last executing test programs: 5.713884041s ago: executing program 0 (id=1310): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x7, 0x3d5, 0x9, 0xf, 0x4, 0x10000, 0x6, 0xa442, r2}, &(0x7f0000000140)=0x20) 4.970239805s ago: executing program 3 (id=1316): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140), 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) 4.890359927s ago: executing program 3 (id=1317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002300)=@newtaction={0x14, 0x30, 0xb, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 4.822219109s ago: executing program 0 (id=1318): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$nl_xfrm(r0, 0x0, 0xe61c1323c3c20c32) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r5) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x44, r6, 0x1, 0x0, 0x0, {0x3}, [@GTPA_NET_NS_FD, @GTPA_NET_NS_FD={0x0, 0x7, r0}, @GTPA_PEER_ADDRESS={0xa, 0x4, @private=0xa010102}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x44}}, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000280)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140ff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.696559724s ago: executing program 3 (id=1320): syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002c00)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0a0006000802110000010000060066008e8800002000330078bd0900589733b902f1ffffffffffff0802110000000250be000e8006"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) close(r0) 4.672881574s ago: executing program 1 (id=1321): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa", 0x8d}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.583065538s ago: executing program 1 (id=1328): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140), 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, 0x0, 0x0) 3.568505648s ago: executing program 0 (id=1329): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031400d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.451340092s ago: executing program 4 (id=1330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 3.432537583s ago: executing program 1 (id=1331): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2a000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a070000000000000000000200000009000100737972300000000084000000030a01020000000000000000020000060900010073797a30000000005b0003c500fd02b216df8b721e23f25f47"], 0xcc}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d3672656730", @ANYBLOB], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)=',8Zz', 0x4) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="00000000000006090001545b6e1430000000000c00034000000000000000010900010073797a30000000000c00064000000000000001ff0000001e00"], 0x44}}, 0x80) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x1, 0x10, 0x1, &(0x7f00000000c0)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r5, 0x0, 0x0) 3.365830805s ago: executing program 0 (id=1332): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x5, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r0, r0) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/108, 0x0, 0x40000}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xe0800, 0x0) fsetxattr$system_posix_acl(r3, 0x0, 0x0, 0x0, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1408, 0x103) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0xd}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe5c, 0x2, [@TCA_MATCHALL_ACT={0xe58, 0x2, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x7, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x1, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x6, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x7ff, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x400, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x6, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x8, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x1fe}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000081, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0xd}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x200, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x40000004, 0x1, 0x8, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3fc, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x2}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x6, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x3, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24e, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x4, 0x5, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0xc5c0, 0xfffffff7, 0x8}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x5, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x791, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x13, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe90}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$vhost_msg_v2(r2, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f0000000140)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) r9 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015082d5281b08c00901024ffa0102030109021200013daea00209"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x856}}, {0xe8, &(0x7f0000000300)=@string={0xe8, 0x3, "9c3090786e98f051eea4e06081b988a7ba60ede87e97cd7be50d3cbdbda8cb2a9966e89e9e9d3f7e38bb2c5fe866390d55cc4090d105e93305f116899dfd1624131e274dbdb093b34bbd7cd3f2e0148b42077a28388f1403bdcc01a55771d6ca6dd2f04dc86d44ff20b617584f664524848080987781aafdfcd612b8bc7358c5bfb6ac5c6341e0d5bd7f3543d0d6d486e15652207ce5f17c34d29c60f18bab91103bcfb32fd27eef69244037bd8e618f6aaa10a402cfe31c3fc0e92e1a416a629987e6562c19289f6b94adb5d1c696a56fcbb4796423e7592053906fbab387e66333d70b7b38"}}, {0x8a, &(0x7f0000000400)=@string={0x8a, 0x3, "fb3212490fd48817ad3586349a925b85a7487a62ef97356af32e189a45a45da4d526070df271a597213a6941087c04592b3b04777b0e15d47d975c91253e7d472626fb6b81ff59a6a0db91dec7dfab7d56d3eed901aba0c302c2f8c43ed958ea0f8f0a11dca74950b125ace7c81b330024535ac5974a70661a7110a881341d3908b431be15103acb"}}]}) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.254322148s ago: executing program 4 (id=1333): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4000c00) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffff7, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x4000080) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r10, {0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045080}, 0x140c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0x5, 0x3, 0xfffffff7, 0x1, 0x26d6}}}}]}, 0x4c}}, 0x0) 3.091377513s ago: executing program 4 (id=1334): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x0) timerfd_create(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x6, r0, 'id1\x00'}) read$usbfs(r1, &(0x7f0000000440)=""/201, 0xc9) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x2e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001b3eb000040e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="4884000000c0000008001d00c30000"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) writev(r2, &(0x7f0000002bc0)=[{&(0x7f0000000540)="e26dca287bc8a7bdfb601dd7baea705cb579beb3418e7c4b6f637b7f0c6a32c784e6ac65ae810a9e5abc8e00f271d39b23b72f0edea8d522602f7ea57f20d6e2a228cfe7fea0a4056d56054cc7440fe2ad8f351d1d6a3f1de5ea6b3744eda08d615dc15619f9b0bb190af3dd57372a6bd9bb8a04c7313b8848da834eddfc73194236887117ef8efc96e118d9d6d896d39619e107899d648b9302f49c72827f9969df0afe28961bd165b57426b7bd08943dbc0cd4dc4734f1abc3e02b8ecbecb8c1df51d45711355e2cac0b12fc", 0xcd}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)}, {&(0x7f0000001900)="f98b34829d5cefd8c5c31c55278ca172a08b28798382f97ac194ed4dc74e7bad26f3221320426947db0caa2ed2bc2dc1ba0ecc05", 0x34}, {&(0x7f0000001940)="7b4748c6c4033e07687c042fb9a7ed8ebb9da1f5c1edd4c594e4f867b9bfd6d41de54bf1060150520525fc2446e7ec445eea1fc474538babf24b2bfd5ada426f5da0f867b559b7add95021d62381a7bc619fdd54e9555d916a8a075a9b2cb84828a8c00c4220cd6ad0c203b7464de6cbe95d7f826129fef3e16353a6ca7f59dc25d5f8b53fc86776d049ed924dde6f9733a1ac437efd745cd0e5470f12cbe6315d1c24efbefcbb58bfe58767c53f71e31a", 0xb1}, {&(0x7f0000001a00)="d954ddac6a87b3e64ada11ba7d0251fda4e6854d7188e646ffd363ed249cd34b6acc6e1ccb6cc8ae6b1da80ea5d3b1ddd1f228bea2f864acb2296eda19dbc804f5087be0327bed0715dd5e10d6fb731d42452e24653b2e472c932ffdbc6c26f41e5974e505ff5ae32bcafb980161a0676b530fceb92aab75d9da3b200ff9bd79542746a2ada51a27eba63c6b9032e7898f4931ce27771fc1f65330445d068e5aa27bdfd84e6f2481cc6c3ba34cd834836076ab87e918cf00e44cb324e0c3b5dc66ff9559d766", 0xc6}, {0x0}], 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x10) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, 0x0, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TIOCGSOFTCAR(r6, 0x5419, 0xffffffffffffffff) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0xa) 2.165018173s ago: executing program 4 (id=1337): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x5, @loopback, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000002b40)="1b", 0x1}, {&(0x7f0000000240)="2dadf590", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0xc000) 1.967270859s ago: executing program 4 (id=1338): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xc9, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x8000, 0x9}]}) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x70bd24, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) shmctl$IPC_RMID(r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405668, &(0x7f00000000c0)={0x0, 0xfdfd, 0x1, "0000087aba0f75501eb6d1f14fa30000000000000016d2f0ffff00", 0x32315241}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.546720652s ago: executing program 3 (id=1340): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000015c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000000b40)=@newchain={0x34, 0x64, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x7, 0x6}, {0x9, 0xe}}, [@f_rsvp6={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5eef2bcf17e011cc}, 0x20000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x80c0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x38, 0x0, 0x1, 0x301, 0x0, 0x0, {0x8, 0x0, 0x3}, [@CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x4}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x30, 0x1]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 1.435429935s ago: executing program 2 (id=1341): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000900)="e49d", 0x2}], 0x1}}], 0x1, 0x240048d1) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="02000000", 0x4) 1.422468026s ago: executing program 1 (id=1342): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031400d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.323688759s ago: executing program 2 (id=1343): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.183168053s ago: executing program 2 (id=1344): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c233016", 0xc}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311c", 0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d3672656730", @ANYBLOB="1400"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x44}}, 0x80) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.045855858s ago: executing program 1 (id=1345): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000800)={0x0, r1}, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000020009500000000000000b7020000000000007b9af8ff00000000bd09020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x6, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x153}, @map_fd={0x18, 0x4, 0x1, 0x0, r6}]}, &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000180), &(0x7f0000000200), 0x8}, 0x20) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x40, 0x700, 0x3ff, 0x8, {{0xa, 0x4, 0x1, 0x5, 0x28, 0x64, 0x0, 0xeb, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xde, 0x1, 0x8, [{@loopback, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}]}}}}}) sendmsg$nl_route(r0, 0x0, 0x48000) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev}, &(0x7f00000004c0)=0xc) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x700, 0x10, 0x7, 0xb89f, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x68, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback}}}}) sendmsg$nl_route(r4, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=@ipv6_newroute={0x98, 0x18, 0x8, 0x70bd25, 0x25dfdbff, {0xa, 0x20, 0x0, 0x2, 0xff, 0x4, 0x0, 0x1, 0x400}, [@RTA_EXPIRES={0x8, 0x17, 0x6}, @RTA_IIF={0x8, 0x3, r10}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_OIF={0x8, 0x4, r8}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @RTA_METRICS={0x45, 0x8, 0x0, 0x1, "27b6f64f3d8395e9b0e39ee67165565fc4b5b24e2553042b51a60ad0284f077b797e844b0dfa0d04bda4c4ce2b05586206a85480e38d9d34c65c0f9fad13839555"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040055}, 0x42) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000880)={r12, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x66}}, 0x1}}}, &(0x7f0000000300)=0x90) sendmsg$can_j1939(r9, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, r8, 0x0, {0x1, 0x1, 0x4}, 0xfe}, 0x18, &(0x7f00000003c0)={&(0x7f0000000300)="4bfa1155efe55fb7a16bf81c2bb4be1c80f6fcca06557a10f3e2855f302912b4121e1c63f65ac9301d530c800f40d74a2f163acd35db2335d6786f4004d343d5bc94ba6aef9de46da8b7adcbdef1bbd91688ba52a65c796d27e6c7760b13729a67db9d9974cf4f9e7aec3badbb3021df608d008fbd77d27cd4e8e48bc3eee16c7e00e995f7050f5a33f4ffd072853dd94d9d6af5845db6b636d50e74c88ae93ca062fa32f4e57cf1", 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x1) 990.463229ms ago: executing program 3 (id=1346): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a00"], 0x20) 977.45876ms ago: executing program 0 (id=1347): creat(&(0x7f00000003c0)='./file0\x00', 0xecf86c37d53049cc) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) ppoll(&(0x7f0000000180)=[{r3, 0x82}], 0x1, 0x0, 0x0, 0x0) dup3(r1, r3, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 719.246298ms ago: executing program 3 (id=1348): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa", 0x8d}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 545.727353ms ago: executing program 4 (id=1349): r0 = syz_clone(0x80202000, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "07ec685224472d3ce62614a517a532cfa6faa7f4f33fb9fdc06c584b134c2a90b2a009126445277df563f444ba32540429912475d90df0e9844f65bf11763185", 0x2a}, 0x48, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$search(0xa, r1, &(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz', 0x0}, r2) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x6}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ptrace(0x10, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a9c41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001300), 0x7cda, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000001340)={0x0, 0x6, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000200)=0x4) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) keyctl$set_timeout(0xf, r2, 0x401) ioctl$KVM_RUN(r6, 0xae80, 0x0) 320.99989ms ago: executing program 2 (id=1350): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x3, 0x800, 0x68, 0xfb, 0x3, 0x33, 0x7090, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}}}, 0x0) 229.557803ms ago: executing program 2 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x6, 0x7fffffff, 0x1, 0x8, 0x5, 0x8, 0x3, 0x6, 0xfffffff6, 0x40, 0x81, 0xf, 0x10001, 0x9, 0x9, 0x9ef, 0x9, 0x6, 0x0, 0x7, 0x1, 0x0, 0x2, 0x101, 0x0, 0x7f, 0x1, 0x1, 0x6, 0x7ff, 0x2, 0x4, 0x2, 0x100, 0x6, 0xb, 0x7, 0x3ff, 0x2, 0x8, 0x3, 0x6, 0x8000, 0x0, 0x9d, 0x5e, 0x795, 0x8, 0x800, 0x1, 0x80000001, 0x3, 0xe, 0xbf, 0x5, 0x5, 0xff, 0x6, 0x8, 0x8, 0x1, 0x8, 0x4, 0xffffff63, 0xd7, 0x7, 0x101, 0xfff, 0x6, 0xfffff000, 0x8, 0x9, 0x7, 0x5ec4818f, 0x4, 0x10001, 0x2, 0x3, 0x7, 0x9, 0x8, 0x3, 0x4, 0x5, 0x8, 0x0, 0x7, 0x69f, 0x1, 0x200, 0x5, 0x2, 0x8103, 0xfff, 0x0, 0x7, 0x4, 0x5, 0x2, 0x6, 0x5, 0x2, 0x3, 0x1bbf, 0x7, 0x2, 0x2, 0xa, 0x5, 0x8, 0x3, 0x400, 0x2bf9, 0x2, 0x7, 0x3, 0x4, 0x79, 0xfffffff8, 0x9, 0xfffffffb, 0x5, 0xfffffffd, 0x7, 0xfff, 0x200, 0x4, 0x2, 0x4, 0x7, 0x7fff, 0xd, 0x8, 0x9, 0x10000, 0x7, 0xfffffffb, 0x3, 0x9, 0x5, 0x2, 0x4, 0x2, 0xffff, 0x8, 0xe5a, 0x5, 0x1, 0x2d0, 0x9, 0x7, 