last executing test programs: 4.680122561s ago: executing program 0 (id=14235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x484, 0x0, 0x9}]}) 4.44817887s ago: executing program 0 (id=14239): socket$inet6(0xa, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002500), 0x2443, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 3.624472221s ago: executing program 4 (id=14253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x3c, r1, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x3c}}, 0x4) 3.452339731s ago: executing program 2 (id=14255): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00', @ANYRES16], 0x44}}, 0x4) 3.368576794s ago: executing program 4 (id=14256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000fddbdf252e00000008000300", @ANYRES32, @ANYBLOB="0a003400020202b3ec0200000a0006003bce5da5aa7f00000800350006"], 0x44}}, 0x0) 3.008099863s ago: executing program 3 (id=14257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}}, 0x24}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xfdef) 2.945896193s ago: executing program 2 (id=14258): unshare(0x10480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r0, 0x1, 0x2, @broadcast}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r1, &(0x7f0000000080), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) unshare(0x2a040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2.944445328s ago: executing program 4 (id=14259): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$video4linux(0x0, 0xff, 0x0) r5 = io_uring_setup(0x1, &(0x7f0000000280)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r5, 0x24, &(0x7f0000000400)={0x0, 0x1, '\x00', @zc_export={r5}}, 0x0) 2.535714803s ago: executing program 3 (id=14261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000200320366863658427308000300", @ANYRES32=r2], 0x24}}, 0x0) 2.339435786s ago: executing program 3 (id=14263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x9, 0x4b9, 0x4f1b04e0, 0x1000}]}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x484, 0x0, 0x9}]}) 2.233179753s ago: executing program 1 (id=14264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000004c0)="13d3", 0x2, 0x24044881, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) shutdown(r0, 0x1) 2.06137431s ago: executing program 1 (id=14265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0xf870, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x7fff, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0xfff7, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x86, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x9, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.00464543s ago: executing program 0 (id=14266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x3c, r1, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x3c}}, 0x4) 1.765131197s ago: executing program 3 (id=14267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x62, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40004) 1.721771553s ago: executing program 0 (id=14268): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x40004804, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x51, 0x80, 0xfe, 0x0, 0x9, 0x9, 0x8, 0x58, 0x0, 0x17, 0x9}, 0xe) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) 1.46889863s ago: executing program 1 (id=14269): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5}, 0x10) sendmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="053fe8", 0x3}], 0x1}}], 0x1, 0x8081) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 1.309065747s ago: executing program 2 (id=14270): sched_setattr(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x220040000000fff, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.17325604s ago: executing program 3 (id=14271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x40) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 1.170566917s ago: executing program 2 (id=14272): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.118461843s ago: executing program 1 (id=14273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000200320366863658427308000300", @ANYRES32=r2], 0x24}}, 0x0) 948.994975ms ago: executing program 1 (id=14274): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 641.264619ms ago: executing program 0 (id=14275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000004c0)="13d3", 0x2, 0x24044881, &(0x7f00000000c0)={0xa, 0x2, 0x1, @loopback, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) shutdown(r0, 0x1) 627.470328ms ago: executing program 0 (id=14276): socket$inet6(0xa, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002500), 0x2443, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 536.396546ms ago: executing program 3 (id=14277): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x2004a002) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) socket$inet(0x2, 0xa, 0x9268) read$dsp(r2, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 456.633113ms ago: executing program 4 (id=14278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x3c, r1, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x3c}}, 0x4) 405.462773ms ago: executing program 4 (id=14279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0xf870, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x7fff, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0xfff7, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x86, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x9, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmmsg(r8, 0x0, 0x0, 0x0) 185.739466ms ago: executing program 2 (id=14280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 98.490541ms ago: executing program 4 (id=14281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000004c0)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) 53.487311ms ago: executing program 2 (id=14282): sched_setattr(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x220040000000fff, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 1 (id=14283): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a40)={0x18, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 2439.631757][ T7118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2439.631843][ T7118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2439.904000][ T7124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2439.904019][ T7124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2439.968721][T16413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2439.968744][T16413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2440.006083][T22110] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2440.158327][T22110] usb 3-1: Using ep0 maxpacket: 32 [ 2440.159229][T22110] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2440.160588][T22110] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2440.170961][T22110] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2440.171002][T22110] usb 3-1: Product: syz [ 2440.171056][T22110] usb 3-1: Manufacturer: syz [ 2440.171070][T22110] usb 3-1: SerialNumber: syz [ 2440.181132][T22110] usb 3-1: config 0 descriptor?? [ 2440.185753][T10312] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2440.205775][T22110] hub 3-1:0.0: bad descriptor, ignoring hub [ 2440.205831][T22110] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2440.786632][T10341] netlink: 'syz.4.12868': attribute type 11 has an invalid length. [ 2441.163670][T10350] syzkaller0: entered promiscuous mode [ 2441.163728][T10350] syzkaller0: entered allmulticast mode [ 2441.319000][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12875'. [ 2444.305113][ T4593] usb 3-1: USB disconnect, device number 38 [ 2447.080931][T10375] syzkaller0: entered promiscuous mode [ 2447.080956][T10375] syzkaller0: entered allmulticast mode [ 2447.267560][T22110] wiimote 0005:057E:0330.00A5: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 2447.269951][T22110] wiimote 0005:057E:0330.00A5: New device registered [ 2447.292085][T10384] wiimote 0005:057E:0330.00A5: Device removed [ 2447.360328][T10392] fido_id[10392]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2447.390577][T10390] syzkaller0: entered promiscuous mode [ 2447.390602][T10390] syzkaller0: entered allmulticast mode [ 2447.426529][T10390] tipc: Enabled bearer , priority 0 [ 2447.463302][T10390] tipc: Resetting bearer [ 2447.520212][T10389] tipc: Resetting bearer [ 2447.576810][T10389] tipc: Disabling bearer [ 2447.799754][T10408] bridge0: port 1(bond0) entered blocking state [ 2447.799945][T10408] bridge0: port 1(bond0) entered disabled state [ 2447.800246][T10408] bond0: entered allmulticast mode [ 2447.826818][T10408] bond0: entered promiscuous mode [ 2447.853963][T10408] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12891'. [ 2447.887222][T10408] hsr_slave_1 (unregistering): left promiscuous mode [ 2447.943969][T10415] netlink: 388 bytes leftover after parsing attributes in process `syz.2.12894'. [ 2448.205794][T10419] team0: Port device xfrm0 removed [ 2448.206639][T10419] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2448.236286][T10419] tipc: Enabling of bearer rejected, already enabled [ 2448.275187][ T4611] wiimote 0005:057E:0330.00A5: detected device: Nintendo Wii Remote Plus (Gen 2) [ 2448.338741][ T4611] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.00A5/input/input151 [ 2448.394650][ T4611] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.00A5/input/input152 [ 2448.456722][ T4611] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.00A5/input/input150 [ 2448.836602][T10425] batman_adv: batadv0: Adding interface: syzkaller0 [ 2448.836641][T10425] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2448.850882][T10425] batman_adv: batadv0: Interface activated: syzkaller0 [ 2448.970103][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12901'. [ 2449.411379][T10438] team0: Port device xfrm0 removed [ 2449.411818][T10438] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2449.418248][T10440] netlink: 388 bytes leftover after parsing attributes in process `syz.2.12905'. [ 2449.419031][T10438] tipc: Enabling of bearer rejected, already enabled [ 2449.470170][T10424] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 2449.534644][T10424] batman_adv: batadv0: Removing interface: syzkaller0 [ 2449.859339][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12913'. [ 2450.095882][T10467] team0: Port device xfrm0 removed [ 2450.096258][T10467] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2450.106857][T10467] tipc: Enabling of bearer rejected, already enabled [ 2450.214286][T10469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12920'. [ 2450.547469][T10481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12926'. [ 2450.886534][T10495] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2450.911283][T10495] tipc: Enabling of bearer rejected, already enabled [ 2451.526698][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12938'. [ 2451.822562][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12939'. [ 2452.059175][T10543] bond0: left allmulticast mode [ 2452.059203][T10543] bond0: left promiscuous mode [ 2452.059486][T10543] bridge0: port 1(bond0) entered disabled state [ 2452.090753][T10543] team0: Port device xfrm0 removed [ 2452.090959][T10543] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2452.104634][T10543] tipc: Enabling of bearer rejected, already enabled [ 2452.281630][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12947'. [ 2452.983969][T10573] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2453.008431][T10573] tipc: Enabling of bearer rejected, already enabled [ 2453.189902][T10577] syzkaller0: entered promiscuous mode [ 2453.189927][T10577] syzkaller0: entered allmulticast mode [ 2455.008630][T10589] __nla_validate_parse: 1 callbacks suppressed [ 2455.008653][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12963'. [ 2459.233331][T10606] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2459.239453][T10606] tipc: Enabling of bearer rejected, already enabled [ 2459.743598][T10625] syzkaller0: entered promiscuous mode [ 2459.743624][T10625] syzkaller0: entered allmulticast mode [ 2460.142265][T10638] netlink: 'syz.3.12981': attribute type 21 has an invalid length. [ 2465.154944][T10643] tipc: Enabling of bearer rejected, failed to enable media [ 2465.156841][T10644] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2465.525274][ T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2465.640101][T10669] batman_adv: batadv0: Adding interface: syzkaller0 [ 2465.640120][T10669] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2465.640153][T10669] batman_adv: batadv0: Interface activated: syzkaller0 [ 2465.675059][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 2465.675857][ T25] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2465.676819][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2465.678675][ T25] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2465.678696][ T25] usb 3-1: Product: syz [ 2465.678710][ T25] usb 3-1: Manufacturer: syz [ 2465.678723][ T25] usb 3-1: SerialNumber: syz [ 2465.681455][ T25] usb 3-1: config 0 descriptor?? [ 2465.682145][T10653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2465.683641][ T25] hub 3-1:0.0: bad descriptor, ignoring hub [ 2465.683662][ T25] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2465.684270][T10667] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 2465.793433][T10667] batman_adv: batadv0: Removing interface: syzkaller0 [ 2465.922123][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12993'. [ 2466.285590][T10683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2466.292037][T10683] tipc: Enabling of bearer rejected, already enabled [ 2466.410751][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12997'. [ 2466.887268][T10698] syzkaller0: entered promiscuous mode [ 2466.887292][T10698] syzkaller0: entered allmulticast mode [ 2467.485376][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.485432][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2470.310255][ T5839] usb 3-1: USB disconnect, device number 39 [ 2473.065538][T10714] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2473.066195][T10718] tipc: Enabling of bearer rejected, already enabled [ 2473.290929][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13014'. [ 2473.324187][T10734] netlink: 15 bytes leftover after parsing attributes in process `syz.1.13016'. [ 2473.355413][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13015'. [ 2473.688600][T10750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2473.692234][T10750] tipc: Enabling of bearer rejected, already enabled [ 2474.008718][T10756] syzkaller0: entered promiscuous mode [ 2474.008753][T10756] syzkaller0: entered allmulticast mode [ 2474.020638][T10756] tc mirred to Houston: device batadv_slave_0 is down [ 2474.307632][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13030'. [ 2474.400974][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13034'. [ 2474.752416][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13041'. [ 2474.832329][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13042'. [ 2475.110107][T10801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13046'. [ 2475.186822][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13047'. [ 2475.560078][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13053'. [ 