last executing test programs: 26m12.284717432s ago: executing program 4 (id=2894): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) sendmmsg(r0, &(0x7f0000004fc0), 0x0, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/214, 0xd6}, 0x4}], 0x1, 0x45833af92e4b39ff, 0x0) 26m11.580062762s ago: executing program 4 (id=2898): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)=@routing={0xc, 0x2, 0x1, 0x8, 0x0, [@empty]}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) 26m10.889706764s ago: executing program 4 (id=2902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) 26m9.91586119s ago: executing program 4 (id=2905): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000180)=ANY=[], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x1000000, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1], 0xfe, 0x1a4, &(0x7f00000005c0)="$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") getdents64(r1, 0xfffffffffffffffe, 0xff80) 26m8.041478147s ago: executing program 4 (id=2914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)) 26m6.198571245s ago: executing program 4 (id=2919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x2, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26m3.568576106s ago: executing program 32 (id=2919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x2, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24m27.285225232s ago: executing program 0 (id=3242): syz_clone3(&(0x7f000000dd80)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) 24m26.152924148s ago: executing program 0 (id=3247): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) 24m25.433402756s ago: executing program 0 (id=3250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4600}, 0x24004800) 24m24.480946322s ago: executing program 0 (id=3253): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x50) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x1802, 0x0) 24m23.699229188s ago: executing program 0 (id=3257): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 24m22.910395346s ago: executing program 0 (id=3261): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0x0, 0x3f}}]}}}]}, 0x48}}, 0x24000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x8, @empty, 0xb}, 0x1c) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4) 24m20.905036595s ago: executing program 33 (id=3261): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0x0, 0x3f}}]}}}]}, 0x48}}, 0x24000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x8, @empty, 0xb}, 0x1c) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4) 18m1.1260704s ago: executing program 3 (id=4826): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 18m0.471508658s ago: executing program 3 (id=4830): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x8c, 0x30, 0xb, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x1, 0x0, 0x4, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x42}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) 17m59.867376518s ago: executing program 3 (id=4834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)={0x1c, r1, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 17m59.213795246s ago: executing program 3 (id=4839): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000180)=ANY=[], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x1000000, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1], 0xfe, 0x1a4, &(0x7f00000005c0)="$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") getdents64(r1, 0xfffffffffffffffe, 0xff80) 17m57.315357246s ago: executing program 3 (id=4849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) 17m56.213949129s ago: executing program 3 (id=4855): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17m54.400463511s ago: executing program 34 (id=4855): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m23.378969705s ago: executing program 1 (id=5942): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @null, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000071194700000000008510000002000000850000005b00000095000000000000009500a504000000006c0ec1084ccd00b3105f3248024beab8ff4642b3ef414c37d6ed29769652d1308625c43e7da9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r4, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000f100000000f3f92fa80e22b68c6ab5be3ed35ae43e9c18a4d4a2d1064c0e69c3bef3f13a6bed982cd63ef3ff20c35f8a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000001ac0)={r3, &(0x7f0000000980)='){:\x00', 0x450600, 0x0, 0x5, 0x0, &(0x7f0000001a80)=0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000001b00)=ANY=[@ANYBLOB="18460000ffffffff0000000000000000185a00000d0000000000000000000000b7080000000000007b8af8ff00000000b7080000700f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5010000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x3f, 0x2, 0x0, 0x0, "e543c064a9c2e134c87737179c3f3b506af8a3eff69f95b903fd3256eb7ab9415da023b615fcd93168b1a961f755810516c4907f950522da4e3718013d9d8bf2"}}}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001200090500000000000000000800bb0000000000c500008008000000", @ANYRES8=r2, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac517a485a23d0c3da32ce8f9b19fe043d3a672b0601c63c4f9c0bf2dc42c77065f2eea68b0190e2cbabf18269676787c764635889ca6c747973691886e2c92540eed"], 0xe0}], 0x1}, 0x0) 13m22.665623145s ago: executing program 1 (id=5945): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0xfffb, 0x0, 0x0, 0x9, 0x9b, 0x2, 0x5508, 0xff, 0x0, 0x5, 'syz0\x00'}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 13m22.006612941s ago: executing program 1 (id=5946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000001600)) 13m21.397015824s ago: executing program 1 (id=5949): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="2c0000006800010100000000020000000000000000000000140002000100000006"], 0x2c}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000000)={0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xffffffff, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x7, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x35, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0x2, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x1000005, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0xe, 0x4e6, 0x805, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x2231, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0xb2b4, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x8009, 0x1, 0x9, 0x5, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe328, 0x7, 0xfffffffc, 0x50000020, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffefff9, 0x2, 0x67, 0x1, 0x4, 0x101, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x40000000, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) recvmsg$qrtr(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000002c0)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x100) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0xc605, @private0, 0x6}}, 0x0, 0x0, 0x3d, 0x0, "f43ae9fbbe01c2b008b9ae3f0d99d2f5077df009be8a1c255bb75b2fe27449e18ac74f69cc4f7d9cd1a6bcd6cd091a8a5e21ee88b9a2e5298aa2f381d306f92e59bd1fb20ac2317248039486bd77a62e"}, 0xd8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) 13m18.925388149s ago: executing program 1 (id=5956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val, @void, @eth={@random="c98f0b33dc4c", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x7, 0x1c, 0x64, 0x0, 0x40, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010101}, @info_reply={0x10, 0x0, 0x0, 0x2, 0x3}}}}}}, 0x2e) 13m17.385831998s ago: executing program 1 (id=5961): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 13m2.030398021s ago: executing program 35 (id=5961): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 25.874481072s ago: executing program 8 (id=8205): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') socket(0x18, 0x800, 0x0) r3 = socket(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) 19.499600753s ago: executing program 6 (id=8215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x111}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d80000"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 18.466696496s ago: executing program 6 (id=8217): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) 17.683352014s ago: executing program 6 (id=8219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x100}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 16.318297768s ago: executing program 8 (id=8220): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0), 0xf) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x2000) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x50801, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) 15.876281976s ago: executing program 8 (id=8221): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006300)={0x4c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0xde}, @nested={0x34, 0x1, 0x0, 0x1, [@nested={0x30, 0xd2, 0x0, 0x1, [@nested={0x24, 0x4a, 0x0, 0x1, [@nested={0x1c, 0x11e, 0x0, 0x1, [@typed={0x10, 0x9e, 0x0, 0x0, @binary="6dc7536839e4cd404631d3fd"}, @nested={0x4, 0x66}, @nested={0x4, 0x74}]}, @nested={0x4, 0xef}]}, @typed={0x4, 0x146}, @nested={0x4, 0xd5}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40881}, 0x4000) 15.270424912s ago: executing program 8 (id=8223): syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="810100000000000081", @ANYRES32], 0x10) 13.574499958s ago: executing program 8 (id=8225): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x2a000, 0x32) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 12.372582048s ago: executing program 2 (id=8228): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x4e23, @local}, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000000)=0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001815", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="12cdde26e7c496e99a9cf8625ec9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r8, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x30, 0x800}, 0x14) 11.709754199s ago: executing program 2 (id=8229): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x100, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000024000100fcffeda0c655c0038a58c60700040000000100000004004880100001800c00108004000880040008800c0002000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xa8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 11.517940054s ago: executing program 5 (id=8230): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) 11.384970788s ago: executing program 7 (id=8231): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0), 0xf) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x2000) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x50801, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) 10.049129582s ago: executing program 7 (id=8232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x520}, 0x1, 0x0, 0x0, 0x8004}, 0x80) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r1, 0xc, 0x0, 0x80, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012"], 0x3c}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0800000008440000380012800b00010067656e65766500002800028005000900010000001400070000000000000000000000000000140001050003000800000008000a00", @ANYRES32=r8], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x5a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004e00004c00000000000690780a210124ac1414aa44140701e000000100000000e000000100800000070d064d291a00000000d05c4900000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00200090780000"], 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x38}}, 0x0) 9.59731929s ago: executing program 5 (id=8233): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) unshare(0x2c020400) readv(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}], 0x1}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b00000000000500010007000000050001000700000006000b000100000006000b000000000006000b0003000000050001000700d9e9910cb19c35be8e00eac67ed3c113f2087d0e8524ec6b346cfbc72171ad2237c7b2571f2e02bea7937b26bef1df25aa91c10aa8749b4dcc4678129fbf98f76797bde14fcec30fe2f5378cd2e952244833b1c060a18f066703c950470aa8"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000100)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x91}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], 0x0, 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x3f, 0x2, 0x0, 0x0, "e543c064a9c2e134c87737179c3f3b506af8a3eff69f95b903fd3256eb7ab9415da023b615fcd93168b1a961f755810516c4907f950522da4e3718013d9d8bf2"}}}}, 0x0) 8.503210712s ago: executing program 5 (id=8234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000080)="18", 0x12, 0x1, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xff}, 0x14) 6.109136875s ago: executing program 7 (id=8235): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x44}}, {0x2, 0x4e1e, @empty}, 0x40, 0x0, 0x0, 0x0, 0xa009, 0x0, 0x8000000000200001, 0x1ff, 0x8}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 5.990366615s ago: executing program 5 (id=8236): syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="810100000000000081", @ANYRES32], 0x10) 4.578848185s ago: executing program 6 (id=8237): socket$inet6(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0xb1c, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="32032b8943bf95e241ad216c94f90bb912df0f378772179ff881b64b7dd3255ff3ce514a4030b3215a2abcd79930216d95d3"]}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000010001fff000000000100000000000000", @ANYRES32=r5, @ANYBLOB="010000000000000004000a00", @ANYRES32=r4, @ANYBLOB="670982905514c7e0e5ed8d3b94074830e4111183ac00e6e0c81a3044540d558dba12b67fc381cd7f2150b3792484d5051ceb16ee7de7037576340232fd67ebb53c01bfad645206b80347"], 0x28}, 0x1, 0x0, 0x0, 0x20040014}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000059c0)={0x2020}, 0x2020) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x3, 0x1}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r9 = dup(r7) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.53194791s ago: executing program 8 (id=8238): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x2}}) 4.531611432s ago: executing program 7 (id=8239): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x4e23, @local}, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000000)=0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001815", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="12cdde26e7c496e99a9cf8625ec9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r8, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x30, 0x800}, 0x14) 4.23564714s ago: executing program 5 (id=8240): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a40)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x80800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x20}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB=' \r\t'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000080)) sendmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="c785", 0x2}, {&(0x7f0000000280)='\\', 0x1}], 0x2}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r9 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r9, 0x47bc, 0x20, 0x0, 0x0, 0x0) 3.738935077s ago: executing program 7 (id=8241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x111}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d8000000"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 3.570543516s ago: executing program 2 (id=8242): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0), 0xf) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x2000) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x50801, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.593422094s ago: executing program 2 (id=8243): socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 2.298213705s ago: executing program 6 (id=8244): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) unshare(0x2c020400) readv(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}], 0x1}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b00000000000500010007000000050001000700000006000b000100000006000b000000000006000b0003000000050001000700d9e9910cb19c35be8e00eac67ed3c113f2087d0e8524ec6b346cfbc72171ad2237c7b2571f2e02bea7937b26bef1df25aa91c10aa8749b4dcc4678129fbf98f76797bde14fcec30fe2f5378cd2e952244833b1c060a18f066703c950470aa8"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000100)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x91}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], 0x0, 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x3f, 0x2, 0x0, 0x0, "e543c064a9c2e134c87737179c3f3b506af8a3eff69f95b903fd3256eb7ab9415da023b615fcd93168b1a961f755810516c4907f950522da4e3718013d9d8bf2"}}}}, 0x0) 2.297641143s ago: executing program 7 (id=8245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x520}, 0x1, 0x0, 0x0, 0x8004}, 0x80) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r1, 0xc, 0x0, 0x80, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012"], 0x3c}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0800000008440000380012800b00010067656e65766500002800028005000900010000001400070000000000000000000000000000140001050003000800000008000a00", @ANYRES32=r8], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x5a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004e00004c00000000000690780a210124ac1414aa44140701e000000100000000e000000100800000070d064d291a00000000d05c4900000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00200090780000"], 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x38}}, 0x0) 1.655241884s ago: executing program 6 (id=8246): writev(0xffffffffffffffff, &(0x7f0000005740)=[{&(0x7f0000000280)='\n)', 0x2}], 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x15, 0x5, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0xf9, 0x3, &(0x7f0000000040)={0x19, "78b8142115db2c054906d8cf007efb564aaae98e0100000014000c00"}}) syz_usb_connect(0x4, 0x3f, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) sendmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x1, 0x20040000) 931.134196ms ago: executing program 2 (id=8247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x20000084) 329.744666ms ago: executing program 2 (id=8248): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x2a000, 0x32) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 5 (id=8249): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x44}}, {0x2, 0x4e1e, @empty}, 0x40, 0x0, 0x0, 0x0, 0xa009, 0x0, 0x8000000000200001, 0x1ff, 0x8}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) kernel console output (not intermixed with test programs): led: -4 [ 2109.502817][T29495] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2109.516102][T29498] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2109.556055][T29495] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2109.732223][T29498] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2109.765408][T29495] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2109.771588][T29495] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2109.825683][T29498] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2109.901547][T29495] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2109.926130][T29498] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2109.932503][T29498] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2110.001992][T29495] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2110.100273][T29498] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2110.100863][T29495] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2110.158757][T29498] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2110.201718][T29495] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2110.274300][T29498] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2110.677607][T29495] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2110.715233][T29495] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2111.995364][T18475] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2112.189970][T18475] usb 3-1: Using ep0 maxpacket: 16 [ 2112.205099][T11953] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2112.220575][T18475] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2112.268244][T18475] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2112.283172][T18475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.293725][T18475] usb 3-1: Product: syz [ 2112.313478][T18475] usb 3-1: Manufacturer: syz [ 2112.331822][T18475] usb 3-1: SerialNumber: syz [ 2112.358737][T18475] usb 3-1: config 0 descriptor?? [ 2112.409393][T11953] usb 9-1: Using ep0 maxpacket: 8 [ 2112.419226][T18475] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2112.445362][T11953] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 2112.453646][T11953] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2112.483094][T18475] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 2112.500085][T11953] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2112.513298][T11953] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2112.526079][T11953] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2112.537135][T11953] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2112.570043][T11953] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2112.627279][T11953] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.948193][T11953] usb 9-1: GET_CAPABILITIES returned f8 [ 2112.958047][T11953] usbtmc 9-1:16.0: can't read capabilities [ 2113.022985][T18475] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2113.135066][T29524] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2113.253368][T11953] usb 9-1: USB disconnect, device number 6 [ 2113.485829][T18475] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2113.494073][T18475] em28xx 3-1:0.0: board has no eeprom [ 2113.702977][T29526] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2113.924987][T18475] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2113.979248][T18475] em28xx 3-1:0.0: dvb set to bulk mode. [ 2114.006539][T11953] em28xx 3-1:0.0: Binding DVB extension [ 2114.809288][T18483] IPVS: starting estimator thread 0... [ 2114.891673][T29514] em28xx 3-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 2114.935854][T18483] usb 3-1: USB disconnect, device number 10 [ 2114.942522][T29540] IPVS: using max 192 ests per chain, 9600 per kthread [ 2114.964323][T18483] em28xx 3-1:0.0: Disconnecting em28xx [ 2115.308493][T11953] em28xx 3-1:0.0: Registering input extension [ 2115.334086][T18483] em28xx 3-1:0.0: Closing input extension [ 2115.436427][T18483] em28xx 3-1:0.0: Freeing device [ 2116.119718][T29548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7386'. [ 2117.367553][T29560] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2118.202645][T29568] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2119.585207][T18483] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2119.760073][T18483] usb 3-1: Using ep0 maxpacket: 16 [ 2119.776100][T18483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2119.831807][T18483] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2119.882670][T18483] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.925495][T18483] usb 3-1: Product: syz [ 2119.935419][T18483] usb 3-1: Manufacturer: syz [ 2119.940336][T18483] usb 3-1: SerialNumber: syz [ 2120.016850][T18483] usb 3-1: config 0 descriptor?? [ 2120.097830][T18483] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2120.148781][T18483] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 2120.723228][T18483] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2121.223090][T18483] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2121.264006][T18483] em28xx 3-1:0.0: board has no eeprom [ 2121.874997][T18483] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2121.892389][T18483] em28xx 3-1:0.0: dvb set to bulk mode. [ 2121.909387][T14244] em28xx 3-1:0.0: Binding DVB extension [ 2122.197108][T29594] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7403'. [ 2122.651317][T29580] em28xx 3-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 2123.016998][T14244] em28xx 3-1:0.0: Registering input extension [ 2123.491566][T14244] usb 3-1: USB disconnect, device number 11 [ 2123.529375][T14244] em28xx 3-1:0.0: Disconnecting em28xx [ 2123.583358][T14244] em28xx 3-1:0.0: Closing input extension [ 2123.684713][T14244] em28xx 3-1:0.0: Freeing device [ 2123.840890][T29600] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2125.143751][T29612] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2127.410872][T29620] lo speed is unknown, defaulting to 1000 [ 2127.816427][T29629] ip6gre1: entered promiscuous mode [ 2127.822239][T29629] ip6gre1: entered allmulticast mode [ 2128.755464][T11953] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 2128.930960][T11953] usb 8-1: Using ep0 maxpacket: 16 [ 2128.947324][T11953] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2128.989513][T11953] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2129.008053][T11953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.026408][T11953] usb 8-1: Product: syz [ 2129.061194][T11953] usb 8-1: Manufacturer: syz [ 2129.079261][T11953] usb 8-1: SerialNumber: syz [ 2129.125862][T11953] usb 8-1: config 0 descriptor?? [ 2129.234666][T11953] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2129.333122][T11953] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 2129.717706][T29641] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2129.810706][T11953] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 2130.300314][T11953] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2130.337576][T11953] em28xx 8-1:0.0: board has no eeprom [ 2130.759244][T11953] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2130.842917][T11953] em28xx 8-1:0.0: dvb set to bulk mode. [ 2130.886455][T18475] em28xx 8-1:0.0: Binding DVB extension [ 2131.712765][T29634] em28xx 8-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 2131.783592][T14244] usb 8-1: USB disconnect, device number 7 [ 2131.797099][T14244] em28xx 8-1:0.0: Disconnecting em28xx [ 2131.865944][T29652] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2132.202980][T18475] em28xx 8-1:0.0: Registering input extension [ 2132.265468][T14244] em28xx 8-1:0.0: Closing input extension [ 2132.398267][T14244] em28xx 8-1:0.0: Freeing device [ 2134.672239][T29679] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2137.176759][T29693] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2138.323864][T29706] netlink: 324 bytes leftover after parsing attributes in process `syz.5.7440'. [ 2138.555494][T29709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7440'. [ 2139.207522][T29709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2140.697674][T29724] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2140.791223][T29734] ptrace attach of "./syz-executor exec"[21007] was attempted by "./syz-executor exec"[29734] [ 2141.650458][T29739] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2144.595656][T29759] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7456'. [ 2144.836181][T29759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7456'. [ 2145.273324][T29759] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2145.507161][T29770] syzkaller0: entered promiscuous mode [ 2145.533051][T29770] syzkaller0: entered allmulticast mode [ 2146.756382][T29773] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2147.305131][T14244] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2147.520441][T14244] usb 3-1: Using ep0 maxpacket: 16 [ 2147.559562][T14244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2147.636758][T14244] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2147.679248][T14244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.743734][T14244] usb 3-1: Product: syz [ 2147.748829][T14244] usb 3-1: Manufacturer: syz [ 2147.769499][T14244] usb 3-1: SerialNumber: syz [ 2147.802085][T14244] usb 3-1: config 0 descriptor?? [ 2147.910092][T14244] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2147.940229][T14244] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 2148.272582][T29784] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2148.503955][T14244] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2149.037681][T14244] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2149.127892][T14244] em28xx 3-1:0.0: board has no eeprom [ 2149.465305][T14244] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2149.498778][T14244] em28xx 3-1:0.0: dvb set to bulk mode. [ 2149.515254][T18483] em28xx 3-1:0.0: Binding DVB extension [ 2149.818451][T14244] usb 3-1: USB disconnect, device number 12 [ 2149.917722][T14244] em28xx 3-1:0.0: Disconnecting em28xx [ 2150.188270][T18483] em28xx 3-1:0.0: Registering input extension [ 2150.238687][T14244] em28xx 3-1:0.0: Closing input extension [ 2150.378699][T14244] em28xx 3-1:0.0: Freeing device [ 2150.918557][T29807] netlink: 324 bytes leftover after parsing attributes in process `syz.7.7471'. [ 2151.088301][T29808] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7471'. [ 2151.631123][T29808] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2152.036527][T29817] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2152.376897][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 2152.376951][ T29] audit: type=1326 audit(2000001177.610:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29820 comm="syz.2.7475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2152.542646][ T29] audit: type=1326 audit(2000001177.630:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29820 comm="syz.2.7475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2152.714241][ T29] audit: type=1326 audit(2000001177.660:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29820 comm="syz.2.7475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2152.787381][ T29] audit: type=1326 audit(2000001177.660:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29820 comm="syz.2.7475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2152.963955][ T29] audit: type=1326 audit(2000001177.660:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29820 comm="syz.2.7475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2153.185484][ T29] audit: type=1326 audit(2000001177.670:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29820 comm="syz.2.7475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2153.329591][T29830] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2153.353250][ T29] audit: type=1326 audit(2000001177.680:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29820 comm="syz.2.7475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2153.486354][ T29] audit: type=1326 audit(2000001177.690:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29820 comm="syz.2.7475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2153.629135][ T29] audit: type=1326 audit(2000001177.730:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29820 comm="syz.2.7475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71c5cab code=0x7ffc0000 [ 2153.718178][ T29] audit: type=1326 audit(2000001177.890:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29820 comm="syz.2.7475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2154.185020][T29833] syzkaller0: entered promiscuous mode [ 2154.190705][T29833] syzkaller0: entered allmulticast mode [ 2155.345228][T18475] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 2155.584927][T18475] usb 8-1: Using ep0 maxpacket: 16 [ 2155.621892][T18475] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2155.692567][T18475] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2155.735918][T18475] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.767598][T18475] usb 8-1: Product: syz [ 2155.771994][T18475] usb 8-1: Manufacturer: syz [ 2155.785528][T18475] usb 8-1: SerialNumber: syz [ 2155.866208][T18475] usb 8-1: config 0 descriptor?? [ 2155.914143][T18475] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2155.969339][T18475] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 2156.494041][T18475] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 2157.010244][T18475] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2157.110467][T18475] em28xx 8-1:0.0: board has no eeprom [ 2157.495333][T18475] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2157.504012][T18475] em28xx 8-1:0.0: dvb set to bulk mode. [ 2157.525553][T11953] em28xx 8-1:0.0: Binding DVB extension [ 2157.823073][T18475] usb 8-1: USB disconnect, device number 8 [ 2157.889608][T18475] em28xx 8-1:0.0: Disconnecting em28xx [ 2158.232011][T11953] em28xx 8-1:0.0: Registering input extension [ 2158.276179][T18475] em28xx 8-1:0.0: Closing input extension [ 2158.356307][T18475] em28xx 8-1:0.0: Freeing device [ 2159.601835][T29869] netlink: 324 bytes leftover after parsing attributes in process `syz.8.7489'. [ 2159.737665][T29871] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7489'. [ 