0x1, 0x5, 0x2, 0x100, 0xa74, 0x4d, 0x9, 0x3, 0x6, 0x5, 0x6e8a, 0x8, 0x1, 0x7, 0x0, 0x80, 0x5, 0x7, 0x5, 0x8, 0x0, 0xfffffe01, 0x8, 0x0, 0x101, 0xfff, 0x800, 0x2, 0x314, 0x1, 0x0, 0x9, 0x4, 0xc, 0x8000, 0x8a69, 0x8, 0x7, 0x4, 0x8, 0x7, 0xffff9eea, 0x6, 0x6, 0x5, 0x1, 0xfffeffff, 0x70, 0x2, 0x43a, 0x5b04, 0x7, 0x0, 0x80000001, 0x6, 0x9, 0x10001, 0xbb45061, 0x6, 0xaecf, 0xe2, 0x6, 0x100, 0x42, 0x8, 0x7fff, 0x6, 0x5a, 0x400, 0x5, 0x407e0a41, 0x1ff, 0xfffff6b0, 0xffff, 0x9, 0xcd, 0x3, 0x9, 0x1c4, 0x7, 0xb, 0x10, 0x7, 0x2, 0x5, 0x2, 0x5, 0x0, 0x5, 0x6, 0x0, 0x9, 0x5, 0x7, 0xfff, 0x3, 0xb5c, 0x7ea, 0x9, 0x2, 0x9, 0x200, 0x2, 0xe]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x10001, 0x2, 0xa, 0x7, 0x5, 0xe5f5, 0xf3, 0x5, 0x4, 0x3, 0x5, 0x5, 0xfffffffb, 0x100, 0x1, 0x6, 0x4, 0x7f, 0x7f, 0x7f, 0x5, 0x0, 0x7f, 0x280, 0x1, 0x1, 0x2, 0x8, 0x0, 0x2c4, 0x47c82518, 0x400, 0x6, 0xfff, 0x8, 0x1, 0x401, 0x0, 0x80, 0xc, 0x1a, 0x6, 0x0, 0xffffffb0, 0x85, 0x2c, 0x9, 0x100, 0xfff, 0x7, 0x10000, 0x7e, 0x7f, 0x7fffffff, 0x0, 0x1, 0x9, 0x5, 0x101, 0x141, 0x0, 0x3ae6, 0x3, 0x6, 0x3, 0x3, 0xff, 0x3, 0xfec6, 0x3, 0x401, 0x9, 0x3adf, 0x3, 0x7fffffff, 0x6, 0x8, 0x9, 0x1, 0x7, 0x3ff, 0x1, 0xa, 0x0, 0x1, 0x1, 0xfffffffd, 0x7, 0x1, 0x6, 0xf, 0x3, 0xffff, 0x3ff, 0x7fff, 0x3, 0x3, 0x1, 0x5, 0x9d, 0x1, 0x0, 0x9, 0x0, 0x10, 0xda, 0x80000001, 0x2, 0x2a0, 0x8001, 0xfffffff8, 0x8, 0x3, 0x7, 0x9, 0x6, 0x800, 0xb1a6, 0x1, 0x2, 0x0, 0x1000, 0x10001, 0x9, 0x6ed4, 0x0, 0x6a2, 0xffffffff, 0x9, 0x0, 0xfffffc00, 0x3, 0x8, 0x1f7, 0x3, 0x10000, 0x5, 0x2, 0x4, 0xa, 0x3, 0x3, 0xe, 0x8, 0x10001, 0x7, 0x10001, 0x43d6e55e, 0x6, 0xfff, 0x3, 0x6, 0x8, 0x7fffffff, 0x2, 0x4, 0xfffeffff, 0xffff6b27, 0x1, 0x1, 0x0, 0x800, 0x9, 0xf4, 0x3, 0xc, 0x3, 0x4, 0x9, 0x2, 0x8, 0x7fffffff, 0x5, 0x9, 0x5, 0x7, 0x2, 0x7f, 0x3, 0xd, 0x1, 0x5, 0x9, 0xe2a, 0x4, 0x2, 0x7, 0xa, 0x2573, 0x1000000, 0x5000000, 0x4, 0x7f, 0x4ee1, 0x4, 0xab, 0x81, 0x4c1a, 0x6, 0x7, 0x7fffffff, 0x75, 0x3, 0x7f, 0xfffffff8, 0x0, 0x1, 0x400, 0x4, 0x3, 0xfffffff9, 0x8, 0x12ab, 0x7, 0x5, 0x3, 0x80000000, 0xffffffcc, 0x8, 0x7, 0x0, 0x1, 0x4, 0x2, 0x4, 0x4, 0x1, 0x6, 0x7, 0x3, 0x800, 0x7, 0x7fffffff, 0x9, 0x26, 0xff, 0x8, 0x9, 0x7, 0xc, 0xffff, 0x5, 0x5, 0x7, 0x1, 0x3, 0x30, 0x8c, 0x288, 0x4, 0xc18e, 0x0, 0x10, 0xc0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x7f, 0xff, 0xfffffeff, {0x6, 0x91acbd24cee7dfe8, 0x2, 0x4b, 0xa, 0x28000000}, {0x1, 0x1, 0xd545, 0x53d, 0x5, 0x7ff}, 0x7, 0xf0c, 0x9a}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 93.497637ms ago: executing program 1 (id=1352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x79}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 15.31413ms ago: executing program 0 (id=1353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000c40)) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002c00)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000060066008e8800002000330078bd0900589733b902f1ffffffffffff0802110000000250be000e8006"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2000000, '\x00', 0x0, 0x0, 0xffffffff, 0x3}, 0x50) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 0s ago: executing program 2 (id=1354): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) kernel console output (not intermixed with test programs): tate [ 69.325850][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.347604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.372249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.387071][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.394227][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.415009][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.431952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.465030][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.480290][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.490972][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.512461][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.532465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.550696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.560671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.573864][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.611583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.630472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.650156][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.657282][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.688244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.697675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.708145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.721707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.730349][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.737429][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.746119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.755998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.764880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.775182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.784569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.793567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.811661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.825249][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.834351][ T1324] Bluetooth: hci0: command 0x041b tx timeout [ 69.853730][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.873890][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.882281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.896322][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.906288][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.915080][ T1324] Bluetooth: hci3: command 0x041b tx timeout [ 69.927471][ T1324] Bluetooth: hci4: command 0x041b tx timeout [ 69.934750][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.949142][ T1324] Bluetooth: hci1: command 0x041b tx timeout [ 69.955993][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.970364][ T1324] Bluetooth: hci2: command 0x041b tx timeout [ 69.977023][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.984173][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.992680][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.002064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.010000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.017981][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.027252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.034952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.059958][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.077763][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.087649][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.102700][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.113798][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.126408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.137968][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.145137][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.158291][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.168413][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.188289][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.196983][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.221796][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.241716][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.254213][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.264730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.273749][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.283301][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.294538][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.330927][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.350268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.360085][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.373095][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.396926][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.410246][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.428054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.445762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.466065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.475799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.530658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.568155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.578617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.596466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.620891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.663286][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.681265][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.712023][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.733482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.747351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.762725][ T4193] device veth0_vlan entered promiscuous mode [ 70.783372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.792862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.806590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.815459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.830552][ T4197] device veth0_vlan entered promiscuous mode [ 70.845555][ T4197] device veth1_vlan entered promiscuous mode [ 70.860715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.868467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.877158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.885903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.893694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.912666][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.925197][ T4193] device veth1_vlan entered promiscuous mode [ 70.942612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.951364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.959908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.968676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.977946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.987210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.030994][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.042362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.052079][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.062999][ T4197] device veth0_macvtap entered promiscuous mode [ 71.077170][ T4197] device veth1_macvtap entered promiscuous mode [ 71.096611][ T4191] device veth0_vlan entered promiscuous mode [ 71.105784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.115689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.125037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.134047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.145047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.154653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.164241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.172744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.195701][ T4187] device veth0_vlan entered promiscuous mode [ 71.215550][ T4193] device veth0_macvtap entered promiscuous mode [ 71.224202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.233594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.243477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.253176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.262473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.271783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.280574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.289386][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.295990][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.313865][ T4191] device veth1_vlan entered promiscuous mode [ 71.335683][ T4193] device veth1_macvtap entered promiscuous mode [ 71.345998][ T4187] device veth1_vlan entered promiscuous mode [ 71.361405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.370162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.388174][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.410658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.420064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.427881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.438458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.453315][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.464287][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.476586][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.488428][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.504522][ T4194] device veth0_vlan entered promiscuous mode [ 71.527869][ T4194] device veth1_vlan entered promiscuous mode [ 71.535777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.544403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.555070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.564125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.573042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.584021][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.609443][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.621179][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.635291][ T4191] device veth0_macvtap entered promiscuous mode [ 71.644703][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.654326][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.665095][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.675274][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.695822][ T4187] device veth0_macvtap entered promiscuous mode [ 71.711467][ T4187] device veth1_macvtap entered promiscuous mode [ 71.719489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.727719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.738946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.747777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.757152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.765794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.776047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.786303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.797383][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.806473][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.815499][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.825060][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.839698][ T4191] device veth1_macvtap entered promiscuous mode [ 71.863445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.872976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.884163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.909310][ T1324] Bluetooth: hci0: command 0x040f tx timeout [ 71.973623][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.992093][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.001869][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 72.006914][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.008027][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 72.020154][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.036355][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.054227][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.070904][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.075215][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 72.085562][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.089149][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 72.100102][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.114297][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.125242][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.136919][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.145390][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.156441][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.165360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.174449][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.183519][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.193699][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.206100][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.216735][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.226801][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.238219][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.251327][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.267528][ T4194] device veth0_macvtap entered promiscuous mode [ 72.281937][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.297754][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.308284][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.321647][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.331761][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.342385][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.354510][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.362379][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.371236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.380353][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.391508][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.400216][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.419112][ T4194] device veth1_macvtap entered promiscuous mode [ 72.442616][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.457116][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.467534][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.477489][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.512536][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.523194][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.532612][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.541905][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.577224][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.588573][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.598803][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.610019][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.620202][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.632241][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.644121][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.654716][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.666015][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.677256][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.688105][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.700159][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.711226][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.721184][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.731675][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.741843][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.752335][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.763841][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.778885][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.787579][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.798054][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.806772][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.835409][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.844280][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.860904][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.876436][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.889265][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.899509][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.908275][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.909045][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.945547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.961031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.013413][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.027605][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.055874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.107192][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.120100][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.127966][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.146209][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.181636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.194969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.228058][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.238007][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.272198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.307859][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.323403][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.339086][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.347043][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.358086][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.366298][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.397572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.431498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.445206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.470872][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.489014][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.506888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.769777][ T4235] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.990011][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 74.019092][ T4235] usb 1-1: Using ep0 maxpacket: 32 [ 74.080428][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 74.150679][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 74.157619][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 74.175535][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 74.334553][ T4235] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 74.354490][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.385235][ T4235] usb 1-1: Product: syz [ 74.393914][ T4235] usb 1-1: Manufacturer: syz [ 74.404269][ T4235] usb 1-1: SerialNumber: syz [ 74.436609][ T4235] usb 1-1: config 0 descriptor?? [ 74.502644][ T4235] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 74.511325][ T4235] dvb-usb: bulk message failed: -22 (4/0) [ 74.526484][ T4235] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 74.551260][ T4235] dvb-usb: bulk message failed: -22 (5/0) [ 74.567916][ T4235] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 74.620187][ T4235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 74.659765][ T4235] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 74.695067][ T4235] usb 1-1: media controller created [ 74.900964][ T4277] dvb-usb: bulk message failed: -22 (7/0) [ 74.934049][ T4277] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 74.974388][ T4277] ttusb2: i2c transfer failed. [ 74.988562][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.204990][ T4235] usb 1-1: selecting invalid altsetting 3 [ 75.211084][ T4235] ttusb2: set interface to alts=3 failed [ 75.255376][ T1346] cfg80211: failed to load regulatory.db [ 75.289639][ T4235] DVB: Unable to find symbol tda10086_attach() [ 75.308089][ T4330] Zero length message leads to an empty skb [ 75.314303][ T4235] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 75.399195][ T4235] dvb-usb: bulk message failed: -22 (4/0) [ 75.405726][ T4235] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 75.441511][ T4235] dvb-usb: bulk message failed: -22 (5/0) [ 75.458689][ T4235] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 75.499040][ T4235] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 75.639471][ T4235] usb 1-1: USB disconnect, device number 2 [ 76.515690][ T4235] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 76.565667][ T4355] lo speed is unknown, defaulting to 1000 [ 76.608292][ T4355] lo speed is unknown, defaulting to 1000 [ 76.663138][ T4355] lo speed is unknown, defaulting to 1000 [ 76.985144][ T4188] lo speed is unknown, defaulting to 1000 [ 76.994116][ T4355] infiniband syz0: set active [ 77.006185][ T4355] infiniband syz0: added lo [ 77.015441][ T4376] netlink: 'syz.1.41': attribute type 13 has an invalid length. [ 77.086664][ T4355] RDS/IB: syz0: added [ 77.094991][ T4355] smc: adding ib device syz0 with port count 1 [ 77.101962][ T4355] smc: ib device syz0 port 1 has pnetid [ 77.205956][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.322912][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.331548][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.287117][ T4188] lo speed is unknown, defaulting to 1000 [ 78.288670][ T4383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 78.359663][ T4355] lo speed is unknown, defaulting to 1000 [ 78.633138][ T4414] netlink: 60 bytes leftover after parsing attributes in process `syz.4.52'. [ 78.645102][ T4414] netlink: 60 bytes leftover after parsing attributes in process `syz.4.52'. [ 78.720586][ T4355] lo speed is unknown, defaulting to 1000 [ 78.799100][ T4188] Bluetooth: hci4: command 0x0407 tx timeout [ 78.926479][ T4355] lo speed is unknown, defaulting to 1000 [ 80.135204][ T4355] lo speed is unknown, defaulting to 1000 [ 81.206938][ T4355] lo speed is unknown, defaulting to 1000 [ 81.344661][ T4448] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.679170][ T4188] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.909319][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 82.059189][ T4188] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.072941][ T4469] device syzkaller0 entered promiscuous mode [ 82.084200][ T4188] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 82.116613][ T4188] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.151930][ T4188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.352899][ T4452] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.783993][ T1108] usb 4-1: USB disconnect, device number 2 [ 83.046833][ T4493] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 83.092661][ T4493] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 83.114003][ T4493] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 83.124211][ T4320] udevd[4320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.149712][ T4494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.354311][ T4509] netlink: 'syz.1.84': attribute type 10 has an invalid length. [ 83.373978][ T4510] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.392545][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.451239][ T4509] device syz_tun entered promiscuous mode [ 83.501333][ T4509] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 83.575970][ T4518] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 83.776882][ T4530] syz.3.91 uses obsolete (PF_INET,SOCK_PACKET) [ 83.980344][ T4535] xt_NFQUEUE: number of total queues is 0 [ 84.027934][ T4535] netlink: 348 bytes leftover after parsing attributes in process `syz.2.93'. [ 84.064199][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 84.098230][ T4540] netlink: 44 bytes leftover after parsing attributes in process `syz.2.93'. [ 84.223344][ T4535] netlink: 348 bytes leftover after parsing attributes in process `syz.2.93'. [ 84.245408][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 84.350360][ T4535] netlink: 348 bytes leftover after parsing attributes in process `syz.2.93'. [ 84.434102][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 84.448960][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.558206][ T4550] device syzkaller0 entered promiscuous mode [ 84.608630][ T4550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 84.809174][ T7] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.838053][ T7] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.869027][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.878173][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.939325][ T4545] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.549028][ T4188] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 86.064422][ T4188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 86.109969][ T4188] usb 1-1: not running at top speed; connect to a high speed hub [ 86.199165][ T4188] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 86.411810][ T4188] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 86.429854][ T4188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.444396][ T4188] usb 1-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 86.488931][ T4188] usb 1-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 86.559052][ T4188] usb 1-1: SerialNumber: syz [ 86.569287][ T4593] program syz.4.110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.674450][ T7] usb 2-1: USB disconnect, device number 2 [ 86.871741][ T4188] usb 1-1: USB disconnect, device number 3 [ 88.051730][ T4614] netlink: 'syz.1.119': attribute type 13 has an invalid length. [ 88.070129][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.080825][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.088446][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.749051][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.954428][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.054620][ T4649] program syz.3.130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.110258][ T7] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.169478][ T7] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 89.283135][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 89.393966][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.621206][ T4631] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.404688][ T7] usb 2-1: USB disconnect, device number 3 [ 90.585516][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.789315][ T4235] Bluetooth: hci4: command 0x0411 tx timeout [ 90.923524][ T4498] udevd[4498]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.950029][ T1324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.415330][ T4687] lo speed is unknown, defaulting to 1000 [ 91.489782][ T4693] device syzkaller0 entered promiscuous mode [ 91.599819][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.027566][ T4709] program syz.4.145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.682259][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.400519][ T4729] netlink: 'syz.4.151': attribute type 13 has an invalid length. [ 93.446599][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.479305][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.500266][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.515360][ T4188] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.751572][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.925512][ T4188] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.948958][ T4188] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.973338][ T4188] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.989603][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.002688][ T4188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.039912][ T4722] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.214321][ T4740] device syzkaller0 entered promiscuous mode [ 94.443737][ T4235] usb 1-1: USB disconnect, device number 4 [ 94.635309][ T4755] netlink: 'syz.3.160': attribute type 3 has an invalid length. [ 94.667645][ T4756] program syz.1.161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.800290][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.984496][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.993168][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.810179][ T4761] netlink: 80 bytes leftover after parsing attributes in process `syz.3.163'. [ 95.839524][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.016731][ T4769] netlink: 'syz.0.167': attribute type 13 has an invalid length. [ 96.059985][ T4769] rdma_rxe: ignoring netdev event = 30 for lo [ 96.105532][ T4769] infiniband syz0: set active [ 96.169378][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.184775][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.185094][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.241197][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.357873][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.375031][ T1108] lo speed is unknown, defaulting to 1000 [ 96.380528][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.820763][ T4804] program syz.3.