013] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1207.555414][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1207.972454][T17035] device syzkaller0 entered promiscuous mode [ 1208.956502][T17048] ip6tnl0: Caught tx_queue_len zero misconfig [ 1209.044221][T17051] device syzkaller0 entered promiscuous mode [ 1209.137331][T17053] netlink: 'syz.1.3573': attribute type 1 has an invalid length. [ 1210.127566][ T7] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1210.866629][ T7] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1210.908342][ T7] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1210.939188][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1210.986356][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.046759][T17079] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1211.790316][T17107] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1211.831537][ T7015] usb 3-1: USB disconnect, device number 39 [ 1212.066572][T17113] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1212.687475][T17130] device syzkaller0 entered promiscuous mode [ 1213.550410][T17135] lo speed is unknown, defaulting to 1000 [ 1213.557464][T17136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3599'. [ 1213.634934][T17136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.655848][T17136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.695602][T17136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.741081][T17136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.782419][T17136] device geneve2 entered promiscuous mode [ 1213.868483][T17142] device syzkaller0 entered promiscuous mode [ 1214.597970][T17171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3610'. [ 1214.786464][ T9690] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1214.840179][T17171] device syzkaller0 entered promiscuous mode [ 1215.096477][T17183] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1215.104139][T17182] device syzkaller0 entered promiscuous mode [ 1215.166450][ T9690] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1215.187464][ T9690] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1215.216009][ T9690] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1215.229159][T17189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3616'. [ 1215.238764][ T9690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.276808][T17163] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1215.676974][ T2857] usb 4-1: USB disconnect, device number 46 [ 1215.807665][ T7] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1215.824682][T17201] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1215.994462][T17208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3625'. [ 1216.076393][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 1216.098477][T17212] netlink: 6060 bytes leftover after parsing attributes in process `syz.0.3627'. [ 1216.416727][ T7] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1216.432416][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.446048][T17225] device syzkaller0 entered promiscuous mode [ 1216.468669][ T7] usb 2-1: Product: syz [ 1216.472899][ T7] usb 2-1: Manufacturer: syz [ 1216.503428][ T7] usb 2-1: SerialNumber: syz [ 1216.523635][ T7] usb 2-1: config 0 descriptor?? [ 1216.758843][T17235] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1216.795365][ T7] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 022 [ 1217.172967][T17250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3642'. [ 1217.196320][ T4270] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1217.394730][T17259] tc action pedit 'at' offset 6 out of bounds [ 1217.429005][T17262] device syzkaller0 entered promiscuous mode [ 1217.607944][ T4270] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1217.619610][T17263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1217.630366][ T4270] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1217.650197][ T4270] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1217.683106][ T4270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.715137][T17271] lo: Caught tx_queue_len zero misconfig [ 1217.748969][T17239] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1218.431585][T17295] crypto_alloc_aead failed rc=-4 [ 1218.546160][ T4270] usb 2-1: USB disconnect, device number 22 [ 1218.780902][T17323] netlink: 'syz.2.3660': attribute type 13 has an invalid length. [ 1218.794977][T17323] rdma_rxe: ignoring netdev event = 30 for lo [ 1218.803651][T17323] infiniband syz0: set active [ 1218.814115][T17323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1218.825491][T17323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1218.833179][ T2857] net_ratelimit: 1 callbacks suppressed [ 1218.833194][ T2857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.836491][T17323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1218.883698][ T7] lo speed is unknown, defaulting to 