2475.638610][T10815] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2475.642210][T10818] tipc: Resetting bearer [ 2475.664039][T10818] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 2475.868965][T10829] bridge_slave_0: left allmulticast mode [ 2475.869025][T10829] bridge_slave_0: left promiscuous mode [ 2475.869411][T10829] bridge0: port 1(bridge_slave_0) entered disabled state [ 2475.919759][T10829] bridge_slave_1: left allmulticast mode [ 2475.919824][T10829] bridge_slave_1: left promiscuous mode [ 2475.920209][T10829] bridge0: port 2(bridge_slave_1) entered disabled state [ 2475.948815][T10829] bond0: (slave bond_slave_0): Releasing backup interface [ 2475.954399][T10829] bond0: (slave bond_slave_1): Releasing backup interface [ 2475.988133][T10829] team0: Port device team_slave_0 removed [ 2475.993335][T10829] team0: Port device team_slave_1 removed [ 2475.994255][T10829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2475.994276][T10829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2476.024794][T10829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2476.024818][T10829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2476.026962][T10829] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2476.092111][T10832] team0: Port device xfrm0 added [ 2476.175592][T10835] tipc: Started in network mode [ 2476.175625][T10835] tipc: Node identity e6fdde968d9, cluster identity 4711 [ 2476.175792][T10835] tipc: Enabled bearer , priority 0 [ 2476.327324][T10842] netlink: 'syz.3.13063': attribute type 1 has an invalid length. [ 2476.452497][T10849] syzkaller0: entered promiscuous mode [ 2476.452520][T10849] syzkaller0: entered allmulticast mode [ 2476.693326][T10859] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2476.721263][T10859] bond13: (slave syz_tun): Enslaving as an active interface with an up link [ 2476.878614][T10869] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2476.882036][T10869] tipc: Enabling of bearer rejected, already enabled [ 2477.122054][T10878] netlink: 'syz.4.13076': attribute type 1 has an invalid length. [ 2477.187257][ T5839] tipc: Node number set to 1802362518 [ 2477.222989][T10883] syzkaller0: entered promiscuous mode [ 2477.223013][T10883] syzkaller0: entered allmulticast mode [ 2477.575181][T10889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2477.603788][T10892] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 2477.669028][T10896] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2477.872368][T10903] team0: Port device xfrm0 removed [ 2477.873327][T10903] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2477.873657][T22341] tipc: Resetting bearer [ 2478.052238][T10903] tipc: Enabling of bearer rejected, already enabled [ 2478.312271][T10917] syzkaller0: entered promiscuous mode [ 2478.312296][T10917] syzkaller0: entered allmulticast mode [ 2478.399458][T10918] syzkaller0: entered promiscuous mode [ 2478.399473][T10918] syzkaller0: entered allmulticast mode [ 2478.793742][T10929] __nla_validate_parse: 8 callbacks suppressed [ 2478.793792][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13097'. [ 2478.883492][T10935] bond5: (slave syz_tun): Releasing backup interface [ 2478.897331][T10935] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2478.904287][T10935] tipc: Enabling of bearer rejected, already enabled [ 2479.168837][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13106'. [ 2479.250962][T10948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2479.313035][T10952] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 2479.330908][T10949] syzkaller0: entered promiscuous mode [ 2479.330947][T10949] syzkaller0: entered allmulticast mode [ 2479.610301][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13113'. [ 2479.688993][T10968] syzkaller0: entered promiscuous mode [ 2479.689027][T10968] syzkaller0: entered allmulticast mode [ 2479.785821][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13116'. [ 2479.957380][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13120'. [ 2480.063835][T10980] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2480.095773][T10982] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 2480.144920][T10986] syzkaller0: entered promiscuous mode [ 2480.144977][T10986] syzkaller0: entered allmulticast mode [ 2480.290490][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13125'. [ 2480.477758][T11004] syzkaller0: entered promiscuous mode [ 2480.477781][T11004] syzkaller0: entered allmulticast mode [ 2480.591444][T11007] geneve0: entered promiscuous mode [ 2480.603374][T11007] batman_adv: batadv0: Adding interface: macvlan2 [ 2480.603392][T11007] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2480.603528][T11007] batman_adv: batadv0: Interface activated: macvlan2 [ 2480.847212][T11018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13134'. [ 2480.882017][T11018] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2480.894400][T11018] syz_tun: left promiscuous mode [ 2480.905073][T11018] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 2480.990152][T11024] syzkaller0: entered promiscuous mode [ 2480.990202][T11024] syzkaller0: entered allmulticast mode [ 2481.161903][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13140'. [ 2481.335368][T11035] syzkaller0: entered promiscuous mode [ 2481.335391][T11035] syzkaller0: entered allmulticast mode [ 2481.643662][T11049] bond1: (slave syz_tun): Releasing backup interface [ 2481.678672][T11049] tipc: Resetting bearer [ 2481.693632][T11052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13149'. [ 2481.722323][T11049] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2481.866532][T11049] tipc: Enabling of bearer rejected, already enabled [ 2481.903434][T11055] syzkaller0: entered promiscuous mode [ 2481.903456][T11055] syzkaller0: entered allmulticast mode [ 2482.348603][T11062] tipc: Enabled bearer , priority 0 [ 2482.354376][T11062] syzkaller0: entered promiscuous mode [ 2482.354431][T11062] syzkaller0: entered allmulticast mode [ 2482.367641][T11062] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2482.475643][T11062] tipc: Resetting bearer [ 2482.495101][T11061] tipc: Resetting bearer [ 2482.557442][T11061] tipc: Disabling bearer [ 2482.665855][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13164'. [ 2482.715334][T11081] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2482.722360][T11085] bond10: (slave syz_tun): Releasing backup interface [ 2482.739713][T11085] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2482.767331][T11081] bond6: (slave syz_tun): Releasing backup interface [ 2482.786894][T11081] bond7: (slave syz_tun): Enslaving as an active interface with an up link [ 2482.832622][T11085] tipc: Enabling of bearer rejected, already enabled [ 2482.853183][T11087] syzkaller0: entered promiscuous mode [ 2482.853238][T11087] syzkaller0: entered allmulticast mode [ 2483.107332][T11098] syzkaller0: entered promiscuous mode [ 2483.107357][T11098] syzkaller0: entered allmulticast mode [ 2483.253615][T11104] hsr_slave_0: left promiscuous mode [ 2483.258879][T11104] hsr_slave_1: left promiscuous mode [ 2483.403718][T11111] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2483.428993][T11111] bond11: (slave syz_tun): Enslaving as an active interface with an up link [ 2483.556006][T11119] bond11: (slave syz_tun): Releasing backup interface [ 2483.563573][T11119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2483.629136][T11117] syzkaller0: entered promiscuous mode [ 2483.629162][T11117] syzkaller0: entered allmulticast mode [ 2483.636077][T11119] tipc: Enabling of bearer rejected, already enabled [ 2484.311720][T11136] __nla_validate_parse: 6 callbacks suppressed [ 2484.311741][T11136] netlink: 15 bytes leftover after parsing attributes in process `syz.3.13184'. [ 2489.491691][T11152] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13190'. [ 2489.491716][T11152] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13190'. [ 2489.552088][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13189'. [ 2489.642903][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13193'. [ 2489.691945][T11154] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2489.709801][T11158] bond7: (slave syz_tun): Releasing backup interface [ 2489.743089][T11158] bond8: (slave syz_tun): Enslaving as an active interface with an up link [ 2489.764058][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13193'. [ 2489.798136][T11167] tipc: Resetting bearer [ 2489.811199][T11167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2489.847998][T11167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13192'. [ 2489.895432][T11167] tipc: Enabling of bearer rejected, already enabled [ 2489.916650][T11173] netlink: 15 bytes leftover after parsing attributes in process `syz.2.13195'. [ 2490.050036][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13196'. [ 2490.050116][T11178] netlink: 'syz.2.13196': attribute type 30 has an invalid length. [ 2490.102311][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13196'. [ 2490.102374][T11175] netlink: 'syz.2.13196': attribute type 30 has an invalid length. [ 2490.174666][T11178] vxlan0: entered promiscuous mode [ 2490.174705][T11178] vxlan0: entered allmulticast mode [ 2490.227231][T11175] vxlan1: entered promiscuous mode [ 2490.227254][T11175] vxlan1: entered allmulticast mode [ 2490.235339][T27735] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2490.236907][T27735] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2490.237105][T27735] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2490.237168][T27735] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2490.472495][T11192] netlink: 408 bytes leftover after parsing attributes in process `syz.2.13203'. [ 2490.681717][T11197] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2490.712781][T11197] bond12: (slave syz_tun): Enslaving as an active interface with an up link [ 2490.828682][T11206] bond13: (slave syz_tun): Releasing backup interface [ 2490.880107][T11206] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2491.096755][T11209] tipc: Enabling of bearer rejected, already enabled [ 2491.756992][T11251] tipc: Resetting bearer [ 2491.774558][T11251] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2491.913119][T11255] tipc: Enabling of bearer rejected, already enabled [ 2493.010449][T11295] tipc: Resetting bearer [ 2493.131141][T11295] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2493.165881][T11313] tipc: Enabling of bearer rejected, already enabled [ 2494.068341][T11341] tipc: Enabled bearer , priority 0 [ 2494.171172][T11338] tipc: Disabling bearer [ 2494.240189][T11348] bond8: (slave syz_tun): Releasing backup interface [ 2494.270752][T11348] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 2494.270781][T11348] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 2494.271002][T11348] bridge0: port 1(netdevsim0) entered disabled state [ 2494.449923][T11352] tipc: Enabling of bearer rejected, already enabled [ 2494.600736][T11363] syzkaller0: entered promiscuous mode [ 2494.600757][T11363] syzkaller0: entered allmulticast mode [ 2494.910858][T11376] __nla_validate_parse: 13 callbacks suppressed [ 2494.910937][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13271'. [ 2494.950196][T11378] netlink: 388 bytes leftover after parsing attributes in process `syz.1.13272'. [ 2494.954000][T11376] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2494.979771][T11376] bond9: (slave syz_tun): Enslaving as an active interface with an up link [ 2495.091788][T11382] bond9: (slave syz_tun): Releasing backup interface [ 2495.171790][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13274'. [ 2495.176385][T11382] tipc: Enabling of bearer rejected, already enabled [ 2495.369152][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13278'. [ 2495.683318][T11405] netlink: 388 bytes leftover after parsing attributes in process `syz.2.13285'. [ 2495.706988][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13284'. [ 2495.743847][T11407] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2495.789701][T11407] bond12: (slave syz_tun): Releasing backup interface [ 2495.821434][T11407] bond13: (slave syz_tun): Enslaving as an active interface with an up link [ 2495.957939][T11417] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2495.962621][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13289'. [ 2495.963369][T11417] tipc: Enabling of bearer rejected, already enabled [ 2496.522438][T11436] netlink: 388 bytes leftover after parsing attributes in process `syz.3.13298'. [ 2496.601801][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13300'. [ 2496.639153][T11440] 8021q: adding VLAN 0 to HW filter on device bond14 [ 2496.662547][T11440] bond14: (slave syz_tun): Enslaving as an active interface with an up link [ 2496.715662][T11444] bond10: (slave syz_tun): Releasing backup interface [ 2496.718130][T11444] tipc: Resetting bearer [ 2496.724274][T11444] tipc: Resetting bearer [ 2496.724575][T11444] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2496.798075][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13301'. [ 2496.881085][T11444] tipc: Enabling of bearer rejected, already enabled [ 2497.479942][T11469] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2497.494113][T11469] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 2497.638041][T11479] bond10: (slave syz_tun): Releasing backup interface [ 2497.684205][T11479] tipc: Enabling of bearer rejected, already enabled [ 2498.121192][T11491] syzkaller0: entered promiscuous mode [ 2498.121214][T11491] syzkaller0: entered allmulticast mode [ 2498.401359][T11495] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2498.456269][T11499] bond14: (slave syz_tun): Releasing backup interface [ 2498.486192][T11499] bond15: (slave syz_tun): Enslaving as an active interface with an up link [ 2498.504904][T11504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2498.511609][T11504] tipc: Enabling of bearer rejected, already enabled [ 2499.109514][T11535] syzkaller0: entered promiscuous mode [ 2499.109555][T11535] syzkaller0: entered allmulticast mode [ 2499.940938][T11543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2499.967472][T11546] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 2499.967549][T11549] tipc: Enabling of bearer rejected, already enabled [ 2500.239960][T11584] __nla_validate_parse: 7 callbacks suppressed [ 2500.240011][T11584] netlink: 15 bytes leftover after parsing attributes in process `syz.1.13349'. [ 2501.091181][T11618] netlink: 15 bytes leftover after parsing attributes in process `syz.1.13363'. [ 2501.757369][T11647] bond15: (slave syz_tun): Releasing backup interface [ 2501.785917][T11647] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2501.814408][T11647] netlink: 'syz.3.13377': attribute type 16 has an invalid length. [ 2501.850047][T11647] tipc: Enabling of bearer rejected, already enabled [ 2501.908004][T11652] netlink: 15 bytes leftover after parsing attributes in process `syz.2.13379'. [ 2502.669782][T11689] netlink: 15 bytes leftover after parsing attributes in process `syz.4.13391'. [ 2503.123118][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13398'. [ 2503.234373][T11714] syzkaller0: entered promiscuous mode [ 2503.234437][T11714] syzkaller0: entered