2159.887482][T29869] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2159.935946][T29869] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.313231][T29871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2160.383566][T29873] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2160.467535][T29869] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2160.606001][T29869] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.819743][T29869] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2160.869404][T29869] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2161.033355][T29869] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2161.116360][T29869] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2161.452033][T29304] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2161.481080][T29304] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2161.748166][T29316] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2161.799895][T29316] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2162.079155][T29304] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2162.102211][T29304] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2162.148665][T29304] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2162.184978][T29304] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2163.885314][T14244] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2164.066333][T14244] usb 7-1: Using ep0 maxpacket: 16 [ 2164.086782][T14244] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2164.125440][T14244] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2164.138069][T14244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.173313][T14244] usb 7-1: Product: syz [ 2164.188465][T14244] usb 7-1: Manufacturer: syz [ 2164.201709][T14244] usb 7-1: SerialNumber: syz [ 2164.252263][T14244] usb 7-1: config 0 descriptor?? [ 2164.338358][T14244] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2164.396697][T14244] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 2164.932080][T14244] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 2165.415722][T14244] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2165.423969][T14244] em28xx 7-1:0.0: board has no eeprom [ 2165.775571][T14244] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2165.814611][T14244] em28xx 7-1:0.0: dvb set to bulk mode. [ 2165.829837][T18483] em28xx 7-1:0.0: Binding DVB extension [ 2166.152891][T14244] usb 7-1: USB disconnect, device number 4 [ 2166.174595][T14244] em28xx 7-1:0.0: Disconnecting em28xx [ 2166.501081][T29913] syzkaller0: entered promiscuous mode [ 2166.516160][T29913] syzkaller0: entered allmulticast mode [ 2166.653128][T29913] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7504'. [ 2166.672674][T18483] em28xx 7-1:0.0: Registering input extension [ 2166.700635][T14244] em28xx 7-1:0.0: Closing input extension [ 2166.821726][T14244] em28xx 7-1:0.0: Freeing device [ 2166.942597][T29916] syzkaller0: entered promiscuous mode [ 2166.989207][T29916] syzkaller0: entered allmulticast mode [ 2167.462364][T29919] netlink: 324 bytes leftover after parsing attributes in process `syz.6.7506'. [ 2167.640373][T29920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7506'. [ 2167.795350][T29920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2168.440337][T29926] lo speed is unknown, defaulting to 1000 [ 2170.102177][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2170.112231][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2170.357283][T29950] syzkaller0: entered promiscuous mode [ 2170.363282][T29950] syzkaller0: entered allmulticast mode [ 2170.403741][T29950] netlink: 260 bytes leftover after parsing attributes in process `syz.6.7517'. [ 2170.517562][T18475] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2170.705526][T18475] usb 6-1: Using ep0 maxpacket: 16 [ 2170.752133][T18475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2170.825879][T18475] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2170.847371][T18475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2170.876201][T18475] usb 6-1: Product: syz [ 2170.880616][T18475] usb 6-1: Manufacturer: syz [ 2170.940795][T18475] usb 6-1: SerialNumber: syz [ 2170.992599][T18475] usb 6-1: config 0 descriptor?? [ 2171.108008][T18475] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2171.128803][T29955] syzkaller0: entered promiscuous mode [ 2171.134627][T29955] syzkaller0: entered allmulticast mode [ 2171.143293][T18475] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2171.665364][T18475] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2171.972966][T29965] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7523'. [ 2172.135723][T18475] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2172.143961][T18475] em28xx 6-1:0.0: board has no eeprom [ 2172.169808][T29967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7523'. [ 2172.255491][T18483] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2172.299259][T29967] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2172.445510][T18483] usb 7-1: Using ep0 maxpacket: 16 [ 2172.489149][T18483] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2172.511633][T18483] usb 7-1: no configurations [ 2172.520842][T18483] usb 7-1: can't read configurations, error -22 [ 2172.526681][T18475] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2172.563905][T18475] em28xx 6-1:0.0: dvb set to bulk mode. [ 2172.580163][T11953] em28xx 6-1:0.0: Binding DVB extension [ 2172.664579][T18475] usb 6-1: USB disconnect, device number 6 [ 2172.706789][T18475] em28xx 6-1:0.0: Disconnecting em28xx [ 2172.958815][T11953] em28xx 6-1:0.0: Registering input extension [ 2173.000510][T18475] em28xx 6-1:0.0: Closing input extension [ 2173.127890][T18475] em28xx 6-1:0.0: Freeing device [ 2173.597162][T29986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7529'. [ 2173.650434][T29986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7529'. [ 2174.162696][T29993] syzkaller0: entered promiscuous mode [ 2174.182523][T29993] syzkaller0: entered allmulticast mode [ 2175.176053][T30006] netlink: 324 bytes leftover after parsing attributes in process `syz.7.7538'. [ 2175.310788][T30008] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7538'. [ 2175.855869][T30008] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2176.047470][T18475] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2176.236900][T18475] usb 6-1: Using ep0 maxpacket: 16 [ 2176.276823][T18475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2176.312208][T18475] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2176.345383][T18475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2176.375360][T18475] usb 6-1: Product: syz [ 2176.386026][T18475] usb 6-1: Manufacturer: syz [ 2176.405313][T18475] usb 6-1: SerialNumber: syz [ 2176.427077][T18475] usb 6-1: config 0 descriptor?? [ 2176.498816][T18475] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2176.521488][T18475] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2177.109787][T18475] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2177.558828][T18475] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2177.581856][T18475] em28xx 6-1:0.0: board has no eeprom [ 2177.896130][T18475] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2177.919054][T18475] em28xx 6-1:0.0: dvb set to bulk mode. [ 2177.942408][T11953] em28xx 6-1:0.0: Binding DVB extension [ 2178.037096][T18475] usb 6-1: USB disconnect, device number 7 [ 2178.076867][T18475] em28xx 6-1:0.0: Disconnecting em28xx [ 2178.388871][T11953] em28xx 6-1:0.0: Registering input extension [ 2178.408177][T30034] syzkaller0: entered promiscuous mode [ 2178.416101][T18475] em28xx 6-1:0.0: Closing input extension [ 2178.450835][T30034] syzkaller0: entered allmulticast mode [ 2178.495141][T18475] em28xx 6-1:0.0: Freeing device [ 2178.501240][T30033] syzkaller0: entered promiscuous mode [ 2178.515784][T30033] syzkaller0: entered allmulticast mode [ 2178.715874][T30033] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7547'. [ 2179.003860][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 2179.003957][ T29] audit: type=1326 audit(2000001204.360:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30036 comm="syz.8.7549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2179.149666][ T29] audit: type=1326 audit(2000001204.380:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30036 comm="syz.8.7549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2179.201818][T30048] fuse: Bad value for 'fd' [ 2179.272830][ T29] audit: type=1326 audit(2000001204.600:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30036 comm="syz.8.7549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2179.373935][ T29] audit: type=1326 audit(2000001204.600:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30036 comm="syz.8.7549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2179.491204][ T29] audit: type=1326 audit(2000001204.600:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30036 comm="syz.8.7549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2179.524304][ T29] audit: type=1326 audit(2000001204.600:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30036 comm="syz.8.7549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2179.609846][ T29] audit: type=1326 audit(2000001204.600:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30036 comm="syz.8.7549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2179.658385][ T29] audit: type=1326 audit(2000001204.600:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30036 comm="syz.8.7549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2179.769373][ T29] audit: type=1326 audit(2000001204.610:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30036 comm="syz.8.7549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2179.890316][ T29] audit: type=1326 audit(2000001204.610:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30036 comm="syz.8.7549" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2180.071562][T30063] netlink: 324 bytes leftover after parsing attributes in process `syz.6.7555'. [ 2180.256882][T30068] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7555'. [ 2180.802841][T30068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2181.530319][T30083] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7560'. [ 2182.165421][T15992] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 2182.367303][T30095] syzkaller0: entered promiscuous mode [ 2182.375782][T14244] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 2182.384133][T30095] syzkaller0: entered allmulticast mode [ 2182.392948][T15992] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 2182.421651][T15992] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2182.442473][T30092] syzkaller0: entered promiscuous mode [ 2182.460191][T30092] syzkaller0: entered allmulticast mode [ 2182.470511][T15992] usb 9-1: config 0 has no interface number 0 [ 2182.496449][T15992] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 2182.535335][T15992] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2182.575330][T14244] usb 8-1: Using ep0 maxpacket: 16 [ 2182.582898][T15992] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2182.622592][T14244] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2182.646030][T15992] usb 9-1: config 0 interface 52 has no altsetting 0 [ 2182.669468][T14244] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2182.688016][T14244] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2182.710395][T15992] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2182.721735][T14244] usb 8-1: Product: syz [ 2182.733369][T14244] usb 8-1: Manufacturer: syz [ 2182.739186][T15992] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 2182.759050][T14244] usb 8-1: SerialNumber: syz [ 2182.773376][T15992] usb 9-1: Manufacturer: syz [ 2182.793524][T14244] usb 8-1: config 0 descriptor?? [ 2182.835974][T30092] netlink: 260 bytes leftover after parsing attributes in process `syz.5.7563'. [ 2182.870765][T14244] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2182.885583][T15992] usb 9-1: config 0 descriptor?? [ 2182.931649][T14244] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 2182.940394][T15992] hub 9-1:0.52: bad descriptor, ignoring hub [ 2182.964521][T15992] hub 9-1:0.52: probe with driver hub failed with error -5 [ 2183.178493][T15992] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 2183.213920][T15992] synaptics_usb 9-1:0.52: probe with driver synaptics_usb failed with error -5 [ 2183.650935][T14244] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 2184.278212][T14244] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2184.323537][T14244] em28xx 8-1:0.0: board has no eeprom [ 2184.785068][T14244] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2184.793154][T14244] em28xx 8-1:0.0: dvb set to bulk mode. [ 2184.853928][T15992] em28xx 8-1:0.0: Binding DVB extension [ 2184.977900][T14244] usb 8-1: USB disconnect, device number 9 [ 2185.013525][T14244] em28xx 8-1:0.0: Disconnecting em28xx [ 2185.374244][T15992] em28xx 8-1:0.0: Registering input extension [ 2185.402564][T14244] em28xx 8-1:0.0: Closing input extension [ 2185.595886][T14244] em28xx 8-1:0.0: Freeing device [ 2187.085601][T30126] netlink: 324 bytes leftover after parsing attributes in process `syz.5.7572'. [ 2187.220399][T30129] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7573'. [ 2187.328604][T30128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7572'. [ 2187.925969][T30128] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2191.545032][T15992] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2191.735903][T14244] usb 9-1: USB disconnect, device number 7 [ 2191.742440][T15992] usb 3-1: Using ep0 maxpacket: 16 [ 2191.796943][T15992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2191.898091][T15992] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2191.910941][T15992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2191.957256][T15992] usb 3-1: Product: syz [ 2191.991191][T15992] usb 3-1: Manufacturer: syz [ 2192.007078][T15992] usb 3-1: SerialNumber: syz [ 2192.053637][T15992] usb 3-1: config 0 descriptor?? [ 2192.123195][T15992] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2192.172473][T15992] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 2192.744641][T15992] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2193.175857][T15992] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2193.185545][T15992] em28xx 3-1:0.0: board has no eeprom [ 2193.515222][T15992] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2193.548980][T15992] em28xx 3-1:0.0: dvb set to bulk mode. [ 2193.565278][T14244] em28xx 3-1:0.0: Binding DVB extension [ 2193.682415][T15992] usb 3-1: USB disconnect, device number 13 [ 2193.748409][T15992] em28xx 3-1:0.0: Disconnecting em28xx [ 2194.307917][T14244] em28xx 3-1:0.0: Registering input extension [ 2194.355773][T15992] em28xx 3-1:0.0: Closing input extension [ 2194.425666][T15992] em28xx 3-1:0.0: Freeing device [ 2194.461954][T30175] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7585'. [ 2196.072041][T30189] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7588'. [ 2196.315418][T30189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7588'. [ 2196.684634][T30189] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2198.409467][T30208] syzkaller0: entered promiscuous mode [ 2198.416476][T30208] syzkaller0: entered allmulticast mode [ 2198.438161][T30211] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7597'. [ 2198.715404][T18475] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2198.905865][T18475] usb 6-1: Using ep0 maxpacket: 16 [ 2198.959872][T18475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2199.026129][T18475] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2199.075172][T18475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.101743][T18475] usb 6-1: Product: syz [ 2199.125632][T18475] usb 6-1: Manufacturer: syz [ 2199.141073][T18475] usb 6-1: SerialNumber: syz [ 2199.193495][T18475] usb 6-1: config 0 descriptor?? [ 2199.267804][T18475] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2199.295251][T18475] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2199.980403][T18475] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2200.448303][T30236] netlink: 324 bytes leftover after parsing attributes in process `syz.8.7605'. [ 2200.720674][T30237] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7605'. [ 2200.807423][T18475] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2200.823418][T18475] em28xx 6-1:0.0: board has no eeprom [ 2200.910813][T30237] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2200.918137][T14244] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2201.122009][T14244] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2201.144958][T18475] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2201.145598][T14244] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2201.195499][T18475] em28xx 6-1:0.0: dvb set to bulk mode. [ 2201.201469][T11953] em28xx 6-1:0.0: Binding DVB extension [ 2201.226588][T14244] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2201.303107][T18475] usb 6-1: USB disconnect, device number 8 [ 2201.322304][T14244] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2201.366408][T18475] em28xx 