last executing test programs: 30m7.19420455s ago: executing program 0 (id=498): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x5d, &(0x7f00000005c0)={@link_local, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x1, "2ccd", "b3b921", 0x6, "7d73aeb109a45cf973270cd137abd7b36d15b4e692d829c8bdc6de2c686090bfd340dfcca2d08262bbed5c56457dbe0507c3979343027a085e11d30cfce630a9898e97f24f62"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030402000000fedbdf2500", @ANYRES32=0x0, @ANYBLOB="10d40000a58b542a240012800e00010069703665727370616e000000100002800400120008000d0007"], 0x44}, 0x1, 0x0, 0x0, 0x40890}, 0x20000840) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x40305828, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x160862) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 30m3.901420678s ago: executing program 0 (id=501): socket(0x40000000015, 0x5, 0x0) getpid() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x9}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000000300)="ea", 0x1, 0x7a}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername$packet(r2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r7}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 30m2.870104003s ago: executing program 0 (id=503): gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x80000) 30m1.607376014s ago: executing program 0 (id=504): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x80000001, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket(0x2, 0x805, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 30m0.265895041s ago: executing program 0 (id=507): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b0500000000000904", @ANYBLOB], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = fanotify_init(0x8, 0x80000) fanotify_mark(r0, 0x80, 0x40100000, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) clock_gettime(0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 29m51.648781382s ago: executing program 0 (id=518): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_gfeatures={0x2e, 0x10000000000000e1}}) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000240)=@attr_other={0x0, 0x0, 0x3, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x10000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000940)=""/135, 0x87}, {&(0x7f0000000b80)=""/169, 0xa9}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/171, 0xab}], 0x8}, 0x22120) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29m36.428264776s ago: executing program 32 (id=518): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_gfeatures={0x2e, 0x10000000000000e1}}) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000240)=@attr_other={0x0, 0x0, 0x3, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x10000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002100)={0x18, {"a2e3ad2119c70e0d8a267fd5d89dcd939b324d078b089b3b0838721a0890e0878f0e1ac6e7049b3d63959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70d998ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5af098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000108000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62437264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d637545c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4953a9737d214060005ea6f1783e287b3bee96e3a726eafe2fd12a78d1f48c13b64df07847754b8010000009bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f577dcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b2fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2010891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57ccb938e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f794c9eee11987f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b4907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d847dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e7832b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859add50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195301000000aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d0d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb4d600000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de4f8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3442bab515b0000348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de0000d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bdc8f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d8872fe174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62f46fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f980000000203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x1000}}, 0x1006) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000940)=""/135, 0x87}, {&(0x7f0000000b80)=""/169, 0xa9}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/171, 0xab}], 0x8}, 0x22120) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.635498343s ago: executing program 3 (id=5657): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x20000000, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 20.055506984s ago: executing program 3 (id=5664): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100000014000700fc"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="ba", 0x1, 0x20000010, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r3, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 19.988209571s ago: executing program 3 (id=5665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 19.757908758s ago: executing program 3 (id=5670): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) close(0x3) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 19.331366767s ago: executing program 3 (id=5678): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000400)=""/4083, 0xff3}], 0x2}, 0x8}], 0x4, 0x180, 0x0) 18.318960887s ago: executing program 3 (id=5695): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x4e21, 0xd, 0x2, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0xe64, 0x3}, {0x2, 0x1, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d3, 0x3c}, 0xa, @in=@private=0xa010102, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4010000, 0x1}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x3, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r3, &(0x7f0000000940)={&(0x7f00000003c0)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x4}, 0xfe}, 0x18, &(0x7f0000000400)={&(0x7f00000008c0)="02b9c4f732088b10beec", 0xa}, 0x1, 0x0, 0x0, 0x40}, 0x810) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 6.314949408s ago: executing program 2 (id=5752): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0xa8) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@local, 0x18, 0x14, 0x2}]}, 0x38}, 0x1, 0x7}, 0x20040000) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xa0, 0x17, 0xa, 0xa04, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10040010}, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04"], 0xe) 4.987231608s ago: executing program 4 (id=5764): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000400)=""/4083, 0xff3}], 0x2}, 0x8}], 0x4, 0x180, 0x0) 4.698913874s ago: executing program 1 (id=5769): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x4008054) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r2 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r2], 0x14) 4.615246058s ago: executing program 1 (id=5770): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 4.46747566s ago: executing program 1 (id=5771): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d6"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.352006469s ago: executing program 1 (id=5772): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4008054) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x8, 0x2}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan4\x00'}) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x14) 4.213382962s ago: executing program 1 (id=5773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000480)="422239d0fa5ce94efd1900ea17564aeb", 0x10, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4.067428225s ago: executing program 4 (id=5774): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) 4.067200615s ago: executing program 1 (id=5775): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'batadv0\x00'}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x50}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="16", 0x1}], 0x1}, 0x80) 4.028706987s ago: executing program 4 (id=5776): r0 = socket(0x400000000010, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) splice(r4, 0x0, r5, &(0x7f00000002c0), 0x6, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f0000000280)=0x7fffffffffffffff, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000480)=@raw=[@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xafa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0x4, 0xc8, &(0x7f0000000600)=""/200, 0x40f00, 0x8e, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xbe7, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740), 0x10, 0x100}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fffffff}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.82983242s ago: executing program 4 (id=5777): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}}, 0x0) 3.743230264s ago: executing program 4 (id=5778): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x4008054) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r2 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r2], 0x14) 3.236929859s ago: executing program 2 (id=5779): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, 0x0, 0x40004) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="ba", 0x1, 0x20000010, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r2, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3.217874995s ago: executing program 33 (id=5695): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x4e21, 0xd, 0x2, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0xe64, 0x3}, {0x2, 0x1, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d3, 0x3c}, 0xa, @in=@private=0xa010102, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4010000, 0x1}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x3, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r3, &(0x7f0000000940)={&(0x7f00000003c0)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x4}, 0xfe}, 0x18, &(0x7f0000000400)={&(0x7f00000008c0)="02b9c4f732088b10beec", 0xa}, 0x1, 0x0, 0x0, 0x40}, 0x810) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 3.114379536s ago: executing program 2 (id=5781): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4008054) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x8, 0x2}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan4\x00'}) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x14) 2.795927456s ago: executing program 2 (id=5782): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000400)=""/4083, 0xff3}], 0x2}, 0x8}], 0x4, 0x180, 0x0) 1.895464136s ago: executing program 2 (id=5783): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x4, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r3, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x2}}, 0x10) bind$tipc(r3, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r2, r2, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x5508, 0x8, 0x3, 0x80, 'syz0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = accept4$rose(r5, &(0x7f0000000880)=@short={0xb, @dev, @null, 0x1, @netrom}, &(0x7f00000008c0)=0x1c, 0x80000) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r10, 0x29, 0x43, 0x0, 0x0) shutdown(r9, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000003000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) tee(r4, r8, 0x100000af5, 0x0) close(r7) close(r5) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.128703782s ago: executing program 2 (id=5784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000480)="422239d0fa5ce94efd1900ea17564aeb", 0x10, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 0s ago: executing program 4 (id=5785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) kernel console output (not intermixed with test programs): [ 1785.805607][T21168] netlink: 'syz.4.4046': attribute type 17 has an invalid length. [ 1785.838668][T21168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1786.114786][T21179] Illegal XDP return value 4294967294 on prog (id 218) dev syz_tun, expect packet loss! [ 1787.297912][T21217] fuse: Bad value for 'fd' [ 1787.684529][T21227] syzkaller0: entered promiscuous mode [ 1787.693798][T21227] syzkaller0: entered allmulticast mode [ 1788.286616][T21245] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1788.390118][T21245] netlink: 'syz.3.4065': attribute type 13 has an invalid length. [ 1788.413720][T21245] netlink: 'syz.3.4065': attribute type 17 has an invalid length. [ 1788.482705][T21245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1791.985037][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.991436][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.886512][T21342] fuse: Bad value for 'fd' [ 1797.995127][T21385] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1798.098336][T21401] fuse: Bad value for 'fd' [ 1798.148263][T21385] netlink: 'syz.1.4092': attribute type 13 has an invalid length. [ 1798.156816][T21385] netlink: 'syz.1.4092': attribute type 17 has an invalid length. [ 1798.278727][T21385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1800.397316][T21438] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1800.571144][T21438] netlink: 'syz.4.4103': attribute type 13 has an invalid length. [ 1800.597437][T21438] netlink: 'syz.4.4103': attribute type 17 has an invalid length. [ 1800.731601][T21457] fuse: Bad value for 'fd' [ 1800.738355][T21438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1800.890941][T21462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4110'. [ 1803.494371][T21507] fuse: Bad value for 'fd' [ 1803.556225][T21494] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1803.850029][T21495] netlink: 'syz.1.4116': attribute type 13 has an invalid length. [ 1803.904435][T21495] netlink: 'syz.1.4116': attribute type 17 has an invalid length. [ 1804.094067][T21495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1805.057495][T21531] 8021q: adding VLAN 0 to HW filter on device bond33 [ 1805.258911][T21531] netlink: 'syz.3.4125': attribute type 13 has an invalid length. [ 1805.274766][T21531] netlink: 'syz.3.4125': attribute type 17 has an invalid length. [ 1805.350869][T21531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1806.497209][T21547] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4128'. [ 1806.692460][T21550] fuse: Bad value for 'fd' [ 1809.029025][T21592] 8021q: adding VLAN 0 to HW filter on device bond35 [ 1809.248945][T21596] fuse: Bad value for 'fd' [ 1810.743949][T21640] fuse: Bad value for 'fd' [ 1812.753420][T21708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1812.851489][T15573] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1813.236362][T21714] syzkaller0: entered promiscuous mode [ 1813.243869][T21714] syzkaller0: entered allmulticast mode [ 1813.302323][T15573] usb 5-1: Using ep0 maxpacket: 16 [ 1813.324895][T15573] usb 5-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 