allmulticast mode [ 2503.255807][T11714] tipc: Enabled bearer , priority 0 [ 2503.260916][T11713] tipc: Resetting bearer [ 2503.312336][T11713] tipc: Disabling bearer [ 2503.525223][T11728] syzkaller0: entered promiscuous mode [ 2503.525246][T11728] syzkaller0: entered allmulticast mode [ 2503.622013][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13407'. [ 2503.766863][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13411'. [ 2504.082538][T11748] syzkaller0: entered promiscuous mode [ 2504.082563][T11748] syzkaller0: entered allmulticast mode [ 2504.098005][T11748] tipc: Enabled bearer , priority 0 [ 2504.101915][T11747] tipc: Resetting bearer [ 2504.102405][T11752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13417'. [ 2504.172419][T11747] tipc: Disabling bearer [ 2504.441107][T11764] netlink: 15 bytes leftover after parsing attributes in process `syz.3.13423'. [ 2504.539409][T11760] syzkaller0: entered promiscuous mode [ 2504.539432][T11760] syzkaller0: entered allmulticast mode [ 2504.780501][T11776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13428'. [ 2504.811860][T11778] syzkaller0: entered promiscuous mode [ 2504.811883][T11778] syzkaller0: entered allmulticast mode [ 2504.814303][T11778] tipc: Enabled bearer , priority 0 [ 2504.839049][T11777] tipc: Resetting bearer [ 2504.894428][T11777] tipc: Disabling bearer [ 2505.371321][T11799] veth1_to_team: entered promiscuous mode [ 2505.372939][T11799] veth1_to_team: left promiscuous mode [ 2505.493660][T11802] __nla_validate_parse: 1 callbacks suppressed [ 2505.493679][T11804] syzkaller0: entered promiscuous mode [ 2505.493693][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13438'. [ 2505.493696][T11804] syzkaller0: entered allmulticast mode [ 2505.517688][T11809] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13442'. [ 2505.644862][T11813] syzkaller0: entered promiscuous mode [ 2505.644887][T11813] syzkaller0: entered allmulticast mode [ 2505.650910][T11813] tipc: Enabled bearer , priority 0 [ 2505.653258][T11812] tipc: Resetting bearer [ 2505.721862][T11812] tipc: Disabling bearer [ 2505.741389][T11815] netlink: 15 bytes leftover after parsing attributes in process `syz.3.13445'. [ 2505.881730][T11817] syzkaller0: entered promiscuous mode [ 2505.881746][T11817] syzkaller0: entered allmulticast mode [ 2506.172539][T11834] bridge0: port 1(bridge_slave_0) entered blocking state [ 2506.172719][T11834] bridge0: port 1(bridge_slave_0) entered disabled state [ 2506.172857][T11834] bridge_slave_0: entered allmulticast mode [ 2506.197607][T11834] bridge_slave_0: entered promiscuous mode [ 2506.208171][T11834] bridge0: port 1(bridge_slave_0) entered blocking state [ 2506.208278][T11834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2506.214470][T11834] bridge_slave_0: left allmulticast mode [ 2506.214497][T11834] bridge_slave_0: left promiscuous mode [ 2506.214784][T11834] bridge0: port 1(bridge_slave_0) entered disabled state [ 2506.280106][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13454'. [ 2506.310000][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13454'. [ 2506.313410][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13454'. [ 2506.313711][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13454'. [ 2506.343511][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13454'. [ 2506.343815][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13454'. [ 2506.380275][T11838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13455'. [ 2506.537012][T11844] syzkaller0: entered promiscuous mode [ 2506.537034][T11844] syzkaller0: entered allmulticast mode [ 2506.539282][T11844] tipc: Bearer : already 2 bearers with priority 0 [ 2506.539314][T11844] tipc: Enabling of bearer rejected, cannot adjust to lower [ 2506.786628][T11850] syzkaller0: entered promiscuous mode [ 2506.786651][T11850] syzkaller0: entered allmulticast mode [ 2507.078219][T11860] batman_adv: batadv0: Adding interface: veth0 [ 2507.078238][T11860] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2507.078433][T11860] batman_adv: batadv0: Interface activated: veth0 [ 2507.136025][T11860] batman_adv: batadv0: Interface deactivated: veth0 [ 2507.136083][T11860] batman_adv: batadv0: Removing interface: veth0 [ 2507.150438][T11861] netlink: 'syz.1.13465': attribute type 2 has an invalid length. [ 2507.150493][T11861] netlink: 'syz.1.13465': attribute type 2 has an invalid length. [ 2507.736846][T11879] syzkaller0: entered promiscuous mode [ 2507.736900][T11879] syzkaller0: entered allmulticast mode [ 2508.057017][T11890] syzkaller0: entered promiscuous mode [ 2508.057086][T11890] syzkaller0: entered allmulticast mode [ 2508.407005][T11908] syzkaller0: entered promiscuous mode [ 2508.407028][T11908] syzkaller0: entered allmulticast mode [ 2508.969891][T11927] syzkaller0: entered promiscuous mode [ 2508.969914][T11927] syzkaller0: entered allmulticast mode [ 2509.148801][T11934] syzkaller0: entered promiscuous mode [ 2509.148826][T11934] syzkaller0: entered allmulticast mode [ 2509.754808][T11959] syzkaller0: entered promiscuous mode [ 2509.754847][T11959] syzkaller0: entered allmulticast mode [ 2510.146640][T11972] syzkaller0: entered promiscuous mode [ 2510.146663][T11972] syzkaller0: entered allmulticast mode [ 2510.717567][T11993] syzkaller0: entered promiscuous mode [ 2510.717591][T11993] syzkaller0: entered allmulticast mode [ 2510.791569][T11997] __nla_validate_parse: 43 callbacks suppressed [ 2510.791615][T11997] netlink: 15 bytes leftover after parsing attributes in process `syz.0.13527'. [ 2510.853569][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13528'. [ 2510.921217][T12003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13531'. [ 2510.991803][T12005] syzkaller0: entered promiscuous mode [ 2510.991825][T12005] syzkaller0: entered allmulticast mode [ 2511.182767][T12016] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 2511.697614][T12025] netlink: 15 bytes leftover after parsing attributes in process `syz.3.13541'. [ 2511.738635][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13540'. [ 2511.738784][T12029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13542'. [ 2511.795824][T12031] syzkaller0: entered promiscuous mode [ 2511.795847][T12031] syzkaller0: entered allmulticast mode [ 2512.049189][T12042] batman_adv: batadv0: Adding interface: syzkaller0 [ 2512.049209][T12042] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2512.049399][T12042] batman_adv: batadv0: Interface activated: syzkaller0 [ 2512.099151][T12041] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 2512.163548][T12041] batman_adv: batadv0: Removing interface: syzkaller0 [ 2512.214640][T12044] syzkaller0: entered promiscuous mode [ 2512.214697][T12044] syzkaller0: entered allmulticast mode [ 2512.372391][T12057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13555'. [ 2512.485826][T12059] netlink: 15 bytes leftover after parsing attributes in process `syz.1.13556'. [ 2512.702458][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13557'. [ 2512.959391][T12073] bond2: (slave syz_tun): Releasing backup interface [ 2512.987615][T12073] tipc: Resetting bearer [ 2512.995148][T12073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2513.066760][T12073] tipc: Enabling of bearer rejected, already enabled [ 2513.084173][T12076] netlink: 'syz.1.13562': attribute type 61 has an invalid length. [ 2513.084197][T12076] netlink: 'syz.1.13562': attribute type 3 has an invalid length. [ 2513.182098][T12081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13566'. [ 2513.446981][T12091] syzkaller0: entered promiscuous mode [ 2513.447020][T12091] syzkaller0: entered allmulticast mode [ 2514.124261][T12113] netlink: 'syz.4.13580': attribute type 61 has an invalid length. [ 2514.124286][T12113] netlink: 'syz.4.13580': attribute type 3 has an invalid length. [ 2514.192572][T12117] syzkaller0: entered promiscuous mode [ 2514.192597][T12117] syzkaller0: entered allmulticast mode [ 2514.362594][T12123] syzkaller0: entered promiscuous mode [ 2514.362624][T12123] syzkaller0: entered allmulticast mode [ 2514.786081][T13129] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2514.808525][T12145] netlink: 'syz.4.13595': attribute type 61 has an invalid length. [ 2514.808554][T12145] netlink: 'syz.4.13595': attribute type 3 has an invalid length. [ 2514.957630][T13129] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2514.957706][T13129] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2514.959610][T13129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2514.959662][T13129] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2514.959727][T13129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2514.962648][T13129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2514.962690][T13129] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2514.962753][T13129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2514.966411][T13129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2514.966449][T13129] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2514.966510][T13129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2514.968218][T13129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2514.968254][T13129] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2514.968316][T13129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2514.972250][T13129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2514.972288][T13129] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2514.972670][T13129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2515.035559][T13129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2515.035598][T13129] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2515.035664][T13129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2515.040800][T13129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2515.040840][T13129] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2515.040903][T13129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2515.050576][T13129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2515.050633][T13129] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2515.050700][T13129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2515.103883][T13129] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2515.103927][T13129] usb 2-1: Product: syz [ 2515.103958][T13129] usb 2-1: Manufacturer: syz [ 2515.103989][T13129] usb 2-1: SerialNumber: syz [ 2515.133680][T13129] usb 2-1: config 0 descriptor?? [ 2515.178887][T13129] yurex 2-1:0.0: Could not find endpoints [ 2515.392479][ T4632] usb 2-1: USB disconnect, device number 84 [ 2515.606748][T12155] syzkaller0: entered promiscuous mode [ 2515.606772][T12155] syzkaller0: entered allmulticast mode [ 2515.807844][T12166] syzkaller0: entered promiscuous mode [ 2515.807872][T12166] syzkaller0: entered allmulticast mode [ 2515.910009][T12168] syzkaller0: entered promiscuous mode [ 2515.910024][T12168] syzkaller0: entered allmulticast mode [ 2516.019745][T12175] netlink: 'syz.2.13607': attribute type 61 has an invalid length. [ 2516.019769][T12175] netlink: 'syz.2.13607': attribute type 3 has an invalid length. [ 2516.243541][T12173] syzkaller0: entered promiscuous mode [ 2516.243598][T12173] syzkaller0: entered allmulticast mode [ 2528.217389][T12212] netlink: 'syz.2.13619': attribute type 61 has an invalid length. [ 2528.217431][T12212] netlink: 'syz.2.13619': attribute type 3 has an invalid length. [ 2528.296497][T12215] syzkaller0: entered promiscuous mode [ 2528.296519][T12215] syzkaller0: entered allmulticast mode [ 2528.484526][T12224] __nla_validate_parse: 7 callbacks suppressed [ 2528.484570][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13622'. [ 2528.551919][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13626'. [ 2528.623623][T12230] syzkaller0: entered promiscuous mode [ 2528.623648][T12230] syzkaller0: entered allmulticast mode [ 2528.890130][T12234] syz_tun: entered allmulticast mode [ 2528.892208][T12234] wg2: entered allmulticast mode [ 2528.896159][T12233] syz_tun: left allmulticast mode [ 2528.918561][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.918610][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.012654][T12238] syzkaller0: entered promiscuous mode [ 2529.012685][T12238] syzkaller0: entered allmulticast mode [ 2529.046959][T12239] batman_adv: batadv0: Adding interface: macvlan3 [ 2529.046977][T12239] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2529.049935][T12239] batman_adv: batadv0: Interface activated: macvlan3 [ 2529.225727][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13632'. [ 2529.511227][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13635'. [ 2529.533614][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13635'. [ 2529.538232][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13635'. [ 2529.538927][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13635'. [ 2529.550059][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13635'. [ 2529.550423][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13635'. [ 2529.745843][ T4593] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2529.778836][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13643'. [ 2529.896559][ T4593] usb 2-1: Using ep0 maxpacket: 32 [ 2529.898688][ T4593] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2529.898741][ T4593] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2529.928470][ T4593] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 2529.928499][ T4593] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 2529.928519][ T4593] usb 2-1: config 14 has no interface number 0 [ 2529.928535][ T4593] usb 2-1: config 14 has no interface number 1 [ 2529.928625][ T4593] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2529.928648][ T4593] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2529.928676][ T4593] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 2529.928702][ T4593] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 2529.928729][ T4593] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2529.928754][ T4593] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2529.928781][ T4593] usb 2-1: config 14 interface 57 has no altsetting 0 [ 2529.928798][ T4593] usb 2-1: config 14 interface 228 has no altsetting 0 [ 2529.934044][ T4593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2529.934070][ T4593] usb 2-1: Product: syz [ 2529.934085][ T4593] usb 2-1: Manufacturer: syz [ 2529.934099][ T4593] usb 2-1: SerialNumber: syz [ 2530.498858][ T4593] legousbtower 2-1:14.57: interrupt endpoints not found [ 2530.903788][ T4593] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 2530.917702][ T4593] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 2531.567049][T12316] IPVS: length: 8 != 383101893624 [ 2531.567800][T12316] JFS: charset not found [ 2531.680084][ C0] usb 2-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 2531.681228][ T4593] usb 2-1: USB disconnect, device number 85 [ 2531.750547][ T4593] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 2532.754416][T12353] syzkaller0: entered promiscuous mode [ 2532.754472][T12353] syzkaller0: entered allmulticast mode [ 2533.356396][ T4593] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2533.541422][ T4593] usb 4-1: Using ep0 maxpacket: 32 [ 2533.560649][ T4593] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2533.560697][ T4593] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2533.561612][ T4593] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 2533.561634][ T4593] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 2533.561653][ T4593] usb 4-1: config 14 has no interface number 0 [ 2533.561668][ T4593] usb 4-1: config 14 has no interface number 1 [ 2533.561724][ T4593] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2533.561746][ T4593] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2533.561769][ T4593] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 2533.561794][ T4593] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 2533.561820][ T4593] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2533.561844][ T4593] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2533.561870][ T4593] usb 4-1: config 14 interface 57 has no altsetting 0 [ 2533.561887][ T4593] usb 4-1: config 14 interface 228 has no altsetting 0 [ 2533.563712][ T4593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2533.563735][ T4593] usb 4-1: Product: syz [ 2533.563749][ T4593] usb 4-1: Manufacturer: syz [ 2533.563763][ T4593] usb 4-1: SerialNumber: syz [ 2534.050025][ T4593] legousbtower 4-1:14.57: interrupt endpoints not found [ 2534.480856][ T4593] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 2534.506296][ T4593] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 2535.170227][T12388] IPVS: length: 8 != 383101893624 [ 2535.194113][T12388] JFS: charset not found [ 2535.273113][T13129] usb 4-1: USB disconnect, device number 62 [ 2535.322480][T13129] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 2535.901862][T12390] __nla_validate_parse: 19 callbacks suppressed [ 2535.901899][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13691'. [ 2539.119315][T12399] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13694'. [ 2539.244469][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13697'. [ 2539.256719][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13697'. [ 2539.257296][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13697'. [ 2539.257647][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13697'. [ 2539.257933][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13697'. [ 2539.258194][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13697'. [ 2539.268192][T12406] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13696'. [ 2539.268218][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13696'. [ 2540.654855][ T4632] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2540.807540][ T4632] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2540.807582][ T4632] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2540.808632][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2540.808676][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2540.808701][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2540.808731][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2540.811201][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2540.811248][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2540.811273][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2540.811295][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2540.812657][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2540.812701][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2540.812734][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2540.812755][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2540.813654][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2540.813700][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2540.813732][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2540.813753][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2540.819140][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2540.819184][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2540.819208][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2540.819229][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2540.822385][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2540.822431][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2540.822455][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2540.822476][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2540.823680][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2540.823730][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2540.823756][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2540.823776][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2540.826763][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2540.826807][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2540.826830][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2540.826851][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2540.834070][ T4632] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2540.834095][ T4632] usb 4-1: Product: syz [ 2540.834109][ T4632] usb 4-1: Manufacturer: syz [ 2540.834122][ T4632] usb 4-1: SerialNumber: syz [ 2540.871944][ T4632] usb 4-1: config 0 descriptor?? [ 2540.883672][ T4632] yurex 4-1:0.0: Could not submitting URB [ 2540.883829][ T4632] yurex 4-1:0.0: probe with driver yurex failed with error -5 [ 2541.076239][T12457] __nla_validate_parse: 10 callbacks suppressed [ 2541.076259][T12457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13720'. [ 2541.092599][T12460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13721'. [ 2541.113955][ T4632] usb 4-1: USB disconnect, device number 63 [ 2541.318807][T12466] bond13: (slave syz_tun): Releasing backup interface [ 2541.321752][T12466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2541.354385][T12466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13722'. [ 2541.381576][T12466] tipc: Enabling of bearer rejected, already enabled [ 2541.542348][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13728'. [ 2541.544318][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13728'. [ 2541.549509][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13728'. [ 2541.549827][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13728'. [ 2541.550201][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13728'. [ 2541.551824][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13728'. [ 2541.756745][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13731'. [ 2541.955764][T12496] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2542.090440][T12496] tipc: Enabling of bearer rejected, already enabled [ 2542.554865][ T4632] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2542.602454][T12523] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2542.684074][T12522] syzkaller0: entered promiscuous mode [ 2542.684099][T12522] syzkaller0: entered allmulticast mode [ 2542.701556][T12523] tipc: Enabling of bearer rejected, already enabled [ 2542.709085][ T4632] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2542.709127][ T4632] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2542.710218][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2542.710262][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2542.710287][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2542.711305][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2542.711347][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2542.711373][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2542.712473][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2542.712514][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2542.712539][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2542.717470][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2542.717518][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2542.717554][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2542.723582][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2542.723632][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2542.723658][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2542.725827][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2542.725872][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2542.725896][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2542.727493][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2542.727537][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2542.727562][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2542.728583][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2542.728633][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2542.728658][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2542.734165][ T4632] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2542.734197][ T4632] usb 3-1: Product: syz [ 2542.734210][ T4632] usb 3-1: Manufacturer: syz [ 2542.734224][ T4632] usb 3-1: SerialNumber: syz [ 2542.743875][ T4632] usb 3-1: config 0 descriptor?? [ 2542.836588][ T4632] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 2543.032374][ T4632] usb 3-1: USB disconnect, device number 40 [ 2543.036946][ T4632] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 2543.415612][T22059] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2543.425950][T22059] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2543.427727][T22059] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2543.429676][T22059] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2543.430238][T22059] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2545.491348][T22059] Bluetooth: hci1: command tx timeout [ 2547.559161][T22059] Bluetooth: hci1: command tx timeout [ 2549.148610][T12538] __nla_validate_parse: 12 callbacks suppressed [ 2549.148630][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13755'. [ 2549.218722][T12546] veth1_to_team: entered promiscuous mode [ 2549.250547][T12555] netlink: 'syz.1.13760': attribute type 61 has an invalid length. [ 2549.250571][T12555] netlink: 'syz.1.13760': attribute type 3 has an invalid length. [ 2549.511136][T16413] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2549.622163][T12565] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2549.640635][T12565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13764'. [ 2549.640860][T22059] Bluetooth: hci1: command tx timeout [ 2549.691606][T12565] tipc: Enabling of bearer rejected, already enabled [ 2549.797887][T12573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13768'. [ 2549.834902][T16413] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2549.891216][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13770'. [ 2549.931132][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13770'. [ 2550.085506][T16413] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2550.193215][T16413] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2550.547139][T12590] syzkaller0: entered promiscuous mode [ 2550.547165][T12590] syzkaller0: entered allmulticast mode [ 2551.148733][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13777'. [ 2551.491397][T22059] Bluetooth: hci0: command 0x0406 tx timeout [ 2551.717929][ T5621] Bluetooth: hci1: command tx timeout [ 2556.922426][T12544] bridge0: port 1(bridge_slave_0) entered blocking state [ 2556.922578][T12544] bridge0: port 1(bridge_slave_0) entered disabled state [ 2556.922836][T12544] bridge_slave_0: entered allmulticast mode [ 2556.935468][T12544] bridge_slave_0: entered promiscuous mode [ 2556.969228][T12603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2556.969949][T12605] tipc: Enabling of bearer rejected, already enabled [ 2557.122447][T16413] dvmrp8: left allmulticast mode [ 2557.147010][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13780'. [ 2557.192035][T12617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13779'. [ 2557.537853][T16413] bond0 (unregistering): Released all slaves [ 2557.544314][T16413] bond1 (unregistering): Released all slaves [ 2557.570759][T16413] bond2 (unregistering): Released all slaves [ 2557.599835][T16413] bond3 (unregistering): Released all slaves [ 2557.619099][T16413] bond4 (unregistering): Released all slaves [ 2557.640718][T16413] bond5 (unregistering): Released all slaves [ 2557.663565][T16413] bond6 (unregistering): Released all slaves [ 2557.692963][T16413] bond7 (unregistering): Released all slaves [ 2557.712806][T16413] bond8 (unregistering): Released all slaves [ 2557.740725][T16413] bond9 (unregistering): Released all slaves [ 2557.763525][T16413] bond10 (unregistering): Released all slaves [ 2557.788723][T16413] bond11 (unregistering): Released all slaves [ 2557.813527][T16413] bond12 (unregistering): Released all slaves [ 2557.843720][T16413] bond13 (unregistering): Released all slaves [ 2557.857379][T12544] bridge0: port 2(bridge_slave_1) entered blocking state [ 2557.857477][T12544] bridge0: port 2(bridge_slave_1) entered disabled state [ 2557.857640][T12544] bridge_slave_1: entered allmulticast mode [ 2557.859580][T12544] bridge_slave_1: entered promiscuous mode [ 2557.911878][T12613] veth1_to_team: entered promiscuous mode [ 2558.327304][T12623] syzkaller0: entered promiscuous mode [ 2558.327330][T12623] syzkaller0: entered allmulticast mode [ 2558.373431][T12544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2558.387079][T12544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2558.498318][T16413] tipc: Disabling bearer [ 2558.507340][ T4632] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2558.538785][T16413] tipc: Left network mode [ 2558.655681][ T4632] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2558.655719][ T4632] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2558.656771][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2558.656817][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2558.656841][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2558.657741][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2558.657783][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2558.657807][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2558.658714][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2558.658753][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2558.658777][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2558.659655][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2558.659696][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2558.659721][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2558.660615][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2558.660653][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2558.660679][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2558.661632][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2558.661672][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2558.661696][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2558.662730][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2558.662772][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2558.662797][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2558.663721][ T4632] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2558.663759][ T4632] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2558.663783][ T4632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2558.689051][ T4632] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2558.689079][ T4632] usb 3-1: Product: syz [ 2558.689093][ T4632] usb 3-1: Manufacturer: syz [ 2558.689107][ T4632] usb 3-1: SerialNumber: syz [ 2558.763108][ T4632] usb 3-1: config 0 descriptor?? [ 2558.954215][ T4632] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 2559.026576][ T4611] usb 3-1: USB disconnect, device number 41 [ 2559.042803][ T4611] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 2559.915237][ T4611] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2560.074986][ T4611] usb 3-1: Using ep0 maxpacket: 32 [ 2560.079321][ T4611] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2560.079414][ T4611] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2560.081244][ T4611] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 2560.081284][ T4611] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 2560.081318][ T4611] usb 3-1: config 14 has no interface number 0 [ 2560.081349][ T4611] usb 3-1: config 14 has no interface number 1 [ 2560.081448][ T4611] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2560.081486][ T4611] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2560.081545][ T4611] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 2560.081600][ T4611] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 2560.081641][ T4611] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2560.081683][ T4611] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2560.081735][ T4611] usb 3-1: config 14 interface 57 has no altsetting 0 [ 2560.081768][ T4611] usb 3-1: config 14 interface 228 has no altsetting 0 [ 2560.085273][ T4611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2560.085312][ T4611] usb 3-1: Product: syz [ 2560.085341][ T4611] usb 3-1: Manufacturer: syz [ 2560.085369][ T4611] usb 3-1: SerialNumber: syz [ 2560.514482][ T4611] legousbtower 3-1:14.57: interrupt endpoints not found [ 2560.916128][ T4611] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 2560.919524][ T4611] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 2561.637900][T12657] IPVS: length: 8 != 383101893624 [ 2561.663950][T12657] JFS: charset not found [ 2561.726425][T22110] usb 3-1: USB disconnect, device number 42 [ 2561.757936][T22110] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 2562.488096][T12660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13790'. [ 2565.808604][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2565.838410][T12661] tipc: Enabling of bearer rejected, already enabled [ 2565.849912][T12544] team0: Port device team_slave_0 added [ 2565.869345][T12544] team0: Port device team_slave_1 added [ 2565.999756][T12670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13793'. [ 2566.035707][T12544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2566.035725][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2566.035752][T12544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2566.039644][T12663] tipc: Enabling of bearer rejected, failed to enable media [ 2566.052938][T12544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2566.052954][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2566.052979][T12544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2566.218497][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13795'. [ 2566.268263][T12677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13796'. [ 2566.303295][T12544] hsr_slave_0: entered promiscuous mode [ 2566.304192][T12544] hsr_slave_1: entered promiscuous mode [ 2566.304793][T12544] debugfs: 'hsr0' already exists in 'hsr' [ 2566.304810][T12544] Cannot create hsr debugfs directory [ 2566.615856][ T4611] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2566.751650][T16413] hsr_slave_0: left promiscuous mode [ 2566.816836][ T4611] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2566.816926][ T4611] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2566.819421][ T4611] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2566.819521][ T4611] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2566.819579][ T4611] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2566.821711][ T4611] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2566.821784][ T4611] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2566.821839][ T4611] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2566.844485][T12700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13803'. [ 2566.869446][ T4611] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2566.869500][ T4611] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2566.869526][ T4611] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2566.947857][ T4611] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2566.947976][ T4611] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2566.948019][ T4611] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2567.004225][ T4611] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2567.004323][ T4611] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2567.004378][ T4611] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2567.024428][T12705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13804'. [ 2567.050454][ T4611] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2567.050553][ T4611] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2567.050613][ T4611] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2567.052288][ T4611] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2567.052383][ T4611] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2567.052425][ T4611] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2567.065270][ T4611] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2567.065368][ T4611] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2567.065427][ T4611] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2567.116857][ T4611] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2567.116916][ T4611] usb 3-1: Product: syz [ 2567.116946][ T4611] usb 3-1: Manufacturer: syz [ 2567.116978][ T4611] usb 3-1: SerialNumber: syz [ 2567.186789][ T4611] usb 3-1: config 0 descriptor?? [ 2567.221024][ T4611] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 2567.352941][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13807'. [ 2567.403658][ T4632] usb 3-1: USB disconnect, device number 43 [ 2567.422831][ T4632] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 2567.706534][T12697] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2567.714356][T12703] tipc: Enabling of bearer rejected, already enabled [ 2567.760798][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2567.899541][T12728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13808'. [ 2568.069578][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13810'. [ 2568.294486][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13813'. [ 2568.372002][T16413] IPVS: stop unused estimator thread 0... [ 2568.712239][T12747] syzkaller0: entered promiscuous mode [ 2568.712266][T12747] syzkaller0: entered allmulticast mode [ 2568.884164][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13819'. [ 2568.918919][T12760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13818'. [ 2574.768445][T12764] tipc: Enabling of bearer rejected, already enabled [ 2574.927499][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13823'. [ 2575.033240][T12782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2575.100653][T12786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2575.104408][T12782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2575.109767][T12782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2575.128317][ T5839] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2575.337550][ T5839] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2575.337642][ T5839] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2575.340049][ T5839] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2575.340142][ T5839] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2575.340202][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2575.356140][ T5839] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2575.356190][ T5839] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2575.356215][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2575.441763][ T5839] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2575.441887][ T5839] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2575.441929][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2575.455296][ T5839] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2575.455396][ T5839] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2575.455455][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2575.516353][ T5839] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2575.516452][ T5839] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2575.516510][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2575.518997][ T5839] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2575.519072][ T5839] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2575.519107][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2575.554862][ T5839] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2575.554957][ T5839] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2575.555014][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2575.610803][ T5839] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2575.610898][ T5839] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2575.610957][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2575.628780][ T5839] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2575.628824][ T5839] usb 2-1: Product: syz [ 2575.628854][ T5839] usb 2-1: Manufacturer: syz [ 2575.628884][ T5839] usb 2-1: SerialNumber: syz [ 2575.649765][ T5839] usb 2-1: config 0 descriptor?? [ 2575.696002][ T5839] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 2575.865787][ T25] usb 2-1: USB disconnect, device number 86 [ 2575.890786][ T25] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 2576.229270][T12809] syzkaller0: entered promiscuous mode [ 2576.229295][T12809] syzkaller0: entered allmulticast mode [ 2576.271675][T12821] team0: Port device xfrm0 added [ 2576.564526][T12827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13834'. [ 2582.238958][T12852] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:480x2160 (0x33424752, 8, 0, 0, 0) [ 2582.298079][T12544] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2582.317674][T12544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2582.318578][T12544] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2582.342644][T12544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2582.352598][T12544] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2582.369115][T12544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2582.369943][T12544] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2582.416808][T12544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2582.496549][T12857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2582.542671][T22110] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 2582.542715][T22110] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 2582.564352][T12857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2582.579067][T12857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2582.583530][T12857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2582.599660][T22341] wlan1: authenticated [ 2582.653910][T12544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2582.684235][T12544] 8021q: adding VLAN 0 to HW filter on device team0 [ 2582.709872][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 2582.709983][ T7068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2582.718465][ T7124] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 2582.719146][ T7124] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 2582.719449][ T7124] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 2582.719733][ T7124] wlan1: association with 08:02:11:00:00:00 timed out [ 2582.792974][ T7124] bridge0: port 2(bridge_slave_1) entered blocking state [ 2582.793143][ T7124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2582.842395][T12870] team0: Port device xfrm0 removed [ 2582.863687][T12870] team0: Port device xfrm0 added [ 2583.146721][T12544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2583.268481][ T4632] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2583.374272][T12544] veth0_vlan: entered promiscuous mode [ 2583.403841][T12544] veth1_vlan: entered promiscuous mode [ 2583.417587][ T4632] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2583.417630][ T4632] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2583.418719][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2583.418765][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2583.418792][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2583.419989][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2583.420032][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2583.420058][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2583.422756][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2583.422802][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2583.422852][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2583.423889][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2583.423934][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2583.423960][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2583.452528][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2583.452581][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2583.452608][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2583.524861][T12544] veth0_macvtap: entered promiscuous mode [ 2583.531047][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2583.531099][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2583.531125][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2583.533943][T12544] veth1_macvtap: entered promiscuous mode [ 2583.561392][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2583.561440][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2583.561466][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2583.610286][T12892] syzkaller0: entered promiscuous mode [ 2583.610324][T12892] syzkaller0: entered allmulticast mode [ 2583.624572][ T4632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2583.624624][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2583.624658][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2583.650600][T12544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2583.698563][ T4632] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2583.698593][ T4632] usb 4-1: Product: syz [ 2583.698607][ T4632] usb 4-1: Manufacturer: syz [ 2583.698621][ T4632] usb 4-1: SerialNumber: syz [ 2583.733972][ T4632] usb 4-1: config 0 descriptor?? [ 2583.745277][ T4632] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 2583.961217][ T4632] usb 4-1: USB disconnect, device number 64 [ 2583.980074][T12544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2584.005535][ T4632] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 2584.033718][T16413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2584.033779][T16413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2584.033829][T16413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2584.033898][T16413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2584.436536][ T7068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2584.436558][ T7068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2584.522318][T12912] team0: Port device xfrm0 removed [ 2584.654436][T12912] team0: Port device xfrm0 added [ 2584.665917][ T7124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2584.665952][ T7124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2584.869033][T12926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2584.949256][T12920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2584.960384][T12920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2584.967701][T12920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2586.485728][T22059] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2586.508942][T22059] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2586.511938][T22059] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2586.530837][T22059] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2586.542571][T22059] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2587.687791][T12965] syzkaller0: entered promiscuous mode [ 2587.687847][T12965] syzkaller0: entered allmulticast mode [ 2587.894869][ T4593] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2587.925300][T12974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13866'. [ 2588.045570][ T4593] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2588.045614][ T4593] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2588.046546][ T4593] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2588.046591][ T4593] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2588.046617][ T4593] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2588.047492][ T4593] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2588.047536][ T4593] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2588.047562][ T4593] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2588.048445][ T4593] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2588.048488][ T4593] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2588.048511][ T4593] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2588.049393][ T4593] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2588.049435][ T4593] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2588.049460][ T4593] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2588.050328][ T4593] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2588.050378][ T4593] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2588.050404][ T4593] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2588.053047][ T4593] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2588.053094][ T4593] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2588.053121][ T4593] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2588.156982][T12960] bridge0: port 1(bridge_slave_0) entered blocking state [ 2588.157392][T12960] bridge0: port 1(bridge_slave_0) entered disabled state [ 2588.157632][T12960] bridge_slave_0: entered allmulticast mode [ 2588.160911][T12960] bridge_slave_0: entered promiscuous mode [ 2588.164653][T12960] bridge0: port 2(bridge_slave_1) entered blocking state [ 2588.164864][T12960] bridge0: port 2(bridge_slave_1) entered disabled state [ 2588.164985][T12960] bridge_slave_1: entered allmulticast mode [ 2588.166891][T12960] bridge_slave_1: entered promiscuous mode [ 2588.223291][ T4593] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2588.223349][ T4593] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2588.223377][ T4593] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2588.250300][T12960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2588.256177][ T4593] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2588.256225][ T4593] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2588.256251][ T4593] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2588.262692][T12960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2588.327575][ T4593] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2588.327603][ T4593] usb 3-1: Product: syz [ 2588.327618][ T4593] usb 3-1: Manufacturer: syz [ 2588.327631][ T4593] usb 3-1: SerialNumber: syz [ 2588.388770][ T4593] usb 3-1: config 0 descriptor?? [ 2588.400451][ T4593] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 2588.453484][T12960] team0: Port device team_slave_0 added [ 2588.481141][T12960] team0: Port device team_slave_1 added [ 2588.567067][T12960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2588.567099][T12960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2588.567140][T12960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2588.572346][T12960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2588.572378][T12960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2588.572409][T12960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2588.615399][ T5621] Bluetooth: hci3: command tx timeout [ 2588.684318][T22110] usb 3-1: USB disconnect, device number 44 [ 2588.703424][T22110] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 2588.761603][T12960] hsr_slave_0: entered promiscuous mode [ 2588.762867][T12960] hsr_slave_1: entered promiscuous mode [ 2588.763745][T12960] debugfs: 'hsr0' already exists in 'hsr' [ 2588.763763][T12960] Cannot create hsr debugfs directory [ 2589.971210][T13012] syzkaller0: entered promiscuous mode [ 2589.971226][T13012] syzkaller0: entered allmulticast mode [ 2590.071407][T13014] syzkaller0: entered promiscuous mode [ 2590.071424][T13014] syzkaller0: entered allmulticast mode [ 2590.072300][T13018] tipc: Enabled bearer , priority 0 [ 2590.132111][T13002] tipc: Resetting bearer [ 2590.164163][T13002] tipc: Disabling bearer [ 2590.373619][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.373678][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.656593][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13881'. [ 2590.675301][ T5621] Bluetooth: hci3: command tx timeout [ 2591.124914][ T4593] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2591.271099][ T4593] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2591.271140][ T4593] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2591.273082][ T4593] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2591.273132][ T4593] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2591.273154][ T4593] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2591.274442][ T4593] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2591.274487][ T4593] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2591.274512][ T4593] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2591.337930][ T4593] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2591.337982][ T4593] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2591.338007][ T4593] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2591.394308][ T4593] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2591.394358][ T4593] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2591.394383][ T4593] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2591.423994][ T4593] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2591.424046][ T4593] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2591.424066][ T4593] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2591.452280][ T4593] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2591.452331][ T4593] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2591.452358][ T4593] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2591.453274][ T4593] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2591.453334][ T4593] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2591.453359][ T4593] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2591.454397][ T4593] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2591.454437][ T4593] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2591.454459][ T4593] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2591.545445][ T4593] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2591.545474][ T4593] usb 2-1: Product: syz [ 2591.545487][ T4593] usb 2-1: Manufacturer: syz [ 2591.545501][ T4593] usb 2-1: SerialNumber: syz [ 2591.548121][ T4593] usb 2-1: config 0 descriptor?? [ 2591.554281][ T4593] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 2591.759505][ T4593] usb 2-1: USB disconnect, device number 87 [ 2591.772540][ T4593] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 2592.762786][ T5621] Bluetooth: hci3: command tx timeout [ 2594.838505][ T5621] Bluetooth: hci3: command tx timeout [ 2596.049243][T13053] syzkaller0: entered promiscuous mode [ 2596.049271][T13053] syzkaller0: entered allmulticast mode [ 2596.062642][T13053] tipc: Started in network mode [ 2596.062706][T13053] tipc: Node identity 52b2f6c28929, cluster identity 4711 [ 2596.063040][T13053] tipc: Enabled bearer , priority 0 [ 2596.070389][T13052] tipc: Resetting bearer [ 2596.142001][T13052] tipc: Disabling bearer [ 2597.020411][T12960] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2597.036351][T12960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2597.039189][T12960] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2597.047017][T12960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2597.050635][T12960] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2597.083756][T12960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2597.088563][T12960] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2597.105166][T12960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2597.194876][ T4602] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2597.325044][T12960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2597.344906][ T4602] usb 3-1: Using ep0 maxpacket: 32 [ 2597.345955][ T4602] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2597.348126][ T4602] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2597.366285][T12960] 8021q: adding VLAN 0 to HW filter on device team0 [ 2597.406443][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 2597.406564][ T7071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2597.412999][ T4602] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2597.413044][ T4602] usb 3-1: Product: syz [ 2597.413075][ T4602] usb 3-1: Manufacturer: syz [ 2597.413105][ T4602] usb 3-1: SerialNumber: syz [ 2597.417732][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 2597.417835][ T7071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2597.476826][ T4602] usb 3-1: config 0 descriptor?? [ 2597.491003][ T4602] hub 3-1:0.0: bad descriptor, ignoring hub [ 2597.491031][ T4602] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2597.667356][T12960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2597.893102][T12960] veth0_vlan: entered promiscuous mode [ 2597.918089][T12960] veth1_vlan: entered promiscuous mode [ 2598.085766][T12960] veth0_macvtap: entered promiscuous mode [ 2598.107939][T12960] veth1_macvtap: entered promiscuous mode [ 2598.169162][T12960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2598.210809][T12960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2598.257616][ T7071] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.257883][ T7071] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.257918][ T7071] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.257951][ T7071] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.275738][ T4632] usb 3-1: USB disconnect, device number 45 [ 2598.604305][ T7126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2598.604333][ T7126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2598.769165][ T7126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2598.769204][ T7126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2599.331424][T13087] syzkaller0: entered promiscuous mode [ 2599.331448][T13087] syzkaller0: entered allmulticast mode [ 2599.789307][T13081] syz.0.13896 (13081): drop_caches: 2 [ 2599.825438][T13094] syzkaller0: entered promiscuous mode [ 2599.825461][T13094] syzkaller0: entered allmulticast mode [ 2599.829309][T13094] tipc: Enabled bearer , priority 0 [ 2599.841022][T13093] tipc: Resetting bearer [ 2600.014322][T13093] tipc: Disabling bearer [ 2600.083753][T13099] syzkaller0: entered promiscuous mode [ 2600.083778][T13099] syzkaller0: entered allmulticast mode [ 2600.354311][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13906'. [ 2600.654891][ T4587] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2600.805120][ T4587] usb 3-1: Using ep0 maxpacket: 32 [ 2600.805844][ T4587] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2600.807536][ T4587] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2600.813337][ T4587] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2600.813364][ T4587] usb 3-1: Product: syz [ 2600.813378][ T4587] usb 3-1: Manufacturer: syz [ 2600.813393][ T4587] usb 3-1: SerialNumber: syz [ 2600.835622][ T4587] usb 3-1: config 0 descriptor?? [ 2600.839303][ T4587] hub 3-1:0.0: bad descriptor, ignoring hub [ 2600.839326][ T4587] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2601.040197][T13128] syzkaller0: entered promiscuous mode [ 2601.040220][T13128] syzkaller0: entered allmulticast mode [ 2601.656757][ T4587] usb 3-1: USB disconnect, device number 46 [ 2601.836225][T13149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13919'. [ 2601.939723][T13151] syzkaller0: entered promiscuous mode [ 2601.939746][T13151] syzkaller0: entered allmulticast mode [ 2603.192853][T13179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13931'. [ 2603.292276][T13181] syzkaller0: entered promiscuous mode [ 2603.292299][T13181] syzkaller0: entered allmulticast mode [ 2603.465447][T13185] syzkaller0: entered promiscuous mode [ 2603.465471][T13185] syzkaller0: entered allmulticast mode [ 2603.495138][ T4603] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2603.654929][ T4603] usb 3-1: Using ep0 maxpacket: 32 [ 2603.660297][ T4603] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2603.664452][ T4603] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2603.698670][ T4603] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2603.698697][ T4603] usb 3-1: Product: syz [ 2603.698706][ T4603] usb 3-1: Manufacturer: syz [ 2603.698714][ T4603] usb 3-1: SerialNumber: syz [ 2603.729996][ T4603] usb 3-1: config 0 descriptor?? [ 2603.741025][ T4603] hub 3-1:0.0: bad descriptor, ignoring hub [ 2603.741083][ T4603] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2604.083777][T13199] syzkaller0: entered promiscuous mode [ 2604.083835][T13199] syzkaller0: entered allmulticast mode [ 2604.476070][ T4611] usb 3-1: USB disconnect, device number 47 [ 2604.536755][T13206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13943'. [ 2604.867615][T13215] syzkaller0: entered promiscuous mode [ 2604.867640][T13215] syzkaller0: entered allmulticast mode [ 2605.008305][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13949'. [ 2605.008361][T13221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13949'. [ 2605.010010][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13949'. [ 2605.010045][T13221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13949'. [ 2605.188662][T13223] syzkaller0: entered promiscuous mode [ 2605.188686][T13223] syzkaller0: entered allmulticast mode [ 2605.868057][T13252] syzkaller0: entered promiscuous mode [ 2605.868112][T13252] syzkaller0: entered allmulticast mode [ 2606.069884][T13260] syzkaller0: entered promiscuous mode [ 2606.069924][T13260] syzkaller0: entered