1000 [ 1218.948646][T17329] netlink: 'syz.4.3662': attribute type 3 has an invalid length. [ 1219.238307][ T4202] Bluetooth: hci2: link tx timeout [ 1219.244187][ T4202] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1219.259327][ T4202] Bluetooth: hci2: link tx timeout [ 1219.264811][ T4202] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1219.388659][T17345] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1219.467564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.502776][ T4232] usb 4-1: USB disconnect, device number 47 [ 1219.636365][ T9690] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1219.906328][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.946414][ T9690] usb 2-1: Using ep0 maxpacket: 32 [ 1219.953582][ T7015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.965579][T17365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3673'. [ 1220.116343][T16229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.817676][ T7015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.843926][ T4270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.921324][T17373] netlink: 'syz.3.3676': attribute type 13 has an invalid length. [ 1220.950736][T17373] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1220.966119][T17373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1220.974988][T17373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1220.996758][ T2857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.037157][ T9690] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1221.070338][ T9690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.089103][ T9690] usb 2-1: Product: syz [ 1221.093412][ T9690] usb 2-1: Manufacturer: syz [ 1221.102312][ T9690] usb 2-1: SerialNumber: syz [ 1221.122159][ T9690] usb 2-1: config 0 descriptor?? [ 1221.149637][T17379] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3678'. [ 1221.173005][T17379] 0X: renamed from caif0 [ 1221.213668][T17379] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1221.282873][T17379] tunl0: Caught tx_queue_len zero misconfig [ 1221.306419][ T7015] Bluetooth: hci2: command 0x0406 tx timeout [ 1221.321341][T17385] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1221.387792][ T7015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.399439][ T9690] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 023 [ 1221.526148][T17396] xt_hashlimit: size too large, truncated to 1048576 [ 1221.936507][ T7015] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1222.166587][ T7015] usb 3-1: device descriptor read/64, error -71 [ 1222.496639][ T7015] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1222.693791][ T7] usb 2-1: USB disconnect, device number 23 [ 1222.826669][ T7015] usb 3-1: device descriptor read/64, error -71 [ 1222.977044][ T7015] usb usb3-port1: attempt power cycle [ 1223.386551][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 1223.416553][ T7015] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1223.416598][ T4237] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1223.647792][ T7015] usb 3-1: device descriptor read/8, error -71 [ 1223.887470][ T4237] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1223.936701][ T7015] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1223.987064][ T4237] usb 5-1: not running at top speed; connect to a high speed hub [ 1224.006001][ T2857] net_ratelimit: 6 callbacks suppressed [ 1224.006018][ T2857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.082850][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.097875][ T7015] usb 3-1: device descriptor read/8, error -71 [ 1224.157011][ T4237] usb 5-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1224.247387][ T7015] usb usb3-port1: unable to enumerate USB device [ 1224.486997][ T4237] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1224.534573][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.668180][ T4237] usb 5-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1224.930512][ T4237] usb 5-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1225.409176][ T4237] usb 5-1: SerialNumber: syz [ 1225.733686][ T4237] usb 5-1: USB disconnect, device number 46 [ 1225.781275][ T2857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.049528][T17433] netlink: 'syz.3.3693': attribute type 13 has an invalid length. [ 1226.080774][T17433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1226.099190][T17433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1226.116149][T17433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1226.749377][ T4237] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1226.826904][ T2857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.016312][ T4237] usb 4-1: Using ep0 maxpacket: 32 [ 1227.850479][T17462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3704'. [ 1227.867338][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.356777][ T4288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.435186][ T4270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.445350][ T7015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.461115][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.469856][ T4237] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1229.048032][T17471] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3706'. [ 1229.348643][T17470] device syzkaller1 entered promiscuous mode [ 1229.816364][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.824558][ T4237] usb 4-1: Product: syz [ 1229.828848][ T4237] usb 4-1: Manufacturer: syz [ 1229.833564][ T4237] usb 4-1: SerialNumber: syz [ 1229.840236][ T4237] usb 4-1: config 0 descriptor?? [ 1229.856540][ T4237] usb 4-1: can't set config #0, error -71 [ 1229.862900][ T2857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.871998][ T4237] usb 4-1: USB disconnect, device number 48 [ 1229.979519][T17477] netlink: 'syz.3.3708': attribute type 13 has an invalid length. [ 1230.000274][T17477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1230.033241][T17477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1230.066603][T17477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1230.149670][T17488] xt_hashlimit: size too large, truncated to 1048576 [ 1230.506355][ T4232] Bluetooth: hci5: command 0x0406 tx timeout [ 1230.624315][T17500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3716'. [ 1230.908229][ T2857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.142856][T17511] device syzkaller0 entered promiscuous mode [ 1231.382545][T17527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3728'. [ 1231.476683][ T7015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.948571][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.326655][T17550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.356301][T17550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.377360][T17550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.419197][T17551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.453264][T17551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.474912][T17551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.475990][T17555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3740'. [ 1233.741267][T17572] device syzkaller0 entered promiscuous mode [ 1233.837124][T17575] device syzkaller0 entered promiscuous mode [ 1234.035822][T17589] device syzkaller0 entered promiscuous mode [ 1234.315437][T17600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3753'. [ 1234.476559][T17607] netlink: 89 bytes leftover after parsing attributes in process `syz.2.3756'. [ 1234.650003][T17616] device syzkaller0 entered promiscuous mode [ 1234.773134][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1234.866391][ T2857] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1234.892873][T17625] lo speed is unknown, defaulting to 1000 [ 1235.057081][ T2857] usb 5-1: device descriptor read/64, error -71 [ 1235.068424][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3768'. [ 1235.336366][ T2857] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1235.526375][ T2857] usb 5-1: device descriptor read/64, error -71 [ 1235.646524][ T2857] usb usb5-port1: attempt power cycle [ 1235.673061][T17659] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1235.875116][ T9690] net_ratelimit: 12 callbacks suppressed [ 1235.875136][ T9690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.092596][T17652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1236.446328][ T2857] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1236.596403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.606117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.268064][ T7015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.506344][ T2857] usb 5-1: device not accepting address 49, error -71 [ 1238.679238][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.736285][ T9690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.753646][ T7015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.934579][T17682] netlink: 'syz.4.3785': attribute type 13 has an invalid length. [ 1238.949300][T17682] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1238.959449][T17682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1238.969495][T17682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1239.098022][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3783'. [ 1239.107642][T17689] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1239.649273][T17706] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1240.452284][T17726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1240.477381][ T2857] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1240.689786][T17735] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1240.710435][T17737] netlink: 'syz.3.3800': attribute type 13 has an invalid length. [ 