1813.342028][T15573] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1813.366847][T15573] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1813.382504][T15573] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1813.396963][T15573] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1813.418654][T15573] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1813.428303][T15573] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1813.441253][T15573] usb 5-1: Manufacturer: syz [ 1813.449342][T15573] usb 5-1: config 0 descriptor?? [ 1813.612262][T21721] syzkaller0: entered promiscuous mode [ 1813.622102][T21721] syzkaller0: entered allmulticast mode [ 1813.752424][T15573] rc_core: IR keymap rc-hauppauge not found [ 1813.761948][T15573] Registered IR keymap rc-empty [ 1813.766975][T15573] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1813.804089][T15573] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1813.853637][T15573] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1813.891436][T15573] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input125 [ 1813.932782][T15573] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1813.972651][T15573] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1814.015066][T15573] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1814.062086][T15573] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1814.113522][T15573] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1814.194661][T15573] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1814.236089][T15573] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1814.273686][T15573] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1814.325777][T15573] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1814.382233][T15573] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1814.423106][T15573] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1814.432577][T15573] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1814.489927][T15573] usb 5-1: USB disconnect, device number 88 [ 1818.232628][T21738] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR [ 1818.233719][T21742] netlink: 'syz.2.4179': attribute type 13 has an invalid length. [ 1818.260916][T21742] netlink: 'syz.2.4179': attribute type 17 has an invalid length. [ 1818.288301][T21742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1818.458525][T21761] syzkaller0: entered promiscuous mode [ 1818.522173][T21761] syzkaller0: entered allmulticast mode [ 1819.025646][T21782] syzkaller0: entered promiscuous mode [ 1819.038564][T21782] syzkaller0: entered allmulticast mode [ 1819.074778][T15222] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1819.287148][T15222] usb 5-1: Using ep0 maxpacket: 16 [ 1819.316990][T15222] usb 5-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 1819.342770][T15222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1819.372762][T15222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1819.384065][T15222] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1819.408953][T15222] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1819.441117][T15222] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1819.456428][T15222] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1819.482031][T15222] usb 5-1: Manufacturer: syz [ 1819.498964][T15222] usb 5-1: config 0 descriptor?? [ 1819.894025][T15222] rc_core: IR keymap rc-hauppauge not found [ 1819.901267][T15222] Registered IR keymap rc-empty [ 1819.909006][T15222] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1819.944274][T15222] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1819.994855][T15222] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1820.011028][T15222] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input126 [ 1820.070916][T15222] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1820.133572][T15222] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1820.177789][T15222] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1820.226885][T15222] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1820.387897][T15222] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1820.429921][T15222] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1821.011680][T15222] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1821.114097][T15222] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1821.152409][T15222] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1821.184927][T15222] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1821.248082][T15222] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1821.277921][T15222] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1821.320268][T15222] usb 5-1: USB disconnect, device number 89 [ 1823.620501][T21790] workqueue: Failed to create a rescuer kthread for wq "bond31": -EINTR [ 1823.630422][T21791] netlink: 'syz.1.4194': attribute type 13 has an invalid length. [ 1823.646997][T21791] netlink: 'syz.1.4194': attribute type 17 has an invalid length. [ 1823.661275][T21791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1823.697142][T21806] syzkaller0: entered promiscuous mode [ 1823.703409][T21806] syzkaller0: entered allmulticast mode [ 1824.036302][T21831] tipc: Enabled bearer , priority 0 [ 1824.045275][T21831] syzkaller0: entered promiscuous mode [ 1824.050794][T21831] syzkaller0: entered allmulticast mode [ 1824.135890][T21831] tipc: Resetting bearer [ 1824.191411][T21838] syzkaller0: entered promiscuous mode [ 1824.200737][T21838] syzkaller0: entered allmulticast mode [ 1824.288312][T21830] tipc: Resetting bearer [ 1824.308574][T21830] tipc: Disabling bearer [ 1824.372746][T18253] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1824.579741][T18253] usb 5-1: Using ep0 maxpacket: 16 [ 1824.591684][T18253] usb 5-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 1824.622076][T18253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1824.658820][T18253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1824.669326][T18253] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1824.700677][T18253] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1824.766480][T18253] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1824.782395][T18253] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1824.808815][T18253] usb 5-1: Manufacturer: syz [ 1824.824384][T18253] usb 5-1: config 0 descriptor?? [ 1825.224262][T18253] rc_core: IR keymap rc-hauppauge not found [ 1825.230231][T18253] Registered IR keymap rc-empty [ 1825.240707][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1825.282881][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1825.333954][T18253] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1825.370923][T18253] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input127 [ 1825.402211][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1825.442102][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1825.489281][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1825.528894][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1825.566972][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1825.606818][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1825.676972][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1825.727305][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1825.762141][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1825.830351][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1825.875517][T18253] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1825.885043][T18253] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1825.916734][T18253] usb 5-1: USB disconnect, device number 90 [ 1828.919343][T21855] workqueue: Failed to create a rescuer kthread for wq "bond31": -EINTR [ 1828.934578][T21857] netlink: 'syz.1.4207': attribute type 13 has an invalid length. [ 1828.950887][T21857] netlink: 'syz.1.4207': attribute type 17 has an invalid length. [ 1828.991277][T21857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1829.333315][T21875] syzkaller0: entered promiscuous mode [ 1829.348969][T21875] syzkaller0: entered allmulticast mode [ 1829.914584][T21894] syzkaller0: entered promiscuous mode [ 1829.929786][T21894] syzkaller0: entered allmulticast mode [ 1831.492913][T20506] Bluetooth: hci0: command 0x0406 tx timeout [ 1834.407639][T21953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4233'. [ 1835.249222][T21966] syzkaller0: entered promiscuous mode [ 1835.254935][T21966] syzkaller0: entered allmulticast mode [ 1835.288712][T21975] syzkaller1: entered promiscuous mode [ 1835.295431][T21975] syzkaller1: entered allmulticast mode [ 1835.342392][T21975] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 1839.788825][T22020] syzkaller0: entered promiscuous mode [ 1839.794772][T22020] syzkaller0: entered allmulticast mode [ 1845.571309][T22084] syzkaller0: entered promiscuous mode [ 1845.581776][T22084] syzkaller0: entered allmulticast mode [ 1845.642189][T14801] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1845.833887][T14801] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1845.850425][T14801] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1845.878121][T14801] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1845.903189][T14801] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1845.933786][T14801] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1845.966541][T14801] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1845.983926][T14801] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1845.992355][T14801] usb 5-1: Product: syz [ 1845.996565][T14801] usb 5-1: Manufacturer: syz [ 1846.014854][T14801] cdc_wdm 5-1:1.0: skipping garbage [ 1846.021139][T14801] cdc_wdm 5-1:1.0: skipping garbage [ 1846.035984][T14801] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1846.056242][T14801] cdc_wdm 5-1:1.0: Unknown control protocol [ 1846.427940][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1846.499121][ T5808] usb 5-1: USB disconnect, device number 91 [ 1846.512834][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1846.519505][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1846.525599][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1846.534632][T22070] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 1849.220039][T22102] workqueue: Failed to create a rescuer kthread for wq "bond33": -EINTR [ 1851.642034][T18253] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1851.852247][T18253] usb 5-1: Using ep0 maxpacket: 16 [ 1851.859820][T18253] usb 5-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1851.876991][T18253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1851.883373][T22149] syzkaller0: entered promiscuous mode [ 1851.898531][T18253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1851.921925][T18253] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1851.936575][T22149] syzkaller0: entered allmulticast mode [ 1851.943396][T18253] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1851.977648][T18253] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1851.987189][T18253] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1852.001903][T18253] usb 5-1: Manufacturer: syz [ 1852.009188][T18253] usb 5-1: config 0 descriptor?? [ 1852.361970][T18253] rc_core: IR keymap rc-hauppauge not found [ 1852.368423][T18253] Registered IR keymap rc-empty [ 1852.392248][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.442440][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.498926][T18253] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1852.549772][T18253] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input128 [ 1852.577618][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.647033][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.742060][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.773132][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.822248][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.868204][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.912085][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1852.966944][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1853.002020][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1853.034053][T18253] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1853.087476][T18253] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1853.102253][T18253] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1853.141343][T18253] usb 5-1: USB disconnect, device number 92 [ 1853.426209][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.432877][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1857.455134][T22152] ip6tnl1: entered promiscuous mode [ 1857.460369][T22152] ip6tnl1: entered allmulticast mode [ 1857.485604][T22171] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR [ 1857.486419][T22172] netlink: 'syz.4.4290': attribute type 13 has an invalid length. [ 1857.524542][T22172] netlink: 'syz.4.4290': attribute type 17 has an invalid length. [ 1857.563761][T22172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1858.318729][T22189] syzkaller0: entered promiscuous mode [ 1858.332106][T22189] syzkaller0: entered allmulticast mode [ 1859.985136][T22186] 8021q: adding VLAN 0 to HW filter on device bond38 [ 1860.338078][T22204] fuse: Bad value for 'fd' [ 1860.511997][ T5808] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1860.697124][ T5808] usb 2-1: Using ep0 maxpacket: 16 [ 1860.707149][ T5808] usb 2-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1860.739836][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1860.762797][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1860.774079][ T5808] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1860.790883][ T5808] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1860.805634][ T5808] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1860.827464][ T5808] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1860.850872][ T5808] usb 2-1: Manufacturer: syz [ 1860.871498][ T5808] usb 2-1: config 0 descriptor?? [ 1861.093798][T22206] syzkaller1: entered promiscuous mode [ 1861.099512][T22206] syzkaller1: entered allmulticast mode [ 1861.262988][ T5808] rc_core: IR keymap rc-hauppauge not found [ 1861.285224][ T5808] Registered IR keymap rc-empty [ 1861.306401][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1861.362270][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1861.523327][ T5808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1861.539556][ T5808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input129 [ 1861.565059][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1861.607015][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1861.652384][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1861.706874][T22217] syzkaller0: entered promiscuous mode [ 1861.712984][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1861.725160][T22217] syzkaller0: entered allmulticast mode [ 1861.772022][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1861.802050][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1861.842036][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1861.902061][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1861.952037][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1862.002012][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1862.060650][ T5808] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1862.086508][ T5808] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1862.133697][ T5808] usb 2-1: USB