allmulticast mode [ 2606.105175][ T4611] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2606.178931][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13967'. [ 2606.265533][ T4611] usb 4-1: Using ep0 maxpacket: 32 [ 2606.266611][ T4611] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2606.270417][ T4611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2606.270475][ T4611] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2606.274245][ T4611] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2606.274286][ T4611] usb 4-1: Product: syz [ 2606.274319][ T4611] usb 4-1: Manufacturer: syz [ 2606.274350][ T4611] usb 4-1: SerialNumber: syz [ 2606.340954][ T4611] usb 4-1: config 0 descriptor?? [ 2606.363248][ T4611] hub 4-1:0.0: bad descriptor, ignoring hub [ 2606.363290][ T4611] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2606.403700][T13275] input: syz0 as /devices/virtual/input/input154 [ 2606.603389][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13977'. [ 2606.603492][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13977'. [ 2606.603946][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13977'. [ 2606.603963][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13977'. [ 2606.678680][T13284] syzkaller0: entered promiscuous mode [ 2606.678704][T13284] syzkaller0: entered allmulticast mode [ 2606.900890][T13290] syzkaller0: entered promiscuous mode [ 2606.900912][T13290] syzkaller0: entered allmulticast mode [ 2607.085271][ T4594] usb 4-1: USB disconnect, device number 65 [ 2607.413711][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13989'. [ 2607.413736][T13306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13989'. [ 2607.414355][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13989'. [ 2607.414372][T13306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13989'. [ 2607.498523][T13310] syzkaller0: entered promiscuous mode [ 2607.498538][T13310] syzkaller0: entered allmulticast mode [ 2607.692114][T13316] tipc: Resetting bearer [ 2607.720716][T13316] tipc: Disabling bearer [ 2607.785488][T13323] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13996'. [ 2607.817997][T13321] syzkaller0: entered promiscuous mode [ 2607.818022][T13321] syzkaller0: entered allmulticast mode [ 2608.555341][T22059] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2608.562873][T22059] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2608.564380][T22059] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2608.602827][T22059] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2608.603549][T22059] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2608.767275][T13343] syzkaller0: entered promiscuous mode [ 2608.767298][T13343] syzkaller0: entered allmulticast mode [ 2609.377530][T13351] syzkaller0: entered promiscuous mode [ 2609.377557][T13351] syzkaller0: entered allmulticast mode [ 2609.613768][ T7126] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2610.696729][ T5621] Bluetooth: hci5: command tx timeout [ 2612.756090][ T5621] Bluetooth: hci5: command tx timeout [ 2614.838658][ T5621] Bluetooth: hci5: command tx timeout [ 2616.013132][T13378] __nla_validate_parse: 2 callbacks suppressed [ 2616.013153][T13378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14015'. [ 2616.243833][T13388] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14017'. [ 2616.272327][ T7126] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2616.460219][T13383] syzkaller0: entered promiscuous mode [ 2616.460291][T13383] syzkaller0: entered allmulticast mode [ 2616.916075][ T5621] Bluetooth: hci5: command tx timeout [ 2618.796145][ T4602] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2618.986467][ T4602] usb 4-1: Using ep0 maxpacket: 32 [ 2618.987562][ T4602] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2618.989296][ T4602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2618.989349][ T4602] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2618.992434][ T4602] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2618.992471][ T4602] usb 4-1: Product: syz [ 2618.992499][ T4602] usb 4-1: Manufacturer: syz [ 2618.992527][ T4602] usb 4-1: SerialNumber: syz [ 2619.023663][ T4602] usb 4-1: config 0 descriptor?? [ 2619.056634][ T4602] hub 4-1:0.0: bad descriptor, ignoring hub [ 2619.056660][ T4602] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2619.877720][ T4602] usb 4-1: USB disconnect, device number 66 [ 2624.399748][ T7126] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2624.641895][ T7126] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2624.752761][T13342] bridge0: port 1(bridge_slave_0) entered blocking state [ 2624.752927][T13342] bridge0: port 1(bridge_slave_0) entered disabled state [ 2624.753087][T13342] bridge_slave_0: entered allmulticast mode [ 2624.780872][T13342] bridge_slave_0: entered promiscuous mode [ 2624.816117][T13342] bridge0: port 2(bridge_slave_1) entered blocking state [ 2624.816218][T13342] bridge0: port 2(bridge_slave_1) entered disabled state [ 2624.816642][T13342] bridge_slave_1: entered allmulticast mode [ 2624.821737][T13342] bridge_slave_1: entered promiscuous mode [ 2625.042043][T13342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2625.061743][T13342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2625.229788][T13342] team0: Port device team_slave_0 added [ 2625.292999][T13342] team0: Port device team_slave_1 added [ 2625.589076][T13342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2625.589095][T13342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2625.589121][T13342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2625.721079][T13342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2625.721097][T13342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2625.721123][T13342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2625.937203][ T7126] pimreg: left allmulticast mode [ 2626.240488][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14035'. [ 2626.771251][ T7126] team0: Port device xfrm0 removed [ 2627.546606][ T7126] bond0 (unregistering): Released all slaves [ 2627.627261][ T7126] bond1 (unregistering): Released all slaves [ 2627.740513][ T7126] bond2 (unregistering): Released all slaves [ 2627.837618][ T7126] bond3 (unregistering): Released all slaves [ 2627.894249][ T7126] bond4 (unregistering): Released all slaves [ 2627.954129][ T7126] bond5 (unregistering): Released all slaves [ 2628.008943][ T7126] bond6 (unregistering): Released all slaves [ 2628.051194][ T7126] bond7 (unregistering): Released all slaves [ 2628.097163][ T7126] bond8 (unregistering): Released all slaves [ 2628.123526][ T7126] bond9 (unregistering): Released all slaves [ 2628.153086][ T7126] bond10 (unregistering): Released all slaves [ 2628.178032][T13464] tipc: Enabled bearer , priority 0 [ 2628.211543][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2628.412733][T13342] hsr_slave_0: entered promiscuous mode [ 2628.423569][T13342] hsr_slave_1: entered promiscuous mode [ 2628.434377][T13342] debugfs: 'hsr0' already exists in 'hsr' [ 2628.434400][T13342] Cannot create hsr debugfs directory [ 2628.675196][ T7126] ovs-dp0: left promiscuous mode [ 2629.121160][ T7126] tipc: Disabling bearer [ 2629.136502][ T7126] tipc: Disabling bearer [ 2629.161628][ T7126] tipc: Left network mode [ 2629.342523][ T4594] tipc: Node number set to 3684431554 [ 2629.937489][T13537] ALSA: mixer_oss: invalid OSS volume 'W' [ 2630.427226][T13542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14053'. [ 2630.739422][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2631.398265][T13577] netlink: 'syz.0.14065': attribute type 2 has an invalid length. [ 2631.398289][T13577] netlink: 'syz.0.14065': attribute type 8 has an invalid length. [ 2631.398302][T13577] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14065'. [ 2631.564267][ T7126] veth1_to_team: left promiscuous mode [ 2633.320444][T13612] syzkaller0: entered promiscuous mode [ 2633.320469][T13612] syzkaller0: entered allmulticast mode [ 2633.339809][T13615] syzkaller0: entered promiscuous mode [ 2633.339832][T13615] syzkaller0: entered allmulticast mode [ 2634.108657][ T7126] IPVS: stop unused estimator thread 0... [ 2634.394905][ T7071] IPVS: starting estimator thread 0... [ 2634.486789][T13651] IPVS: using max 36 ests per chain, 86400 per kthread [ 2634.771674][ T4602] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2634.914484][T13666] syzkaller0: entered promiscuous mode [ 2634.914522][T13666] syzkaller0: entered allmulticast mode [ 2634.938210][ T4602] usb 4-1: Using ep0 maxpacket: 32 [ 2634.948041][ T4602] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2634.948140][ T4602] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2634.953096][ T4602] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 2634.953149][ T4602] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 2634.953185][ T4602] usb 4-1: config 14 has no interface number 0 [ 2634.953216][ T4602] usb 4-1: config 14 has no interface number 1 [ 2634.953347][ T4602] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2634.953387][ T4602] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2634.953441][ T4602] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 2634.953482][ T4602] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 2634.953539][ T4602] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2634.953579][ T4602] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2634.953622][ T4602] usb 4-1: config 14 interface 57 has no altsetting 0 [ 2634.953652][ T4602] usb 4-1: config 14 interface 228 has no altsetting 0 [ 2634.965941][ T4602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2634.965996][ T4602] usb 4-1: Product: syz [ 2634.966033][ T4602] usb 4-1: Manufacturer: syz [ 2634.966063][ T4602] usb 4-1: SerialNumber: syz [ 2635.187539][T13342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2635.229504][T13342] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2635.238717][T13342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2635.284080][T13342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2635.301319][T13342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2635.357747][T13342] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2635.370126][T13342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2635.479295][ T4602] legousbtower 4-1:14.57: interrupt endpoints not found [ 2635.492571][T13342] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2635.725234][T13656] IPVS: length: 8 != 383101893624 [ 2635.734478][T13656] JFS: charset not found [ 2635.774492][ T4602] legousbtower 4-1:14.228: get version request failed: -71 [ 2635.775571][ T4602] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 2635.858382][ T4602] usb 4-1: USB disconnect, device number 67 [ 2636.099794][T13342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2636.184041][T13342] 8021q: adding VLAN 0 to HW filter on device team0 [ 2636.211675][ T7124] bridge0: port 1(bridge_slave_0) entered blocking state [ 2636.211767][ T7124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2636.269982][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 2636.270105][ T7071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2636.613864][T13342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2637.056416][T13342] veth0_vlan: entered promiscuous mode [ 2637.087454][T13342] veth1_vlan: entered promiscuous mode [ 2637.168475][T13342] veth0_macvtap: entered promiscuous mode [ 2637.222320][T13342] veth1_macvtap: entered promiscuous mode [ 2637.288854][T13342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2637.307672][T13342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2637.518996][ T7071] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2637.618897][ T7126] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2637.618945][ T7126] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2637.881376][T13733] syzkaller0: entered promiscuous mode [ 2637.881434][T13733] syzkaller0: entered allmulticast mode [ 2644.216380][T16413] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2644.222176][T16413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2644.222197][T16413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2644.725641][ T7126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2644.725690][ T7126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2645.062075][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14001'. [ 2645.062109][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14001'. [ 2645.109769][T13800] vxlan0: entered promiscuous mode [ 2645.109793][T13800] vxlan0: entered allmulticast mode [ 2645.128135][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14001'. [ 2645.128168][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14001'. [ 2645.475755][ T7126] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2645.476605][ T7126] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2645.476643][ T7126] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2645.493909][T22341] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2645.965262][ T4603] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2646.200046][ T4603] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2646.201408][ T4603] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2646.201437][ T4603] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2646.201458][ T4603] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2646.201493][ T4603] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2646.204177][ T4603] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2646.204192][ T4603] usb 4-1: Product: syz [ 2646.204212][ T4603] usb 4-1: Manufacturer: syz [ 2646.244202][ T4603] cdc_wdm 4-1:1.0: skipping garbage [ 2646.244300][ T4603] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2646.605909][T13834] bridge6: entered allmulticast mode [ 2646.737098][T13837] netlink: 'syz.3.14121': attribute type 21 has an invalid length. [ 2646.737196][T13837] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14121'. [ 2646.794594][ T4632] usb 4-1: USB disconnect, device number 68 [ 2646.828641][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14130'. [ 2646.828678][T13842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14130'. [ 2646.856144][T13842] vxlan0: entered promiscuous mode [ 2646.856170][T13842] vxlan0: entered allmulticast mode [ 2646.863317][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14130'. [ 2646.863349][T13842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14130'. [ 2646.935248][ T7068] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2646.935335][ T7068] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2646.935399][ T7068] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2646.935763][ T7068] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2648.637602][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14141'. [ 2648.671251][T13875] vxlan0: entered promiscuous mode [ 2648.671276][T13875] vxlan0: entered allmulticast mode [ 2648.688286][ T7068] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2648.689107][ T7068] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2648.689144][ T7068] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2648.689176][ T7068] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2650.133328][T13911] __nla_validate_parse: 