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.880449][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.000886][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.298973][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.749914][ T4231] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.816470][ T4231] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.914982][ T4231] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.004415][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.166040][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.182031][ T4806] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.704785][ T4231] usb 1-1: USB disconnect, device number 5 [ 98.857497][ T4810] netlink: 'syz.2.178': attribute type 3 has an invalid length. [ 98.891338][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 99.215622][ T21] net_ratelimit: 1 callbacks suppressed [ 99.215638][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.647048][ T4833] netlink: 'syz.3.185': attribute type 13 has an invalid length. [ 99.792440][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.090587][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.112604][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.146026][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.153286][ T4833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.229303][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.346006][ T4835] netlink: 'syz.2.184': attribute type 39 has an invalid length. [ 100.592986][ T4852] device syzkaller0 entered promiscuous mode [ 100.639316][ T4855] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.657573][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.719399][ T4850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 101.122399][ T4880] xt_hashlimit: size too large, truncated to 1048576 [ 101.129132][ T1324] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 101.270135][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.297820][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.407727][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.530027][ T1324] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.569588][ T1324] usb 3-1: not running at top speed; connect to a high speed hub [ 101.605969][ T4888] device syzkaller0 entered promiscuous mode [ 101.649515][ T1324] usb 3-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 101.808986][ T1324] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 101.809021][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.809042][ T1324] usb 3-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 101.809069][ T1324] usb 3-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 101.809104][ T1324] usb 3-1: SerialNumber: syz [ 102.098992][ T4892] netlink: 'syz.4.200': attribute type 13 has an invalid length. [ 102.104283][ T1324] usb 3-1: USB disconnect, device number 2 [ 102.132407][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.142963][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.143111][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.223461][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.277744][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.319651][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.468990][ T4897] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.639677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.642676][ T1324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.035738][ T4913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.355738][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.663652][ T4921] device syzkaller0 entered promiscuous mode [ 103.826029][ T4925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 103.899410][ T4925] lo speed is unknown, defaulting to 1000 [ 104.253497][ T4931] device syzkaller0 entered promiscuous mode [ 104.281820][ T4934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.309319][ T4934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.353517][ T4934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.383201][ T4936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.392074][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.420429][ T4936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.447751][ T4932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.469282][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.166799][ T4955] mip6: mip6_rthdr_init_state: spi is not 0: 3523477504 [ 105.257548][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.317055][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.395152][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.432402][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.462603][ T4955] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 106.221910][ T5000] sctp: [Deprecated]: syz.1.234 (pid 5000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.221910][ T5000] Use struct sctp_sack_info instead [ 106.649210][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.727209][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 106.869136][ T4231] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 107.040003][ T21] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.061369][ T21] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.089185][ T21] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.115242][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.154905][ T5041] device syzkaller0 entered promiscuous mode [ 107.169509][ T5007] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.309106][ T4231] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.379202][ T4231] usb 2-1: not running at top speed; connect to a high speed hub [ 107.474415][ T4231] usb 2-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 107.549960][ T1324] usb 5-1: USB disconnect, device number 2 [ 107.669329][ T4231] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 107.695222][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.705274][ T4231] usb 2-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 107.726917][ T5048] netlink: 3 bytes leftover after parsing attributes in process `syz.3.254'. [ 107.736411][ T5048] 0X: renamed from caif0 [ 107.742646][ T4231] usb 2-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 107.780239][ T4231] usb 2-1: SerialNumber: syz [ 108.085729][ T4231] usb 2-1: USB disconnect, device number 4 [ 108.169480][ T5057] crypto_alloc_aead failed rc=-2 [ 109.604822][ T4267] net_ratelimit: 5 callbacks suppressed [ 109.604838][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.730217][ T5139] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 109.752160][ T4231] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 109.988447][ T5146] ip6gre0: Caught tx_queue_len zero misconfig [ 110.209366][ T4231] usb 3-1: unable to get BOS descriptor or descriptor too short [ 110.426110][ T4231] usb 3-1: not running at top speed; connect to a high speed hub [ 110.539324][ T4231] usb 3-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 110.656603][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.849698][ T4231] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 110.905172][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.072847][ T4231] usb 3-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 111.315821][ T4231] usb 3-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 111.355358][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.458389][ T5176] lo speed is unknown, defaulting to 1000 [ 111.465631][ T4231] usb 3-1: SerialNumber: syz [ 111.595861][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.619240][ T5185] ip6gre0: Caught tx_queue_len zero misconfig [ 111.669461][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.770039][ T4231] usb 3-1: USB disconnect, device number 3 [ 111.847962][ T5194] tap0: tun_chr_ioctl cmd 1074025677 [ 111.874011][ T5194] tap0: linktype set to 805 [ 111.964016][ T5198] ODEBUG: Out of memory. ODEBUG disabled [ 112.207037][ T5203] kvm: pic: non byte write [ 112.230151][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.484410][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880610a2c00: rx timeout, send abort [ 112.964904][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f9f3400: rx timeout, send abort [ 112.993964][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880610a2c00: abort rx timeout. Force session deactivation [ 113.353575][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.473191][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f9f3400: abort rx timeout. Force session deactivation [ 113.592463][ T5234] device syzkaller0 entered promiscuous mode [ 113.658519][ T5234] tipc: Started in network mode [ 113.664185][ T5234] tipc: Node identity 4273d3f5a4de, cluster identity 4711 [ 113.680031][ T5234] tipc: Enabled bearer , priority 0 [ 113.746429][ T5231] tipc: Resetting bearer [ 113.830119][ T5231] tipc: Disabling bearer [ 114.062877][ T5254] ip6gre0: Caught tx_queue_len zero misconfig [ 114.089035][ T5254] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 114.389848][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.049010][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.258316][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 115.311589][ T5267] device syzkaller0 entered promiscuous mode [ 115.435356][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.550789][ T5275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 115.707893][ T5281] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 116.456832][ T5300] x_tables: duplicate underflow at hook 2 [ 116.477771][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.881500][ T5313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 117.030312][ T5319] ip6gre0: Caught tx_queue_len zero misconfig [ 117.061730][ T5319] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 117.521510][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.641043][ T5337] device syzkaller0 entered promiscuous mode [ 117.728948][ T4231] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.937583][ T5345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.941283][ T5354] kvm: pic: non byte write [ 118.006413][ T5358] sctp: [Deprecated]: syz.1.364 (pid 5358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.006413][ T5358] Use struct sctp_sack_info instead [ 118.069254][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.142234][ T4231] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.178350][ T4231] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 118.195278][ T4231] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.217890][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.269412][ T5333] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.342663][ T5366] lo speed is unknown, defaulting to 1000 [ 118.440815][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.450127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.502066][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.550547][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.689020][ T4231] usb 4-1: USB disconnect, device number 3 [ 119.208779][ T5369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.755487][ T5367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.367'. [ 119.817474][ T5367] device geneve2 entered promiscuous mode [ 120.038928][ T4231] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.225048][ T5410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.380'. [ 120.279211][ T5411] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 120.344706][ T5411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.429533][ T4231] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.464729][ T4231] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 120.555423][ T4231] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.609072][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.792901][ T4267] net_ratelimit: 2 callbacks suppressed [ 120.792917][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.809351][ T5398] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.110246][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.746681][ T5432] device syzkaller0 entered promiscuous mode [ 121.815760][ T4231] usb 5-1: USB disconnect, device number 3 [ 121.829331][ T5429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.839919][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.012941][ T5441] netlink: 'syz.3.388': attribute type 1 has an invalid length. [ 122.191175][ T4498] udevd[4498]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.272610][ T5450] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 122.444191][ T5450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.477754][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.497914][ T5454] bond1: (slave geneve2): making interface the new active one [ 122.511108][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.527850][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.537939][ T5454] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 122.546830][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 122.574263][ T4274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.601215][ T5454] syz.0.393 (5454) used greatest stack depth: 18704 bytes left [ 122.605922][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.676734][ T5461] device syzkaller0 entered promiscuous mode [ 122.690620][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.201000][ T5479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.404'. [ 123.447040][ T5493] device syzkaller0 entered promiscuous mode [ 123.743592][ T4267] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 124.022282][ T5513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'. [ 124.052086][ T5513] device syzkaller0 entered promiscuous mode [ 124.189539][ T4267] usb 5-1: unable to get BOS descriptor or descriptor too short [ 124.269235][ T4267] usb 5-1: not running at top speed; connect to a high speed hub [ 124.352402][ T4267] usb 5-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 124.373488][ T5517] netlink: 3 bytes leftover after parsing attributes in process `syz.1.416'. [ 124.392993][ T5517] 0X: renamed from caif0 [ 124.419318][ T5517] tunl0: Caught tx_queue_len zero misconfig [ 124.569149][ T4267] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 124.592781][ T4267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.633400][ T4267] usb 5-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 124.690648][ T4267] usb 5-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 124.835068][ T4267] usb 5-1: SerialNumber: syz [ 125.319654][ T5531] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 125.357219][ T1108] usb 5-1: USB disconnect, device number 4 [ 125.402267][ T5537] netlink: 'syz.3.425': attribute type 13 has an invalid length. [ 125.421074][ T5537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.431198][ T5537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.439259][ T5537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.775211][ T5550] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.860662][ T4274] net_ratelimit: 11 callbacks suppressed [ 125.860678][ T4274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.992810][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.008463][ T5561] tc action pedit 'at' offset 6 out of bounds [ 126.659855][ T5574] netlink: 'syz.0.438': attribute type 13 has an invalid length. [ 126.691500][ T5574] infiniband syz0: set active [ 126.751681][ T5574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.806738][ T5574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.836001][ T5574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.950708][ T5429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.968625][ T1108] lo speed is unknown, defaulting to 1000 [ 126.984210][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.029415][ T5429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.051840][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.069342][ T4435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.189395][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.509505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.530179][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.989340][ T5429] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 