6-1:0.0: Disconnecting em28xx [ 2201.376065][T14244] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.478045][T14244] usb 7-1: config 0 descriptor?? [ 2201.739979][T11953] em28xx 6-1:0.0: Registering input extension [ 2201.770276][T18475] em28xx 6-1:0.0: Closing input extension [ 2201.902999][T18475] em28xx 6-1:0.0: Freeing device [ 2202.148862][T14244] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2202.604661][T29304] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2202.690561][T29304] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2202.714414][T30248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7607'. [ 2202.759819][T29304] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2202.801572][T29304] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2202.831482][T30250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7607'. [ 2202.906772][T30248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7607'. [ 2203.017250][T30250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7607'. [ 2203.505228][T14244] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 2203.667245][T14244] usb 7-1: device descriptor read/64, error -32 [ 2203.935721][T14244] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 2204.089700][T30254] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7609'. [ 2204.096049][T14244] usb 7-1: device descriptor read/64, error -32 [ 2204.395157][T14244] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 2204.495480][T14244] usb 7-1: device descriptor read/8, error -32 [ 2204.765580][T14244] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 2204.835394][T14244] usb 7-1: device descriptor read/8, error -32 [ 2204.878386][T30244] raw-gadget.1 gadget.6: failed to queue suspend event [ 2204.907504][T30244] raw-gadget.1 gadget.6: failed to queue disconnect event [ 2204.956106][T15992] usb 7-1: USB disconnect, device number 7 [ 2205.062407][T30258] syzkaller0: entered promiscuous mode [ 2205.073735][T30258] syzkaller0: entered allmulticast mode [ 2205.955740][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 2205.955899][ T29] audit: type=1326 audit(2000001231.290:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30261 comm="syz.8.7613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2206.155409][ T29] audit: type=1326 audit(2000001231.300:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30261 comm="syz.8.7613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2206.255381][ T29] audit: type=1326 audit(2000001231.310:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30261 comm="syz.8.7613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2206.363186][ T29] audit: type=1326 audit(2000001231.310:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30261 comm="syz.8.7613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2206.482100][ T29] audit: type=1326 audit(2000001231.320:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30261 comm="syz.8.7613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2206.585336][ T29] audit: type=1326 audit(2000001231.320:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30261 comm="syz.8.7613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2206.705263][ T29] audit: type=1326 audit(2000001231.330:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30261 comm="syz.8.7613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2206.805620][ T29] audit: type=1326 audit(2000001231.340:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30261 comm="syz.8.7613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2206.917090][ T29] audit: type=1326 audit(2000001231.530:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30261 comm="syz.8.7613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2207.433426][T30274] netlink: 324 bytes leftover after parsing attributes in process `syz.6.7616'. [ 2207.552559][T30274] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2207.663001][T30276] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7616'. [ 2208.333844][T30276] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2208.496334][T30274] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2208.621674][T30274] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2208.910266][T30274] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2209.352394][T29316] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2209.506101][T16747] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2209.642036][T16747] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2209.655291][T30287] syzkaller0: entered promiscuous mode [ 2209.673608][T30287] syzkaller0: entered allmulticast mode [ 2209.845895][T30288] tipc: Enabled bearer , priority 0 [ 2209.890255][T30287] tipc: Resetting bearer [ 2209.986089][T30287] tipc: Disabling bearer [ 2210.047328][T16747] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2210.827450][T30294] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7621'. [ 2211.841884][T30302] syzkaller0: entered promiscuous mode [ 2211.871738][T30302] syzkaller0: entered allmulticast mode [ 2213.835185][T14244] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 2214.002491][T30329] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7634'. [ 2214.019438][T30330] netlink: 324 bytes leftover after parsing attributes in process `syz.8.7633'. [ 2214.082781][T30330] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2214.135203][T14244] usb 8-1: Using ep0 maxpacket: 16 [ 2214.152790][T14244] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2214.171638][T30331] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7633'. [ 2214.184024][T30330] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.262909][T14244] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2214.283398][T14244] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.312068][T14244] usb 8-1: Product: syz [ 2214.364910][T14244] usb 8-1: Manufacturer: syz [ 2214.376469][T14244] usb 8-1: SerialNumber: syz [ 2214.402357][T14244] usb 8-1: config 0 descriptor?? [ 2214.493852][T14244] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2214.539184][T14244] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 2214.916848][T30331] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2215.021811][T30330] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2215.052946][T30330] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.065446][T14244] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 2215.251863][T30330] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2215.298638][T30330] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.527090][T14244] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2215.561984][T14244] em28xx 8-1:0.0: board has no eeprom [ 2215.620877][T30330] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2215.671816][T30330] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.895828][T14244] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2215.925547][T14244] em28xx 8-1:0.0: dvb set to bulk mode. [ 2215.952048][T15992] em28xx 8-1:0.0: Binding DVB extension [ 2216.145537][T29304] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2216.185998][T29304] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.194018][T14244] usb 8-1: USB disconnect, device number 10 [ 2216.260172][T14244] em28xx 8-1:0.0: Disconnecting em28xx [ 2216.453220][T15992] em28xx 8-1:0.0: Registering input extension [ 2216.480408][T14156] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2216.509999][T14244] em28xx 8-1:0.0: Closing input extension [ 2216.525560][T14156] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.661400][T14244] em28xx 8-1:0.0: Freeing device [ 2216.676577][T30351] ptrace attach of "./syz-executor exec"[24522] was attempted by "./syz-executor exec"[30351] [ 2216.866018][T29304] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2216.874499][T29304] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.909824][T29304] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2216.974636][T29304] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2219.248685][T30368] syzkaller0: entered promiscuous mode [ 2219.254382][T30368] syzkaller0: entered allmulticast mode [ 2219.356810][T30368] netlink: 260 bytes leftover after parsing attributes in process `syz.7.7645'. [ 2221.065660][T30384] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7651'. [ 2221.120722][T30384] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7651'. [ 2221.415843][T30387] netlink: 324 bytes leftover after parsing attributes in process `syz.6.7652'. [ 2221.541069][T30389] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2221.619971][T30387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7652'. [ 2221.700485][T30389] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2222.335618][T30387] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2222.442687][T30389] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2222.640201][T30389] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2222.954453][T29304] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2223.134137][T16752] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2223.329159][T16752] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2223.430968][T29304] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2224.825330][T11953] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2225.016476][T11953] usb 7-1: Using ep0 maxpacket: 16 [ 2225.041159][T11953] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2225.081524][T11953] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2225.112568][T11953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2225.708550][T11953] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 2225.744498][T11953] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 2225.807117][T11953] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 2225.814467][T11953] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 2225.850080][T11953] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 2225.915875][T11953] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 2226.163192][T11953] usb 7-1: USB disconnect, device number 8 [ 2228.017374][T30434] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7665'. [ 2228.058007][T30436] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7665'. [ 2228.902750][T30444] netlink: 324 bytes leftover after parsing attributes in process `syz.6.7668'. [ 2229.099791][T30447] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2229.139300][T30449] ptrace attach of "./syz-executor exec"[24522] was attempted by "./syz-executor exec"[30449] [ 2229.237628][T30444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7668'. [ 2230.037746][T30444] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2230.144149][T30447] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2230.386088][T30447] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2230.541838][T30447] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2230.952610][T16752] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2231.239794][T16747] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2231.295759][T16747] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2231.429050][T16749] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2231.554328][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2231.563674][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2233.701145][T30475] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7678'. [ 2233.750896][T30476] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7678'. [ 2235.075799][T30487] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7683'. [ 2235.261653][T30490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7683'. [ 2235.776508][T30490] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2237.228872][T30510] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7690'. [ 2237.301136][T30510] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7690'. [ 2241.801658][T30555] netlink: 324 bytes leftover after parsing attributes in process `syz.7.7703'. [ 2241.835393][T30553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7704'. [ 2241.888738][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7704'. [ 2241.968130][T30555] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7703'. [ 2241.980076][T30557] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7704'. [ 2241.998621][T30557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7704'. [ 2242.360952][T30555] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2243.388791][T30563] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2247.131595][T30589] netlink: 324 bytes leftover after parsing attributes in process `syz.6.7715'. [ 2247.275437][T30592] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7716'. [ 2247.317413][T30592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7716'. [ 2247.327853][T30589] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2247.359620][T30590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7715'. [ 2247.392473][T30597] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7716'. [ 2247.444345][T30597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7716'. [ 2247.732874][T30590] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2247.821945][T30589] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2247.931112][T30604] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2248.033208][T30589] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2248.201120][T30589] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2248.677303][T16747] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2248.777334][T29304] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2248.882768][T29304] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2249.160522][T16747] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2251.475791][T30640] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2251.535190][T30641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7729'. [ 2252.453346][T30646] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2252.747315][T30644] tipc: Failed to remove unknown binding: 66,0,0/0:2455425664/2455425665 [ 2252.803724][T30644] tipc: Failed to remove unknown binding: 66,0,0/0:2455425664/2455425665 [ 2254.766586][T30660] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7737'. [ 2254.987981][T30661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7737'. [ 2255.319882][T30661] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2255.818517][T30668] ptrace attach of "./syz-executor exec"[21007] was attempted by "./syz-executor exec"[30668] [ 2258.454868][T30675] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2258.535180][T30679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7742'. [ 2259.789053][T30692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7746'. [ 2259.809208][T30685] tipc: Failed to remove unknown binding: 66,0,0/0:2341196421/2341196422 [ 2259.850717][T30685] tipc: Failed to remove unknown binding: 66,0,0/0:2341196421/2341196422 [ 2262.195022][T30708] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2264.349402][T30716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7756'. [ 2265.747717][T30724] tipc: Failed to remove unknown binding: 66,0,0/0:2998517798/2998517799 [ 2265.816320][T30724] tipc: Failed to remove unknown binding: 66,0,0/0:2998517798/2998517799 [ 2267.056087][T30730] syzkaller0: entered promiscuous mode [ 2267.101687][T30730] syzkaller0: entered allmulticast mode [ 2267.806553][T30741] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7763'. [ 2268.430281][T30744] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2269.175882][T30753] ptrace attach of "./syz-executor exec"[25639] was attempted by "./syz-executor exec"[30753] [ 2270.029077][T30758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7768'. [ 2270.894458][T30760] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 2270.901153][T30760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2270.925665][T30760] vhci_hcd vhci_hcd.0: Device attached [ 2271.025514][T30764] veth1_to_bond: entered allmulticast mode [ 2271.042087][T30762] vhci_hcd: connection closed [ 2271.053897][T14156] vhci_hcd vhci_hcd.2: stop threads [ 2271.105458][T14156] vhci_hcd vhci_hcd.2: release socket [ 2271.118837][T30764] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 2271.146461][T14156] vhci_hcd vhci_hcd.2: disconnect device [ 2271.153413][T11953] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 2272.835639][T30771] syzkaller0: entered promiscuous mode [ 2272.884230][T30771] syzkaller0: entered allmulticast mode [ 2273.514214][T30774] syzkaller0: entered promiscuous mode [ 2273.533853][T30774] syzkaller0: entered allmulticast mode [ 