4 callbacks suppressed [ 2650.133349][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14153'. [ 2650.133377][T13911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14153'. [ 2650.162021][T13911] vxlan1: entered promiscuous mode [ 2650.162045][T13911] vxlan1: entered allmulticast mode [ 2650.189587][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14153'. [ 2650.189635][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14153'. [ 2650.250923][T13915] vxlan1: entered promiscuous mode [ 2650.250948][T13915] vxlan1: entered allmulticast mode [ 2650.473337][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14158'. [ 2650.732478][T13928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14161'. [ 2651.494058][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14167'. [ 2651.802070][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.802128][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.090286][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14172'. [ 2652.139727][T13954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14173'. [ 2653.697050][T13985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14184'. [ 2655.144856][ T4594] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2655.296390][ T4594] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2655.298484][ T4594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2655.298542][ T4594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2655.298565][ T4594] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 2655.298590][ T4594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 2655.298615][ T4594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 2655.371325][ T4594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2655.371351][ T4594] usb 4-1: Product: syz [ 2655.371365][ T4594] usb 4-1: Manufacturer: syz [ 2655.371378][ T4594] usb 4-1: SerialNumber: syz [ 2655.400269][ T4594] usb 4-1: config 0 descriptor?? [ 2655.617240][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 2655.650311][ T4594] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 2655.664625][ T4594] usb 4-1: USB disconnect, device number 69 [ 2655.811418][T14021] __nla_validate_parse: 2 callbacks suppressed [ 2655.811431][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14198'. [ 2657.129100][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14210'. [ 2658.518101][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14227'. [ 2659.661846][T14109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14238'. [ 2659.788408][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14241'. [ 2660.041499][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14246'. [ 2660.076511][T14125] vxlan1: entered promiscuous mode [ 2660.076571][T14125] vxlan1: entered allmulticast mode [ 2660.089357][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14246'. [ 2660.108846][T16413] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2660.110660][T16413] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2660.110784][T16413] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2660.110852][T16413] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2660.730280][T14146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14254'. [ 2661.128131][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14256'. [ 2661.588747][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14260'. [ 2661.602346][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14260'. [ 2662.628500][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14267'. [ 2663.071767][T14190] syzkaller0: entered promiscuous mode [ 2663.071807][T14190] syzkaller0: entered allmulticast mode [ 2663.156555][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14272'. [ 2663.212890][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14272'. [ 2663.280580][T14198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14274'. [ 2663.280604][T14198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14274'. [ 2663.280622][T14198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14274'. [ 2663.530046][T14193] vxlan1: entered promiscuous mode [ 2663.530106][T14193] vxlan1: entered allmulticast mode [ 2663.606827][T14197] vxlan1: entered promiscuous mode [ 2663.612236][T14197] vxlan1: entered allmulticast mode [ 2664.094807][T14214] ------------[ cut here ]------------ [ 2664.094824][T14214] !chanctx_conf [ 2664.094851][T14214] WARNING: net/mac80211/tx.c:6509 at ieee80211_tx_skb_tid+0x3b8/0x480, CPU#0: syz.4.14281/14214 [ 2664.117752][T14214] Modules linked in: [ 2664.125648][T14214] CPU: 0 UID: 0 PID: 14214 Comm: syz.4.14281 Tainted: G L syzkaller #0 PREEMPT(full) [ 2664.138005][T14214] Tainted: [L]=SOFTLOCKUP [ 2664.142726][T14214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2664.153507][T14214] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 2664.159938][T14214] Code: 55 43 f6 e9 b1 fe ff ff e8 35 aa 67 f6 90 0f 0b 90 e9 e2 fe ff ff e8 27 aa 67 f6 90 0f 0b 90 e9 2a fe ff ff e8 19 aa 67 f6 90 <0f> 0b 90 e8 10 b2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 2664.180833][T14214] RSP: 0018:ffffc900033c7078 EFLAGS: 00010283 [ 2664.187354][T14214] RAX: ffffffff8b602077 RBX: ffffffff8b601cef RCX: 0000000000080000 [ 2664.195811][T14214] RDX: ffffc90010ed4000 RSI: 0000000000003512 RDI: 0000000000003513 [ 2664.204230][T14214] RBP: 00000000ffffffff R08: ffffffff8b601cef R09: 0000000000000000 [ 2664.212683][T14214] R10: dffffc0000000000 R11: ffffed100b8aea7e R12: ffff888012148ec0 [ 2664.221158][T14214] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 2664.229608][T14214] FS: 0000000000000000(0000) GS:ffff888124cd2000(0063) knlGS:00000000f5446b40 [ 2664.239068][T14214] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2664.246027][T14214] CR2: 000000000c3df63d CR3: 000000007f984000 CR4: 00000000003526f0 [ 2664.254469][T14214] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2664.262919][T14214] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2664.271354][T14214] Call Trace: [ 2664.274884][T14214] [ 2664.278080][T14214] mesh_plink_frame_tx+0x73d/0xc30 [ 2664.283639][T14214] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 2664.289630][T14214] ? mesh_path_error_tx+0x80/0x890 [ 2664.295080][T14214] mesh_plink_deactivate+0x18b/0x2f0 [ 2664.300680][T14214] mesh_sta_cleanup+0x42/0x150 [ 2664.305895][T14214] cleanup_single_sta+0x3ff/0x660 [ 2664.311336][T14214] __sta_info_flush+0x5bb/0x700 [ 2664.316520][T14214] ? __pfx___sta_info_flush+0x10/0x10 [ 2664.322274][T14214] ieee80211_do_stop+0x3cd/0x2410 [ 2664.327710][T14214] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 2664.333549][T14214] ? irqentry_exit+0x218/0x910 [ 2664.338666][T14214] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 2664.344963][T14214] ieee80211_stop+0x1ab/0x200 [ 2664.349943][T14214] ? __pfx_ieee80211_stop+0x10/0x10 [ 2664.355471][T14214] __dev_close_many+0x366/0x6e0 [ 2664.360712][T14214] ? __pfx___dev_close_many+0x10/0x10 [ 2664.366489][T14214] ? __dev_change_flags+0x2e2/0x820 [ 2664.372054][T14214] ? __local_bh_enable_ip+0xd6/0x140 [ 2664.377723][T14214] __dev_change_flags+0x3f5/0x820 [ 2664.383044][T14214] ? __pfx___dev_change_flags+0x10/0x10 [ 2664.388940][T14214] ? __pfx___mutex_lock+0x10/0x10 [ 2664.394286][T14214] netif_change_flags+0x7c/0x1b0 [ 2664.399561][T14214] dev_change_flags+0x128/0x260 [ 2664.404867][T14214] devinet_ioctl+0x966/0x1c50 [ 2664.409907][T14214] ? __pfx_devinet_ioctl+0x10/0x10 [ 2664.415339][T14214] ? get_user_ifreq+0x132/0x180 [ 2664.420529][T14214] inet_ioctl+0x42a/0x560 [ 2664.425153][T14214] ? __pfx_inet_ioctl+0x10/0x10 [ 2664.430381][T14214] ? kasan_quarantine_put+0xbb/0x1f0 [ 2664.435994][T14214] ? do_vfs_ioctl+0x116f/0x1530 [ 2664.441175][T14214] sock_do_ioctl+0x101/0x320 [ 2664.446120][T14214] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2664.451536][T14214] compat_sock_ioctl+0xbb9/0xcc0 [ 2664.456804][T14214] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2664.462600][T14214] ? __fget_files+0x3a2/0x420 [ 2664.467621][T14214] ? __fget_files+0x2a/0x420 [ 2664.472475][T14214] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2664.478365][T14214] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2664.484128][T14214] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2664.490492][T14214] ? __se_sys_futex_time32+0x3ab/0x440 [ 2664.496290][T14214] ? rcu_is_watching+0x16/0xb0 [ 2664.501342][T14214] __do_fast_syscall_32+0x27a/0x6a0 [ 2664.506875][T14214] ? do_fast_syscall_32+0x33/0x70 [ 2664.512191][T14214] ? irqentry_exit+0x10f/0x910 [ 2664.517241][T14214] do_fast_syscall_32+0x33/0x70 [ 2664.522371][T14214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2664.529190][T14214] RIP: 0023:0xf7f890ec [ 2664.533492][T14214] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2664.554197][T14214] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2664.563107][T14214] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008914 [ 2664.571561][T14214] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2664.579991][T14214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2664.588447][T14214] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2664.596890][T14214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2664.605754][T14214] [ 2664.609002][T14214] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2664.616271][T14214] CPU: 0 UID: 0 PID: 14214 Comm: syz.4.14281 Tainted: G L syzkaller #0 PREEMPT(full) [ 2664.627291][T14214] Tainted: [L]=SOFTLOCKUP [ 2664.631600][T14214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2664.641636][T14214] Call Trace: [ 2664.644914][T14214] [ 2664.647839][T14214] vpanic+0x56d/0xa60 [ 2664.651836][T14214] ? __pfx__printk+0x10/0x10 [ 2664.656404][T14214] ? __pfx_vpanic+0x10/0x10 [ 2664.660903][T14214] ? is_bpf_text_address+0x292/0x2b0 [ 2664.666185][T14214] ? is_bpf_text_address+0x26/0x2b0 [ 2664.671372][T14214] panic+0xc5/0xd0 [ 2664.675094][T14214] ? __pfx_panic+0x10/0x10 [ 2664.679504][T14214] __warn+0x315/0x4c0 [ 2664.683468][T14214] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 2664.688837][T14214] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 2664.694207][T14214] __report_bug+0x276/0x570 [ 2664.698762][T14214] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 2664.704114][T14214] ? __pfx___report_bug+0x10/0x10 [ 2664.709116][T14214] ? irqentry_exit+0x218/0x910 [ 2664.713855][T14214] ? trace_irq_disable+0x3b/0x140 [ 2664.718863][T14214] ? ieee80211_tx_skb_tid+0x3ba/0x480 [ 2664.724215][T14214] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 2664.729568][T14214] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 2664.734919][T14214] report_bug+0x16b/0x220 [ 2664.739226][T14214] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 2664.744574][T14214] ? ieee80211_tx_skb_tid+0x3ba/0x480 [ 2664.749924][T14214] handle_bug+0x9c/0x200 [ 2664.754147][T14214] exc_invalid_op+0x1a/0x50 [ 2664.758628][T14214] asm_exc_invalid_op+0x1a/0x20 [ 2664.763455][T14214] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 2664.769432][T14214] Code: 55 43 f6 e9 b1 fe ff ff e8 35 aa 67 f6 90 0f 0b 90 e9 e2 fe ff ff e8 27 aa 67 f6 90 0f 0b 90 e9 2a fe ff ff e8 19 aa 67 f6 90 <0f> 0b 90 e8 10 b2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 2664.789021][T14214] RSP: 0018:ffffc900033c7078 EFLAGS: 00010283 [ 2664.795072][T14214] RAX: ffffffff8b602077 RBX: ffffffff8b601cef RCX: 0000000000080000 [ 2664.803025][T14214] RDX: ffffc90010ed4000 RSI: 0000000000003512 RDI: 0000000000003513 [ 2664.810986][T14214] RBP: 00000000ffffffff R08: ffffffff8b601cef R09: 0000000000000000 [ 2664.818946][T14214] R10: dffffc0000000000 R11: ffffed100b8aea7e R12: ffff888012148ec0 [ 2664.826915][T14214] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 2664.834897][T14214] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 2664.840185][T14214] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 2664.845451][T14214] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 2664.850843][T14214] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 2664.856201][T14214] mesh_plink_frame_tx+0x73d/0xc30 [ 2664.861315][T14214] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 2664.866930][T14214] ? mesh_path_error_tx+0x80/0x890 [ 2664.872041][T14214] mesh_plink_deactivate+0x18b/0x2f0 [ 2664.877312][T14214] mesh_sta_cleanup+0x42/0x150 [ 2664.882071][T14214] cleanup_single_sta+0x3ff/0x660 [ 2664.887080][T14214] __sta_info_flush+0x5bb/0x700 [ 2664.891919][T14214] ? __pfx___sta_info_flush+0x10/0x10 [ 2664.897285][T14214] ieee80211_do_stop+0x3cd/0x2410 [ 2664.902312][T14214] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 2664.907751][T14214] ? irqentry_exit+0x218/0x910 [ 2664.912521][T14214] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 2664.918315][T14214] ieee80211_stop+0x1ab/0x200 [ 2664.922980][T14214] ? __pfx_ieee80211_stop+0x10/0x10 [ 2664.928160][T14214] __dev_close_many+0x366/0x6e0 [ 2664.933007][T14214] ? __pfx___dev_close_many+0x10/0x10 [ 2664.938395][T14214] ? __dev_change_flags+0x2e2/0x820 [ 2664.943574][T14214] ? __local_bh_enable_ip+0xd6/0x140 [ 2664.948858][T14214] __dev_change_flags+0x3f5/0x820 [ 2664.953869][T14214] ? __pfx___dev_change_flags+0x10/0x10 [ 2664.959416][T14214] ? __pfx___mutex_lock+0x10/0x10 [ 2664.964426][T14214] netif_change_flags+0x7c/0x1b0 [ 2664.969381][T14214] dev_change_flags+0x128/0x260 [ 2664.974218][T14214] devinet_ioctl+0x966/0x1c50 [ 2664.978887][T14214] ? __pfx_devinet_ioctl+0x10/0x10 [ 2664.983981][T14214] ? get_user_ifreq+0x132/0x180 [ 2664.988816][T14214] inet_ioctl+0x42a/0x560 [ 2664.993134][T14214] ? __pfx_inet_ioctl+0x10/0x10 [ 2664.997984][T14214] ? kasan_quarantine_put+0xbb/0x1f0 [ 2665.003274][T14214] ? do_vfs_ioctl+0x116f/0x1530 [ 2665.008116][T14214] sock_do_ioctl+0x101/0x320 [ 2665.012698][T14214] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2665.017803][T14214] compat_sock_ioctl+0xbb9/0xcc0 [ 2665.022730][T14214] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2665.028174][T14214] ? __fget_files+0x3a2/0x420 [ 2665.032843][T14214] ? __fget_files+0x2a/0x420 [ 2665.037416][T14214] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2665.042954][T14214] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2665.048398][T14214] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2665.054364][T14214] ? __se_sys_futex_time32+0x3ab/0x440 [ 2665.059807][T14214] ? rcu_is_watching+0x16/0xb0 [ 2665.064557][T14214] __do_fast_syscall_32+0x27a/0x6a0 [ 2665.069828][T14214] ? do_fast_syscall_32+0x33/0x70 [ 2665.074865][T14214] ? irqentry_exit+0x10f/0x910 [ 2665.079631][T14214] do_fast_syscall_32+0x33/0x70 [ 2665.084477][T14214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2665.090858][T14214] RIP: 0023:0xf7f890ec [ 2665.094932][T14214] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2665.114616][T14214] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2665.123030][T14214] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008914 [ 2665.131010][T14214] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2665.138967][T14214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2665.146919][T14214] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2665.154871][T14214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2665.162846][T14214] [ 2665.166111][T14214] Kernel Offset: disabled [ 2665.170430][T14214] Rebooting in 86400 seconds..