128.160041][ T5642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.455'. [ 128.179970][ T5429] usb 3-1: device descriptor read/64, error -71 [ 128.208215][ T5642] device syzkaller0 entered promiscuous mode [ 128.361249][ T5644] netlink: 'syz.1.456': attribute type 13 has an invalid length. [ 128.383975][ T5644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.421919][ T5644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.449033][ T5429] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 128.467863][ T5644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.648913][ T5429] usb 3-1: device descriptor read/64, error -71 [ 128.665798][ T5655] xt_hashlimit: size too large, truncated to 1048576 [ 128.773805][ T5660] netlink: 75 bytes leftover after parsing attributes in process `syz.1.461'. [ 128.783224][ T5429] usb usb3-port1: attempt power cycle [ 128.817582][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.840575][ T5662] IPv6: Can't replace route, no match found [ 128.849716][ T5662] IPv6: Can't replace route, no match found [ 129.208994][ T5429] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 129.309224][ T5429] usb 3-1: device descriptor read/8, error -71 [ 129.518845][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 129.538847][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 129.888926][ T5429] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 130.005210][ T5683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 130.021480][ T5683] device syzkaller0 entered promiscuous mode [ 130.039145][ T5429] usb 3-1: device descriptor read/8, error -71 [ 130.165461][ T5429] usb usb3-port1: unable to enumerate USB device [ 130.497835][ T5689] device syzkaller0 entered promiscuous mode [ 130.900212][ T4347] net_ratelimit: 8 callbacks suppressed [ 130.900225][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.092360][ T5700] crypto_alloc_aead failed rc=-2 [ 131.189607][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.338660][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 132.078848][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 132.098843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 132.159807][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.170309][ T5729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 132.213901][ T5729] device syzkaller0 entered promiscuous mode [ 132.255408][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.359034][ T4423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.711438][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.723781][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.270167][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.279801][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.357358][ T5760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 133.437948][ T5760] device syzkaller0 entered promiscuous mode [ 133.530384][ T4423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.989199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.943246][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.951587][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.038871][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 136.066094][ T4231] net_ratelimit: 4 callbacks suppressed [ 136.066110][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.564586][ T5429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.620218][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.000944][ T5771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.065302][ T5771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.168542][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.369021][ T5429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.760209][ T4424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.908254][ T5771] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.923486][ T5771] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.933976][ T5771] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.947702][ T5771] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.126669][ T5778] netlink: 'syz.3.497': attribute type 13 has an invalid length. [ 138.134614][ T5778] netlink: 'syz.3.497': attribute type 17 has an invalid length. [ 138.188430][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 138.196994][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.206222][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.216898][ T5778] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 138.234824][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.899068][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.058908][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 139.253719][ T5857] netlink: 'syz.2.521': attribute type 3 has an invalid length. [ 139.271190][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.654198][ T5866] device syzkaller0 entered promiscuous mode [ 139.693564][ T5867] lo speed is unknown, defaulting to 1000 [ 140.325722][ T5880] device syzkaller0 entered promiscuous mode [ 140.952025][ T5898] device syzkaller0 entered promiscuous mode [ 141.154068][ T4435] net_ratelimit: 3 callbacks suppressed [ 141.154084][ T4435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.364632][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.849070][ T4235] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 142.060386][ T4235] usb 5-1: device descriptor read/64, error -71 [ 142.273421][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.369185][ T4235] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 142.417912][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.533652][ T5925] device syzkaller0 entered promiscuous mode [ 142.598983][ T4235] usb 5-1: device descriptor read/64, error -71 [ 142.729075][ T4235] usb usb5-port1: attempt power cycle [ 143.138888][ T4235] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 143.229191][ T4235] usb 5-1: device descriptor read/8, error -71 [ 143.316093][ T5941] xt_hashlimit: size too large, truncated to 1048576 [ 143.429297][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.464537][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.472732][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.499033][ T4235] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 143.609124][ T4235] usb 5-1: device descriptor read/8, error -71 [ 143.729246][ T4235] usb usb5-port1: unable to enumerate USB device [ 143.835175][ T5950] Illegal XDP return value 4294967294, expect packet loss! [ 144.139817][ T5851] Set syz1 is full, maxelem 65536 reached [ 144.279678][ T5958] device syzkaller0 entered promiscuous mode [ 144.529068][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.593238][ T5966] binder: BINDER_SET_CONTEXT_MGR already set [ 144.638755][ T5966] binder: 5965:5966 ioctl 4018620d 200000000040 returned -16 [ 144.670226][ T4424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.204677][ T5429] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.469576][ T5429] usb 2-1: Using ep0 maxpacket: 32 [ 145.783497][ T5429] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 145.797089][ T5429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.842455][ T5429] usb 2-1: Product: syz [ 145.867216][ T5429] usb 2-1: Manufacturer: syz [ 145.891304][ T5429] usb 2-1: SerialNumber: syz [ 145.918769][ T5429] usb 2-1: config 0 descriptor?? [ 146.159250][ T4269] net_ratelimit: 3 callbacks suppressed [ 146.159266][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.191809][ T5429] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 005 [ 146.246918][ T5995] lo: Caught tx_queue_len zero misconfig [ 146.449093][ T5975] i2c i2c-1: failure reading data [ 146.458147][ T23] usb 2-1: USB disconnect, device number 5 [ 147.199922][ T6024] netlink: 100 bytes leftover after parsing attributes in process `syz.1.585'. [ 147.227096][ T6024] netlink: 40 bytes leftover after parsing attributes in process `syz.1.585'. [ 147.413060][ T6030] lo speed is unknown, defaulting to 1000 [ 148.680903][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.140096][ T23] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.154722][ T23] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 149.188483][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.200325][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.240710][ T6037] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.309057][ T4235] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.569196][ T4235] usb 4-1: Using ep0 maxpacket: 32 [ 149.669614][ T23] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 149.880043][ T4235] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 149.889466][ T23] usb 5-1: device descriptor read/64, error -71 [ 149.918631][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.950630][ T4235] usb 4-1: Product: syz [ 149.964076][ T4235] usb 4-1: Manufacturer: syz [ 149.974367][ T4235] usb 4-1: SerialNumber: syz [ 150.027263][ T4235] usb 4-1: config 0 descriptor?? [ 150.174732][ T23] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 150.306723][ T4235] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 004 [ 150.369057][ T23] usb 5-1: device descriptor read/64, error -71 [ 150.425347][ T6083] IPv6: Can't replace route, no match found [ 150.499891][ T23] usb usb5-port1: attempt power cycle [ 150.548528][ T6087] netlink: 'syz.2.609': attribute type 3 has an invalid length. [ 150.581711][ T6054] i2c i2c-1: failure reading data [ 150.593467][ T5429] usb 4-1: USB disconnect, device number 4 [ 150.836002][ T4269] usb 1-1: USB disconnect, device number 6 [ 150.956715][ T6100] device syzkaller0 entered promiscuous mode [ 150.958968][ T23] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 151.119174][ T23] usb 5-1: device descriptor read/8, error -71 [ 151.185672][ T6112] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 151.406250][ T23] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 151.472348][ T6124] netlink: 'syz.2.621': attribute type 3 has an invalid length. [ 151.499081][ T23] usb 5-1: device descriptor read/8, error -71 [ 151.631153][ T23] usb usb5-port1: unable to enumerate USB device [ 152.028914][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.469184][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.485170][ T23] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 152.495463][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.506262][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.566940][ T6176] device syzkaller0 entered promiscuous mode [ 152.570493][ T6135] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 152.748942][ T4231] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.009556][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 153.078417][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 153.329105][ T4231] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 153.329139][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.329161][ T4231] usb 4-1: Product: syz [ 153.329178][ T4231] usb 4-1: Manufacturer: syz [ 153.329195][ T4231] usb 4-1: SerialNumber: syz [ 153.331176][ T4231] usb 4-1: config 0 descriptor?? [ 153.550134][ T4269] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 153.591585][ T4231] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 005 [ 153.849028][ T6172] i2c i2c-1: failure reading data [ 153.859063][ T4231] usb 4-1: USB disconnect, device number 5 [ 153.946690][ T6207] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 153.954788][ T4269] usb 5-1: unable to get BOS descriptor or descriptor too short [ 153.993154][ T6207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.009199][ T4269] usb 5-1: not running at top speed; connect to a high speed hub [ 154.027460][ T4269] usb 5-1: no configurations [ 154.039383][ T4269] usb 5-1: can't read configurations, error -22 [ 154.074868][ T6207] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 154.106065][ T6207] bond2: (slave batadv1): making interface the new active one [ 154.140098][ T6207] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 154.152574][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 154.219361][ T4269] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 154.398100][ T4231] usb 3-1: USB disconnect, device number 8 [ 154.539031][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 154.669072][ T4269] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.709123][ T4269] usb 5-1: not running at top speed; connect to a high speed hub [ 154.756342][ T4269] usb 5-1: no configurations [ 154.770212][ T4269] usb 5-1: can't read configurations, error -22 [ 154.779311][ T4269] usb usb5-port1: attempt power cycle [ 155.229015][ T4269] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 157.108926][ T4269] usb 5-1: device not accepting address 15, error -71 [ 157.499177][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 157.769186][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 157.995818][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'. [ 158.086328][ T23] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 158.104470][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.144215][ T23] usb 1-1: Product: syz [ 158.154362][ T23] usb 1-1: Manufacturer: syz [ 158.172598][ T23] usb 1-1: SerialNumber: syz [ 158.214812][ T23] usb 1-1: config 0 descriptor?? [ 158.258959][ T4269] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 158.479154][ T4269] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.528190][ T4269] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 158.559146][ T1108] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.581298][ T4269] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.625797][ T4269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.730653][ T6245] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 158.799697][ T6238] i2c i2c-1: failure reading data [ 158.929483][ T1108] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.974174][ T1108] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 159.191696][ T4269] usb 5-1: USB disconnect, device number 16 [ 159.195249][ T1108] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.219491][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.370384][ T6269] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 159.649826][ T23] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 007 [ 160.707716][ T1108] usb 4-1: USB disconnect, device number 6 [ 161.471018][ T23] usb 1-1: USB disconnect, device number 7 [ 161.707648][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 161.724566][ T6279] udevd[6279]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 162.115993][ T6325] kvm: pic: non byte write [ 162.788954][ T4269] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 163.169505][ T4269] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.225225][ T4269] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.330589][ T4269] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.430562][ T4269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.651626][ T6335] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 164.840961][ T6346] usb 5-1: USB disconnect, device number 17 [ 165.379949][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 165.904571][ T6374] sctp: [Deprecated]: syz.3.696 (pid 6374) Use of int in max_burst socket option. [ 165.904571][ T6374] Use struct sctp_assoc_value instead [ 166.050072][ T6379] kvm: pic: non byte write [ 168.100568][ T6391] device syzkaller0 entered promiscuous mode [ 169.020302][ T6402] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 169.120328][ T6402] ipt_ECN: cannot use operation on non-tcp rule [ 169.351887][ T6410] device syzkaller0 entered promiscuous mode [ 169.515861][ T6421] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 169.553580][ T6421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.573592][ T6424] device syzkaller0 entered promiscuous mode [ 169.636246][ T6421] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 169.655853][ T6421] bond3: (slave batadv2): making interface the new active one [ 169.666806][ T6421] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 