disconnect, device number 98 [ 1867.409099][T22260] syzkaller1: entered promiscuous mode [ 1867.426211][T22260] syzkaller1: entered allmulticast mode [ 1869.965191][T22290] ip6tnl1: entered promiscuous mode [ 1870.032027][T22290] ip6tnl1: entered allmulticast mode [ 1870.312885][T22293] syzkaller0: entered promiscuous mode [ 1870.340369][T22293] syzkaller0: entered allmulticast mode [ 1870.391915][T22300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4316'. [ 1874.089074][T22309] syzkaller0: entered promiscuous mode [ 1874.095381][T22309] syzkaller0: entered allmulticast mode [ 1876.121023][T22341] fuse: Bad value for 'fd' [ 1876.826089][T22352] syzkaller0: entered promiscuous mode [ 1876.831623][T22352] syzkaller0: entered allmulticast mode [ 1876.862144][T14801] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1877.063962][T14801] usb 4-1: Using ep0 maxpacket: 16 [ 1877.116589][T14801] usb 4-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1877.143741][T14801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1877.168484][T14801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1877.197144][T14801] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1877.213882][T14801] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1877.233511][T14801] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1877.246974][T14801] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1877.268039][T14801] usb 4-1: Manufacturer: syz [ 1877.286347][T14801] usb 4-1: config 0 descriptor?? [ 1877.642104][T14801] rc_core: IR keymap rc-hauppauge not found [ 1877.652210][T14801] Registered IR keymap rc-empty [ 1877.659677][T14801] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1877.717992][T14801] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1877.770894][T14801] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1877.800499][T14801] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input130 [ 1877.881495][T14801] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1877.924086][T14801] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1877.992476][T14801] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1878.052006][T14801] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1878.083065][T14801] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1878.122296][T14801] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1878.232385][T14801] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1878.292117][T14801] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1878.335618][T14801] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1878.417666][T14801] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1878.472953][T14801] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1878.483290][T14801] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1878.512458][T14801] usb 4-1: USB disconnect, device number 91 [ 1883.609026][T22357] workqueue: Failed to create a rescuer kthread for wq "bond35": -EINTR [ 1883.631082][T22368] netlink: 'syz.1.4328': attribute type 13 has an invalid length. [ 1883.648160][T22368] netlink: 'syz.1.4328': attribute type 17 has an invalid length. [ 1883.681288][T22368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1883.875221][T22402] syzkaller1: entered promiscuous mode [ 1883.880768][T22402] syzkaller1: entered allmulticast mode [ 1885.126001][T22413] fuse: Bad value for 'fd' [ 1886.972161][ T8] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1887.112248][T14801] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1887.172170][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1887.182343][ T8] usb 4-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 1887.201244][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1887.226682][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1887.246735][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1887.269176][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1887.328428][T14801] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1887.338102][T14801] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1887.338208][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1887.365882][T14801] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1887.379369][T14801] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1887.379390][ T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1887.391687][T14801] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1887.421780][T14801] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1887.424053][ T8] usb 4-1: Manufacturer: syz [ 1887.431103][T14801] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1887.553888][ T8] usb 4-1: config 0 descriptor?? [ 1887.566601][T14801] usb 5-1: Product: syz [ 1887.571053][T14801] usb 5-1: Manufacturer: syz [ 1887.591446][T14801] cdc_wdm 5-1:1.0: skipping garbage [ 1887.597043][T14801] cdc_wdm 5-1:1.0: skipping garbage [ 1888.374034][T14801] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1888.380774][T14801] cdc_wdm 5-1:1.0: Unknown control protocol [ 1888.462110][ T8] rc_core: IR keymap rc-hauppauge not found [ 1888.478714][ T8] Registered IR keymap rc-empty [ 1888.480819][T14801] usb 5-1: USB disconnect, device number 93 [ 1888.488997][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1888.522820][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1888.572559][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1888.599909][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input131 [ 1888.626156][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1888.662176][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1888.712143][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1888.742126][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1888.783326][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1888.819388][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1888.861962][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1888.915244][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1888.972018][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1889.017063][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1889.064958][ T8] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1889.087024][ T8] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1889.104666][ T8] usb 4-1: USB disconnect, device number 92 [ 1891.835898][T22443] workqueue: Failed to create a rescuer kthread for wq "bond35": -EINTR [ 1893.612162][T22471] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4356'. [ 1893.709954][T22477] syzkaller0: entered promiscuous mode [ 1893.717014][T22477] syzkaller0: entered allmulticast mode [ 1894.145809][T22483] 8021q: adding VLAN 0 to HW filter on device bond39 [ 1896.391053][T22523] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4369'. [ 1896.642232][T22527] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4367'. [ 1897.387922][T22539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4375'. [ 1897.845168][T22558] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1897.925591][T22563] syzkaller1: entered promiscuous mode [ 1897.934759][T22563] syzkaller1: entered allmulticast mode [ 1898.542076][T22576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4386'. [ 1898.728964][T22566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4382'. [ 1900.364977][T22607] syzkaller1: entered promiscuous mode [ 1900.374686][T22607] syzkaller1: entered allmulticast mode [ 1900.703950][T22611] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1903.120293][T22627] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1906.101165][T22662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4408'. [ 1907.648752][T22678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4412'. [ 1907.908855][T22688] fuse: Bad value for 'fd' [ 1913.456181][T22712] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4422'. [ 1913.531564][T22729] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1913.545772][T22729] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1913.556379][T22729] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1913.588268][T22732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4427'. [ 1914.866942][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.873553][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.121221][T22776] syzkaller0: entered promiscuous mode [ 1917.652265][T22776] syzkaller0: entered allmulticast mode [ 1917.858032][T22780] fuse: Bad value for 'fd' [ 1918.985919][T22792] 8021q: adding VLAN 0 to HW filter on device bond36 [ 1919.030323][T22792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4440'. [ 1920.092935][T22808] syzkaller0: entered promiscuous mode [ 1920.098476][T22808] syzkaller0: entered allmulticast mode [ 1920.443766][T22823] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1920.449822][T22823] syzkaller1: linktype set to 260 [ 1920.708716][T22825] 8021q: adding VLAN 0 to HW filter on device bond40 [ 1921.741316][T22825] netlink: 'syz.3.4452': attribute type 13 has an invalid length. [ 1922.659970][T22850] syzkaller0: entered promiscuous mode [ 1922.666925][T22850] syzkaller0: entered allmulticast mode [ 1924.930084][T22879] syzkaller0: entered promiscuous mode [ 1924.935866][T16288] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1924.944151][T22879] syzkaller0: entered allmulticast mode [ 1925.232771][T16288] usb 2-1: Using ep0 maxpacket: 16 [ 1925.251168][T16288] usb 2-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 1925.278792][T16288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1925.329755][T16288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1925.371908][T16288] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1925.399666][T16288] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1925.445914][T16288] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1925.465216][T16288] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1925.486264][T16288] usb 2-1: Manufacturer: syz [ 1925.696069][T16288] usb 2-1: config 0 descriptor?? [ 1926.542184][T16288] rc_core: IR keymap rc-hauppauge not found [ 1926.552135][T16288] Registered IR keymap rc-empty [ 1926.562377][T16288] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1926.601981][T16288] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1926.644062][T16288] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1926.675185][T16288] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input132 [ 1926.715084][T16288] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1926.761973][T16288] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1926.801950][T16288] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1926.832083][T16288] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1926.873612][T16288] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1926.913328][T16288] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1926.956372][T16288] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1927.002856][T16288] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1927.041154][T16288] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1927.074272][T16288] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1927.113689][T16288] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1927.138741][T16288] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1927.152554][T16288] usb 2-1: USB disconnect, device number 99 [ 1927.489906][T22916] syzkaller0: entered promiscuous mode [ 1927.495493][T22916] syzkaller0: entered allmulticast mode [ 1927.548979][T22918] IPv6: addrconf: prefix option has invalid lifetime [ 1927.575675][T22918] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1927.581716][T22918] syzkaller1: linktype set to 260 [ 1928.147778][T22928] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1928.339204][T22928] netlink: 'syz.2.4486': attribute type 13 has an invalid length. [ 1929.628927][T22962] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4500'. [ 1930.629640][T22973] netlink: 'syz.4.4503': attribute type 1 has an invalid length. [ 1930.736190][T22973] bond32: entered promiscuous mode [ 1930.741387][T22973] bond32: entered allmulticast mode [ 1930.768707][T22973] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1930.847220][T22976] macvlan2: entered promiscuous mode [ 1930.858094][T22976] macvlan2: entered allmulticast mode [ 1930.896785][T22976] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1931.065256][T22977] tipc: Enabling of bearer rejected, failed to enable media [ 1931.083027][T22972] syzkaller0: entered promiscuous mode [ 1931.088986][T22972] syzkaller0: entered allmulticast mode [ 1931.536211][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4508'. [ 1935.551447][T23010] IPv6: addrconf: prefix option has invalid lifetime [ 1935.743320][T22998] workqueue: Failed to create a rescuer kthread for wq "bond37": -EINTR [ 1935.758658][T23000] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4510'. [ 1935.838393][T23000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1935.857974][T23000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1935.878063][T23000] bond0 (unregistering): Released all slaves [ 1935.941920][T23012] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1935.948018][T23012] syzkaller1: linktype set to 260 [ 1936.036648][T23019] tipc: Enabling of bearer rejected, failed to enable media [ 1936.053361][T23019] syzkaller0: entered promiscuous mode [ 1936.070791][T23019] syzkaller0: entered allmulticast mode [ 1936.269832][T23029] syzkaller1: entered promiscuous mode [ 1936.280046][T23029] syzkaller1: entered allmulticast mode [ 1936.443311][T23033] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4518'. [ 1937.079399][ T5808] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1937.292131][ T5808] usb 2-1: Using ep0 maxpacket: 16 [ 1937.306357][ T5808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1937.316592][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1937.327526][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1937.341852][ T5808] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1937.351555][ T5808] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1937.352099][T14801] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1937.367680][ T5808] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1937.381374][ T5808] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1937.389568][ T5808] usb 2-1: Manufacturer: syz [ 1937.396707][ T5808] usb 2-1: config 0 descriptor?? [ 1937.553606][T14801] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1937.562503][T14801] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1937.575450][T14801] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1937.584600][T14801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1937.599293][T14801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1937.614471][T14801] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1937.628479][T14801] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1937.638151][T14801] usb 4-1: Product: syz [ 1937.643825][T14801] usb 4-1: Manufacturer: syz [ 1937.656456][T14801] cdc_wdm 4-1:1.0: skipping garbage [ 1937.662698][T14801] cdc_wdm 4-1:1.0: skipping garbage [ 1937.669796][T14801] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1937.678184][T14801] cdc_wdm 4-1:1.0: Unknown control protocol [ 1937.696112][ T5808] rc_core: IR keymap