1240.750582][T17737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1240.788955][T17737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1240.857041][T17737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1240.876710][ T2857] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1240.917259][ T2857] usb 2-1: not running at top speed; connect to a high speed hub [ 1240.996606][ T2857] usb 2-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1241.160735][T17751] netlink: 'syz.3.3804': attribute type 1 has an invalid length. [ 1241.176836][ T2857] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1241.193028][ T2857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.232786][ T2857] usb 2-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1241.263837][T17751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1241.335002][ T2857] usb 2-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1241.420882][T17754] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1241.456788][T17754] bond1: (slave batadv1): making interface the new active one [ 1241.484684][ T2857] usb 2-1: SerialNumber: syz [ 1241.513564][T17754] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1241.576653][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1241.666311][ T7] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1242.068149][ T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1242.091696][ T7] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1242.119831][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1242.131165][ T4265] usb 2-1: USB disconnect, device number 24 [ 1242.174186][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.216760][T17758] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1242.581337][ T4265] usb 1-1: USB disconnect, device number 32 [ 1242.863888][T17782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1243.997537][T17804] device syzkaller0 entered promiscuous mode [ 1244.048568][T17804] tipc: Started in network mode [ 1244.053600][T17804] tipc: Node identity aa02782431da, cluster identity 4711 [ 1244.075945][T17804] tipc: Enabled bearer , priority 0 [ 1244.093685][T17808] device syzkaller0 entered promiscuous mode [ 1244.134724][T17803] tipc: Resetting bearer [ 1244.174365][T17803] tipc: Disabling bearer [ 1244.632005][T17828] kvm: pic: non byte write [ 1245.562441][T17846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3832'. [ 1245.755459][T17853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3836'. [ 1245.776705][T17854] device syzkaller0 entered promiscuous mode [ 1245.848118][T17850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3833'. [ 1246.270017][T17882] kvm: pic: non byte write [ 1246.423854][T17893] device syzkaller0 entered promiscuous mode [ 1246.566306][T10325] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1247.017131][T10325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1247.096967][T10325] usb 3-1: not running at top speed; connect to a high speed hub [ 1247.104903][T10325] usb 3-1: no configurations [ 1247.110179][T10325] usb 3-1: can't read configurations, error -22 [ 1247.285363][T10325] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1247.786592][T10325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1247.842669][T17929] device syzkaller0 entered promiscuous mode [ 1247.856679][T10325] usb 3-1: not running at top speed; connect to a high speed hub [ 1247.864551][T10325] usb 3-1: no configurations [ 1247.876315][T10325] usb 3-1: can't read configurations, error -22 [ 1247.898537][T10325] usb usb3-port1: attempt power cycle [ 1248.114661][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3870'. [ 1248.198838][T17945] ip6tnl0: Caught tx_queue_len zero misconfig [ 1248.327250][T17950] netlink: 'syz.4.3876': attribute type 1 has an invalid length. [ 1248.346573][T10325] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1248.373523][T17950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1248.421466][T17954] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1248.458235][T17954] bond1: (slave batadv1): making interface the new active one [ 1248.494731][T17954] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1248.526573][T16229] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1248.646626][T10325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1248.701968][T17963] device syzkaller0 entered promiscuous mode [ 1248.716707][T10325] usb 3-1: not running at top speed; connect to a high speed hub [ 1248.732283][T10325] usb 3-1: no configurations [ 1248.742124][T10325] usb 3-1: can't read configurations, error -22 [ 1248.909100][T10325] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1248.995345][T10740] tipc: Left network mode [ 1249.146123][ T7015] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1249.206626][T10325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1249.256576][T10325] usb 3-1: not running at top speed; connect to a high speed hub [ 1249.288940][T10325] usb 3-1: no configurations [ 1249.293609][T10325] usb 3-1: can't read configurations, error -22 [ 1249.323953][T10325] usb usb3-port1: unable to enumerate USB device [ 1249.610311][T17984] netlink: 'syz.2.3886': attribute type 13 has an invalid length. [ 1249.625248][T17984] infiniband syz0: set active [ 1249.634941][T17984] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1249.644949][T17984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1249.646790][ T7015] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1249.654679][T17984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1249.707385][ T7015] usb 5-1: not running at top speed; connect to a high speed hub [ 1249.744571][ T4235] lo speed is unknown, defaulting to 1000 [ 1249.801896][ T7015] usb 5-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1250.016897][ T7015] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1250.027886][ T7015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.067045][ T7015] usb 5-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1250.149321][ T7015] usb 5-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1250.202359][ T7015] usb 5-1: SerialNumber: syz [ 1250.245530][T18007] device syzkaller0 entered promiscuous mode [ 1250.429657][T10740] device hsr_slave_0 left promiscuous mode [ 1250.485234][T10740] device hsr_slave_1 left promiscuous mode [ 1250.545210][T10740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1250.553084][T10740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.606363][ T4232] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1250.637224][T10740] device bridge_slave_1 left promiscuous mode [ 1250.643476][T10740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.670363][ T4235] usb 5-1: USB disconnect, device number 51 [ 1250.709162][T10740] device bridge_slave_0 left promiscuous mode [ 1250.715451][T10740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.743362][T10740] device veth1_macvtap left promiscuous mode [ 1250.756542][T10740] device veth0_macvtap left promiscuous mode [ 1250.762711][T10740] device veth1_vlan left promiscuous mode [ 1250.779798][T10740] device veth0_vlan left promiscuous mode [ 1250.856436][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 1250.925293][T10740] bond1 (unregistering): Released all slaves [ 1250.931789][T10325] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1251.066994][T10740] team0 (unregistering): Port device team_slave_1 removed [ 1251.098977][T10740] team0 (unregistering): Port device team_slave_0 removed [ 1251.136404][ T4232] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1251.145503][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.154229][T10740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.176697][T10740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.185481][ T4232] usb 4-1: Product: syz [ 1251.194169][ T4232] usb 4-1: Manufacturer: syz [ 1251.210444][ T4232] usb 4-1: SerialNumber: syz [ 1251.236930][ T4232] usb 4-1: config 0 descriptor?? [ 1251.307567][T10325] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1251.321890][T10325] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1251.356401][T10325] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1251.365620][T10325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.392470][T10740] bond0 (unregistering): Released all slaves [ 1251.426840][T18023] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1251.499739][ T4232] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 049 [ 1251.747319][T18044] netlink: 'syz.1.3903': attribute type 13 has an invalid length. [ 1251.814416][ T4232] usb 1-1: USB disconnect, device number 33 [ 1251.872759][T18052] device syzkaller0 entered promiscuous mode [ 1252.572387][T18080] netlink: 10188 bytes leftover after parsing attributes in process `syz.0.3912'. [ 1252.634732][ T4265] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1252.990528][T18092] rdma_rxe: rxe_register_device failed with error -23 [ 1253.005035][T18092] rdma_rxe: failed to add xfrm0 [ 1253.056681][ T4265] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1253.096596][ T4265] usb 2-1: not running at top speed; connect to a high speed hub [ 1253.147321][T18096] device syzkaller0 entered promiscuous mode [ 1253.176848][ T4265] usb 2-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1253.285085][T18099] netlink: 'syz.0.3919': attribute type 13 has an invalid length. [ 1253.320984][T18099] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1253.334624][ T7] usb 4-1: USB disconnect, device number 49 [ 1253.346556][ T4265] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1253.366313][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.374365][ T4265] usb 2-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1253.400843][T18099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1253.423310][T18099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1253.486524][ T4265] usb 