169.681992][ T6158] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 169.728945][ T6346] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.319075][ T6346] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.486524][ T6346] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 170.507768][ T6346] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.522945][ T6346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.551927][ T6419] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.864162][ T6449] device syzkaller0 entered promiscuous mode [ 172.092646][ T4235] usb 2-1: USB disconnect, device number 6 [ 172.385764][ T6467] device syzkaller0 entered promiscuous mode [ 172.392125][ T4231] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 172.604021][ T6480] device syzkaller0 entered promiscuous mode [ 172.829209][ T4231] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.889252][ T4231] usb 1-1: not running at top speed; connect to a high speed hub [ 172.969136][ T4231] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 173.159582][ T4231] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 173.169268][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.177428][ T4231] usb 1-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 173.199540][ T4231] usb 1-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 173.235647][ T4231] usb 1-1: SerialNumber: syz [ 173.392355][ T6478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.934549][ T4269] usb 1-1: USB disconnect, device number 8 [ 175.169602][ T6521] device syzkaller0 entered promiscuous mode [ 175.291814][ T6525] tipc: Enabling of bearer rejected, failed to enable media [ 175.356994][ T6527] fuse: Bad value for 'fd' [ 175.804750][ T6538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.541335][ T6548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.749'. [ 177.089188][ T6280] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 177.150370][ T6569] device syzkaller0 entered promiscuous mode [ 177.366553][ T6573] netlink: 44 bytes leftover after parsing attributes in process `syz.2.757'. [ 177.379464][ T6573] netlink: 32 bytes leftover after parsing attributes in process `syz.2.757'. [ 177.425943][ T6574] device syzkaller0 entered promiscuous mode [ 177.500462][ T6280] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.539238][ T6280] usb 5-1: not running at top speed; connect to a high speed hub [ 177.569349][ T6578] fuse: Bad value for 'fd' [ 177.629071][ T6280] usb 5-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 177.809138][ T6280] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 177.822775][ T6280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.835782][ T6280] usb 5-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 177.865306][ T6280] usb 5-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 177.925781][ T6280] usb 5-1: SerialNumber: syz [ 177.959365][ T6589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.401017][ T4241] usb 5-1: USB disconnect, device number 18 [ 178.616149][ T6608] device syzkaller0 entered promiscuous mode [ 178.899753][ T6613] device syzkaller0 entered promiscuous mode [ 179.326658][ T6632] fuse: Bad value for 'fd' [ 179.669531][ T6645] device syzkaller0 entered promiscuous mode [ 180.106325][ T6633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.208916][ T4230] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 180.233982][ T6662] device syzkaller0 entered promiscuous mode [ 180.679155][ T4230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 180.739222][ T4230] usb 5-1: not running at top speed; connect to a high speed hub [ 180.849072][ T4230] usb 5-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 181.007258][ T6683] device syzkaller0 entered promiscuous mode [ 181.062343][ T4230] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 181.080303][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.088489][ T4230] usb 5-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 181.114639][ T4230] usb 5-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 181.156801][ T4230] usb 5-1: SerialNumber: syz [ 181.366269][ T6689] netlink: 'syz.0.795': attribute type 13 has an invalid length. [ 181.395175][ T6689] rdma_rxe: ignoring netdev event = 30 for lo [ 181.405387][ T6689] infiniband syz0: set active [ 181.428368][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.446669][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.462857][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.639466][ T4230] usb 5-1: USB disconnect, device number 19 [ 181.707755][ T4231] lo speed is unknown, defaulting to 1000 [ 181.716107][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 181.926727][ T6697] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 184.569889][ T6697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.635071][ T6699] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 184.649715][ T6699] bond4: (slave batadv3): making interface the new active one [ 184.659999][ T6699] bond4: (slave batadv3): Enslaving as an active interface with an up link [ 184.682395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 184.780062][ T6714] device syzkaller0 entered promiscuous mode [ 185.059048][ T4230] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 185.278809][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 185.455884][ T6727] device syzkaller0 entered promiscuous mode [ 185.488935][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 185.824735][ T4230] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 185.838896][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.877723][ T4230] usb 2-1: Product: syz [ 185.908081][ T4230] usb 2-1: Manufacturer: syz [ 185.995500][ T4230] usb 2-1: SerialNumber: syz [ 186.067314][ T4230] usb 2-1: config 0 descriptor?? [ 186.294732][ T6753] device syzkaller0 entered promiscuous mode [ 186.338965][ T23] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 186.383768][ T4230] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 007 [ 186.789030][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.001191][ T23] usb 5-1: not running at top speed; connect to a high speed hub [ 188.129299][ T23] usb 5-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 188.329345][ T23] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 188.375775][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.450163][ T23] usb 5-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 188.729903][ T23] usb 5-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 188.959006][ T6712] i2c i2c-1: failure reading data [ 189.009200][ T4241] usb 2-1: USB disconnect, device number 7 [ 189.071177][ T23] usb 5-1: SerialNumber: syz [ 189.119357][ T23] usb 5-1: can't set config #61, error -71 [ 189.176324][ T23] usb 5-1: USB disconnect, device number 20 [ 189.224236][ T6762] device syzkaller0 left promiscuous mode [ 190.178897][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.428912][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 190.443046][ T6808] device syzkaller0 entered promiscuous mode [ 190.598968][ T6280] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 190.709151][ T23] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 190.738757][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.814142][ T23] usb 3-1: Product: syz [ 190.851362][ T23] usb 3-1: Manufacturer: syz [ 190.893533][ T23] usb 3-1: SerialNumber: syz [ 191.010063][ T23] usb 3-1: config 0 descriptor?? [ 191.049109][ T6280] usb 5-1: unable to get BOS descriptor or descriptor too short [ 191.111326][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 191.118085][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 191.193548][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 191.339561][ T23] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 009 [ 191.600962][ T6790] i2c i2c-1: failure reading data [ 191.645547][ T4267] usb 3-1: USB disconnect, device number 9 [ 192.759227][ T4241] Bluetooth: hci0: command 0x0406 tx timeout [ 192.799027][ T6280] usb 5-1: not running at top speed; connect to a high speed hub [ 193.758919][ T6280] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 193.766670][ T6280] usb 5-1: can't read configurations, error -71 [ 194.160643][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.732868][ T6842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.960467][ T6859] tipc: Started in network mode [ 195.002543][ T6859] tipc: Node identity ac1414aa, cluster identity 4711 [ 195.049333][ T6859] tipc: Enabled bearer , priority 10 [ 195.237577][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'. [ 195.247008][ T6866] lo: Caught tx_queue_len zero misconfig [ 195.550514][ T6880] device syzkaller0 entered promiscuous mode [ 195.627839][ T6280] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 195.917611][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.863'. [ 195.965815][ T6899] device syzkaller0 entered promiscuous mode [ 196.075489][ T6280] usb 4-1: unable to get BOS descriptor or descriptor too short [ 196.139101][ T6280] usb 4-1: not running at top speed; connect to a high speed hub [ 196.175292][ T4267] tipc: Node number set to 2886997162 [ 196.239640][ T6280] usb 4-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 196.268336][ T6919] device syzkaller0 entered promiscuous mode [ 196.459280][ T6280] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 196.468606][ T6280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.476759][ T6280] usb 4-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 196.497290][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.504468][ T6280] usb 4-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 196.538619][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.545975][ T6894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.546189][ T6280] usb 4-1: SerialNumber: syz [ 196.678196][ T6929] device syzkaller0 entered promiscuous mode [ 196.700789][ T6929] tipc: Started in network mode [ 196.706696][ T6929] tipc: Node identity 468b34b830b9, cluster identity 4711 [ 196.724144][ T6929] tipc: Enabled bearer , priority 0 [ 196.736941][ T6928] tipc: Resetting bearer [ 196.779925][ T6928] tipc: Disabling bearer [ 197.021711][ T4267] usb 4-1: USB disconnect, device number 7 [ 197.126491][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 197.166519][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'. [ 197.177957][ T6940] device syzkaller0 entered promiscuous mode [ 197.357315][ T6946] netlink: 'syz.2.883': attribute type 13 has an invalid length. [ 197.401271][ T6946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.412756][ T6946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.421690][ T6946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.477542][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 197.822152][ T6970] device syzkaller0 entered promiscuous mode [ 197.855139][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.892'. [ 197.867595][ T6970] tipc: Enabled bearer , priority 0 [ 197.876020][ T6974] device syzkaller0 entered promiscuous mode [ 197.885288][ T6969] tipc: Resetting bearer [ 197.915368][ T6969] tipc: Disabling bearer [ 198.268657][ T6998] netlink: 'syz.2.899': attribute type 13 has an invalid length. [ 198.276453][ T4241] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 198.291455][ T6998] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.301496][ T6998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.310164][ T6998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.679245][ T4241] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.829411][ T7024] device syzkaller0 entered promiscuous mode [ 198.849011][ T4241] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 198.866897][ T4241] usb 2-1: can't read configurations, error -71 [ 198.898718][ T7024] tipc: Enabled bearer , priority 0 [ 198.962167][ T7023] tipc: Resetting bearer [ 199.012224][ T7023] tipc: Disabling bearer [ 199.062384][ T7031] fuse: Bad value for 'fd' [ 199.621323][ T6280] Bluetooth: hci0: command 0x0401 tx timeout [ 200.719985][ T7059] netlink: 'syz.3.918': attribute type 13 has an invalid length. [ 200.844033][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.957629][ T7068] device syzkaller0 entered promiscuous mode [ 200.985570][ T7068] tipc: Enabled bearer , priority 0 [ 201.041639][ T7067] tipc: Resetting bearer [ 201.112839][ T7067] tipc: Disabling bearer [ 201.259115][ T6280] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 201.348793][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 201.759895][ T7082] fuse: Bad value for 'fd' [ 202.120149][ T6280] usb 3-1: unable to get BOS descriptor or descriptor too short [ 202.179001][ T6280] usb 3-1: not running at top speed; connect to a high speed hub [ 202.294706][ T6280] usb 3-1: config 0 has no interfaces? [ 202.468979][ T6280] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 202.478498][ T6280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.494675][ T6280] usb 3-1: Product: syz [ 202.501435][ T6280] usb 3-1: Manufacturer: syz [ 202.506086][ T6280] usb 3-1: SerialNumber: syz [ 202.529903][ T6280] usb 3-1: config 0 descriptor?? [ 202.795880][ T6280] usb 3-1: USB disconnect, device number 10 [ 202.872803][ T7104] netlink: 'syz.1.934': attribute type 13 has an invalid length. [ 202.907441][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.954281][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.974488][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.130415][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 203.603934][ T7139] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 203.690556][ T7139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.717046][ T7143] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 203.762520][ T7143] bond1: (slave batadv1): making interface the new active one [ 203.773269][ T7143] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 203.783325][ T7149] netlink: 'syz.0.949': attribute type 13 has an invalid length. [ 203.793490][ T7149] infiniband syz0: set active [ 203.802476][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.813838][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.844974][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.952447][ T6158] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 203.971164][ T23] lo speed is unknown, defaulting to 1000 [ 203.999237][ T21] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 204.050538][ T7159] device syzkaller0 entered promiscuous mode [ 204.304061][ T7172] device syzkaller0 entered promiscuous mode [ 204.379051][ T21] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.397851][ T7172] tipc: Started in network mode [ 204.408904][ T7172] tipc: Node identity 1e195caa4089, cluster identity 4711 [ 204.426476][ T7172] tipc: Enabled bearer , priority 0 [ 204.433409][ T21] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 204.473843][ T21] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.505024][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.539976][ T7171] tipc: Resetting bearer [ 204.549284][ T7147] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 204.638018][ T7171] tipc: Disabling bearer [ 204.778231][ T7189] netlink: 'syz.4.965': attribute type 13 has an invalid length. [ 204.887693][ T7189] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.900362][ T7189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.918357][ T7189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.763513][ T7237] device syzkaller0 entered promiscuous mode [ 205.823679][ T7237] tipc: Enabled bearer , priority 0 [ 205.847549][ T7235] tipc: Resetting bearer [ 205.920960][ T7235] tipc: Disabling bearer [ 206.031838][ T7239] netlink: 'syz.3.981': attribute type 13 has an invalid length. [ 206.062066][ T7239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 206.372389][ T6280] usb 2-1: USB disconnect, device number 10 [ 206.621819][ T7265] device syzkaller0 entered promiscuous mode [ 206.673608][ T7271] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 206.717016][ T7271] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.732272][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 206.746516][ T7276] bond5: (slave batadv4): making interface the new active one [ 206.759079][ T7276] bond5: (slave batadv4): Enslaving as an active interface with an up link [ 206.794067][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.990'. [ 206.806842][ T7273] device ip6gre1 entered promiscuous mode [ 206.814613][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 206.999594][ T7273] syz.3.990 (7273) used greatest stack depth: 18512 bytes left [ 207.097257][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.996'. [ 207.229502][ T7303] device syzkaller0 entered promiscuous mode [ 207.247285][ T7303] tipc: Enabled bearer , priority 0 [ 207.281653][ T7302] tipc: Resetting bearer [ 207.338981][ T4230] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 207.348464][ T7302] tipc: Disabling bearer [ 207.749358][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 207.799467][ T4230] usb 1-1: not running at top speed; connect to a high speed hub [ 207.889258][ T4230] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 208.050450][ T7316] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 208.059188][ T4230] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 208.072585][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.107050][ T4230] usb 1-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 208.125782][ T7316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.139302][ T4235] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 208.182835][ T4230] usb 1-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 208.219352][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 208.240788][ T7319] bond1: (slave batadv1): making interface the new active one [ 208.261516][ T7319] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 208.281720][ T6158] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 208.306946][ T4230] usb 1-1: SerialNumber: syz [ 208.478390][ T7327] device syzkaller0 entered promiscuous mode [ 208.514457][ T7325] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1003'. [ 208.539212][ T4235] usb 3-1: unable to get BOS descriptor or descriptor too short [ 208.563165][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 208.579172][ T4235] usb 3-1: not running at top speed; connect to a high speed hub [ 208.659236][ T4235] usb 3-1: config 0 has no interfaces? [ 208.801906][ T4230] usb 1-1: USB disconnect, device number 9 [ 208.819130][ T4235] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 208.829186][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.837209][ T4235] usb 3-1: Product: syz [ 208.841893][ T4235] usb 3-1: Manufacturer: syz [ 208.846523][ T4235] usb 3-1: SerialNumber: syz [ 208.862031][ T4235] usb 3-1: config 0 descriptor?? [ 209.059025][ T6280] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 209.104190][ T4230] usb 3-1: USB disconnect, device number 11 [ 209.489114][ T6280] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.511424][ T6280] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 209.533899][ T6280] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.552650][ T6280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.619292][ T7337] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 209.703495][ T7350] netlink: 'syz.2.1015': attribute type 1 has an invalid length. [ 209.778532][ T7350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.918634][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 209.951670][ T7350] bond2: (slave batadv1): making interface the new active one [ 209.995378][ T7350] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 210.017581][ T6280] usb 5-1: USB disconnect, device number 23 [ 210.028903][ T6158] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 210.099723][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'. [ 210.725155][ T7386] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1022'. [ 210.739025][ T6280] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 211.179217][ T6280] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.219172][ T6280] usb 4-1: not running at top speed; connect to a high speed hub [ 211.281106][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1036'. [ 211.319183][ T6280] usb 4-1: config 0 has no interfaces? [ 211.499095][ T6280] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 211.513168][ T6280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.539107][ T6280] usb 4-1: Product: syz [ 211.552286][ T6280] usb 4-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 211.586439][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.628405][ T6280] usb 4-1: SerialNumber: syz [ 211.637926][ T6280] usb 4-1: config 0 descriptor?? [ 211.799001][ T4241] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.893026][ T6346] usb 4-1: USB disconnect, device number 8 [ 212.179214][ T4241] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.209574][ T4241] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.239280][ T4241] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.288909][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.350191][ T7411] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 212.746052][ T7460] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1051'. [ 212.763782][ T4267] usb 3-1: USB disconnect, device number 12 [ 213.596739][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 214.295684][ T7532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1086'. [ 214.728908][ T6346] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 214.884966][ T7557] mip6: mip6_rthdr_init_state: spi is not 0: 3523477504 [ 214.907864][ T7559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1099'. [ 214.929933][ T7557] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.960850][ T7557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.974777][ T7557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.991409][ T7557] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 215.071269][ T7564] netlink: 'syz.1.1101': attribute type 1 has an invalid length. [ 215.179206][ T6346] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.207811][ T6346] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 215.280111][ T6346] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.313307][ T6346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.379417][ T7541] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 215.699258][ T7594] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1111'. [ 215.935387][ T7604] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1113'. [ 216.129594][ T7608] device syzkaller0 entered promiscuous mode [ 216.730310][ T7624] netlink: 'syz.4.1123': attribute type 1 has an invalid length. [ 216.803693][ T7624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.940109][ T7628] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 216.980039][ T7628] bond1: (slave batadv1): making interface the new active one [ 217.002743][ T4267] usb 4-1: USB disconnect, device number 9 [ 217.019341][ T7628] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 217.028705][ T6158] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 217.589163][ T6280] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 217.979681][ T6280] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 218.001116][ T6280] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 218.028982][ T6280] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 218.058673][ T6280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.129238][ T7644] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 218.287700][ T7672] netlink: 'syz.3.1139': attribute type 1 has an invalid length. [ 218.341493][ T7672] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.432123][ T7674] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 218.439838][ T7666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1136'. [ 218.502498][ T7674] bond2: (slave batadv2): making interface the new active one [ 218.540853][ T7674] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 218.561608][ T6346] usb 3-1: USB disconnect, device number 13 [ 218.569103][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 219.219039][ T4235] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 219.454646][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1151'. [ 219.589452][ T4235] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.608999][ T4235] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.641211][ T4235] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.656107][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.689316][ T7684] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 220.380175][ T7706] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 220.394416][ T7706] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 220.542473][ T7726] Unknown metaid 0 dlen 28 [ 220.585318][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1156'. [ 220.829007][ T4269] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 221.199266][ T4269] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 221.228864][ T4269] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 221.288981][ T4269] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 221.298117][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.311593][ T4230] usb 4-1: USB disconnect, device number 10 [ 221.323028][ T7749] lo: Caught tx_queue_len zero misconfig [ 221.367160][ T7746] wg1: Caught tx_queue_len zero misconfig [ 221.399652][ T7724] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 221.575347][ T7756] netlink: 'syz.4.1170': attribute type 1 has an invalid length. [ 221.616495][ T7756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.693467][ T7756] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 221.731124][ T7756] bond2: (slave batadv2): making interface the new active one [ 221.786958][ T4269] usb 1-1: USB disconnect, device number 10 [ 221.811399][ T7756] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 221.866693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 222.426107][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'. [ 222.543329][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 222.757866][ T7803] device syzkaller0 entered promiscuous mode [ 222.786329][ T7803] tipc: Enabled bearer , priority 0 [ 222.807333][ T7802] tipc: Resetting bearer [ 222.894499][ T7802] tipc: Disabling bearer [ 223.261921][ T7820] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 223.431150][ T7826] netlink: 81 bytes leftover after parsing attributes in process `syz.2.1195'. [ 223.458907][ T7826] bond0: Caught tx_queue_len zero misconfig [ 223.469156][ T4267] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 223.869127][ T4267] usb 2-1: unable to get BOS descriptor or descriptor too short [ 223.922865][ T4267] usb 2-1: not running at top speed; connect to a high speed hub [ 224.019168][ T4267] usb 2-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 224.029202][ T7834] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 224.169779][ T7834] 8021q: adding VLAN 0 to HW filter on device bond6 [ 224.199237][ T4267] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 224.208347][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.223246][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 224.240907][ T4267] usb 2-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 224.248926][ T7836] bond6: (slave batadv5): making interface the new active one [ 224.314749][ T4267] usb 2-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 224.363280][ T7836] bond6: (slave batadv5): Enslaving as an active interface with an up link [ 224.440783][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 224.479192][ T4267] usb 2-1: SerialNumber: syz [ 224.811304][ T7862] device syzkaller0 entered promiscuous mode [ 224.830219][ T7864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1208'. [ 225.434967][ T7889] lo: Caught tx_queue_len zero misconfig [ 225.445292][ T7889] wg1: Caught tx_queue_len zero misconfig [ 225.747395][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1222'. [ 226.109671][ T6346] usb 2-1: USB disconnect, device number 11 [ 226.721171][ T7926] device syzkaller0 entered promiscuous mode [ 227.028349][ T7941] lo: Caught tx_queue_len zero misconfig [ 227.059148][ T7941] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.452443][ T7959] device syzkaller0 entered promiscuous mode [ 227.818644][ T7948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.012827][ T7972] device syzkaller0 entered promiscuous mode [ 228.619389][ T7990] fuse: Bad value for 'group_id' [ 228.945386][ T1108] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 229.001530][ T8005] device syzkaller0 entered promiscuous mode [ 229.014455][ T8005] tipc: Enabled bearer , priority 0 [ 229.023969][ T8004] tipc: Resetting bearer [ 229.055409][ T8004] tipc: Disabling bearer [ 229.087347][ T8006] lo speed is unknown, defaulting to 1000 [ 229.249460][ T8011] device syzkaller0 entered promiscuous mode [ 229.404412][ T8013] device ip6gretap0 entered promiscuous mode [ 229.411263][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.479164][ T1108] usb 2-1: not running at top speed; connect to a high speed hub [ 229.599121][ T1108] usb 2-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 229.822905][ T1108] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 229.838582][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.857975][ T1108] usb 2-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 229.891970][ T1108] usb 2-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 229.926161][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.933261][ T6346] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 230.018519][ T1108] usb 2-1: SerialNumber: syz [ 230.121373][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'. [ 230.519470][ T6346] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.664122][ T6346] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.861142][ T6346] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 231.079810][ T6346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.119245][ T8022] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 231.254942][ T8046] fuse: Bad value for 'group_id' [ 231.511037][ T6280] usb 4-1: USB disconnect, device number 11 [ 231.634712][ T6346] usb 2-1: USB disconnect, device number 12 [ 231.741846][ T8057] netlink: 'syz.4.1274': attribute type 1 has an invalid length. [ 231.825831][ T8057] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.062458][ T8062] bond3: (slave geneve2): making interface the new active one [ 232.095641][ T8062] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 232.178404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 232.494709][ T8072] tunl0: Caught tx_queue_len zero misconfig [ 233.395439][ T8106] device syzkaller0 entered promiscuous mode [ 233.448887][ T4267] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 233.762905][ T8111] device syzkaller0 entered promiscuous mode [ 233.879124][ T4267] usb 4-1: unable to get BOS descriptor or descriptor too short [ 233.929572][ T4267] usb 4-1: not running at top speed; connect to a high speed hub [ 234.029591][ T4267] usb 4-1: config 0 has no interfaces? [ 234.189432][ T4267] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 234.199600][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.207766][ T4267] usb 4-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 234.236377][ T8117] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 234.252287][ T4267] usb 4-1: SerialNumber: syz [ 234.324178][ T4267] usb 4-1: config 0 descriptor?? [ 234.371322][ T8117] ipt_ECN: cannot use operation on non-tcp rule [ 234.585033][ T4267] usb 4-1: USB disconnect, device number 12 [ 234.768007][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1296'. [ 235.908999][ T4230] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 236.078902][ T4267] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 236.319667][ T4230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 236.329148][ T4267] usb 2-1: Using ep0 maxpacket: 32 [ 