rc-hauppauge not found [ 1937.702769][ T5808] Registered IR keymap rc-empty [ 1937.707766][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1937.753623][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1937.783366][ T5808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1937.797213][ T5808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input133 [ 1937.817620][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1937.852551][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1937.892040][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1937.932193][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1937.962037][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1938.003372][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1938.032003][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1938.073767][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1938.081890][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1938.121958][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1938.141100][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1938.147762][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1938.149541][ T8] usb 4-1: USB disconnect, device number 93 [ 1938.153839][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1938.160205][T23038] cdc_wdm 4-1:1.0: Tx URB error: -19 [ 1938.168823][ T5808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1938.213522][ T5808] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1938.227156][ T5808] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1938.241663][ T5808] usb 2-1: USB disconnect, device number 100 [ 1938.589641][T23062] syzkaller1: entered promiscuous mode [ 1938.596285][T23062] syzkaller1: entered allmulticast mode [ 1938.756068][T23068] syzkaller0: entered promiscuous mode [ 1938.761680][T23068] syzkaller0: entered allmulticast mode [ 1939.611072][T23087] tipc: Enabling of bearer rejected, failed to enable media [ 1939.653632][T23087] syzkaller0: entered promiscuous mode [ 1939.659152][T23087] syzkaller0: entered allmulticast mode [ 1939.917444][T23096] syzkaller1: entered promiscuous mode [ 1939.926873][T23096] syzkaller1: entered allmulticast mode [ 1940.009473][T23098] syzkaller0: entered promiscuous mode [ 1940.020800][T23098] syzkaller0: entered allmulticast mode [ 1940.427668][T23108] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4545'. [ 1941.347618][T23118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1942.212361][T23138] tipc: Enabling of bearer rejected, failed to enable media [ 1942.247379][T23138] syzkaller0: entered promiscuous mode [ 1942.256548][T23138] syzkaller0: entered allmulticast mode [ 1942.306356][T23142] syzkaller0: entered promiscuous mode [ 1942.312326][T23142] syzkaller0: entered allmulticast mode [ 1946.633989][T23151] workqueue: Failed to create a rescuer kthread for wq "bond41": -EINTR [ 1946.656071][T23159] netlink: 'syz.3.4557': attribute type 13 has an invalid length. [ 1946.682021][T23159] netlink: 'syz.3.4557': attribute type 17 has an invalid length. [ 1946.691455][T23159] netlink: 'syz.3.4557': attribute type 27 has an invalid length. [ 1946.877900][T23183] syzkaller0: entered promiscuous mode [ 1946.883695][T23183] syzkaller0: entered allmulticast mode [ 1946.890008][T23184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1947.237739][T23192] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4566'. [ 1951.700174][T23211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1952.540713][T23221] workqueue: Failed to create a rescuer kthread for wq "bond33": -EINTR [ 1952.541567][T23222] netlink: 'syz.4.4573': attribute type 13 has an invalid length. [ 1952.579903][T23222] netlink: 'syz.4.4573': attribute type 17 has an invalid length. [ 1952.588223][T23222] netlink: 'syz.4.4573': attribute type 27 has an invalid length. [ 1952.600998][T23236] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4578'. [ 1952.694244][T23236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1952.750793][T23236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1952.829528][T23236] bond0 (unregistering): Released all slaves [ 1952.924927][T23241] syzkaller0: entered promiscuous mode [ 1952.964168][T23241] syzkaller0: entered allmulticast mode [ 1953.315865][T23250] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4582'. [ 1954.033584][T23252] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.4585'. [ 1958.630375][T23282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4595'. [ 1958.880195][T23316] syzkaller0: entered promiscuous mode [ 1958.897009][T23316] syzkaller0: entered allmulticast mode [ 1959.926908][T23337] syzkaller0: entered promiscuous mode [ 1959.932980][T23337] syzkaller0: entered allmulticast mode [ 1961.443135][T23366] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1961.812178][T20506] Bluetooth: hci0: command 0x0406 tx timeout [ 1964.258436][T23353] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1964.259296][T23354] netlink: 'syz.3.4611': attribute type 13 has an invalid length. [ 1964.288640][T23354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4611'. [ 1964.750114][T23378] bond33 (unregistering): Released all slaves [ 1964.786084][T23383] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4619'. [ 1964.941883][T23383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1964.963543][T23383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1965.000260][T23383] bond0 (unregistering): Released all slaves [ 1965.290271][T23400] syzkaller0: entered promiscuous mode [ 1965.296537][T23400] syzkaller0: entered allmulticast mode [ 1965.536930][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4629'. [ 1965.721318][T23420] xt_connbytes: Forcing CT accounting to be enabled [ 1965.812559][ T5773] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1966.012408][ T5773] usb 5-1: Using ep0 maxpacket: 16 [ 1966.029636][ T5773] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.050972][ T5773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1966.075142][ T5773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1966.095454][ T5773] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1966.107477][ T5773] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1966.144546][ T5773] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1966.153988][ T5773] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1966.166046][ T5773] usb 5-1: Manufacturer: syz [ 1966.175454][ T5773] usb 5-1: config 0 descriptor?? [ 1966.229067][T23439] digital: digital_start_poll: Unknown protocol [ 1966.356950][T23443] syzkaller0: entered promiscuous mode [ 1966.364799][T23443] syzkaller0: entered allmulticast mode [ 1966.532860][ T5773] rc_core: IR keymap rc-hauppauge not found [ 1966.538905][ T5773] Registered IR keymap rc-empty [ 1966.550740][ T5773] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1966.592050][ T5773] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1966.651180][ T5773] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1966.682005][ T5773] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input134 [ 1966.709716][ T5773] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1966.752182][ T5773] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1966.792035][ T5773] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1966.831148][ T5773] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1966.872050][ T5773] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1966.924142][ T5773] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1966.963163][ T5773] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1966.996179][ T5773] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1967.030159][T23460] bond0 (unregistering): Released all slaves [ 1967.041961][ T5773] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1967.071390][T23465] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4644'. [ 1967.080611][ T5773] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1967.123801][ T5773] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1967.142491][ T5773] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1967.192298][ T5773] usb 5-1: USB disconnect, device number 94 [ 1967.284588][T23477] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4649'. [ 1967.497439][T23483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4650'. [ 1967.638208][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4653'. [ 1967.664195][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4653'. [ 1968.016237][T23516] syzkaller0: entered promiscuous mode [ 1968.022231][T23516] syzkaller0: entered allmulticast mode [ 1970.680432][T23497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1970.853719][T23565] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4675'. [ 1971.432507][T23594] syzkaller0: entered promiscuous mode [ 1971.438212][T23594] syzkaller0: entered allmulticast mode [ 1972.052674][T23620] syzkaller0: entered promiscuous mode [ 1972.058312][T23620] syzkaller0: entered allmulticast mode [ 1972.085906][T23620] 0: reclassify loop, rule prio 0, protocol 700 [ 1972.172973][T23631] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4697'. [ 1972.215882][T23629] syzkaller0: entered promiscuous mode [ 1972.221522][T23629] syzkaller0: entered allmulticast mode [ 1972.449697][T23641] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4703'. [ 1973.087318][T23679] tipc: Enabled bearer , priority 0 [ 1973.122397][T23679] tipc: Resetting bearer [ 1973.173929][T23678] tipc: Disabling bearer [ 1973.187196][T23682] syzkaller1: entered promiscuous mode [ 1973.196397][T23682] syzkaller1: entered allmulticast mode [ 1973.319966][T23689] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4718'. [ 1973.902681][T23721] syzkaller1: entered promiscuous mode [ 1973.908377][T23721] syzkaller1: entered allmulticast mode [ 1973.955336][T23722] tipc: Enabled bearer , priority 0 [ 1974.058236][T23722] tipc: Resetting bearer [ 1974.067085][T23730] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4731'. [ 1974.096604][T23719] tipc: Disabling bearer [ 1975.397973][T23762] syzkaller1: entered promiscuous mode [ 1975.422526][T23762] syzkaller1: entered allmulticast mode [ 1975.519151][T23767] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4742'. [ 1975.612777][T23771] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4744'. [ 1975.901628][T23789] bond0 (unregistering): Released all slaves [ 1975.998944][T23779] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1976.297851][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.308967][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.421457][T23808] syzkaller1: entered promiscuous mode [ 1976.440449][T23808] syzkaller1: entered allmulticast mode [ 1976.639041][T23812] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4755'. [ 1976.756632][T23820] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4758'. [ 1976.821272][T23823] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1976.840992][T23823] syzkaller1: linktype set to 260 [ 1976.934337][T14840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1976.945596][T14840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1976.956937][T14840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1976.977508][T14840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1976.987231][T14840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1977.007066][T14840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1977.408142][T23840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4760'. [ 1977.668579][T23826] chnl_net:caif_netlink_parms(): no params data found [ 1977.951471][T23855] syzkaller1: entered promiscuous mode [ 1977.959571][T23855] syzkaller1: entered allmulticast mode [ 1977.974336][T23860] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 1978.024001][T23826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1978.031428][T23826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.039292][T23826] bridge_slave_0: entered allmulticast mode [ 1978.046657][T23826] bridge_slave_0: entered promiscuous mode [ 1978.054645][T23862] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1978.060717][T23862] syzkaller1: linktype set to 260 [ 1978.072582][T23860] syzkaller0: entered promiscuous mode [ 1978.079021][T23860] syzkaller0: entered allmulticast mode [ 1978.087034][T23826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1978.097648][T23826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.106533][T23826] bridge_slave_1: entered allmulticast mode [ 1978.114836][T23826] bridge_slave_1: entered promiscuous mode [ 1978.142733][T23866] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4767'. [ 1978.226884][T23826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1978.317123][T15652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.399989][T23826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1978.439523][T23870] batadv0: entered promiscuous mode [ 1978.448889][T23870] vlan2: entered promiscuous mode [ 1978.614425][T15652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.653239][T23880] bond0 (unregistering): Released all slaves [ 1978.680455][T23826] team0: Port device team_slave_0 added [ 1978.707170][T15652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.724921][T23826] team0: Port device team_slave_1 added [ 1978.778013][T23826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1978.798491][T23826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1978.824405][ C0] vkms_vblank_simulate: vblank timer overrun [ 1978.837203][T23826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1978.886055][T15652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.919452][T23826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1978.956949][T23826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1978.983102][ C0] vkms_vblank_simulate: vblank timer overrun [ 1979.008902][T23826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1979.021569][T23895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4771'. [ 1979.092772][T14840] Bluetooth: hci4: command tx timeout [ 1979.135787][T23826] hsr_slave_0: entered promiscuous mode [ 1979.163089][T23826] hsr_slave_1: entered promiscuous mode [ 1979.170680][T23826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1979.189744][T23826] Cannot create hsr debugfs directory [ 1979.345706][T23903] syzkaller1: entered promiscuous mode [ 1979.354124][T23903] syzkaller1: entered allmulticast mode [ 1979.700254][T15652] tipc: Disabling bearer [ 1979.715129][T15652] tipc: Left network mode [ 1979.981619][T23922] bond0 (unregistering): Released all slaves [ 1980.046087][T23924] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4778'. [ 1980.367143][T23940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4780'. [ 1980.643960][T23954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4782'. [ 1981.048149][T23970] syzkaller1: entered promiscuous mode [ 1981.058186][T23970] syzkaller1: entered allmulticast mode [ 1981.133564][ C0] vkms_vblank_simulate: vblank timer overrun [ 1981.177599][T14840] Bluetooth: hci4: command tx timeout [ 1981.448405][T23987] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4788'. [ 1981.711237][T23826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1981.797661][T23826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1981.954905][T23826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1981.992611][T24012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4790'. [ 