2275.133967][T30783] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2275.818351][T30791] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7781'. [ 2277.253143][T30803] syzkaller0: entered promiscuous mode [ 2277.294448][T30803] syzkaller0: entered allmulticast mode [ 2277.808486][T30808] netlink: 'syz.5.7789': attribute type 12 has an invalid length. [ 2277.817018][T30808] netlink: 148 bytes leftover after parsing attributes in process `syz.5.7789'. [ 2278.955856][T30815] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2279.046481][T30819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2279.085294][T30819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2279.095280][T30819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2279.121005][T30819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2279.132983][T30819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2279.237446][T30821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7793'. [ 2279.320419][T30821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7793'. [ 2279.331479][T24938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2279.356657][T24938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2279.374498][T24938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2279.409404][T24938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2279.429695][T24938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2279.612522][T30817] lo speed is unknown, defaulting to 1000 [ 2279.720931][T30825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7794'. [ 2280.842924][T30833] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2280.896518][T30833] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2280.991013][T30833] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2281.198554][T30832] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2281.239564][T30832] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2281.566332][T30817] chnl_net:caif_netlink_parms(): no params data found [ 2281.954454][T30848] ptrace attach of "./syz-executor exec"[24935] was attempted by "./syz-executor exec"[30848] [ 2282.444352][T30847] syzkaller0: entered promiscuous mode [ 2282.479293][T30847] syzkaller0: entered allmulticast mode [ 2284.068335][T30817] bridge0: port 1(bridge_slave_0) entered blocking state [ 2284.116039][T30817] bridge0: port 1(bridge_slave_0) entered disabled state [ 2284.123976][T30817] bridge_slave_0: entered allmulticast mode [ 2284.235850][T30817] bridge_slave_0: entered promiscuous mode [ 2284.324954][T30817] bridge0: port 2(bridge_slave_1) entered blocking state [ 2284.363823][T30817] bridge0: port 2(bridge_slave_1) entered disabled state [ 2284.420126][T30817] bridge_slave_1: entered allmulticast mode [ 2284.488839][T30817] bridge_slave_1: entered promiscuous mode [ 2284.675134][T15992] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2284.850367][T15992] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2284.879448][T30867] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2284.905139][T15992] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2284.947652][T30817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2284.983186][T15992] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2285.013813][T15992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2285.063353][T30817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2285.073188][T15992] usb 6-1: Product: syz [ 2285.078968][T15992] usb 6-1: Manufacturer: syz [ 2285.104948][T15992] usb 6-1: SerialNumber: syz [ 2285.185788][T15992] usb 6-1: config 0 descriptor?? [ 2285.729919][T30817] team0: Port device team_slave_0 added [ 2285.815688][T30817] team0: Port device team_slave_1 added [ 2286.176457][T30817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2286.183591][T30817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2286.305130][T30817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2286.386102][T30817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2286.410960][T30817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2286.443029][T30871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7806'. [ 2286.510199][T30817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2287.605436][T30817] hsr_slave_0: entered promiscuous mode [ 2287.629538][T30817] hsr_slave_1: entered promiscuous mode [ 2288.103452][T15992] mos7840 6-1:0.0: required endpoints missing [ 2288.197307][T15992] usb 6-1: USB disconnect, device number 9 [ 2289.109867][T30887] syzkaller0: entered promiscuous mode [ 2289.125433][T30887] syzkaller0: entered allmulticast mode [ 2290.678653][T30898] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2290.871636][T30904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7817'. [ 2291.346963][T30817] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2291.488489][T30817] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2291.582586][T30817] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2291.740981][T30817] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2292.992882][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2293.000419][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2293.010958][T30927] ptrace attach of "./syz-executor exec"[24935] was attempted by "./syz-executor exec"[30927] [ 2294.177091][T30817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2294.460848][T30817] 8021q: adding VLAN 0 to HW filter on device team0 [ 2294.665613][T29304] bridge0: port 1(bridge_slave_0) entered blocking state [ 2294.673108][T29304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2294.856507][T29304] bridge0: port 2(bridge_slave_1) entered blocking state [ 2294.863890][T29304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2295.006613][T30935] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2295.617001][T30939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7829'. [ 2298.301367][T30817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2300.310816][T30970] input: syz1 as /devices/virtual/input/input36 [ 2300.677386][T30973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7839'. [ 2301.325552][T16752] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2301.366293][T16752] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2301.392031][T16752] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2301.519952][T16752] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2301.575511][T30984] netlink: 'syz.2.7842': attribute type 10 has an invalid length. [ 2301.914402][T30981] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2302.102668][T30817] veth0_vlan: entered promiscuous mode [ 2302.192143][T30817] veth1_vlan: entered promiscuous mode [ 2302.573911][T30817] veth0_macvtap: entered promiscuous mode [ 2302.694725][T30817] veth1_macvtap: entered promiscuous mode [ 2302.941192][T30817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2303.035225][T15992] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2303.108550][T30817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2303.246263][T15992] usb 7-1: Using ep0 maxpacket: 16 [ 2303.315296][T15992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2303.330355][T16752] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.386717][T16766] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.399899][T15992] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2303.425004][T15992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.454167][T15992] usb 7-1: Product: syz [ 2303.460801][T15992] usb 7-1: Manufacturer: syz [ 2303.471539][T15992] usb 7-1: SerialNumber: syz [ 2303.533777][T15992] usb 7-1: config 0 descriptor?? [ 2303.545869][T16766] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.596360][T15992] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2303.600950][T16766] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.647845][T15992] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 2304.147262][T31001] ptrace attach of "./syz-executor exec"[24974] was attempted by "./syz-executor exec"[31001] [ 2304.187974][T15992] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 2304.648493][T15992] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2304.685855][T15992] em28xx 7-1:0.0: board has no eeprom [ 2304.878438][T31011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7851'. [ 2305.041804][T15992] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2305.093282][T15992] em28xx 7-1:0.0: dvb set to bulk mode. [ 2305.116340][T18483] em28xx 7-1:0.0: Binding DVB extension [ 2305.218056][T15992] usb 7-1: USB disconnect, device number 9 [ 2305.370166][T15992] em28xx 7-1:0.0: Disconnecting em28xx [ 2305.777608][T18483] em28xx 7-1:0.0: Registering input extension [ 2305.785283][T15992] em28xx 7-1:0.0: Closing input extension [ 2305.879709][T15992] em28xx 7-1:0.0: Freeing device [ 2308.222217][T31042] netlink: 'syz.6.7858': attribute type 10 has an invalid length. [ 2308.788849][T31037] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2310.796428][T31055] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7862'. [ 2311.246959][T18475] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2311.437989][T18475] usb 7-1: Using ep0 maxpacket: 16 [ 2311.482829][T18475] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2311.627319][T18475] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2311.640978][T18475] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.652463][T18475] usb 7-1: Product: syz [ 2311.665750][T18475] usb 7-1: Manufacturer: syz [ 2311.677064][T18475] usb 7-1: SerialNumber: syz [ 2311.740754][T18475] usb 7-1: config 0 descriptor?? [ 2311.810132][T18475] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2311.831905][T18475] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 2312.397035][T18475] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 2312.900297][T18475] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2312.941907][T18475] em28xx 7-1:0.0: board has no eeprom [ 2313.191087][T14156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2313.245371][T14156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2313.305359][T18475] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2313.353113][T18475] em28xx 7-1:0.0: dvb set to bulk mode. [ 2313.385689][T11953] em28xx 7-1:0.0: Binding DVB extension [ 2313.545613][T18475] usb 7-1: USB disconnect, device number 10 [ 2313.553371][T18475] em28xx 7-1:0.0: Disconnecting em28xx [ 2313.771252][T16752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2313.848427][T16752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2314.087463][T11953] em28xx 7-1:0.0: Registering input extension [ 2314.147586][T18475] em28xx 7-1:0.0: Closing input extension [ 2314.242899][T18475] em28xx 7-1:0.0: Freeing device [ 2315.705347][T18475] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2316.007089][T18475] usb 3-1: Using ep0 maxpacket: 8 [ 2316.225870][T18475] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2316.310411][T18475] usb 3-1: config 4 interface 0 has no altsetting 0 [ 2316.360018][T18475] usb 3-1: string descriptor 0 read error: -22 [ 2316.367065][ T29] audit: type=1326 audit(2000001341.750:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31088 comm="syz.7.7870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2316.401375][T18475] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2316.438430][T18475] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2316.495547][ T29] audit: type=1326 audit(2000001341.750:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31088 comm="syz.7.7870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2316.655009][T18475] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2316.704184][ T29] audit: type=1326 audit(2000001342.000:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31088 comm="syz.7.7870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2316.737540][ T29] audit: type=1326 audit(2000001342.010:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31088 comm="syz.7.7870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2316.766000][T18475] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2316.778009][T18475] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2316.785601][T18475] usb 3-1: media controller created [ 2316.791364][ T29] audit: type=1326 audit(2000001342.010:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31088 comm="syz.7.7870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2316.840346][T31087] usb 3-1: dvb_usb_au6610: wlen=245, aborting [ 2316.909498][T31087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2316.976609][T31087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2317.125153][ T29] audit: type=1326 audit(2000001342.010:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31088 comm="syz.7.7870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2317.327063][T18475] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2317.343293][ T29] audit: type=1326 audit(2000001342.010:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31088 comm="syz.7.7870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2317.542703][ T29] audit: type=1326 audit(2000001342.010:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31088 comm="syz.7.7870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2317.885203][ T29] audit: type=1326 audit(2000001342.020:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31088 comm="syz.7.7870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2318.252653][ T29] audit: type=1326 audit(2000001342.030:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31088 comm="syz.7.7870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7185cab code=0x7ffc0000 [ 2319.044248][T31106] pim6reg1: entered promiscuous mode [ 2319.085878][T31106] pim6reg1: entered allmulticast mode [ 2319.207824][T18475] zl10353_read_register: readreg error (reg=127, ret==0) [ 2320.196153][T31113] ptrace attach of "./syz-executor exec"[24974] was attempted by "./syz-executor exec"[31113] [ 2320.428952][T15992] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2320.642972][T15992] usb 6-1: Using ep0 maxpacket: 16 [ 2320.682379][T15992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2320.722158][T15992] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2320.778927][T15992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.820484][T15992] usb 6-1: Product: syz [ 2320.862766][T15992] usb 6-1: Manufacturer: syz [ 2320.873042][T15992] usb 6-1: SerialNumber: syz [ 2320.930619][T15992] usb 6-1: config 0 descriptor?? [ 2321.022094][T15992] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2321.095032][T15992] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2321.652061][T15992] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2322.138286][T15992] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2322.184463][T15992] em28xx 6-1:0.0: board has no eeprom [ 2322.193577][T31112] em28xx 6-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 2322.524512][T15992] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2322.532856][T15992] em28xx 6-1:0.0: dvb set to bulk mode. [ 2322.616399][T18483] em28xx 6-1:0.0: Binding DVB extension [ 2322.685193][T15992] usb 6-1: USB disconnect, device number 10 [ 2322.720055][T15992] em28xx 6-1:0.0: Disconnecting em28xx [ 2323.098120][T18483] em28xx 6-1:0.0: Registering input extension [ 2323.137141][T15992] em28xx 6-1:0.0: Closing input extension [ 2323.251640][T15992] em28xx 6-1:0.0: Freeing device [ 2326.239301][T18475] usb 3-1: USB disconnect, device number 14 [ 2330.366976][T31154] syz.7.7890 (31154) used greatest stack depth: 2576 bytes left [ 2330.665641][T31161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7892'. [ 2330.676683][T18460] libceph: connect (1)[c::]:6789 error -101 [ 2330.687550][T18460] libceph: mon0 (1)[c::]:6789 connect error [ 2330.832246][T31160] ceph: No mds server is up or the cluster is laggy [ 2331.007491][T18460] libceph: connect (1)[c::]:6789 error -101 [ 2331.013946][T18460] libceph: mon0 (1)[c::]:6789 connect error [ 2331.354564][T31155] team0: left allmulticast mode [ 2331.362449][T31155] team0: left promiscuous mode [ 2331.576638][T29304] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2331.615021][T29304] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.638160][T31158] syz.6.7891 (31158): drop_caches: 2 [ 2331.673176][T29304] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2331.716654][T29304] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.761568][T29304] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2331.788281][T29304] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.820392][T29304] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2331.865137][T29304] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.874594][ T29] audit: type=1326 audit(2000001357.240:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.7.7893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2332.007382][ T29] audit: type=1326 audit(2000001357.240:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.7.7893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2332.126487][ T29] audit: type=1326 audit(2000001357.320:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.7.7893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2332.237335][ T29] audit: type=1326 audit(2000001357.330:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.7.7893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2332.375453][ T29] audit: type=1326 audit(2000001357.330:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.7.7893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2332.504917][ T29] audit: type=1326 audit(2000001357.330:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.7.7893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2332.590600][T31177] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7896'. [ 2332.632828][ T29] audit: type=1326 audit(2000001357.330:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.7.7893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2332.735137][ T29] audit: type=1326 audit(2000001357.330:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.7.7893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2332.882987][ T29] audit: type=1326 audit(2000001357.330:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.7.7893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 2333.005523][ T29] audit: type=1326 audit(2000001357.340:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.7.7893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7185cab code=0x7ffc0000 [ 2333.562484][T31187] ptrace attach of "./syz-executor exec"[24974] was attempted by "./syz-executor exec"[31187] [ 2336.647432][T31202] input: syz1 as /devices/virtual/input/input40 [ 2339.316317][T31213] syzkaller0: entered promiscuous mode [ 2339.322005][T31213] syzkaller0: entered allmulticast mode [ 2339.653590][T31216] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7909'. [ 2341.611285][T31228] syzkaller0: entered promiscuous mode [ 2341.664848][T31228] syzkaller0: entered allmulticast mode [ 2341.757003][T31228] tipc: Enabled bearer , priority 0 [ 2341.861424][T31226] tipc: Resetting bearer [ 2342.021483][T31226] tipc: Disabling bearer [ 2343.299920][T31250] syzkaller0: entered promiscuous mode [ 2343.340575][T31250] syzkaller0: entered allmulticast mode [ 2343.670000][T31254] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7923'. [ 2344.955125][T18483] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2345.219881][ T29] audit: type=1326 audit(2000001370.410:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31255 comm="syz.5.7924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2345.249296][T18483] usb 3-1: Using ep0 maxpacket: 16 [ 2345.298397][T18483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2345.350101][ T29] audit: type=1326 audit(2000001370.580:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31255 comm="syz.5.7924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2345.391402][T18483] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2345.448087][T18483] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.469416][T18483] usb 3-1: Product: syz [ 2345.473888][T18483] usb 3-1: Manufacturer: syz [ 2345.490462][ T29] audit: type=1326 audit(2000001370.590:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31255 comm="syz.5.7924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2345.547020][T18483] usb 3-1: SerialNumber: syz [ 2345.583372][T18483] usb 3-1: config 0 descriptor?? [ 2345.610163][ T29] audit: type=1326 audit(2000001370.590:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31255 comm="syz.5.7924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2345.640322][T18483] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2345.680153][T18483] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 2345.759686][ T29] audit: type=1326 audit(2000001370.600:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31255 comm="syz.5.7924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2345.925471][ T29] audit: type=1326 audit(2000001370.600:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31255 comm="syz.5.7924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2346.025397][ T29] audit: type=1326 audit(2000001370.610:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31255 comm="syz.5.7924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2346.117410][ T29] audit: type=1326 audit(2000001370.660:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31255 comm="syz.5.7924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2346.217357][ T29] audit: type=1326 audit(2000001370.660:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31255 comm="syz.5.7924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2346.304570][T18483] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2346.332840][ T29] audit: type=1326 audit(2000001370.660:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31255 comm="syz.5.7924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2346.755476][T18483] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2346.806704][T31274] ptrace attach of "./syz-executor exec"[25639] was attempted by "./syz-executor exec"[31274] [ 2346.973464][T18483] em28xx 3-1:0.0: board has no eeprom [ 2347.245426][T18483] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2347.253504][T18483] em28xx 3-1:0.0: dvb set to bulk mode. [ 2347.427357][T15992] em28xx 3-1:0.0: Binding DVB extension [ 2347.962494][T31283] syzkaller0: entered promiscuous mode [ 2348.020288][T31283] syzkaller0: entered allmulticast mode [ 2348.170182][T31284] tipc: Started in network mode [ 2348.213277][T31284] tipc: Node identity fe2ab13ffccc, cluster identity 4711 [ 2348.266761][T31284] tipc: Enabled bearer , priority 0 [ 2348.321682][T31279] tipc: Resetting bearer [ 2348.427807][T31277] em28xx 3-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 2348.493271][T18475] usb 3-1: USB disconnect, device number 15 [ 2348.512135][T31279] tipc: Disabling bearer [ 2348.529401][T18475] em28xx 3-1:0.0: Disconnecting em28xx [ 2348.924111][T15992] em28xx 3-1:0.0: Registering input extension [ 2348.976925][T18475] em28xx 3-1:0.0: Closing input extension [ 2349.154381][T18475] em28xx 3-1:0.0: Freeing device [ 2350.772508][T31301] syzkaller0: entered promiscuous mode [ 2350.877326][T31301] syzkaller0: entered allmulticast mode [ 2354.502148][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2354.509713][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2354.834141][T31350] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2355.607797][T31355] tipc: Failed to remove unknown binding: 66,0,0/0:365255218/365255219 [ 2355.617925][T31355] tipc: Failed to remove unknown binding: 66,0,0/0:365255218/365255219 [ 2356.338248][ T29] audit: type=1326 audit(2000001381.720:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31361 comm="syz.5.7941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2356.633365][ T29] audit: type=1326 audit(2000001381.760:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31361 comm="syz.5.7941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2356.788872][ T29] audit: type=1326 audit(2000001381.760:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31361 comm="syz.5.7941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2356.845879][ T29] audit: type=1326 audit(2000001381.780:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31361 comm="syz.5.7941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2356.968296][ T29] audit: type=1326 audit(2000001381.780:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31361 comm="syz.5.7941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2357.111476][ T29] audit: type=1326 audit(2000001381.820:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31361 comm="syz.5.7941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2357.139852][ T29] audit: type=1326 audit(2000001381.820:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31361 comm="syz.5.7941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2357.341224][ T29] audit: type=1326 audit(2000001381.840:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31361 comm="syz.5.7941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2357.399028][ T29] audit: type=1326 audit(2000001381.840:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31361 comm="syz.5.7941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2357.596794][ T29] audit: type=1326 audit(2000001382.230:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31361 comm="syz.5.7941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7155cab code=0x7ffc0000 [ 2358.727745][T31378] netlink: 'syz.6.7945': attribute type 10 has an invalid length. [ 2358.889668][T31375] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2360.569185][T31388] syzkaller0: entered promiscuous mode [ 2360.595596][T31388] syzkaller0: entered allmulticast mode [ 2363.825787][T31443] ptrace attach of "./syz-executor exec"[30817] was attempted by "./syz-executor exec"[31443] [ 2367.200959][T31450] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2367.629293][T31458] netlink: 'syz.5.7960': attribute type 10 has an invalid length. [ 2368.036792][T31453] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2368.946515][T31465] syzkaller0: entered promiscuous mode [ 2369.013466][T31465] syzkaller0: entered allmulticast mode [ 2371.709016][T31489] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2373.395246][T31529] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7975'. [ 2373.531844][T31530] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7975'. [ 2374.583035][T31535] netlink: 'syz.5.7976': attribute type 10 has an invalid length. [ 2374.783052][T31532] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2375.591498][T31543] syzkaller0: entered promiscuous mode [ 2375.615145][T31543] syzkaller0: entered allmulticast mode [ 2378.588259][T31565] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7987'. [ 2378.650467][T31565] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7987'. [ 2378.839635][T31567] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2382.525223][T15992] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2382.810182][T15992] usb 3-1: Using ep0 maxpacket: 16 [ 2382.892697][T15992] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2383.005008][T15992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2383.119996][T15992] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2383.251839][T15992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2383.344384][T15992] usb 3-1: Product: syz [ 2383.398419][T15992] usb 3-1: Manufacturer: syz [ 2383.403331][T15992] usb 3-1: SerialNumber: syz [ 2383.497823][T15992] usb 3-1: config 0 descriptor?? [ 2383.629265][T31632] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7999'. [ 2383.640059][T15992] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2383.685518][T31634] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7999'. [ 2383.697601][T15992] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 2384.816024][T15992] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2384.849198][T15992] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 2384.905400][T15992] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 2384.912614][T15992] em28xx 3-1:0.0: No AC97 audio processor [ 2385.915050][T18475] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2386.110886][T18475] usb 7-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2386.160548][T18475] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2386.201849][T18475] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2386.227944][T18475] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.247517][T18475] usb 7-1: Product: syz [ 2386.251917][T18475] usb 7-1: Manufacturer: syz [ 2386.274981][T18475] usb 7-1: SerialNumber: syz [ 2386.310830][T18475] usb 7-1: config 0 descriptor?? [ 2386.953900][T15992] usb 3-1: USB disconnect, device number 16 [ 2386.973403][T15992] em28xx 3-1:0.0: Disconnecting em28xx [ 2387.056897][T15992] em28xx 3-1:0.0: Freeing device [ 2387.805440][T15992] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2388.011987][T15992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2388.043942][T15992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2388.079420][T15992] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2388.145317][T15992] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2388.245213][T15992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2388.290718][T15992] usb 3-1: config 0 descriptor?? [ 2388.666831][T31668] netlink: 'syz.5.8012': attribute type 10 has an invalid length. [ 2389.090360][T31662] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2389.098792][T15992] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2389.915787][T31656] syz.7.8009 (31656): drop_caches: 2 [ 2391.161820][T18483] usb 3-1: USB disconnect, device number 17 [ 2391.261674][T18475] mos7840 7-1:0.0: required endpoints missing [ 2391.406577][T18475] usb 7-1: USB disconnect, device number 11 [ 2392.249112][T31695] blktrace: Concurrent blktraces are not allowed on sg0 [ 2392.312456][T31695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8018'. [ 2395.625503][T31739] syzkaller1: entered promiscuous mode [ 2395.631657][T31739] syzkaller1: entered allmulticast mode [ 2397.100198][T31747] netlink: 'syz.7.8025': attribute type 10 has an invalid length. [ 2397.505366][T31743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2398.045598][ T29] audit: type=1326 audit(2000001423.430:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31749 comm="syz.5.8027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2398.141019][ T29] audit: type=1326 audit(2000001423.470:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31749 comm="syz.5.8027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2398.467411][ T29] audit: type=1326 audit(2000001423.550:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31749 comm="syz.5.8027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2398.605157][ T29] audit: type=1326 audit(2000001423.550:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31749 comm="syz.5.8027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2398.700798][ T29] audit: type=1326 audit(2000001423.590:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31749 comm="syz.5.8027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2398.795095][ T29] audit: type=1326 audit(2000001423.590:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31749 comm="syz.5.8027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2398.966093][ T29] audit: type=1326 audit(2000001423.590:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31749 comm="syz.5.8027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2399.055607][ T29] audit: type=1326 audit(2000001423.600:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31749 comm="syz.5.8027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2399.151144][ T29] audit: type=1326 audit(2000001423.600:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31749 comm="syz.5.8027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2399.245010][T18475] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2399.258480][ T29] audit: type=1326 audit(2000001423.600:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31749 comm="syz.5.8027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2399.432949][T18475] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2399.473308][T18475] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2399.529087][T18475] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2399.564360][T18475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.610956][T18475] usb 3-1: Product: syz [ 2399.620191][T18475] usb 3-1: Manufacturer: syz [ 2399.655055][T18475] usb 3-1: SerialNumber: syz [ 2399.697134][T18475] usb 3-1: config 0 descriptor?? [ 2403.456010][T18475] mos7840 3-1:0.0: required endpoints missing [ 2403.525619][T18475] usb 3-1: USB disconnect, device number 18 [ 2405.546501][T31825] netlink: 'syz.2.8039': attribute type 10 has an invalid length. [ 2406.459598][T31790] 8021q: adding VLAN 0 to HW filter on device bond14 [ 2409.026632][T31836] netlink: 'syz.2.8042': attribute type 10 has an invalid length. [ 2409.198279][T31833] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2412.045462][T18475] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2412.087830][T31859] syzkaller0: entered promiscuous mode [ 2412.120578][T31859] syzkaller0: entered allmulticast mode [ 2412.266703][T18475] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2412.294075][T18475] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2412.389202][T18475] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2412.433022][T18475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2412.483949][T18475] usb 6-1: Product: syz [ 2412.515599][T18475] usb 6-1: Manufacturer: syz [ 2412.536325][T18475] usb 6-1: SerialNumber: syz [ 2412.597366][T18475] usb 6-1: config 0 descriptor?? [ 2412.941018][T31863] capability: warning: `syz.2.8050' uses 32-bit capabilities (legacy support in use) [ 2414.666275][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2414.666414][ T29] audit: type=1326 audit(2000001439.980:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31869 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2414.804289][ T29] audit: type=1326 audit(2000001439.980:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31869 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2414.852369][T31883] fuse: Bad value for 'fd' [ 2415.046988][ T29] audit: type=1326 audit(2000001439.990:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31869 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2415.318023][ T29] audit: type=1326 audit(2000001439.990:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31869 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2415.343109][ T29] audit: type=1326 audit(2000001439.990:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31869 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2415.368417][ T29] audit: type=1326 audit(2000001439.990:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31869 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2415.392236][ T29] audit: type=1326 audit(2000001440.220:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31869 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2415.705149][ T29] audit: type=1326 audit(2000001440.220:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31869 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2415.938442][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2415.945618][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2416.225204][ T29] audit: type=1326 audit(2000001440.350:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31869 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2416.705279][ T29] audit: type=1326 audit(2000001440.400:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31869 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2418.129341][T18475] mos7840 6-1:0.0: required endpoints missing [ 2418.865065][T18483] usb 6-1: USB disconnect, device number 11 [ 2422.027413][T31935] syzkaller0: entered promiscuous mode [ 2422.055062][T31935] syzkaller0: entered allmulticast mode [ 2426.065044][T18460] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2426.287366][T18460] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2426.311454][T18460] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2426.368153][T18460] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2426.393529][T18460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2426.435443][T18460] usb 3-1: Product: syz [ 2426.450610][T18460] usb 3-1: Manufacturer: syz [ 2426.466821][T18460] usb 3-1: SerialNumber: syz [ 2426.500495][T18460] usb 3-1: config 0 descriptor?? [ 2429.739635][T18460] mos7840 3-1:0.0: required endpoints missing [ 2429.855488][T18460] usb 3-1: USB disconnect, device number 19 [ 2430.679289][T31977] syzkaller0: entered promiscuous mode [ 2430.692759][T31977] syzkaller0: entered allmulticast mode [ 2432.279753][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 2432.279844][ T29] audit: type=1326 audit(2000001457.640:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.2.8078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2432.496176][ T29] audit: type=1326 audit(2000001457.650:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.2.8078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2432.576865][ T29] audit: type=1326 audit(2000001457.750:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.2.8078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2432.694343][ T29] audit: type=1326 audit(2000001457.750:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.2.8078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2432.896182][ T29] audit: type=1326 audit(2000001457.750:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.2.8078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2433.007531][ T29] audit: type=1326 audit(2000001457.760:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.2.8078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2433.124018][ T29] audit: type=1326 audit(2000001457.770:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.2.8078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2433.244959][ T29] audit: type=1326 audit(2000001457.770:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.2.8078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2433.340367][ T29] audit: type=1326 audit(2000001457.790:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.2.8078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71c5cab code=0x7ffc0000 [ 2433.948828][T32000] tipc: Failed to remove unknown binding: 66,0,0/0:2247090330/2247090331 [ 2433.958093][T32000] tipc: Failed to remove unknown binding: 66,0,0/0:2247090330/2247090331 [ 2435.795091][T18460] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2436.000465][T18460] usb 7-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2436.031305][T18460] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2436.152304][T18460] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2436.185076][T18460] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2436.221756][T18460] usb 7-1: Product: syz [ 2436.243086][T18460] usb 7-1: Manufacturer: syz [ 2436.251684][T18460] usb 7-1: SerialNumber: syz [ 2436.351759][T18460] usb 7-1: config 0 descriptor?? [ 2436.829321][T32021] syzkaller0: entered promiscuous mode [ 2436.871909][T32021] syzkaller0: entered allmulticast mode [ 2439.322468][T18460] mos7840 7-1:0.0: required endpoints missing [ 2439.456250][T18460] usb 7-1: USB disconnect, device number 12 [ 2440.099794][T32033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8091'. [ 2440.133728][T32032] input: syz1 as /devices/virtual/input/input42 [ 2440.278535][T32030] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8092'. [ 2442.577103][T32058] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8101'. [ 2442.646512][T32052] syzkaller0: entered promiscuous mode [ 2442.662919][T32052] syzkaller0: entered allmulticast mode [ 2443.185055][T15992] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2443.372107][T15992] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2443.394496][T15992] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2443.485523][T15992] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2443.536246][T15992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2443.610086][T15992] usb 3-1: Product: syz [ 2443.623746][T15992] usb 3-1: Manufacturer: syz [ 2443.643037][T15992] usb 3-1: SerialNumber: syz [ 2443.675827][T15992] usb 3-1: config 0 descriptor?? [ 2445.192286][T15992] mos7840 3-1:0.0: required endpoints missing [ 2445.365637][T15992] usb 3-1: USB disconnect, device number 20 [ 2447.811783][T32081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8107'. [ 2450.970393][T32095] netlink: 'syz.2.8111': attribute type 10 has an invalid length. [ 2451.196084][T32090] 8021q: adding VLAN 0 to HW filter on device bond16 [ 2451.230013][ T29] audit: type=1326 audit(2000001476.620:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32093 comm="syz.8.8112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2451.389736][ T29] audit: type=1326 audit(2000001476.720:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32093 comm="syz.8.8112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2451.622857][ T29] audit: type=1326 audit(2000001476.830:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32093 comm="syz.8.8112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2451.892683][ T29] audit: type=1326 audit(2000001476.830:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32093 comm="syz.8.8112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2451.994968][ T29] audit: type=1326 audit(2000001476.830:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32093 comm="syz.8.8112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2452.089892][ T29] audit: type=1326 audit(2000001476.830:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32093 comm="syz.8.8112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2452.232472][ T29] audit: type=1326 audit(2000001476.840:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32093 comm="syz.8.8112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2452.334037][ T29] audit: type=1326 audit(2000001476.840:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32093 comm="syz.8.8112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2452.398826][T32103] syzkaller0: entered promiscuous mode [ 2452.475255][ T29] audit: type=1326 audit(2000001476.840:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32093 comm="syz.8.8112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 2452.502022][T32103] syzkaller0: entered allmulticast mode [ 2452.617804][ T29] audit: type=1326 audit(2000001476.850:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32093 comm="syz.8.8112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d5cab code=0x7ffc0000 [ 2453.751211][T32111] netlink: 'syz.5.8117': attribute type 12 has an invalid length. [ 2453.815232][T32111] netlink: 248 bytes leftover after parsing attributes in process `syz.5.8117'. [ 2454.166072][T15992] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 2454.228248][T32115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8118'. [ 2454.375786][T15992] usb 8-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2454.419777][T15992] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2454.476409][T15992] usb 8-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2454.552461][T15992] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.569480][T15992] usb 8-1: Product: syz [ 2454.573926][T15992] usb 8-1: Manufacturer: syz [ 2454.636388][T15992] usb 8-1: SerialNumber: syz [ 2454.687215][T15992] usb 8-1: config 0 descriptor?? [ 2457.872260][T32136] netlink: 'syz.2.8124': attribute type 10 has an invalid length. [ 2458.293179][T18460] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2458.422349][T32133] 8021q: adding VLAN 0 to HW filter on device bond17 [ 2458.514955][T18460] usb 6-1: device descriptor read/64, error -71 [ 2458.596911][T15992] mos7840 8-1:0.0: required endpoints missing [ 2458.732315][T15992] usb 8-1: USB disconnect, device number 11 [ 2458.795216][T18460] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2458.996307][T18460] usb 6-1: device descriptor read/64, error -71 [ 2459.106000][T18460] usb usb6-port1: attempt power cycle [ 2459.271528][T32141] syzkaller0: entered promiscuous mode [ 2459.285488][T32141] syzkaller0: entered allmulticast mode [ 2459.505666][T18460] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2459.585576][T18460] usb 6-1: device descriptor read/8, error -71 [ 2459.854920][T18460] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2459.906750][T18460] usb 6-1: device descriptor read/8, error -71 [ 2460.039059][T18460] usb usb6-port1: unable to enumerate USB device [ 2461.065702][T32152] netlink: 324 bytes leftover after parsing attributes in process `syz.2.8130'. [ 2461.420334][T32156] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8131'. [ 2461.469562][T32153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8130'. [ 2464.135215][T18460] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2464.520405][T18460] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2464.543857][T18460] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2464.586052][T32178] syzkaller0: entered promiscuous mode [ 2464.607815][T32178] syzkaller0: entered allmulticast mode [ 2464.631310][T18460] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2464.674992][T18460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2464.744057][T18460] usb 3-1: Product: syz [ 2464.780870][T18460] usb 3-1: Manufacturer: syz [ 2464.801295][T18460] usb 3-1: SerialNumber: syz [ 2464.831951][T18460] usb 3-1: config 0 descriptor?? [ 2467.591454][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2467.591600][ T29] audit: type=1326 audit(2000001492.900:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.5.8141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2467.755379][ T29] audit: type=1326 audit(2000001492.910:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.5.8141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2467.799747][ T29] audit: type=1326 audit(2000001492.920:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.5.8141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2467.876270][ T29] audit: type=1326 audit(2000001492.930:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.5.8141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2467.998410][ T29] audit: type=1326 audit(2000001492.930:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.5.8141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2468.254298][ T29] audit: type=1326 audit(2000001492.940:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.5.8141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2468.287604][ T29] audit: type=1326 audit(2000001492.940:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.5.8141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2468.435317][T18460] mos7840 3-1:0.0: required endpoints missing [ 2468.482551][T18460] usb 3-1: USB disconnect, device number 21 [ 2468.519140][ T29] audit: type=1326 audit(2000001492.940:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.5.8141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2468.659710][ T29] audit: type=1326 audit(2000001492.940:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.5.8141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2468.831805][ T29] audit: type=1326 audit(2000001492.940:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32185 comm="syz.5.8141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 2471.037082][T32201] netlink: 324 bytes leftover after parsing attributes in process `syz.6.8146'. [ 2471.258720][T32202] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8146'. [ 2472.876455][T32212] syzkaller0: entered promiscuous mode [ 2472.882093][T32212] syzkaller0: entered allmulticast mode [ 2474.186238][T32220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8151'. [ 2474.629916][T32226] ptrace attach of "./syz-executor exec"[30817] was attempted by "./syz-executor exec"[32226] [ 2474.802012][T15992] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 2475.059955][T15992] usb 9-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2475.146064][T15992] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2475.241036][T15992] usb 9-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2475.275220][T15992] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2475.314040][T15992] usb 9-1: Product: syz [ 2475.324986][T15992] usb 9-1: Manufacturer: syz [ 2475.342576][T15992] usb 9-1: SerialNumber: syz [ 2475.389790][T15992] usb 9-1: config 0 descriptor?? [ 2477.312798][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2477.326369][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2480.085511][T15992] mos7840 9-1:0.0: required endpoints missing [ 2480.208779][T32247] netlink: 324 bytes leftover after parsing attributes in process `syz.6.8160'. [ 2480.212831][T15992] usb 9-1: USB disconnect, device number 8 [ 2480.496887][T32248] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8160'. [ 2481.135622][T15992] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 2481.443116][T15992] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2481.509475][T15992] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2481.559726][T15992] usb 9-1: can't read configurations, error -71 [ 2482.529310][T32262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8164'. [ 2482.939336][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 2482.939421][ T29] audit: type=1800 audit(2000001508.330:1366): pid=32268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8166" name="bus" dev="ramfs" ino=169839 res=0 errno=0 [ 2483.550696][ T29] audit: type=1326 audit(2000001508.880:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32270 