236.379027][ T4230] usb 5-1: not running at top speed; connect to a high speed hub [ 236.458421][ T8174] device syzkaller0 entered promiscuous mode [ 236.459587][ T4230] usb 5-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 236.609100][ T4267] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 236.646139][ T8176] netlink: 'syz.2.1308': attribute type 1 has an invalid length. [ 236.671730][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.681857][ T4230] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 236.693039][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.724349][ T4267] usb 2-1: Product: syz [ 236.751943][ T8176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.758851][ T4230] usb 5-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 236.789129][ T4267] usb 2-1: Manufacturer: syz [ 236.798187][ T4267] usb 2-1: SerialNumber: syz [ 236.828363][ T4267] usb 2-1: config 0 descriptor?? [ 236.850597][ T4230] usb 5-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 236.916808][ T4230] usb 5-1: SerialNumber: syz [ 236.960808][ T8178] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 236.972496][ T8178] bond3: (slave batadv2): making interface the new active one [ 237.012073][ T8178] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 237.038871][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 237.085799][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1309'. [ 237.121254][ T4267] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 013 [ 237.378951][ T8160] i2c i2c-1: failure reading data [ 237.396546][ T4230] usb 5-1: USB disconnect, device number 24 [ 237.421355][ T6346] usb 2-1: USB disconnect, device number 13 [ 237.455527][ T8202] device syzkaller0 entered promiscuous mode [ 237.481409][ T8202] tipc: Enabled bearer , priority 0 [ 237.513244][ T8201] tipc: Resetting bearer [ 237.573505][ T8201] tipc: Disabling bearer [ 237.680815][ T8206] device syzkaller0 entered promiscuous mode [ 237.847059][ T8212] fuse: Bad value for 'fd' [ 238.056585][ T8222] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 238.111423][ T8222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.194333][ T8224] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 238.212169][ T8224] bond4: (slave batadv3): making interface the new active one [ 238.222822][ T8224] bond4: (slave batadv3): Enslaving as an active interface with an up link [ 238.239036][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 238.271354][ T4267] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 238.411911][ T8227] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 238.419103][ T8227] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 238.639182][ T4267] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.664029][ T4267] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.751513][ T4267] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.785739][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.855264][ T8217] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 239.141699][ T8240] device syzkaller0 entered promiscuous mode [ 239.499105][ T4267] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 239.605898][ T8259] fuse: Bad value for 'fd' [ 239.739074][ T4230] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 239.749102][ T4267] usb 2-1: Using ep0 maxpacket: 32 [ 240.040025][ T4267] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 240.050678][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.065132][ T4267] usb 2-1: Product: syz [ 240.073646][ T4267] usb 2-1: Manufacturer: syz [ 240.078599][ T4267] usb 2-1: SerialNumber: syz [ 240.116535][ T4267] usb 2-1: config 0 descriptor?? [ 240.158987][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.209191][ T4230] usb 1-1: not running at top speed; connect to a high speed hub [ 240.299205][ T4230] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 240.373298][ T4267] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 014 [ 240.469124][ T4230] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 240.482809][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.524450][ T4230] usb 1-1: Product: ㋻䤒퐏ឈ㖭㒆銚蕛䢧扺韯樵⻳騘ꑅꑝ⛕ഇ燲鞥㨡䅩簈处㬫眄๻퐕靽酜㸥䝽☦毻ﾁꙙ󸊑綫퍖ꬁ쎠숂쓸輏ᄊꟜ偉▱ᯈ3匤앚䪗晰焚ꠐ㒁㤝됈븱ပ쬺 [ 240.545106][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.563383][ T4230] usb 1-1: Manufacturer: ゜碐顮凰ꓮ惠릁ꞈ悺靾篍෥봼ꢽ⫋暙黨鶞縿문弬曨ഹ챕遀ב㏩褖ﶝ␖ḓ䴧낽뎓뵋퍼謔݂⡺輸̔첽ꔁ煗쫖퉭䷰淈ｄ똠堗晏⑅肄颀腷ﶪ훼렒玼았뚿岬䅣헠羽䌵훐蛔囡⁒糱툴悜诱醫㬐돏툯⑩㝀躽轡ꩪꐐ켂᳣쀿⻩䄚扪螙囦᤬鼨鑫떭웑ꖖ쭯禴⍤姧匠澐뎺㍣ௗ㡻 [ 240.597843][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.614481][ T4230] usb 1-1: SerialNumber: syz [ 240.638960][ T4267] usb 4-1: USB disconnect, device number 13 [ 240.680054][ T8244] i2c i2c-1: failure reading data [ 240.696355][ T4235] usb 2-1: USB disconnect, device number 14 [ 241.094453][ T4267] usb 1-1: USB disconnect, device number 11 [ 241.160612][ T8277] netlink: 'syz.3.1340': attribute type 1 has an invalid length. [ 241.340132][ T8277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.436077][ T8280] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 241.472201][ T8280] bond3: (slave batadv3): making interface the new active one [ 241.515853][ T8280] bond3: (slave batadv3): Enslaving as an active interface with an up link [ 241.549034][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 241.711213][ T8298] fuse: Bad value for 'fd' [ 242.474793][ T8315] device syzkaller0 entered promiscuous mode [ 242.634927][ T8317] ================================================================== [ 242.643564][ T8317] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x23a/0x240 [ 242.652585][ T8317] Read of size 2 at addr ffff88805cb8edfb by task syz.1.1352/8317 [ 242.660424][ T8317] [ 242.662800][ T8317] CPU: 0 PID: 8317 Comm: syz.1.1352 Not tainted syzkaller #0 [ 242.670208][ T8317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 242.680337][ T8317] Call Trace: [ 242.683657][ T8317] [ 242.686623][ T8317] dump_stack_lvl+0x188/0x250 [ 242.691352][ T8317] ? show_regs_print_info+0x20/0x20 [ 242.696598][ T8317] ? load_image+0x400/0x400 [ 242.701144][ T8317] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 242.706654][ T8317] ? ieee80211_tx+0x460/0x460 [ 242.711387][ T8317] print_address_description+0x60/0x2d0 [ 242.716979][ T8317] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 242.723268][ T8317] kasan_report+0xdf/0x130 [ 242.727736][ T8317] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 242.734045][ T8317] ieee80211_monitor_select_queue+0x23a/0x240 [ 242.740159][ T8317] ? ieee80211_recalc_smps_work+0x20/0x20 [ 242.745945][ T8317] netdev_core_pick_tx+0x118/0x2e0 [ 242.751106][ T8317] __dev_queue_xmit+0x756/0x2f80 [ 242.756086][ T8317] ? __might_fault+0xb7/0x110 [ 242.760821][ T8317] ? dev_queue_xmit+0x20/0x20 [ 242.765580][ T8317] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 242.771185][ T8317] ? packet_cached_dev_get+0x270/0x270 [ 242.776683][ T8317] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 242.782713][ T8317] packet_sendmsg+0x3dba/0x5060 [ 242.787631][ T8317] ? __might_sleep+0xf0/0xf0 [ 242.792274][ T8317] ? aa_sk_perm+0x7dc/0x910 [ 242.796813][ T8317] ? packet_getsockopt+0x9a0/0x9a0 [ 242.801973][ T8317] ? aa_sock_msg_perm+0x94/0x150 [ 242.806953][ T8317] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 242.812279][ T8317] ? security_socket_sendmsg+0x7c/0xa0 [ 242.817775][ T8317] ? packet_getsockopt+0x9a0/0x9a0 [ 242.822920][ T8317] ____sys_sendmsg+0x5b7/0x8f0 [ 242.827742][ T8317] ? __sys_sendmsg_sock+0x30/0x30 [ 242.832858][ T8317] ? import_iovec+0x6f/0xa0 [ 242.837411][ T8317] ___sys_sendmsg+0x236/0x2e0 [ 242.842141][ T8317] ? __sys_sendmsg+0x2a0/0x2a0 [ 242.846989][ T8317] __se_sys_sendmsg+0x1af/0x290 [ 242.851884][ T8317] ? __x64_sys_sendmsg+0x80/0x80 [ 242.856855][ T8317] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 242.862889][ T8317] ? lockdep_hardirqs_on+0x94/0x140 [ 242.868245][ T8317] do_syscall_64+0x4c/0xa0 [ 242.872705][ T8317] ? clear_bhb_loop+0x30/0x80 [ 242.877423][ T8317] ? clear_bhb_loop+0x30/0x80 [ 242.882153][ T8317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 242.888212][ T8317] RIP: 0033:0x7ff936550e59 [ 242.892707][ T8317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.912380][ T8317] RSP: 002b:00007ff9347aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.920857][ T8317] RAX: ffffffffffffffda RBX: 00007ff9367c9fa0 RCX: 00007ff936550e59 [ 242.928871][ T8317] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 242.936887][ T8317] RBP: 00007ff9365e6d6f R08: 0000000000000000 R09: 0000000000000000 [ 242.944899][ T8317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.952911][ T8317] R13: 00007ff9367ca038 R14: 00007ff9367c9fa0 R15: 00007ffcee1285b8 [ 242.960942][ T8317] [ 242.964003][ T8317] [ 242.966340][ T8317] Allocated by task 8111: [ 242.970687][ T8317] __kasan_kmalloc+0xb5/0xf0 [ 242.975300][ T8317] kvmalloc_node+0x84/0x130 [ 242.979823][ T8317] pfifo_fast_init+0x234/0x6a0 [ 242.984605][ T8317] qdisc_create_dflt+0x11a/0x430 [ 242.989559][ T8317] dev_activate+0x331/0x12b0 [ 242.994179][ T8317] __dev_open+0x33b/0x430 [ 242.998519][ T8317] __dev_change_flags+0x20d/0x6a0 [ 243.003563][ T8317] dev_change_flags+0x82/0x1a0 [ 243.008343][ T8317] dev_ifsioc+0x130/0xd50 [ 243.012688][ T8317] dev_ioctl+0x545/0xe30 [ 243.016947][ T8317] sock_do_ioctl+0x245/0x320 [ 243.021556][ T8317] sock_ioctl+0x4d2/0x710 [ 243.025914][ T8317] __se_sys_ioctl+0xfa/0x170 [ 243.030583][ T8317] do_syscall_64+0x4c/0xa0 [ 243.035016][ T8317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.040938][ T8317] [ 243.043279][ T8317] The buggy address belongs to the object at ffff88805cb8c000 [ 243.043279][ T8317] which belongs to the cache kmalloc-8k of size 8192 [ 243.057357][ T8317] The buggy address is located 3579 bytes to the right of [ 243.057357][ T8317] 8192-byte region [ffff88805cb8c000, ffff88805cb8e000) [ 243.071340][ T8317] The buggy address belongs to the page: [ 243.076995][ T8317] page:ffffea000172e200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cb88 [ 243.087190][ T8317] head:ffffea000172e200 order:3 compound_mapcount:0 compound_pincount:0 [ 243.095534][ T8317] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 243.103559][ T8317] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42280 [ 243.112163][ T8317] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 243.120753][ T8317] page dumped because: kasan: bad access detected [ 243.127195][ T8317] page_owner tracks the page as allocated [ 243.132925][ T8317] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7768, ts 221974170939, free_ts 221973834450 [ 243.153605][ T8317] get_page_from_freelist+0x1bbd/0x1ca0 [ 243.159174][ T8317] __alloc_pages+0x1ee/0x480 [ 243.163779][ T8317] new_slab+0xc0/0x4b0 [ 243.167857][ T8317] ___slab_alloc+0x80a/0xdd0 [ 243.172485][ T8317] __kmalloc+0x1cd/0x330 [ 243.176747][ T8317] vhost_dev_set_owner+0x425/0xa50 [ 243.181876][ T8317] vhost_dev_ioctl+0xa5/0xec0 [ 243.186585][ T8317] vhost_vsock_dev_ioctl+0x239/0xf10 [ 243.191896][ T8317] __se_sys_ioctl+0xfa/0x170 [ 243.196505][ T8317] do_syscall_64+0x4c/0xa0 [ 243.200940][ T8317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.206845][ T8317] page last free stack trace: [ 243.211525][ T8317] free_unref_page_prepare+0x637/0x6c0 [ 243.217094][ T8317] free_unref_page+0x8f/0x2a0 [ 243.221788][ T8317] __unfreeze_partials+0x1a5/0x200 [ 243.226923][ T8317] put_cpu_partial+0x12d/0x190 [ 243.231706][ T8317] qlist_free_all+0x35/0x90 [ 243.236214][ T8317] kasan_quarantine_reduce+0x150/0x160 [ 243.241679][ T8317] __kasan_slab_alloc+0x2f/0xd0 [ 243.246540][ T8317] slab_post_alloc_hook+0x4c/0x380 [ 243.251665][ T8317] __kmalloc+0x127/0x330 [ 243.255925][ T8317] tomoyo_realpath_from_path+0x118/0x610 [ 243.261568][ T8317] tomoyo_path_perm+0x23f/0x5d0 [ 243.266433][ T8317] security_inode_getattr+0xcf/0x120 [ 243.271739][ T8317] vfs_getattr+0x26/0x3a0 [ 243.276087][ T8317] __x64_sys_newfstat+0x137/0x210 [ 243.281132][ T8317] do_syscall_64+0x4c/0xa0 [ 243.285559][ T8317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.291470][ T8317] [ 243.293803][ T8317] Memory state around the buggy address: [ 243.299440][ T8317] ffff88805cb8ec80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 243.307529][ T8317] ffff88805cb8ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 243.315601][ T8317] >ffff88805cb8ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 243.323670][ T8317] ^ [ 243.331653][ T8317] ffff88805cb8ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 243.339731][ T8317] ffff88805cb8ee80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 243.347798][ T8317] ================================================================== [ 243.355875][ T8317] Disabling lock debugging due to kernel taint [ 243.362264][ T8317] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 243.369479][ T8317] CPU: 0 PID: 8317 Comm: syz.1.1352 Tainted: G B syzkaller #0 [ 243.378272][ T8317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 243.388366][ T8317] Call Trace: [ 243.391693][ T8317] [ 243.394648][ T8317] dump_stack_lvl+0x188/0x250 [ 243.399362][ T8317] ? show_regs_print_info+0x20/0x20 [ 243.404585][ T8317] ? load_image+0x400/0x400 [ 243.409120][ T8317] panic+0x2e5/0x810 [ 243.413050][ T8317] ? bpf_jit_dump+0xd0/0xd0 [ 243.417598][ T8317] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 243.423523][ T8317] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 243.429450][ T8317] ? _raw_spin_unlock+0x40/0x40 [ 243.434328][ T8317] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 243.440599][ T8317] check_panic_on_warn+0x80/0xa0 [ 243.445696][ T8317] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 243.451975][ T8317] end_report+0x6d/0xf0 [ 243.456164][ T8317] kasan_report+0x102/0x130 [ 243.460705][ T8317] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 243.466991][ T8317] ieee80211_monitor_select_queue+0x23a/0x240 [ 243.473103][ T8317] ? ieee80211_recalc_smps_work+0x20/0x20 [ 243.478859][ T8317] netdev_core_pick_tx+0x118/0x2e0 [ 243.484008][ T8317] __dev_queue_xmit+0x756/0x2f80 [ 243.488974][ T8317] ? __might_fault+0xb7/0x110 [ 243.493688][ T8317] ? dev_queue_xmit+0x20/0x20 [ 243.498484][ T8317] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 243.504078][ T8317] ? packet_cached_dev_get+0x270/0x270 [ 243.509574][ T8317] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 243.515600][ T8317] packet_sendmsg+0x3dba/0x5060 [ 243.520506][ T8317] ? __might_sleep+0xf0/0xf0 [ 243.525132][ T8317] ? aa_sk_perm+0x7dc/0x910 [ 243.529668][ T8317] ? packet_getsockopt+0x9a0/0x9a0 [ 243.534821][ T8317] ? aa_sock_msg_perm+0x94/0x150 [ 243.539798][ T8317] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 243.545117][ T8317] ? security_socket_sendmsg+0x7c/0xa0 [ 243.550609][ T8317] ? packet_getsockopt+0x9a0/0x9a0 [ 243.555760][ T8317] ____sys_sendmsg+0x5b7/0x8f0 [ 243.560566][ T8317] ? __sys_sendmsg_sock+0x30/0x30 [ 243.565631][ T8317] ? import_iovec+0x6f/0xa0 [ 243.570174][ T8317] ___sys_sendmsg+0x236/0x2e0 [ 243.574900][ T8317] ? __sys_sendmsg+0x2a0/0x2a0 [ 243.579715][ T8317] __se_sys_sendmsg+0x1af/0x290 [ 243.584605][ T8317] ? __x64_sys_sendmsg+0x80/0x80 [ 243.589568][ T8317] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 243.595592][ T8317] ? lockdep_hardirqs_on+0x94/0x140 [ 243.600827][ T8317] do_syscall_64+0x4c/0xa0 [ 243.605278][ T8317] ? clear_bhb_loop+0x30/0x80 [ 243.609986][ T8317] ? clear_bhb_loop+0x30/0x80 [ 243.614700][ T8317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.620622][ T8317] RIP: 0033:0x7ff936550e59 [ 243.625063][ T8317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.644708][ T8317] RSP: 002b:00007ff9347aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.653165][ T8317] RAX: ffffffffffffffda RBX: 00007ff9367c9fa0 RCX: 00007ff936550e59 [ 243.661182][ T8317] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 243.669184][ T8317] RBP: 00007ff9365e6d6f R08: 0000000000000000 R09: 0000000000000000 [ 243.677184][ T8317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.685191][ T8317] R13: 00007ff9367ca038 R14: 00007ff9367c9fa0 R15: 00007ffcee1285b8 [ 243.693205][ T8317] [ 243.696615][ T8317] Kernel Offset: disabled [ 243.700965][ T8317] Rebooting in 86400 seconds..