1982.099276][T23826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1982.296509][T24023] xt_connbytes: Forcing CT accounting to be enabled [ 1982.481529][T24027] syzkaller0: entered promiscuous mode [ 1982.494243][T24027] syzkaller0: entered allmulticast mode [ 1982.553180][T15652] hsr_slave_0: left promiscuous mode [ 1982.559426][T15652] hsr_slave_1: left promiscuous mode [ 1982.569541][T15652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1982.577455][T15652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1982.586941][T15652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1982.596436][T15652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1982.609414][T15652] bridge_slave_1: left allmulticast mode [ 1982.619058][T15652] bridge_slave_1: left promiscuous mode [ 1982.629367][T15652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1982.653722][T15652] bridge_slave_0: left allmulticast mode [ 1982.660885][T15652] bridge_slave_0: left promiscuous mode [ 1982.672599][T15652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.771244][T15652] veth1_vlan: left promiscuous mode [ 1982.777714][T15652] veth0_vlan: left promiscuous mode [ 1983.226208][T15652] bond32 (unregistering): Released all slaves [ 1983.262228][T14840] Bluetooth: hci4: command tx timeout [ 1983.426833][T15652] bond31 (unregistering): Released all slaves [ 1983.442121][T15652] bond30 (unregistering): Released all slaves [ 1983.458762][T15652] bond29 (unregistering): Released all slaves [ 1983.476156][T15652] bond28 (unregistering): Released all slaves [ 1983.498638][T15652] bond27 (unregistering): Released all slaves [ 1983.516722][T15652] bond26 (unregistering): Released all slaves [ 1983.533702][T15652] bond25 (unregistering): Released all slaves [ 1983.746132][T15652] bond24 (unregistering): Released all slaves [ 1984.032457][T15652] bond23 (unregistering): Released all slaves [ 1984.061052][T15652] pimreg (unregistering): left allmulticast mode [ 1984.290837][T15652] bond22 (unregistering): Released all slaves [ 1984.314943][T15652] bond21 (unregistering): Released all slaves [ 1984.569537][T15652] bond20 (unregistering): Released all slaves [ 1984.794344][T15652] bond19 (unregistering): Released all slaves [ 1985.000080][T15652] bond18 (unregistering): Released all slaves [ 1985.012400][T15652] bond17 (unregistering): Released all slaves [ 1985.214140][T15652] bond16 (unregistering): Released all slaves [ 1985.230379][T15652] bond15 (unregistering): Released all slaves [ 1985.243307][T15652] bond14 (unregistering): Released all slaves [ 1985.261647][T15652] bond13 (unregistering): Released all slaves [ 1985.278419][T15652] bond12 (unregistering): Released all slaves [ 1985.335354][T14840] Bluetooth: hci4: command tx timeout [ 1985.506688][T15652] bond11 (unregistering): Released all slaves [ 1985.520565][T15652] bond10 (unregistering): Released all slaves [ 1985.707358][T15652] bond9 (unregistering): Released all slaves [ 1985.901802][T15652] bond8 (unregistering): Released all slaves [ 1986.110565][T15652] bond7 (unregistering): Released all slaves [ 1986.299780][T15652] bond6 (unregistering): Released all slaves [ 1986.497716][T15652] bond5 (unregistering): Released all slaves [ 1986.730496][T15652] bond4 (unregistering): Released all slaves [ 1986.755384][T15652] bond3 (unregistering): Released all slaves [ 1987.072262][T15652] bond2 (unregistering): Released all slaves [ 1987.272100][T15652] bond1 (unregistering): Released all slaves [ 1987.853764][T15652] team0 (unregistering): Port device team_slave_1 removed [ 1988.487167][T23826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1988.613408][T24030] syzkaller1: entered promiscuous mode [ 1988.632263][T24030] syzkaller1: entered allmulticast mode [ 1988.889992][T23826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1988.899902][T24059] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4799'. [ 1988.978681][T15650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1988.985905][T15650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1989.038540][T24070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4800'. [ 1989.069972][T15664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1989.077262][T15664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1989.850431][T23826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1989.946109][T23826] veth0_vlan: entered promiscuous mode [ 1989.960690][T23826] veth1_vlan: entered promiscuous mode [ 1989.996367][T23826] veth0_macvtap: entered promiscuous mode [ 1990.015596][T23826] veth1_macvtap: entered promiscuous mode [ 1990.037365][T23826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1990.048666][T23826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.059288][T23826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1990.070204][T23826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.080352][T23826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1990.091037][T23826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.103715][T23826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1990.119384][T23826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1990.130362][T23826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.140891][T23826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1990.151489][T23826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.161451][T23826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1990.172196][T23826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.186221][T23826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1990.195423][T24099] syzkaller0: entered promiscuous mode [ 1990.202008][T24099] syzkaller0: entered allmulticast mode [ 1990.217874][T23826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.227025][T23826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.237297][T23826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.246470][T23826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.472055][T15650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.479930][T15650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.549221][T24102] syzkaller1: entered promiscuous mode [ 1990.557232][T24102] syzkaller1: entered allmulticast mode [ 1990.563777][T24107] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4810'. [ 1990.583846][T15662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.605975][T15662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.731290][T24113] vlan2: entered allmulticast mode [ 1990.768681][T24113] gretap0: entered allmulticast mode [ 1991.007556][T24122] syzkaller0: entered promiscuous mode [ 1991.053637][T24122] syzkaller0: entered allmulticast mode [ 1991.381545][T20506] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1991.395243][T20506] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1991.405610][T20506] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1991.415844][T20506] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1991.431983][T20506] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1991.442352][T20506] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1991.887308][T24134] chnl_net:caif_netlink_parms(): no params data found [ 1992.209869][T24134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1992.228171][T24134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1992.242640][T24134] bridge_slave_0: entered allmulticast mode [ 1992.259155][T24134] bridge_slave_0: entered promiscuous mode [ 1992.268490][T24134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1992.276878][T24134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1992.284506][T24134] bridge_slave_1: entered allmulticast mode [ 1992.292890][T24134] bridge_slave_1: entered promiscuous mode [ 1992.358182][T24134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1992.407308][T24134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1992.524282][T24134] team0: Port device team_slave_0 added [ 1992.532519][T24134] team0: Port device team_slave_1 added [ 1992.566628][T24134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1992.582146][T24134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1992.609726][T24134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1992.669793][T24134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1992.677325][T24134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1992.703432][ C0] vkms_vblank_simulate: vblank timer overrun [ 1992.712559][T24134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1993.492261][T14840] Bluetooth: hci3: command tx timeout [ 1993.847811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1993.990404][T24183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4830'. [ 1995.572969][T14840] Bluetooth: hci3: command tx timeout [ 1996.162201][T24134] hsr_slave_0: entered promiscuous mode [ 1996.168505][T24134] hsr_slave_1: entered promiscuous mode [ 1996.175663][T24134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1996.183467][T24134] Cannot create hsr debugfs directory [ 1996.648325][T24134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.740922][T24134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.856176][T24134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.947443][T24134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1997.084989][ T1143] tipc: Disabling bearer [ 1997.113456][ T1143] tipc: Left network mode [ 1997.652082][T14840] Bluetooth: hci3: command tx timeout [ 1998.030097][ T1143] hsr_slave_0: left promiscuous mode [ 1998.037846][ T1143] hsr_slave_1: left promiscuous mode [ 1998.047563][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1998.055398][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1998.063636][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1998.071211][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1998.079215][ T1143] bridge_slave_1: left allmulticast mode [ 1998.085191][ T1143] bridge_slave_1: left promiscuous mode [ 1998.090922][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1998.100357][ T1143] bridge_slave_0: left allmulticast mode [ 1998.106106][ T1143] bridge_slave_0: left promiscuous mode [ 1998.113188][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1998.206737][ T1143] veth1_macvtap: left promiscuous mode [ 1998.217970][ T1143] veth0_macvtap: left promiscuous mode [ 1998.223795][ T1143] veth1_vlan: left promiscuous mode [ 1998.229151][ T1143] veth0_vlan: left promiscuous mode [ 1998.523452][ T1143] bond36 (unregistering): Released all slaves [ 1998.537526][ T1143] bond35 (unregistering): Released all slaves [ 1998.550273][ T1143] bond34 (unregistering): Released all slaves [ 1998.567431][ T1143] bond33 (unregistering): Released all slaves [ 1998.581467][ T1143] bond32 (unregistering): Released all slaves [ 1998.608776][ T1143] bond31 (unregistering): Released all slaves [ 1998.814342][ T1143] bond30 (unregistering): Released all slaves [ 1999.020422][ T1143] bond29 (unregistering): Released all slaves [ 1999.219594][ T1143] bond28 (unregistering): Released all slaves [ 1999.422447][ T1143] bond27 (unregistering): Released all slaves [ 1999.471160][T24198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1999.732343][T14840] Bluetooth: hci3: command tx timeout [ 1999.907303][ T1143] bond26 (unregistering): Released all slaves [ 2000.179521][ T1143] bond25 (unregistering): Released all slaves [ 2000.425122][ T1143] bond24 (unregistering): Released all slaves [ 2000.629402][ T1143] bond23 (unregistering): Released all slaves [ 2000.641621][ T1143] bond22 (unregistering): Released all slaves [ 2000.849442][ T1143] bond21 (unregistering): Released all slaves [ 2000.862657][ T1143] bond20 (unregistering): Released all slaves [ 2000.877011][ T1143] bond19 (unregistering): Released all slaves [ 2000.899515][ T1143] bond18 (unregistering): Released all slaves [ 2000.915060][ T1143] bond17 (unregistering): Released all slaves [ 2001.135922][ T1143] bond16 (unregistering): Released all slaves [ 2001.153545][ T1143] bond15 (unregistering): Released all slaves [ 2001.356120][ T1143] bond14 (unregistering): Released all slaves [ 2001.556491][ T1143] bond13 (unregistering): Released all slaves [ 2001.568632][ T1143] bond12 (unregistering): Released all slaves [ 2001.787121][ T1143] bond11 (unregistering): Released all slaves [ 2001.803511][ T1143] bond10 (unregistering): Released all slaves [ 2002.023597][ T1143] bond9 (unregistering): Released all slaves [ 2002.219176][ T1143] bond8 (unregistering): Released all slaves [ 2002.434254][ T1143] bond7 (unregistering): Released all slaves [ 2002.657958][ T1143] bond6 (unregistering): Released all slaves [ 2002.867476][ T1143] bond5 (unregistering): Released all slaves [ 2003.063398][ T1143] bond4 (unregistering): Released all slaves [ 2003.274956][ T1143] bond3 (unregistering): Released all slaves [ 2003.468406][ T1143] bond2 (unregistering): Released all slaves [ 2003.669194][ T1143] bond1 (unregistering): Released all slaves [ 2004.466284][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 2005.173898][T24134] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2005.209702][T24134] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2005.221181][T24134] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2005.247980][T24134] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2005.549267][T24134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2005.631001][T24134] 8021q: adding VLAN 0 to HW filter on device team0 [ 2005.784915][T15660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2005.792126][T15660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2005.830679][T15662] bridge0: port 2(bridge_slave_1) entered blocking state [ 2005.838032][T15662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2006.327106][ T1143] IPVS: stop unused estimator thread 0... [ 2006.704683][T24284] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2006.712987][ T5832] IPVS: starting estimator thread 0... [ 2006.802896][T24286] IPVS: using max 19 ests per chain, 45600 per kthread [ 2006.875626][T24134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2006.965996][T24134] veth0_vlan: entered promiscuous mode [ 2006.999476][T24134] veth1_vlan: entered promiscuous mode [ 2007.028342][T24295] xt_connbytes: Forcing CT accounting to be enabled [ 2007.055563][T24134] veth0_macvtap: entered promiscuous mode [ 2007.088292][T24134] veth1_macvtap: entered promiscuous mode [ 