comm="syz.2.8167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2483.728995][ T29] audit: type=1326 audit(2000001508.880:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32270 comm="syz.2.8167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2483.874308][ T29] audit: type=1326 audit(2000001508.890:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32270 comm="syz.2.8167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2484.000994][ T29] audit: type=1326 audit(2000001508.890:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32270 comm="syz.2.8167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2484.089954][ T29] audit: type=1326 audit(2000001508.890:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32270 comm="syz.2.8167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2484.222233][ T29] audit: type=1326 audit(2000001508.890:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32270 comm="syz.2.8167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2484.333196][ T29] audit: type=1326 audit(2000001508.890:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32270 comm="syz.2.8167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2484.451615][ T29] audit: type=1326 audit(2000001508.900:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32270 comm="syz.2.8167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2484.535136][ T29] audit: type=1326 audit(2000001508.900:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32270 comm="syz.2.8167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2486.634896][T18460] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 2486.844983][T18460] usb 8-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2486.897254][T18460] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2486.953265][T18460] usb 8-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2487.006131][T18460] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2487.014371][T18460] usb 8-1: Product: syz [ 2487.084365][T18460] usb 8-1: Manufacturer: syz [ 2487.108783][T18460] usb 8-1: SerialNumber: syz [ 2487.148307][T18460] usb 8-1: config 0 descriptor?? [ 2492.428492][T18460] mos7840 8-1:0.0: required endpoints missing [ 2492.551466][T18460] usb 8-1: USB disconnect, device number 12 [ 2493.236048][T32294] netlink: 324 bytes leftover after parsing attributes in process `syz.7.8175'. [ 2493.430136][T32296] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8175'. [ 2493.485190][T32294] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2494.081972][T32294] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2494.270767][T32303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8177'. [ 2494.434470][T32294] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2494.711422][T32294] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.211418][T16747] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2495.344170][T16747] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2495.453360][T32312] ptrace attach of "./syz-executor exec"[24974] was attempted by "./syz-executor exec"[32312] [ 2495.521827][T16747] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2495.664918][T16747] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2497.994952][T18460] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 2498.264998][T18460] usb 8-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2498.382149][T18460] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2498.447384][T18460] usb 8-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2498.484984][T18460] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2498.493240][T18460] usb 8-1: Product: syz [ 2498.534865][T18460] usb 8-1: Manufacturer: syz [ 2498.539717][T18460] usb 8-1: SerialNumber: syz [ 2498.621497][T18460] usb 8-1: config 0 descriptor?? [ 2500.898410][T18460] mos7840 8-1:0.0: required endpoints missing [ 2500.959302][T32337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8189'. [ 2501.036211][T18460] usb 8-1: USB disconnect, device number 13 [ 2502.507388][T32344] netlink: 324 bytes leftover after parsing attributes in process `syz.6.8192'. [ 2502.717701][T32345] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8192'. [ 2505.625844][T32362] capability: warning: `syz.7.8199' uses deprecated v2 capabilities in a way that may be insecure [ 2506.212836][T32364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8200'. [ 2506.596736][T18460] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2506.659904][T32368] netlink: 144 bytes leftover after parsing attributes in process `syz.8.8202'. [ 2506.799457][T32372] netlink: 324 bytes leftover after parsing attributes in process `syz.5.8204'. [ 2506.826909][T18460] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2506.866706][T18460] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2506.951549][T18460] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2506.989126][T18460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2507.025787][T18460] usb 3-1: Product: syz [ 2507.030203][T18460] usb 3-1: Manufacturer: syz [ 2507.046187][T32374] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8204'. [ 2507.046918][T18460] usb 3-1: SerialNumber: syz [ 2507.097993][T18460] usb 3-1: config 0 descriptor?? [ 2510.325764][T18460] mos7840 3-1:0.0: required endpoints missing [ 2510.440965][T18460] usb 3-1: USB disconnect, device number 22 [ 2511.197275][T32399] ptrace attach of "./syz-executor exec"[24935] was attempted by "./syz-executor exec"[32399] [ 2514.065827][T32409] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8215'. [ 2515.049784][T32416] netlink: 324 bytes leftover after parsing attributes in process `syz.5.8218'. [ 2515.245633][T32417] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8218'. [ 2517.865009][T18483] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2518.061650][T18483] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2518.096249][T18483] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2518.142054][T18483] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2518.172991][T18483] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2518.225096][T18483] usb 6-1: Product: syz [ 2518.230500][T18483] usb 6-1: Manufacturer: syz [ 2518.245634][T18483] usb 6-1: SerialNumber: syz [ 2518.255048][T31954] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 2518.304194][T18483] usb 6-1: config 0 descriptor?? [ 2518.532547][T31954] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2518.578093][T31954] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2518.601108][T31954] usb 9-1: can't read configurations, error -71 [ 2520.427665][T18483] mos7840 6-1:0.0: required endpoints missing [ 2520.534188][T18483] usb 6-1: USB disconnect, device number 16 [ 2521.166519][T32447] netlink: 144 bytes leftover after parsing attributes in process `syz.7.8227'. [ 2521.979364][T32453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8230'. [ 2522.355648][T32457] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8230'. [ 2523.007113][T32456] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 2523.065910][T32457] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2523.111370][T16747] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 2523.129613][T32462] netlink: 324 bytes leftover after parsing attributes in process `syz.7.8232'. [ 2523.189439][T16747] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 2523.231092][T16747] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 2523.266445][T16747] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 2523.343072][T32464] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8232'. [ 2523.484018][T32463] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2523.893350][T32463] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2524.132195][T32467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8233'. [ 2524.226109][T32463] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2524.390019][T32463] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2524.891566][T16747] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2525.215296][T16747] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2525.391206][T16747] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2525.858162][T32469] syzkaller0: entered promiscuous mode [ 2525.863864][T32469] syzkaller0: entered allmulticast mode [ 2526.019298][T16747] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2527.635320][T18460] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 2527.940022][T18460] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2528.041503][T18460] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2528.105307][T18460] usb 6-1: can't read configurations, error -71 [ 2528.952949][T32489] ptrace attach of "./syz-executor exec"[24974] was attempted by "./syz-executor exec"[32489] [ 2529.185872][T32492] netlink: 'syz.6.8237': attribute type 10 has an invalid length. [ 2529.545564][T32486] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2529.635173][T18460] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2529.719857][T32498] netlink: 144 bytes leftover after parsing attributes in process `syz.7.8241'. [ 2529.832857][T18460] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2529.863789][T18460] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2529.918358][T18460] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2529.940422][T18460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2529.969084][T18460] usb 6-1: Product: syz [ 2529.987224][T18460] usb 6-1: Manufacturer: syz [ 2529.993634][T18460] usb 6-1: SerialNumber: syz [ 2530.038127][T18460] usb 6-1: config 0 descriptor?? [ 2531.099828][T32509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8244'. [ 2531.206586][T32511] netlink: 324 bytes leftover after parsing attributes in process `syz.7.8245'. [ 2531.321466][T32511] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2531.512185][T32512] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8245'. [ 2531.621756][T32511] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2531.993877][T32511] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2532.156546][T32511] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2532.175054][T15992] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2532.368663][T15992] usb 7-1: Using ep0 maxpacket: 32 [ 2532.426905][T15992] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2532.462241][T15992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.500091][T15992] usb 7-1: config 0 descriptor?? [ 2532.699906][T29326] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2532.746767][T18460] mos7840 6-1:0.0: required endpoints missing [ 2532.785318][T15992] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2532.830112][T15992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2532.850515][T18460] usb 6-1: USB disconnect, device number 19 [ 2532.863774][T29319] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2532.888377][T15992] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2532.926933][T15992] usb 7-1: media controller created [ 2532.969592][T32515] ===================================================== [ 2532.977853][T32515] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 2532.985531][T32515] _copy_to_user+0xcc/0x120 [ 2532.990240][T32515] i2cdev_ioctl_smbus+0x586/0x660 [ 2532.996333][T32515] compat_i2cdev_ioctl+0x48f/0xb40 [ 2533.007719][T32515] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 2533.016460][T32515] ia32_sys_call+0x2854/0x4360 [ 2533.022327][T32515] __do_fast_syscall_32+0x17f/0x3f0 [ 2533.029091][T32515] do_fast_syscall_32+0x37/0x80 [ 2533.034294][T32515] do_SYSENTER_32+0x1f/0x30 [ 2533.039488][T32515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2533.046247][T32515] [ 2533.048667][T32515] Uninit was stored to memory at: [ 2533.053966][T32515] __i2c_smbus_xfer+0x25a0/0x3120 [ 2533.059474][T32515] i2c_smbus_xfer+0x2d8/0x480 [ 2533.064334][T32515] i2cdev_ioctl_smbus+0x4a1/0x660 [ 2533.071189][T32515] compat_i2cdev_ioctl+0x48f/0xb40 [ 2533.076944][T32515] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 2533.082761][T32515] ia32_sys_call+0x2854/0x4360 [ 2533.087869][T32515] __do_fast_syscall_32+0x17f/0x3f0 [ 2533.093291][T32515] do_fast_syscall_32+0x37/0x80 [ 2533.098516][T32515] do_SYSENTER_32+0x1f/0x30 [ 2533.103230][T32515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2533.109907][T32515] [ 2533.112335][T32515] Local variable msgbuf1.i created at: [ 2533.118147][T32515] __i2c_smbus_xfer+0x853/0x3120 [ 2533.123268][T32515] i2c_smbus_xfer+0x2d8/0x480 [ 2533.129035][T32515] [ 2533.131484][T32515] Bytes 0-1 of 2 are uninitialized [ 2533.137117][T32515] Memory access of size 2 starts at ffff88801319bc76 [ 2533.143903][T32515] Data copied to user address 0000000080000040 [ 2533.150344][T32515] [ 2533.152814][T32515] CPU: 1 UID: 0 PID: 32515 Comm: syz.6.8246 Not tainted syzkaller #0 PREEMPT(full) [ 2533.162528][T32515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2533.172893][T32515] ===================================================== [ 2533.180216][T32515] Disabling lock debugging due to kernel taint [ 2533.333444][T29326] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2533.338898][T32515] Kernel panic - not syncing: kmsan.panic set ... [ 2533.339169][T32515] CPU: 1 UID: 0 PID: 32515 Comm: syz.6.8246 Tainted: G B syzkaller #0 PREEMPT(full) [ 2533.339594][T32515] Tainted: [B]=BAD_PAGE [ 2533.339710][T32515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2533.339897][T32515] Call Trace: [ 2533.340014][T32515] [ 2533.340116][T32515] __dump_stack+0x26/0x30 [ 2533.340482][T32515] dump_stack_lvl+0x50/0x1c0 [ 2533.340797][T32515] ? dump_stack+0x12/0x25 [ 2533.341090][T32515] dump_stack+0x1e/0x25 [ 2533.341349][T32515] vpanic+0x7b4/0x1430 [ 2533.341693][T32515] panic+0x15d/0x160 [ 2533.341973][T32515] kmsan_report+0x31a/0x320 [ 2533.342194][T32515] ? kmsan_internal_check_memory+0x1e8/0x240 [ 2533.342367][T32515] ? kmsan_copy_to_user+0xef/0x190 [ 2533.342543][T32515] ? _copy_to_user+0xcc/0x120 [ 2533.342704][T32515] ? i2cdev_ioctl_smbus+0x586/0x660 [ 2533.342878][T32515] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 2533.343055][T32515] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 2533.343244][T32515] ? ia32_sys_call+0x2854/0x4360 [ 2533.343371][T32515] ? __do_fast_syscall_32+0x17f/0x3f0 [ 2533.343547][T32515] ? do_fast_syscall_32+0x37/0x80 [ 2533.343710][T32515] ? do_SYSENTER_32+0x1f/0x30 [ 2533.343877][T32515] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2533.344052][T32515] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 2533.344410][T32515] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 2533.344583][T32515] ? __i2c_transfer+0x1179/0x3280 [ 2533.344794][T32515] ? kmsan_get_metadata+0xf1/0x160 [ 2533.344993][T32515] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2533.345164][T32515] ? kmsan_get_metadata+0xf1/0x160 [ 2533.345339][T32515] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2533.345556][T32515] ? __i2c_smbus_xfer+0x1f6c/0x3120 [ 2533.345686][T32515] ? kmsan_get_metadata+0xf1/0x160 [ 2533.345870][T32515] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2533.346089][T32515] kmsan_internal_check_memory+0x1e8/0x240 [ 2533.346283][T32515] kmsan_copy_to_user+0xef/0x190 [ 2533.346464][T32515] _copy_to_user+0xcc/0x120 [ 2533.346637][T32515] i2cdev_ioctl_smbus+0x586/0x660 [ 2533.346832][T32515] compat_i2cdev_ioctl+0x48f/0xb40 [ 2533.347039][T32515] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2533.347191][T32515] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 2533.347355][T32515] ? fpregs_restore_userregs+0x213/0x3e0 [ 2533.571846][T32515] ? kmsan_get_metadata+0xf1/0x160 [ 2533.577203][T32515] ? kmsan_get_metadata+0xf1/0x160 [ 2533.582556][T32515] ia32_sys_call+0x2854/0x4360 [ 2533.587479][T32515] __do_fast_syscall_32+0x17f/0x3f0 [ 2533.592875][T32515] do_fast_syscall_32+0x37/0x80 [ 2533.597928][T32515] do_SYSENTER_32+0x1f/0x30 [ 2533.602603][T32515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2533.609178][T32515] RIP: 0023:0xf6fdef6c [ 2533.613393][T32515] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2533.633187][T32515] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2533.641803][T32515] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000720 [ 2533.649919][T32515] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2533.658026][T32515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2533.666134][T32515] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2533.674238][T32515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2533.682367][T32515] [ 2533.686109][T32515] Kernel Offset: disabled [ 2533.690506][T32515] Rebooting in 86400 seconds..