2-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1253.512146][T18084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1253.520651][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.566388][ T4265] usb 2-1: SerialNumber: syz [ 1253.971781][ T7] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1254.079408][ T4237] usb 2-1: USB disconnect, device number 25 [ 1254.366746][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1254.384624][ T7] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1254.416877][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1254.435447][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.466936][T18104] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1254.808770][T18136] device syzkaller0 entered promiscuous mode [ 1254.847804][ T9690] usb 4-1: USB disconnect, device number 50 [ 1255.016438][ T4265] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1255.030071][T18141] netlink: 'syz.4.3934': attribute type 13 has an invalid length. [ 1255.091882][T18141] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1255.126029][T18141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1255.134796][T18141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1255.180857][T18145] netlink: 'syz.0.3936': attribute type 1 has an invalid length. [ 1255.220609][T18145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1255.251345][T18153] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1255.258532][ T4265] usb 2-1: Using ep0 maxpacket: 32 [ 1255.266813][T18153] bond2: (slave batadv1): making interface the new active one [ 1255.277534][T18153] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 1255.370051][T16229] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1255.536623][ T4265] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1255.576292][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.607100][ T4265] usb 2-1: Product: syz [ 1255.611336][ T4265] usb 2-1: Manufacturer: syz [ 1255.644066][ T4265] usb 2-1: SerialNumber: syz [ 1255.675423][T18174] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3942'. [ 1255.685700][ T4265] usb 2-1: config 0 descriptor?? [ 1255.732628][T18177] device syzkaller0 entered promiscuous mode [ 1255.834774][T18186] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 1255.950255][ T4265] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 026 [ 1256.137522][ T7] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1256.566505][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1256.616851][ T7] usb 3-1: not running at top speed; connect to a high speed hub [ 1256.746066][ T7] usb 3-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1256.926175][ T7] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1256.935303][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.943998][ T7015] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1256.967375][ T7] usb 3-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 1256.997070][ T7] usb 3-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 1257.040440][ T7] usb 3-1: SerialNumber: syz [ 1257.260664][T18214] netlink: 'syz.0.3954': attribute type 13 has an invalid length. [ 1257.281893][T18214] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1257.300712][T18214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1257.317457][T18214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1257.336936][ T7015] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1257.358280][ T7015] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1257.406562][ T7015] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1257.425967][ T7015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.477094][T18208] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1257.499752][ T7] usb 3-1: USB disconnect, device number 48 [ 1257.689551][ T2857] usb 2-1: USB disconnect, device number 26 [ 1257.819446][T18228] device syzkaller0 entered promiscuous mode [ 1257.867174][ T4265] usb 5-1: USB disconnect, device number 52 [ 1257.969351][T18232] tipc: Started in network mode [ 1257.978248][T18232] tipc: Node identity ac14140f, cluster identity 4711 [ 1257.989019][T18232] tipc: New replicast peer: 255.255.255.255 [ 1258.008487][T18232] tipc: Enabled bearer , priority 10 [ 1258.015989][T18232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3959'. [ 1258.037757][T18232] netlink: 'syz.0.3959': attribute type 1 has an invalid length. [ 1258.128263][T18232] device bond3 entered promiscuous mode [ 1258.134125][T18232] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1258.143592][T18234] tipc: Enabling of bearer rejected, failed to enable media [ 1258.172408][T18236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3959'. [ 1258.222067][T18241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3962'. [ 1258.338465][T18232] bond3: (slave bridge1): making interface the new active one [ 1258.382481][T18232] device bridge1 entered promiscuous mode [ 