2007.137275][T24134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2007.162549][T24134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2007.189645][T24134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2007.222841][T24134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2007.247710][T24134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2007.322986][T24134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2007.357201][T24134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2007.406248][T24134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2007.419634][T24134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2007.434155][T24134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2007.451541][T24134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2007.462086][T24134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2007.472994][T24134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2007.496380][T24134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2007.536829][T24134] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.547598][T24134] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.587004][T24134] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.609218][T24134] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2010.536990][T24304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2010.632082][T15660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2010.639960][T15660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2010.737129][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2010.758523][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2010.832400][T24327] tipc: Started in network mode [ 2010.842696][T24327] tipc: Node identity 6ec9ecb7866a, cluster identity 4711 [ 2010.860293][T24327] tipc: Enabled bearer , priority 0 [ 2010.885313][T24327] syzkaller0: entered promiscuous mode [ 2010.895486][T24327] syzkaller0: entered allmulticast mode [ 2010.927875][T24327] tipc: Resetting bearer [ 2010.942273][T24325] tipc: Resetting bearer [ 2010.997666][T24325] tipc: Disabling bearer [ 2011.035658][T24334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2011.045070][T24334] bond0: (slave bond1): Enslaving as an active interface with an up link [ 2011.054259][T24335] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4812'. [ 2011.125401][T24335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2011.147225][T24335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2011.165712][T24335] bond0 (unregistering): (slave bond1): Releasing backup interface [ 2011.180115][T24335] bond0 (unregistering): Released all slaves [ 2011.850858][T20506] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2011.867913][T20506] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2011.880231][T20506] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2011.888609][T20506] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2011.901126][T20506] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2011.909235][T20506] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2012.157654][T24354] chnl_net:caif_netlink_parms(): no params data found [ 2012.297063][T24354] bridge0: port 1(bridge_slave_0) entered blocking state [ 2012.310093][T24354] bridge0: port 1(bridge_slave_0) entered disabled state [ 2012.317625][T24354] bridge_slave_0: entered allmulticast mode [ 2012.333828][T24354] bridge_slave_0: entered promiscuous mode [ 2012.347653][T24354] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.358210][T24354] bridge0: port 2(bridge_slave_1) entered disabled state [ 2012.370067][T24354] bridge_slave_1: entered allmulticast mode [ 2012.388201][T24354] bridge_slave_1: entered promiscuous mode [ 2012.446715][T24354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2012.460928][T24354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2012.517346][T24354] team0: Port device team_slave_0 added [ 2012.525591][T24354] team0: Port device team_slave_1 added [ 2012.609244][T24354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2012.616954][T24354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2012.645561][T24354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2012.657633][T24354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2012.664768][T24354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2012.691011][T24354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2012.738867][T24354] hsr_slave_0: entered promiscuous mode [ 2012.745417][T24354] hsr_slave_1: entered promiscuous mode [ 2012.879421][T24354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.947154][T24354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.038539][T24354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.140388][T24354] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.264793][ T1143] tipc: Disabling bearer [ 2013.297940][ T1143] tipc: Left network mode [ 2013.960525][T24377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4888'. [ 2013.972103][T14840] Bluetooth: hci2: command tx timeout [ 2014.128324][T24385] syzkaller0: entered promiscuous mode [ 2014.134952][T24385] syzkaller0: entered allmulticast mode [ 2014.281664][T24344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2014.318504][T24354] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2014.334726][T24354] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2014.432060][T24354] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2014.451710][T24389] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input135 [ 2014.462458][T24354] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2014.508544][ T1143] hsr_slave_0: left promiscuous mode [ 2014.529233][ T1143] hsr_slave_1: left promiscuous mode [ 2014.544385][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2014.561722][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2014.584168][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2014.591653][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2014.608621][T24395] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4893'. [ 2014.618922][ T1143] bridge_slave_1: left allmulticast mode [ 2014.628231][ T1143] bridge_slave_1: left promiscuous mode [ 2014.638337][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 2014.649329][ T1143] bridge_slave_0: left allmulticast mode [ 2014.655553][ T1143] bridge_slave_0: left promiscuous mode [ 2014.661788][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 2014.836967][ T1143] veth1_macvtap: left promiscuous mode [ 2014.842668][ T1143] veth0_macvtap: left promiscuous mode [ 2014.848322][ T1143] veth1_vlan: left promiscuous mode [ 2014.859535][ T1143] veth0_vlan: left promiscuous mode [ 2015.159027][ T1143] bond40 (unregistering): Released all slaves [ 2015.363385][ T1143] bond39 (unregistering): Released all slaves [ 2015.572600][ T1143] bond38 (unregistering): Released all slaves [ 2015.596800][ T1143] bond37 (unregistering): Released all slaves [ 2015.611034][ T1143] bond36 (unregistering): Released all slaves [ 2015.825589][ T1143] bond35 (unregistering): Released all slaves [ 2015.837868][ T1143] bond34 (unregistering): Released all slaves [ 2016.037068][ T1143] bond33 (unregistering): Released all slaves [ 2016.049489][ T1143] bond32 (unregistering): Released all slaves [ 2016.055711][T14840] Bluetooth: hci2: command tx timeout [ 2016.241519][ T1143] bond31 (unregistering): Released all slaves [ 2016.442044][ T1143] bond30 (unregistering): Released all slaves [ 2016.622940][ T1143] bond29 (unregistering): Released all slaves [ 2016.815773][ T1143] bond28 (unregistering): Released all slaves [ 2017.019131][ T1143] bond27 (unregistering): Released all slaves [ 2017.034167][ T1143] bond26 (unregistering): Released all slaves [ 2017.222837][ T1143] bond25 (unregistering): Released all slaves [ 2017.235138][ T1143] bond24 (unregistering): Released all slaves [ 2017.251063][ T1143] bond23 (unregistering): Released all slaves [ 2017.448508][ T1143] bond22 (unregistering): Released all slaves [ 2017.460744][ T1143] bond21 (unregistering): Released all slaves [ 2017.473806][ T1143] bond20 (unregistering): Released all slaves [ 2017.500509][ T1143] bond19 (unregistering): Released all slaves [ 2017.517629][ T1143] bond18 (unregistering): Released all slaves [ 2017.550014][ T1143] bond17 (unregistering): Released all slaves [ 2017.562720][ T1143] bond16 (unregistering): Released all slaves [ 2017.575796][ T1143] bond15 (unregistering): Released all slaves [ 2017.779824][ T1143] bond14 (unregistering): Released all slaves [ 2017.793281][ T1143] bond13 (unregistering): Released all slaves [ 2018.021430][ T1143] bond12 (unregistering): Released all slaves [ 2018.135202][T14840] Bluetooth: hci2: command tx timeout [ 2018.221382][ T1143] bond11 (unregistering): Released all slaves [ 2018.234758][ T1143] bond10 (unregistering): Released all slaves [ 2018.249040][ T1143] bond9 (unregistering): Released all slaves [ 2018.465887][ T1143] bond8 (unregistering): Released all slaves [ 2018.673776][ T1143] bond7 (unregistering): Released all slaves [ 2018.857215][ T1143] bond6 (unregistering): Released all slaves [ 2019.040353][ T1143] bond5 (unregistering): Released all slaves [ 2019.243236][ T1143] bond4 (unregistering): Released all slaves [ 2019.438293][ T1143] bond3 (unregistering): Released all slaves [ 2019.626472][ T1143] bond2 (unregistering): Released all slaves [ 2019.818736][ T1143] bond1 (unregistering): Released all slaves [ 2020.213044][T14840] Bluetooth: hci2: command tx timeout [ 2020.464407][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 2021.276786][T24354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2021.344215][T24354] 8021q: adding VLAN 0 to HW filter on device team0 [ 2021.375149][T15662] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.382347][T15662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2021.470045][T15666] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.477256][T15666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2021.546107][T24422] 8021q: VLANs not supported on caif0 [ 2021.750545][T24354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2022.108241][T24437] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4904'. [ 2022.304133][T24354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2022.464663][T24354] veth0_vlan: entered promiscuous mode [ 2022.480566][T24354] veth1_vlan: entered promiscuous mode [ 2022.585353][T24354] veth0_macvtap: entered promiscuous mode [ 2022.623675][T24354] veth1_macvtap: entered promiscuous mode [ 2022.664145][T24354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.675003][T24354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.686992][T24354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.697999][T24354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.721939][T24354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.736217][T24354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.765953][T24354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2022.778799][T24354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2022.795483][T24354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.805432][T24354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2022.816059][T24354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.826011][T24354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2022.836602][T24354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.848851][T24354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2022.880358][T24354] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2022.890460][T24354] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2022.899369][T24354] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2022.908303][T24354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.133155][T24454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4909'. [ 2023.197494][T24456] syzkaller1: entered promiscuous mode [ 2023.205967][T24456] syzkaller1: entered allmulticast mode [ 2024.250538][T24412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2024.362749][T15660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.402301][T15660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2024.440798][T24463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4913'. [ 2024.457371][T15660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.472070][T15660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2024.751898][ T5773] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2024.850903][T24483] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4921'. [ 2024.932853][ T5773] usb 5-1: device descriptor read/64, error -71 [ 2025.222010][ T5773] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2025.384746][ T5773] usb 5-1: device descriptor read/64, error -71 [ 2025.506110][ T5773] usb usb5-port1: attempt power cycle [ 2025.771869][T24518] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4933'. [ 2025.921857][ T5773] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2025.952672][ T5773] usb 5-1: device descriptor read/8, error -71 [ 2026.231917][ T5773] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2026.265578][ T5773] usb 5-1: device descriptor read/8, error -71 [ 2026.392046][ T5773] usb usb5-port1: unable to enumerate USB device [ 2027.507020][T24527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4935'. [ 2027.915044][T24486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2028.236577][T24540] bond0: (slave bond_slave_1): Releasing backup interface [ 2028.237162][T24542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4944'. [ 2028.592377][ T5808] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2028.801882][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 2028.809551][ T5808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2028.822275][ T5808] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2028.840199][ T5808] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2028.850537][ T5808] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2028.865806][ T5808] usb 5-1: Manufacturer: syz [ 2028.878744][ T5808] usb 5-1: config 0 descriptor?? [ 2031.260929][ T5808] usb 5-1: USB disconnect, device number 99 [ 2031.333075][T24548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2031.392331][T24567] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 2031.710343][T24581] tipc: Enabled bearer , priority 0 [ 2031.729930][T24583] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4958'. [ 2031.745731][T24581] syzkaller0: entered promiscuous mode [ 2031.764401][T24581] syzkaller0: entered allmulticast mode [ 2031.855346][T24581] tipc: Resetting bearer [ 2031.878793][T24580] tipc: Resetting bearer [ 2031.955679][T24580] tipc: Disabling bearer [ 2032.420186][T24620] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4970'. [ 2033.043259][T24649] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4981'. [ 2033.206533][T24654] IPVS: Scheduler module ip_vs_sip not found [ 2033.917780][T24682] syzkaller0: entered promiscuous mode [ 2033.924183][T24682] syzkaller0: entered allmulticast mode [ 2034.117077][T24690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4997'. [ 2034.257218][T24696] syzkaller0: entered promiscuous mode [ 2034.263127][T24696] syzkaller0: entered allmulticast mode [ 2034.393972][T24700] syzkaller0: entered promiscuous mode [ 2034.401539][T24700] syzkaller0: entered allmulticast mode [ 2034.526710][T24706] xt_hashlimit: size too large, truncated to 1048576 [ 2034.705698][T24714] 8021q: VLANs not supported on nlmon0 [ 2035.142021][T24725] netlink: 'syz.1.5013': attribute type 1 has an invalid length. [ 2035.217725][T24728] syzkaller0: entered promiscuous mode [ 2035.229533][T24728] syzkaller0: entered allmulticast mode [ 2035.540532][T24734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5017'. [ 2035.781946][ T5914] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2035.858298][T24746] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 2035.982067][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 2036.010322][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.036250][ T5914] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2036.066843][ T5914] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2036.080395][ T5914] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2036.096983][ T5914] usb 3-1: Manufacturer: syz [ 2036.120581][ T5914] usb 3-1: config 0 descriptor?? [ 2036.906850][T24764] syzkaller0: entered promiscuous mode [ 2036.922766][T24764] syzkaller0: entered allmulticast mode [ 2037.461142][T24772] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 2037.669118][T24782] geneve2: entered promiscuous mode [ 2037.735617][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.742944][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.135627][T24796] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 2038.515507][T16288] usb 3-1: USB disconnect, device number 72 [ 2038.989802][T24808] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.997313][T24808] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.519466][T24808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2039.555752][T24808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2039.958892][T24808] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.968643][T24808] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.979124][T24808] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.988116][T24808] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2040.082779][T24808] syz_tun: left allmulticast mode [ 2040.671931][T14801] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2040.861827][T14801] usb 5-1: Using ep0 maxpacket: 16 [ 2040.870647][T14801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2040.883918][T14801] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2040.900236][T14801] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2040.909848][T14801] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2040.918227][T14801] usb 5-1: Manufacturer: syz [ 2040.927400][T14801] usb 5-1: config 0 descriptor?? [ 2041.655232][T24872] raw_sendmsg: syz.3.5064 forgot to set AF_INET. Fix it! [ 2043.372940][ T5808] usb 5-1: USB disconnect, device number 100 [ 2043.990446][T24909] syzkaller0: entered promiscuous mode [ 2044.012098][T24909] syzkaller0: entered allmulticast mode [ 2044.033465][T24907] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5079'. [ 2047.232811][T24935] workqueue: Failed to create a rescuer kthread for wq "bond35": -EINTR [ 2047.309120][T24942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5089'. [ 2047.387905][T24942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5089'. [ 2047.657831][T24963] syzkaller0: entered promiscuous mode [ 2047.665679][T24963] syzkaller0: entered allmulticast mode [ 2048.890859][T25009] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5117'. [ 2048.947212][T25012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5118'. [ 2048.958536][T25012] xt_hashlimit: size too large, truncated to 1048576 [ 2048.965700][T25012] xt_hashlimit: overflow, try lower: 0/0 [ 2048.973503][T25012] syz_tun: entered allmulticast mode [ 2049.035344][T25011] syz_tun: left allmulticast mode [ 2049.788313][T25042] syzkaller0: entered promiscuous mode [ 2049.794141][T25042] syzkaller0: entered allmulticast mode [ 2049.835150][T25043] : renamed from veth0_to_bond [ 2050.279341][T25061] syzkaller0: entered promiscuous mode [ 2050.285092][T25061] syzkaller0: entered allmulticast mode [ 2050.420804][T25065] syzkaller0: entered promiscuous mode [ 2050.428824][T25065] syzkaller0: entered allmulticast mode [ 2052.245636][T25134] syzkaller0: entered promiscuous mode [ 2052.251337][T25134] syzkaller0: entered allmulticast mode [ 2052.860800][T25158] syzkaller0: entered promiscuous mode [ 2052.866818][T25158] syzkaller0: entered allmulticast mode [ 2053.270249][T25174] syzkaller1: entered promiscuous mode [ 2053.275936][T25174] syzkaller1: entered allmulticast mode [ 2054.245380][T25219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5194'. [ 2055.780108][T25295] geneve2: entered promiscuous mode [ 2056.896989][T20506] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2056.910489][T20506] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2056.922354][T20506] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2056.943880][T20506] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2056.953883][T20506] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2056.963688][T20506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2057.700936][T25335] chnl_net:caif_netlink_parms(): no params data found [ 2057.862136][T25356] xt_connbytes: Forcing CT accounting to be enabled [ 2057.922408][T25352] syzkaller0: entered promiscuous mode [ 2057.928022][T25352] syzkaller0: entered allmulticast mode [ 2058.013584][T15652] tipc: Disabling bearer [ 2058.022955][T15652] tipc: Left network mode [ 2058.553339][T25335] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.560722][T25335] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.568492][T25335] bridge_slave_0: entered allmulticast mode [ 2058.576475][T25335] bridge_slave_0: entered promiscuous mode [ 2058.686391][T25335] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.695253][T14840] Bluetooth: hci2: command tx timeout [ 2058.737488][T25335] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.768440][T25335] bridge_slave_1: entered allmulticast mode [ 2058.811042][T25335] bridge_slave_1: entered promiscuous mode [ 2058.987136][T25335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2058.997103][T25394] syzkaller0: entered promiscuous mode [ 2059.012258][T14840] Bluetooth: hci0: command tx timeout [ 2059.026765][T25394] syzkaller0: entered allmulticast mode [ 2059.124923][T25335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2059.138542][T25404] xt_connbytes: Forcing CT accounting to be enabled [ 2059.458305][T25335] team0: Port device team_slave_0 added [ 2059.578685][T25335] team0: Port device team_slave_1 added [ 2059.668570][T25335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2059.682146][T25335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2059.747414][T25335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2059.817298][T25335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2059.825520][T25335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2059.856657][T25335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2060.032525][T25335] hsr_slave_0: entered promiscuous mode [ 2060.039296][T25335] hsr_slave_1: entered promiscuous mode [ 2060.046999][T25335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2060.054895][T25335] Cannot create hsr debugfs directory [ 2060.118959][T15652] hsr_slave_0: left promiscuous mode [ 2060.125377][T15652] hsr_slave_1: left promiscuous mode [ 2060.131563][T15652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2060.140050][T15652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2060.151458][T15652] bridge_slave_1: left allmulticast mode [ 2060.159643][T15652] bridge_slave_1: left promiscuous mode [ 2060.165700][T15652] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.174915][T15652] bridge_slave_0: left allmulticast mode [ 2060.180721][T15652] bridge_slave_0: left promiscuous mode [ 2060.186655][T15652] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.206299][T15652] bond37 (unregistering): Released all slaves [ 2060.235035][T15652] bond36 (unregistering): Released all slaves [ 2060.264445][T15652] bond35 (unregistering): Released all slaves [ 2060.296835][T15652] bond34 (unregistering): Released all slaves [ 2060.324098][T15652] bond33 (unregistering): Released all slaves [ 2060.628342][T15652] bond32 (unregistering): Released all slaves [ 2060.648480][T15652] bond31 (unregistering): Released all slaves [ 2060.670188][T15652] bond30 (unregistering): Released all slaves [ 2060.923778][T15652] bond29 (unregistering): Released all slaves [ 2061.098866][T14840] Bluetooth: hci0: command tx timeout [ 2061.144175][T15652] bond28 (unregistering): Released all slaves [ 2061.159221][T15652] bond27 (unregistering): Released all slaves [ 2061.177100][T15652] bond26 (unregistering): Released all slaves [ 2061.193523][T15652] bond25 (unregistering): Released all slaves [ 2061.213783][T15652] bond24 (unregistering): Released all slaves [ 2061.227706][T15652] bond23 (unregistering): Released all slaves [ 2061.245326][T15652] bond22 (unregistering): Released all slaves [ 2061.447402][T15652] bond21 (unregistering): Released all slaves [ 2061.460429][T15652] bond20 (unregistering): Released all slaves [ 2061.701439][T15652] bond19 (unregistering): Released all slaves [ 2061.726195][T15652] bond18 (unregistering): Released all slaves [ 2061.759373][T15652] bond17 (unregistering): Released all slaves [ 2062.031421][T15652] bond16 (unregistering): Released all slaves [ 2062.218747][T15652] bond15 (unregistering): Released all slaves [ 2062.417558][T15652] bond14 (unregistering): Released all slaves [ 2062.616759][T15652] bond13 (unregistering): Released all slaves [ 2062.631189][T15652] bond12 (unregistering): Released all slaves [ 2062.646872][T15652] bond11 (unregistering): Released all slaves [ 2062.661228][T15652] bond10 (unregistering): Released all slaves [ 2062.678355][T15652] bond9 (unregistering): Released all slaves [ 2062.886553][T15652] bond8 (unregistering): Released all slaves [ 2063.080168][T15652] bond7 (unregistering): Released all slaves [ 2063.190193][T14840] Bluetooth: hci0: command tx timeout [ 2063.291075][T15652] bond6 (unregistering): Released all slaves [ 2063.485979][T15652] bond5 (unregistering): Released all slaves [ 2063.499160][T15652] bond4 (unregistering): Released all slaves [ 2063.711283][T15652] bond3 (unregistering): Released all slaves [ 2063.901163][T15652] bond2 (unregistering): Released all slaves [ 2064.091508][T15652] bond1 (unregistering): Released all slaves [ 2064.772232][T15652] team0 (unregistering): Port device team_slave_1 removed [ 2064.829380][T15652] team0 (unregistering): Port device team_slave_0 removed [ 2064.890482][T15652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2064.959879][T15652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2065.269501][T14840] Bluetooth: hci0: command tx timeout [ 2065.481782][T15652] bond0 (unregistering): Released all slaves [ 2065.590765][T25428] syzkaller0: entered promiscuous mode [ 2065.596501][T25428] syzkaller0: entered allmulticast mode [ 2065.610099][T25435] syzkaller0: entered promiscuous mode [ 2065.616141][T25435] syzkaller0: entered allmulticast mode [ 2065.895526][T25454] erspan0: entered promiscuous mode [ 2066.108759][T25467] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 2067.175601][T25482] syzkaller0: entered promiscuous mode [ 2067.181162][T25482] syzkaller0: entered allmulticast mode [ 2068.218311][T25536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5284'. [ 2068.235034][T25536] xt_hashlimit: size too large, truncated to 1048576 [ 2068.242587][T25536] xt_hashlimit: overflow, try lower: 0/0 [ 2070.735174][T25536] syz_tun: entered allmulticast mode [ 2070.740864][T25536] syz_tun: left allmulticast mode [ 2070.959528][T25335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2070.970790][T25335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2070.999593][T25335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2071.019712][T25335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2071.227816][T25335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2071.284486][T25335] 8021q: adding VLAN 0 to HW filter on device team0 [ 2071.328243][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 2071.335455][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2071.385034][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 2071.392239][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2071.533799][T25561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5292'. [ 2071.641208][T25573] syzkaller0: entered promiscuous mode [ 2071.666872][T25573] syzkaller0: entered allmulticast mode [ 2071.683914][T25574] netlink: 'syz.2.5295': attribute type 39 has an invalid length. [ 2072.075516][T25335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2072.168746][T25596] IPVS: rr: FWM 3 0x00000003 - no destination available [ 2072.660461][T25335] veth0_vlan: entered promiscuous mode [ 2072.687900][T25335] veth1_vlan: entered promiscuous mode [ 2072.729621][T25627] syzkaller0: entered promiscuous mode [ 2072.736014][T25627] syzkaller0: entered allmulticast mode [ 2072.825008][T25335] veth0_macvtap: entered promiscuous mode [ 2072.848517][T25335] veth1_macvtap: entered promiscuous mode [ 2072.901526][T25335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2072.920367][T25335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.933886][T25335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2072.945718][T25335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.955948][T25335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2072.966504][T25335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.977649][T25335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2072.988567][T25631] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.006538][T25335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.042176][T25335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.063022][T25335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.073746][T25335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.084786][T25335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.102090][T25335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.120644][T25335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2073.140654][T25335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.161318][T25335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.170170][T25335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.188834][T25335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.417325][T25643] syzkaller0: entered promiscuous mode [ 2073.437179][T25643] syzkaller0: entered allmulticast mode [ 2073.522367][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.556788][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.680556][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.704133][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.985122][T25674] geneve2: entered promiscuous mode [ 2074.333123][T25686] syzkaller0: entered promiscuous mode [ 2074.349150][T25686] syzkaller0: entered allmulticast mode [ 2077.834602][T25717] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 2077.842745][T25715] 8021q: VLANs not supported on caif0 [ 2078.249045][T25742] syzkaller0: entered promiscuous mode [ 2078.258651][T25742] syzkaller0: entered allmulticast mode [ 2078.533779][T25749] syzkaller0: entered promiscuous mode [ 2078.539303][T25749] syzkaller0: entered allmulticast mode [ 2082.133233][T25752] 8021q: VLANs not supported on caif0 [ 2082.153101][T25779] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2082.263080][T25784] xt_connbytes: Forcing CT accounting to be enabled [ 2082.344815][T25789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5346'. [ 2082.732871][T25808] netlink: 'syz.4.5353': attribute type 39 has an invalid length. [ 2082.800233][T25812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5354'. [ 2082.839526][T25812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5354'. [ 