1258.407950][T18232] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1258.452197][ T1432] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 1258.815696][T18252] netlink: 'syz.0.3965': attribute type 13 has an invalid length. [ 1258.900166][T18252] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1258.941843][T18252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1258.954931][T18258] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1258.969863][T18252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1259.177879][ T7015] tipc: Node number set to 2886997007 [ 1259.186500][ T9690] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1259.291214][T18269] ------------[ cut here ]------------ [ 1259.347825][T18269] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 1259.401178][T18269] WARNING: CPU: 1 PID: 18269 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 1259.440146][ T9690] usb 5-1: Using ep0 maxpacket: 32 [ 1259.476769][T18269] Modules linked in: [ 1259.484276][T18269] CPU: 0 PID: 18269 Comm: syz.2.3970 Not tainted syzkaller #0 [ 1259.506486][T18269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1259.577662][T18269] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 1259.637857][T18269] Code: 83 7d f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 40 4b 39 8b 4c 89 e6 89 ea e8 35 aa 71 00 <0f> 0b e9 07 fd ff ff e8 b9 69 38 f8 0f 0b e9 b1 fe ff ff e8 ad 69 [ 1259.716658][ T9690] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1259.746406][T18269] RSP: 0018:ffffc900040cf3a0 EFLAGS: 00010246 [ 1259.748568][ T9690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.769012][T18269] RAX: 6d88adb4555acf00 RBX: 0000000002000000 RCX: 0000000000080000 [ 1259.783392][ T9690] usb 5-1: Product: syz [ 1259.788152][ T9690] usb 5-1: Manufacturer: syz [ 1259.792848][ T9690] usb 5-1: SerialNumber: syz [ 1259.802453][ T9690] usb 5-1: config 0 descriptor?? [ 1259.807735][T18269] RDX: ffffc900199cc000 RSI: 00000000000028a1 RDI: 00000000000028a2 [ 1259.817178][T18269] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 1259.825338][T18269] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88806861c000 [ 1259.833881][T18269] R13: ffff88806861d290 R14: ffff88804db80e00 R15: ffff88806861e268 [ 1259.842915][T18269] FS: 00007fbcc56066c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1259.874415][T18269] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1259.895043][T18269] CR2: 00007f21f6b10158 CR3: 000000007e5f5000 CR4: 00000000003506e0 [ 1259.922114][T18269] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1259.948084][T18269] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1259.989764][T18269] Call Trace: [ 1260.006078][T18269] [ 1260.015940][T18269] ieee80211_set_mcast_rate+0x3b/0x50 [ 1260.030695][T18269] ? ieee80211_leave_ibss+0x20/0x20 [ 1260.044201][T18269] nl80211_set_mcast_rate+0x346/0x530 [ 1260.057881][T18269] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 1260.070611][T18269] genl_rcv_msg+0xcea/0xf90 [ 1260.078541][ T9690] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 053 [ 1260.096988][T18269] ? genl_bind+0x380/0x380 [ 1260.131254][T18269] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1260.146483][T18269] ? verify_lock_unused+0x140/0x140 [ 1260.158861][T18269] ? dev_queue_xmit+0x20/0x20 [ 1260.169293][T18269] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 1260.181075][T18269] netlink_rcv_skb+0x1f5/0x440 [ 1260.192739][T18269] ? genl_bind+0x380/0x380 [ 1260.201864][T18269] ? netlink_ack+0xb50/0xb50 [ 1260.212271][T18269] ? __lock_acquire+0x7d10/0x7d10 [ 1260.224436][T18269] ? down_read+0x1aa/0x2e0 [ 1260.240213][T18269] genl_rcv+0x24/0x40 [ 1260.244301][T18269] netlink_unicast+0x774/0x920 [ 1260.256132][T18269] netlink_sendmsg+0x8ba/0xbe0 [ 1260.263697][T18269] ? netlink_getsockopt+0x570/0x570 [ 1260.278909][T18269] ? aa_sock_msg_perm+0x94/0x150 [ 1260.284202][T18269] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1260.295622][T18269] ? security_socket_sendmsg+0x7c/0xa0 [ 1260.304862][T18269] ? netlink_getsockopt+0x570/0x570 [ 1260.316122][T18269] ____sys_sendmsg+0x5b7/0x8f0 [ 1260.327014][T18269] ? __sys_sendmsg_sock+0x30/0x30 [ 1260.332239][T18269] ? import_iovec+0x6f/0xa0 [ 1260.345394][T18269] ___sys_sendmsg+0x236/0x2e0 [ 1260.351680][T18269] ? __sys_sendmsg+0x2a0/0x2a0 [ 1260.363987][T18269] __se_sys_sendmsg+0x1af/0x290 [ 1260.371490][T18269] ? __x64_sys_sendmsg+0x80/0x80 [ 1260.383842][T18269] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1260.392525][T18269] ? lockdep_hardirqs_on+0x94/0x140 [ 1260.405551][T18269] do_syscall_64+0x4c/0xa0 [ 1260.412602][T18269] ? clear_bhb_loop+0x30/0x80 [ 1260.424885][T18269] ? clear_bhb_loop+0x30/0x80 [ 1260.434039][T18269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1260.446087][T18269] RIP: 0033:0x7fbcc73eee59 [ 1260.454788][T18269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.484011][T18269] RSP: 002b:00007fbcc5606028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1260.494123][T18269] RAX: ffffffffffffffda RBX: 00007fbcc7668180 RCX: 00007fbcc73eee59 [ 1260.509716][T18269] RDX: 0000000000000840 RSI: 0000200000000200 RDI: 000000000000000d [ 1260.524141][T18269] RBP: 00007fbcc7484d6f R08: 0000000000000000 R09: 0000000000000000 [ 1260.533333][T18269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1260.543059][T18269] R13: 00007fbcc7668218 R14: 00007fbcc7668180 R15: 00007ffcbe69b9f8 [ 1260.551378][T18269] [ 1260.554587][T18269] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1260.561896][T18269] CPU: 0 PID: 18269 Comm: syz.2.3970 Not tainted syzkaller #0 [ 1260.569391][T18269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1260.579480][T18269] Call Trace: [ 1260.582790][T18269] [ 1260.585735][T18269] dump_stack_lvl+0x188/0x250 [ 1260.590472][T18269] ? show_regs_print_info+0x20/0x20 [ 1260.595697][T18269] ? load_image+0x400/0x400 [ 1260.600245][T18269] panic+0x2e5/0x810 [ 1260.604227][T18269] ? bpf_jit_dump+0xd0/0xd0 [ 1260.608755][T18269] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 1260.615189][T18269] __warn+0x248/0x2b0 [ 1260.619189][T18269] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 1260.625627][T18269] report_bug+0x1b7/0x2e0 [ 1260.630042][T18269] handle_bug+0x3a/0x70 [ 1260.634228][T18269] exc_invalid_op+0x16/0x40 [ 1260.638749][T18269] asm_exc_invalid_op+0x16/0x20 [ 1260.643626][T18269] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 1260.650667][T18269] Code: 83 7d f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 40 4b 39 8b 4c 89 e6 89 ea e8 35 aa 71 00 <0f> 0b e9 07 fd ff ff e8 b9 69 38 f8 0f 0b e9 b1 fe ff ff e8 ad 69 [ 1260.670289][T18269] RSP: 0018:ffffc900040cf3a0 EFLAGS: 00010246 [ 1260.676369][T18269] RAX: 6d88adb4555acf00 RBX: 0000000002000000 RCX: 0000000000080000 [ 1260.684347][T18269] RDX: ffffc900199cc000 RSI: 00000000000028a1 RDI: 00000000000028a2 [ 1260.692330][T18269] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 1260.700310][T18269] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88806861c000 [ 1260.708292][T18269] R13: ffff88806861d290 R14: ffff88804db80e00 R15: ffff88806861e268 [ 1260.716297][T18269] ieee80211_set_mcast_rate+0x3b/0x50 [ 1260.721690][T18269] ? ieee80211_leave_ibss+0x20/0x20 [ 1260.726901][T18269] nl80211_set_mcast_rate+0x346/0x530 [ 1260.732289][T18269] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 1260.738120][T18269] genl_rcv_msg+0xcea/0xf90 [ 1260.742647][T18269] ? genl_bind+0x380/0x380 [ 1260.747078][T18269] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1260.752289][T18269] ? verify_lock_unused+0x140/0x140 [ 1260.757514][T18269] ? dev_queue_xmit+0x20/0x20 [ 1260.762201][T18269] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 1260.768044][T18269] netlink_rcv_skb+0x1f5/0x440 [ 1260.772854][T18269] ? genl_bind+0x380/0x380 [ 1260.777303][T18269] ? netlink_ack+0xb50/0xb50 [ 1260.781916][T18269] ? __lock_acquire+0x7d10/0x7d10 [ 1260.786970][T18269] ? down_read+0x1aa/0x2e0 [ 1260.791412][T18269] genl_rcv+0x24/0x40 [ 1260.795413][T18269] netlink_unicast+0x774/0x920 [ 1260.800203][T18269] netlink_sendmsg+0x8ba/0xbe0 [ 1260.804990][T18269] ? netlink_getsockopt+0x570/0x570 [ 1260.810201][T18269] ? aa_sock_msg_perm+0x94/0x150 [ 1260.815156][T18269] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1260.820463][T18269] ? security_socket_sendmsg+0x7c/0xa0 [ 1260.825937][T18269] ? netlink_getsockopt+0x570/0x570 [ 1260.831149][T18269] ____sys_sendmsg+0x5b7/0x8f0 [ 1260.835937][T18269] ? __sys_sendmsg_sock+0x30/0x30 [ 1260.840980][T18269] ? import_iovec+0x6f/0xa0 [ 1260.845503][T18269] ___sys_sendmsg+0x236/0x2e0 [ 1260.850201][T18269] ? __sys_sendmsg+0x2a0/0x2a0 [ 1260.855005][T18269] __se_sys_sendmsg+0x1af/0x290 [ 1260.859870][T18269] ? __x64_sys_sendmsg+0x80/0x80 [ 1260.864821][T18269] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1260.870824][T18269] ? lockdep_hardirqs_on+0x94/0x140 [ 1260.876037][T18269] do_syscall_64+0x4c/0xa0 [ 1260.880464][T18269] ? clear_bhb_loop+0x30/0x80 [ 1260.885147][T18269] ? clear_bhb_loop+0x30/0x80 [ 1260.889829][T18269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1260.895741][T18269] RIP: 0033:0x7fbcc73eee59 [ 1260.900173][T18269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.919803][T18269] RSP: 002b:00007fbcc5606028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1260.928235][T18269] RAX: ffffffffffffffda RBX: 00007fbcc7668180 RCX: 00007fbcc73eee59 [ 1260.936216][T18269] RDX: 0000000000000840 RSI: 0000200000000200 RDI: 000000000000000d [ 1260.944199][T18269] RBP: 00007fbcc7484d6f R08: 0000000000000000 R09: 0000000000000000 [ 1260.952187][T18269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1260.960168][T18269] R13: 00007fbcc7668218 R14: 00007fbcc7668180 R15: 00007ffcbe69b9f8 [ 1260.968169][T18269] [ 1260.971501][T18269] Kernel Offset: disabled [ 1260.976301][T18269] Rebooting in 86400 seconds..