2082.965798][T25817] syzkaller0: entered promiscuous mode [ 2082.971426][T25817] syzkaller0: entered allmulticast mode [ 2083.096815][T25819] batadv0: entered promiscuous mode [ 2083.109369][T25819] vlan2: entered promiscuous mode [ 2083.487266][T25839] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5364'. [ 2083.558309][T25839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5364'. [ 2083.742746][T25848] syzkaller0: entered promiscuous mode [ 2083.748456][T25848] syzkaller0: entered allmulticast mode [ 2083.779236][T25845] syzkaller0: entered promiscuous mode [ 2083.786551][T25845] syzkaller0: entered allmulticast mode [ 2083.834643][T25850] netlink: 'syz.3.5368': attribute type 39 has an invalid length. [ 2084.017880][T25854] 8021q: VLANs not supported on caif0 [ 2084.275669][T25868] syzkaller0: entered promiscuous mode [ 2084.290932][T25868] syzkaller0: entered allmulticast mode [ 2084.332679][T25865] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5374'. [ 2084.342550][T25865] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5374'. [ 2084.639155][T25885] syzkaller0: entered promiscuous mode [ 2084.645237][T25885] syzkaller0: entered allmulticast mode [ 2084.691317][T25886] bridge0: entered promiscuous mode [ 2084.704378][T25886] bridge0: left promiscuous mode [ 2084.738991][T25884] 8021q: VLANs not supported on caif0 [ 2084.893536][T25891] netlink: 'syz.3.5383': attribute type 39 has an invalid length. [ 2084.967732][T25901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5386'. [ 2085.271445][T25911] 8021q: VLANs not supported on caif0 [ 2085.281518][T25913] syzkaller0: entered promiscuous mode [ 2085.287393][T25913] syzkaller0: entered allmulticast mode [ 2085.476467][T25921] netlink: 'syz.3.5394': attribute type 39 has an invalid length. [ 2085.684650][T25931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5396'. [ 2085.906660][T25941] batadv0: entered promiscuous mode [ 2085.914093][T25941] vlan1: entered promiscuous mode [ 2086.178654][T25954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5407'. [ 2086.455743][T25965] 8021q: VLANs not supported on caif0 [ 2087.047412][T25995] 8021q: VLANs not supported on caif0 [ 2087.340365][T26005] syzkaller0: entered promiscuous mode [ 2087.349372][T26005] syzkaller0: entered allmulticast mode [ 2087.881575][T25893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2088.015293][T26027] __nla_validate_parse: 2 callbacks suppressed [ 2088.015310][T26027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5435'. [ 2088.050343][T26030] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5434'. [ 2088.673064][T26066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5447'. [ 2088.867788][T26078] syzkaller0: entered promiscuous mode [ 2088.873712][T26078] syzkaller0: entered allmulticast mode [ 2089.630598][T26122] syzkaller0: entered promiscuous mode [ 2089.636874][T26122] syzkaller0: entered allmulticast mode [ 2089.865021][T26128] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5465'. [ 2090.090454][T26137] syzkaller0: entered promiscuous mode [ 2090.096104][T26137] syzkaller0: entered allmulticast mode [ 2090.747675][T26162] syzkaller0: entered promiscuous mode [ 2090.756626][T26162] syzkaller0: entered allmulticast mode [ 2090.996556][T26168] syzkaller0: entered promiscuous mode [ 2091.003068][T26168] syzkaller0: entered allmulticast mode [ 2091.225417][T26184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5484'. [ 2091.267930][T26184] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5484'. [ 2091.401252][T26184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2091.421461][T26192] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5487'. [ 2091.436700][T26184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2091.457078][T26184] bond0 (unregistering): Released all slaves [ 2091.535309][T26194] syzkaller0: entered promiscuous mode [ 2091.552553][T26194] syzkaller0: entered allmulticast mode [ 2091.851463][T26205] syzkaller0: entered promiscuous mode [ 2091.866059][T26205] syzkaller0: entered allmulticast mode [ 2091.988255][T26214] netlink: 'syz.2.5497': attribute type 39 has an invalid length. [ 2092.266881][T26234] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5503'. [ 2092.294810][T26228] syzkaller0: entered promiscuous mode [ 2092.301199][T26228] syzkaller0: entered allmulticast mode [ 2092.320424][T26226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2093.020050][T26254] syzkaller0: entered promiscuous mode [ 2093.026811][T26254] syzkaller0: entered allmulticast mode [ 2093.186862][T26265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5515'. [ 2093.214254][T26265] xt_hashlimit: size too large, truncated to 1048576 [ 2093.229781][T26265] xt_hashlimit: overflow, try lower: 0/0 [ 2093.249829][T26265] lo: entered allmulticast mode [ 2093.483221][T26264] lo: left allmulticast mode [ 2093.599243][T26286] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5521'. [ 2094.991233][T26365] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5547'. [ 2095.045962][T26370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5547'. [ 2095.242383][T26373] 8021q: VLANs not supported on caif0 [ 2095.843592][T26411] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5559'. [ 2095.853113][T26398] syzkaller0: entered promiscuous mode [ 2095.862914][T26398] syzkaller0: entered allmulticast mode [ 2095.899597][T26411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5559'. [ 2099.125174][T26415] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5561'. [ 2099.182285][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.188988][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.707249][T26475] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5572'. [ 2099.751881][T26475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5572'. [ 2099.798517][T26479] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5575'. [ 2099.925786][T26487] syzkaller0: entered promiscuous mode [ 2099.941593][T26487] syzkaller0: entered allmulticast mode [ 2100.747481][T26535] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5585'. [ 2100.889448][T26547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5589'. [ 2101.087185][T26559] geneve2: entered promiscuous mode [ 2101.448319][T26585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5603'. [ 2101.569907][T26588] syzkaller0: entered promiscuous mode [ 2101.579043][T26588] syzkaller0: entered allmulticast mode [ 2101.868917][T26603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5610'. [ 2101.901407][T26603] xt_hashlimit: size too large, truncated to 1048576 [ 2101.920696][T26603] xt_hashlimit: overflow, try lower: 0/0 [ 2101.943325][T26609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5612'. [ 2101.971518][T26603] lo: entered allmulticast mode [ 2102.270467][T26627] syzkaller0: entered promiscuous mode [ 2102.276362][T26627] syzkaller0: entered allmulticast mode [ 2102.354851][T26602] lo: left allmulticast mode [ 2102.711462][T26653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5624'. [ 2104.154407][T26733] __nla_validate_parse: 5 callbacks suppressed [ 2104.154423][T26733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5645'. [ 2104.532218][T26749] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5648'. [ 2104.558121][T26749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5648'. [ 2104.813737][T26764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5654'. [ 2105.347854][T26795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5659'. [ 2105.566066][T26803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5663'. [ 2105.742158][T26808] syzkaller0: entered promiscuous mode [ 2105.747967][T26808] syzkaller0: entered allmulticast mode [ 2105.997984][T26824] dummy0: entered promiscuous mode [ 2106.036588][T26824] vlan1: entered promiscuous mode [ 2106.190405][T26832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5674'. [ 2106.375931][T20506] Bluetooth: hci4: command 0x0406 tx timeout [ 2107.415541][T26894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5695'. [ 2107.696077][T26907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5700'. [ 2107.708211][T26907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5700'. [ 2108.341677][T26936] syzkaller0: entered promiscuous mode [ 2108.347355][T26936] syzkaller0: entered allmulticast mode [ 2108.356407][T26936] 0: reclassify loop, rule prio 0, protocol 800 [ 2108.627513][T26942] 8021q: VLANs not supported on caif0 [ 2108.789953][T26948] syzkaller0: entered promiscuous mode [ 2108.796019][T26948] syzkaller0: entered allmulticast mode [ 2111.918428][T26950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5717'. [ 2112.633815][T26992] syzkaller0: entered promiscuous mode [ 2112.639358][T26992] syzkaller0: entered allmulticast mode [ 2115.846656][T27024] syzkaller0: entered promiscuous mode [ 2115.853470][T27024] syzkaller0: entered allmulticast mode [ 2116.614776][T20506] Bluetooth: hci3: command 0x0406 tx timeout [ 2119.765929][T27090] netlink: 'syz.1.5754': attribute type 39 has an invalid length. [ 2120.060767][T27092] syzkaller0: entered promiscuous mode [ 2120.067410][T27092] syzkaller0: entered allmulticast mode [ 2120.678328][T27121] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5763'. [ 2120.791112][T27127] syzkaller0: entered promiscuous mode [ 2120.799313][T27127] syzkaller0: entered allmulticast mode [ 2121.595719][T27158] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5774'. [ 2121.675542][T27160] syzkaller0: entered promiscuous mode [ 2121.681543][T27160] syzkaller0: entered allmulticast mode [ 2123.011176][T20506] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2123.048076][T20506] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2123.067824][T20506] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2123.086778][T20506] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2123.108774][T20506] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2123.128467][T20506] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2123.845890][T27191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input136 [ 2125.180021][T14840] Bluetooth: hci1: command tx timeout [ 2125.956202][T27187] chnl_net:caif_netlink_parms(): no params data found [ 2126.147259][T27187] bridge0: port 1(bridge_slave_0) entered blocking state [ 2126.155048][T27187] bridge0: port 1(bridge_slave_0) entered disabled state [ 2126.166404][T27187] bridge_slave_0: entered allmulticast mode [ 2126.176117][T27187] bridge_slave_0: entered promiscuous mode [ 2126.189396][T27187] bridge0: port 2(bridge_slave_1) entered blocking state [ 2126.199430][T27187] bridge0: port 2(bridge_slave_1) entered disabled state [ 2126.210135][T27187] bridge_slave_1: entered allmulticast mode [ 2126.239847][T27187] bridge_slave_1: entered promiscuous mode [ 2126.284542][T27187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2126.299073][T27187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2126.349103][T27187] team0: Port device team_slave_0 added [ 2126.359839][T27187] team0: Port device team_slave_1 added [ 2126.384157][T27187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2126.391262][T27187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2126.420073][T27187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2126.433610][T27187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2126.440655][T27187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2126.481177][T27187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2126.534209][T27187] hsr_slave_0: entered promiscuous mode [ 2126.541438][T27187] hsr_slave_1: entered promiscuous mode [ 2126.548774][T27187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2126.559176][T27187] Cannot create hsr debugfs directory [ 2126.777788][T27187] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2126.788086][T27187] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2126.797700][T27187] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2126.809363][T27187] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2126.885843][T27187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2126.907093][T27187] 8021q: adding VLAN 0 to HW filter on device team0 [ 2126.924798][T15660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2126.931990][T15660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2126.948929][T15660] bridge0: port 2(bridge_slave_1) entered blocking state [ 2126.956068][T15660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2127.162777][T27187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2127.261839][T14840] Bluetooth: hci1: command tx timeout [ 2127.384490][T27187] veth0_vlan: entered promiscuous mode [ 2127.400057][T27187] veth1_vlan: entered promiscuous mode [ 2127.431534][T27187] veth0_macvtap: entered promiscuous mode [ 2127.440781][T27187] veth1_macvtap: entered promiscuous mode [ 2127.459732][T27187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2127.470912][T27187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.481275][T27187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2127.492366][T27187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.502397][T27187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2127.513251][T27187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.524620][T27187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2127.535780][T27187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.547013][T27187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2127.560072][T27187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2127.571396][T27187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.582534][T27187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2127.594294][T27187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.604754][T27187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2127.615973][T27187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.626630][T27187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2127.637201][T27187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.648485][T27187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2127.663199][T27187] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.674983][T27187] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.685308][T27187] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.694451][T27187] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.805279][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2127.826251][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2127.858418][T15662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2127.866727][T15662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2127.954278][T27250] xt_connbytes: Forcing CT accounting to be enabled [ 2129.332005][T14840] Bluetooth: hci1: command tx timeout [ 2131.412257][T14840] Bluetooth: hci1: command tx timeout [ 2160.615111][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.621466][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.692039][T14840] Bluetooth: hci2: command 0x0406 tx timeout [ 2222.057001][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.063738][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2247.669012][T26894] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 2249.731864][T14840] Bluetooth: hci1: command 0x0406 tx timeout